Germany security reports

L

home

lungenatlas.de

40

The website www.lungenatlas.de appears to be an informational platform focused on lung atlas data, likely related to medical or scientific research in Germany. The content primarily consists of an interactive SVG map of German regions, with minimal textual content and no evident privacy or cookie policies. The site lacks visible contact information and social media presence, indicating a limited digital engagement strategy. Technically, the site uses SVG and CSS with no detected JavaScript frameworks or analytics tools, hosted likely via GoDaddy based on nameserver data. Security posture is basic with no HTTPS or security headers confirmed from the data, and privacy compliance is minimal due to absence of policy documents. Overall, the site serves a niche informational purpose but requires enhancements in security, privacy, and user engagement to improve trust and compliance.

Verband Pneumologischer Kliniken e.V. (VPK) is a German non-profit association representing pneumological clinics and departments. The website serves as an information hub for members and interested parties, offering medical guidelines, position papers, and event information. The site is built on TYPO3 CMS and uses common web technologies such as jQuery and Font Awesome. It is professionally designed with consistent branding and clear navigation, targeting healthcare professionals in pneumology within Germany. The website is secure with HTTPS and includes a cookie consent mechanism, though it lacks explicit security policies and incident response information publicly. No forms or direct contact emails are exposed on the main page, but a contact page is available. The WHOIS data is minimal but consistent with the website's purpose, indicating legitimacy. Partner logos link to reputable German medical organizations, enhancing trust.

D

Deutsche Gesellschaft für Anästhesiologie und Intensivmedizin e.V.

dgai.de

54

The Deutsche Gesellschaft für Anästhesiologie und Intensivmedizin e.V. (DGAI) is a well-established professional medical society in Germany focused on anesthesiology and intensive care medicine. With approximately 15,000 members, it serves as a key organization providing education, certifications, scientific expert groups, and patient safety initiatives. The website reflects a professional and consistent brand presence targeting medical professionals and healthcare stakeholders. Technically, the site is built on Joomla CMS with modern frontend technologies such as Bootstrap and jQuery, offering good mobile responsiveness and navigation clarity. Security posture is adequate with HTTPS enforced and CSRF tokens present, though security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is supported by a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

B

BDA - Berufsverband Deutscher Anästhesisten e.V.

bda.de

52

BDA - Berufsverband Deutscher Anästhesisten e.V. is a leading professional association in Germany representing anesthesiologists across multiple specialties including anesthesia, intensive care, pain medicine, emergency medicine, and palliative care. The organization provides advocacy, education, legal and insurance advisory services, publications, and member support. Their website serves as a comprehensive information platform targeting healthcare professionals, patients, and students in the anesthesiology field. The site is well-structured, professionally designed, and offers clear navigation with extensive content relevant to its audience. Technically, the website is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, ensuring good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and CSRF tokens implemented, though security headers are missing and no explicit cookie consent mechanism is present. Analytics usage is privacy-conscious, employing Matomo with cookies disabled. WHOIS data is minimal but does not raise suspicion, and the domain aligns with the organization's identity. Overall, the website is trustworthy, professional, and compliant with GDPR, though improvements in security headers and privacy notices are recommended.

U

UseClick.io

useclick.io

63

UseClick.io is a privacy-first SaaS platform specializing in branded short links and advanced link analytics designed for marketers, agencies, startups, and creators. The company emphasizes GDPR compliance and user privacy by avoiding cookie-based tracking and providing clear, actionable insights into link performance. Their market position is that of a modern, privacy-conscious alternative to traditional link shorteners and analytics tools, trusted by over 1000 businesses worldwide. The platform offers a comprehensive suite of features including campaign management, A/B testing, geo-targeting, QR code generation, and bulk link uploads, all accessible via a modern, responsive web interface built on Next.js and Cloudflare infrastructure.

Lürssen Werft Bremen GmbH & Co. KG is a prestigious German shipbuilding company with a history dating back to 1875. The company specializes in the design and construction of bespoke luxury yachts, including superyachts and gigayachts, as well as high-performance naval and coastguard vessels. Their business model combines manufacturing with extensive after-sales services such as refits, maintenance, and yacht management. The company operates multiple specialized production sites across northern Germany, emphasizing quality and innovation in shipbuilding. The website serves as a portal directing visitors to dedicated sites for yachts and defense vessels, reflecting a clear market segmentation and professional brand presence. The target audience includes affluent private clients and government/military customers.

F

Freeride Mountain Bike Association e.V. (FMBA)

fmbworldtour.com

48

The Freeride Mountain Bike Association e.V. (FMBA) operates the FMB World Tour, the official international circuit for freeride mountain biking disciplines. Founded in 2010 and registered as a non-profit in Munich, Germany, FMBA governs and promotes the sport through event sanctioning, athlete licensing, and ranking systems. The website serves athletes, event organizers, and fans with news, rankings, event calendars, and membership information. The organization holds a strong market position as the official governing body for freeride mountain biking.

B

Bildungswerk der Niedersächsischen Wirtschaft gemeinnützige GmbH

bnw-seminare.de

10

Bildungswerk der Niedersächsischen Wirtschaft gemeinnützige GmbH (BNW) is a medium-sized non-profit educational organization based in Germany, specializing in tailored professional training courses aimed at enhancing career success. The website presents a professional and consistent brand image, targeting professionals and businesses seeking customized educational services. The business operates primarily in the education sector with a strong regional presence in Lower Saxony. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities and uses modern tools such as Elementor for design and Real Cookie Banner Pro for GDPR-compliant consent management. The infrastructure includes robust security measures like HTTPS, Wordfence firewall, and hCaptcha for spam protection, complemented by extensive use of analytics and marketing pixels from Google, Meta, LinkedIn, TikTok, and Hotjar, all managed with user consent.

N

NSBacademy

nsb-academy.com

10

NSB Academy is a specialized maritime training center based in Germany, offering certified leadership and simulator-based training for maritime professionals. The company has an established presence since 2008 and provides a range of services including simulator training, in-person courses, online learning modules, and custom services tailored to maritime officers. The website reflects a professional and consistent brand image, targeting maritime professionals seeking advanced training solutions. Technically, the site is built on WordPress with Elementor and Astra theme, showing good SEO and mobile optimization but moderate performance. Security posture is adequate with HTTPS and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its niche, though it lacks explicit security and incident response policies.

E

Erfurt Tourismus & Marketing GmbH

erfurt-tourismus.de

45

Erfurt Tourismus & Marketing GmbH operates the official tourism website for the city of Erfurt, Germany, providing comprehensive information on city tours, accommodation, events, and cultural highlights. The website serves as a central hub for tourists and event planners, offering online booking capabilities and detailed guides. The company holds a strong market position as the official tourism promoter for the region, targeting a broad audience including families, groups, and individual travelers. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, hosted on AWS infrastructure. It employs modern web technologies and privacy-conscious analytics tools such as Matomo alongside Google and Facebook tracking pixels. The site is well-optimized for SEO, mobile use, and accessibility, with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers are not visibly implemented, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The website content is safe for general audiences, focusing on tourism and cultural promotion without any adult or questionable content. Contact information is comprehensive and clearly presented, supporting business credibility and trust. The domain registration and DNS setup are consistent with a legitimate public entity, reinforcing the site's authenticity. Strategic recommendations include implementing explicit security headers, publishing a security policy or incident response contact, and continuing to maintain GDPR compliance and transparency to enhance user trust and security maturity.

T

Team Stadt Erfurt

erfurt-klingt-gut.de

49

The website 'Team Stadt Erfurt – Klingt gut.' serves as a public sector employment and training portal for the city of Erfurt, Germany. It targets job seekers interested in municipal jobs, apprenticeships, and internships, positioning itself as one of the largest employers in the region with approximately 3,700 employees. The site promotes a diverse range of job opportunities within the city administration, emphasizing job variety and security. Technically, the website is built on the TYPO3 CMS platform, utilizing the UIkit CSS framework for responsive design. The site demonstrates good mobile optimization and SEO practices, with structured data and Open Graph tags enhancing search engine visibility. Hosting appears to be managed via domaincontrol.com nameservers, commonly associated with GoDaddy services. Performance is moderate, with no critical technical issues detected in the provided content. From a security perspective, the site uses HTTPS as indicated by canonical URLs, and implements a cookie consent mechanism, reflecting basic privacy compliance. However, no explicit privacy policy, terms of service, security policy, or incident response contacts were found in the analyzed content. Security headers and vulnerability disclosures are absent, suggesting room for improvement in security posture. No signs of WAF or content blocking were detected, and the content is safe for general audiences. Overall, the website is professionally designed and credible as a municipal employment portal. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and providing clear contact information for data protection and incident response to enhance trust and compliance.

D

Deutsche Gesellschaft für Psychiatrie und Psychotherapie, Psychosomatik und Nervenheilkunde e. V.

dgppn.de

61

The Deutsche Gesellschaft für Psychiatrie und Psychotherapie, Psychosomatik und Nervenheilkunde e. V. (DGPPN) is a leading German professional society dedicated to psychiatry, psychotherapy, psychosomatics, and neurology. The organization provides a comprehensive range of services including clinical guidelines, congresses, educational resources, and advocacy aimed at healthcare professionals, researchers, patients, and the general public interested in mental health. The website reflects a mature and professional digital presence with consistent branding and high-quality content tailored to its target audience. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with Bootstrap and jQuery for responsive and interactive features. It employs modern web standards, including HTTPS and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with external dependencies on common CDNs and libraries. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended best practices. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with clear policies and minimal tracking limited to necessary cookies and reCAPTCHA. Overall, the DGPPN website presents a trustworthy and professional front for the organization, with a solid technical foundation and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its security posture and user trust.

G

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V.

gapao.de

60

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V. (GAPAO) is a small non-profit organization based in Germany focused on the interdisciplinary field of architecture psychology and oncology. The website serves as an educational platform offering training, symposiums, and research projects targeted at professionals in architecture, psychology, and healthcare. The organization collaborates with universities and professional chambers, positioning itself as a niche leader in this specialized domain. Technically, the website is built on Webflow, uses modern web fonts, and includes cookie consent mechanisms, but has a misconfigured Google reCAPTCHA which could expose it to spam risks. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Overall, the site is professional, accessible, and trustworthy with room for improvement in security and compliance details.

H

Hessische Krebsgesellschaft e.V.

hessische-krebsgesellschaft.de

56

Hessische Krebsgesellschaft e.V. is a regional non-profit organization based in Frankfurt am Main, Germany, dedicated to providing cancer information, counseling, prevention, and support services. The website serves patients, their families, and healthcare professionals with comprehensive resources including cancer counseling centers across Hessen, prevention initiatives, and educational events. The organization maintains a strong market position within the healthcare non-profit sector in Germany, emphasizing social and economic support for cancer-affected individuals. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO for search optimization, Modern Events Calendar Lite for event management, and Borlabs Cookie for privacy compliance. The site demonstrates good digital maturity with mobile optimization, accessibility features, and moderate performance. Analytics are implemented via Koko Analytics with minimal user tracking, respecting privacy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows a consistent domain registration aligned with the organization's identity, hosted on agency servers common for non-profits. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a safe and informative experience for its users. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen security posture.

The Deutsche Arbeitsgemeinschaft für Psychosoziale Onkologie e.V. (dapo e.V.) is a German non-profit professional society dedicated to psychosocial oncology. It brings together diverse healthcare professionals involved in medical, psychotherapeutic, psychosocial, and pastoral care for cancer patients and their families, as well as researchers in psychooncology. The organization focuses on fostering interdisciplinary exchange, strengthening collaboration, and supporting scientific work in this specialized field. The website serves as an information hub for members and interested professionals, offering news, event details, and a newsletter subscription.

MONKS Vertriebsges. mbH is a specialized web and media agency based in Munich, Germany, focusing on web development, design, smartphone applications, and virtual training primarily for the medical sector. Their offerings include telemedicine expert consultations, certified online medical training, and practice apps with video consultation capabilities. The company positions itself as a niche provider serving healthcare professionals and institutions, leveraging digital technologies to enhance medical services and education. Technically, the website is built on the TYPO3 CMS platform, a mature and widely used open-source content management system. The site employs HTTPS with a good SSL configuration and includes a cookie consent mechanism that respects user privacy by limiting cookies to strictly necessary ones and avoiding tracking cookies. However, the site lacks advanced security headers and visible analytics or advertising scripts, indicating a focus on privacy and minimal tracking. From a security perspective, the website demonstrates a moderate security posture with HTTPS enforcement and cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the business claims, showing consistent registration information and no privacy protection, which supports legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a specialized audience with relevant content. Recommendations include enhancing security headers, publishing security policies, and improving mobile optimization and accessibility to further strengthen the site's security and user experience.

B

Be The Change Stiftung

baeume-fuer-den-wandel.de

47

Be The Change Stiftung is a German non-profit organization dedicated to environmental sustainability, particularly through tree planting projects in Kenya. Their website showcases detailed project information, funding status, and transparency reports, positioning them as a trustworthy entity in the environmental non-profit sector. The organization targets environmentally conscious donors and partners, leveraging digital tools to engage and inform stakeholders. Technically, the website is built on WordPress with modern plugins such as WooCommerce, Yoast SEO, and Borlabs Cookie for compliance and user experience. Hosting is provided by Manitu, a reputable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, with good SEO and mobile optimization.

B

Berufsverband der Frauenärzte e.V.

bvf.de

56

The Berufsverband der Frauenärzte e.V. (BVF) is a professional association representing gynecologists in Germany, providing a broad range of member services including insurance benefits, professional advice, continuing education through the BVF Akademie, and a members-only online portal. The website is well-structured, professionally designed, and targets medical professionals in the gynecology sector. It maintains a strong market position with approximately 15,000 members and offers relevant content such as news, press releases, and event calendars. Technically, the site is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, FlexSlider, and SlickNav for responsive navigation and interactive elements. The site employs Matomo analytics configured to be cookie-free, demonstrating a commitment to user privacy and GDPR compliance. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its niche audience effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security and trustworthiness.

D

Deutscher Berufsverband der Hals-Nasen-Ohrenärzte e.V.

hno-aerzte.de

47

The Deutscher Berufsverband der Hals-Nasen-Ohrenärzte e.V. operates as a professional association for ENT (ear, nose, throat) specialists in Germany. The website serves as a comprehensive portal offering information about the association, professional development events, a marketplace for medical equipment and job postings, and patient education resources. It targets medical professionals and practice staff, positioning itself as a leading entity in the German healthcare sector for ENT specialists. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Matomo for analytics and responsive design frameworks. The infrastructure is hosted on servers indicated by the agenturserver nameservers, with good mobile optimization and accessibility features. The site implements a cookie consent mechanism compliant with GDPR, and uses HTTPS with a solid SSL configuration. From a security perspective, the site demonstrates good practices such as encrypted connections, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security transparency and policy disclosures.

P

PROLIANCE GmbH

datenschutzexperte.de

72

PROLIANCE GmbH operates a professional German-language website focused on data protection, compliance, and information security services. The company offers a comprehensive suite of solutions including external data protection officer services, ISO 27001 ISMS implementation, compliance software, employee training, and advisory services for GDPR, NIS2, and emerging regulations. With over 2,500 customers and certifications from TÜV and DEKRA, PROLIANCE positions itself as a trusted mid-sized B2B service provider in the compliance and data security market. The website is well-designed, mobile-optimized, and uses modern web technologies such as Webflow CMS and HubSpot for marketing and form management. Security is robust with HTTPS, security headers, and consent management via Usercentrics CMP. The WHOIS data is privacy protected, which is typical for GDPR-focused businesses, and no suspicious domain registration patterns were detected. Overall, the site reflects a mature digital presence with strong business credibility and security posture.

M

Monks - Ärzte im Netz

monks-aerzte-im-netz.de

58

Monks - Ärzte im Netz is a German telemedicine service provider offering digital health portals, including a doctor directory, practice app, certified video consultation, and online appointment management. The website targets medical professionals across various specialties and their patients, positioning itself as a partner to multiple medical professional associations. The business model focuses on B2B telemedicine solutions and patient-facing health information portals. Technically, the website is built on TYPO3 CMS with jQuery and SlickNav for responsive navigation, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and incident response contacts suggests room for improvement. Privacy compliance is adequate with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its healthcare industry focus.

E

event lab. GmbH

ja-ped.de

50

The website ja-ped.de serves as the official platform for the JA-PED 2025 conference, a specialized medical event focusing on pediatric endocrinology and diabetology in Germany. The site is professionally designed, providing comprehensive information about the event, including program details, registration, certification, and seminars. The target audience primarily consists of medical professionals and members of the DGPAED. Technically, the site is built on WordPress with the Avada theme and employs modern plugins such as LayerSlider and Borlabs Cookie for enhanced user experience and compliance. Accessibility is a strong focus, with multiple modes to accommodate users with disabilities. Security posture is good, with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is robust, with clear GDPR-aligned policies. Overall, the site reflects a credible and trustworthy business entity in the healthcare event sector.

E

Europäisches Institut für Stillen und Laktation

stillen-institut.com

58

The Europäisches Institut für Stillen und Laktation (EISL) operates as a specialized educational institute focused on breastfeeding and lactation. It offers a variety of seminars, congresses, and certification preparation courses primarily targeting healthcare professionals such as doctors, pharmacists, and lactation consultants in German-speaking countries. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its niche audience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with components like Owl Carousel for interactive content. The site is mobile optimized and includes a cookie consent mechanism indicating GDPR compliance. However, no CMS or hosting provider details are evident, and performance is moderate. Security headers are not detected, and no explicit security or incident response policies are published on the site. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible advanced security headers and incident response information. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or a WHOIS server issue, which impacts domain legitimacy assessment. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy and professional in content and design but would benefit from improved transparency in domain registration and enhanced security practices. Strategic recommendations include implementing security headers, publishing security policies, and clarifying domain registration details to strengthen trust and compliance.

D

Diagnose-Funk e.V.

diagnose-funk.org

47

Diagnose-Funk e.V. is a well-established German non-profit environmental and consumer protection organization focused on educating the public about the risks of electromagnetic fields, including mobile communications and WLAN radiation. The organization provides comprehensive information, advocacy, and publications aimed at promoting health-conscious telecommunications technologies. Their target audience includes affected individuals, environmental advocates, municipalities, and scientific communities. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses a variety of JavaScript libraries and privacy-respecting Matomo analytics, hosted on Hostpoint AG servers. Security posture is solid with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. WHOIS data confirms the domain's legitimacy and long-term establishment. Overall, the site is trustworthy and serves as a valuable resource in its niche.

T

Theater Waidspeicher e.V.

waidspeicher.de

53

Theater Waidspeicher e.V. is a small, established non-profit cultural organization based in Germany specializing in puppet and music theatre. Founded in 1993, it offers a diverse program targeting a broad audience including children and adults, with performances, workshops, and tours. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries and frameworks to provide a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a trustworthy and legitimate online presence aligned with its cultural mission.

A

Appel Nowitzki

appelnowitzki.com

55

Appel Nowitzki is a specialized consulting and design agency focused on real estate marketing and corporate design. Established in 2012, the company offers integrated strategy, design, and content services aimed at creating sustainable brand identities for real estate clients. The agency has a strong market position supported by numerous prestigious design awards and a professional online presence. Technically, the website is built on the Contao CMS platform, uses modern web technologies including SVG graphics and JavaScript, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not publish privacy or terms of service policies. Overall, the website is professional, trustworthy, and business-focused with minimal user tracking and a cookie consent mechanism implemented. Strategic improvements in security and compliance documentation would enhance trust and regulatory adherence.

I

Impact Factory

impact-factory.de

65

Impact Factory is Germany's largest incubator and accelerator focused on startups addressing social and ecological challenges. The organization provides structured programs tailored to different startup development phases, fostering a community and network to support impact-driven entrepreneurs. The website reflects a professional and consistent brand presence, targeting impact startups and stakeholders in the social entrepreneurship ecosystem. Technically, the website is built on Webflow, leveraging modern web technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-handled with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance the posture. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive cookie consent banner and detailed cookie categorization. However, the absence of visible contact information and terms of service pages limits full business transparency. Overall, the website presents a low-risk profile with good digital maturity and compliance. Strategic improvements in security headers, incident response information, and contact transparency would further strengthen trust and resilience.

B

BVDP Berufsverband Deutscher Psychiater

berufsverband-psychiater.de

41

The BVDP Berufsverband Deutscher Psychiater website serves as the official online presence of the German professional association for psychiatrists. It provides information, networking opportunities, and representation for psychiatrists in Germany. The site is built on a WordPress platform using the Divi theme, enhanced with SEO tools like Yoast and analytics via Matomo, indicating a moderate level of digital maturity. The technical infrastructure is standard for professional association websites, hosted by securehost.de, and optimized for mobile devices with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency to improve compliance and user trust.

B

BVDN Berufsverband Deutscher Nervenärzte

berufsverband-nervenaerzte.de

42

The website www.berufsverband-nervenaerzte.de represents the BVDN Berufsverband Deutscher Nervenärzte, a professional association for neurologists, psychiatrists, and psychotherapists in Germany. It serves as a platform to consolidate professional and healthcare policy interests at both state and federal levels. The site targets medical professionals within the neurological and psychiatric fields, providing information and networking opportunities. The business model is centered on professional representation and advocacy within the healthcare sector. The website is moderately sized and founded around 2020, consistent with the domain registration data. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as Yoast SEO for search engine optimization and Matomo for analytics, indicating a reasonable level of digital maturity. Hosting is provided by securehost.de, and the site uses HTTPS, ensuring encrypted communications. The site is mobile-optimized and demonstrates good design and navigation clarity, although accessibility features are basic. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not publish explicit privacy, cookie, or incident response policies, which are important for GDPR compliance and user trust. No vulnerability disclosure or data protection officer contact information is provided, representing compliance gaps. The use of Matomo analytics suggests some privacy-conscious tracking, but cookie consent mechanisms are absent. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy and security disclosures to improve compliance and user confidence. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, publishing incident response and vulnerability disclosure information, adding security headers, and providing data protection officer contact details to align with GDPR requirements.

B

BDN Berufsverband Deutscher Neurologen

berufsverband-neurologen.de

42

The Berufsverband Deutscher Neurologen (BDN) is a professional association representing neurologists in Germany. The website serves as a central platform providing relevant information on health policy, continuing education, billing, guidelines, and professional political engagement. The site targets medical professionals specialized in neurology and positions itself as a key industry body within the German healthcare sector. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization and Matomo for analytics tracking. Hosting is managed via securehost.de, indicating a professional hosting environment. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and incident response policies. Privacy compliance is minimal due to the absence of visible privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy, but could improve in privacy compliance and security transparency.

B

Bündnis Kinder- und Jugendreha e.V. (BKJR)

kinder-und-jugendreha-im-netz.de

55

The website 'Kinder- und Jugendreha im Netz' serves as a comprehensive informational portal dedicated to medical rehabilitation for chronically ill children and adolescents in Germany. Operated by the Bündnis Kinder- und Jugendreha e.V. (BKJR) in collaboration with the Deutsche Gesellschaft für Pädiatrische Rehabilitation und Prävention e.V. (DGPRP), it provides detailed guidance on rehabilitation services, clinics, application procedures, and downloadable resources. The platform targets families, medical professionals, and stakeholders involved in pediatric rehabilitation, positioning itself as a trusted non-profit resource within the healthcare sector in Germany. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Flexslider for UI components, Cookiebot for consent management, and Matomo for analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Hosting appears to be managed by monks.de, inferred from tracking domains. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. Tracking includes Facebook Pixel and Matomo, with moderate user tracking balanced by privacy compliance measures. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional, trustworthy, and well-maintained informational resource with a strong focus on pediatric rehabilitation. Strategic improvements could include enhancing security headers, publishing security policies, and expanding contact information to bolster trust and compliance.

G

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V.

psycho-onkologie.net

59

Psycho-Onkologie Online is a specialized non-profit organization providing psycho-oncological support services to cancer patients and their families in Germany. The website offers three main services: an online screening tool for psychological burdens related to cancer, a finder to locate qualified psycho-oncologists and therapy options nearby, and an online practice for direct consultation. The platform is positioned as a trusted resource with partnerships and funding from recognized organizations in the healthcare and cancer support sectors. Technically, the website is built on the TYPO3 CMS platform and uses common JavaScript libraries such as jQuery and Modernizr. It integrates Piwik/Matomo analytics for user tracking and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. The WHOIS data is unavailable, which reduces trustworthiness somewhat, but the website content and partner affiliations support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a well-structured, trustworthy resource for psycho-oncological support, with moderate technical maturity and a good privacy posture. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security and compliance standing.

G

Generation PSY – DGPPN e.V.

generation-psy.de

61

Generation PSY is a non-profit youth initiative under the German Society for Psychiatry and Psychotherapy, Psychosomatics and Neurology (DGPPN). The website serves as an educational and engagement platform targeting young psychiatrists, medical students, and healthcare professionals interested in psychiatry. It offers campaigns, mentoring, networking events, and career information to promote psychiatry as a profession. The site is well-branded, professionally designed, and content-rich, reflecting a clear mission and target audience. Technically, the website is built on WordPress with modern web technologies, including lazy loading and cookie consent management, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, supporting its role as a reputable non-profit healthcare initiative.

A

Aktionsbündnis Seelische Gesundheit

seelischegesundheit.net

64

Aktionsbündnis Seelische Gesundheit is a well-established German non-profit coalition comprising over 180 member organizations dedicated to raising awareness and acceptance of mental health issues. The website serves as an information hub and advocacy platform, offering resources, event information, and campaign details to a broad audience including affected individuals, families, professionals, and policymakers. The organization enjoys a strong market position within the German healthcare advocacy sector, supported by governmental projects and a large network of partners. Technically, the website is built on WordPress with modern optimization plugins such as Autoptimize and Borlabs Cookie for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the professional content and contact information mitigate this risk. No explicit security or incident response policies are published, which could be improved. Overall, the website is a credible and professional resource for mental health advocacy in Germany, with recommendations to enhance security headers, publish incident response information, and clarify domain registration status to strengthen trust and compliance.

The website 'Initiative #Seelen+HirnGesundheit des SPIZ' is a German healthcare initiative focused on mental, neurological, and social health. It provides information, decision aids, and treatment options related to mental health, targeting both the general public and healthcare professionals. The initiative appears to be a small-scale, non-profit organization founded around 2017, consistent with the domain registration date. The website uses WordPress CMS with the Divi theme and employs Yoast SEO for search optimization and Matomo for analytics, indicating a moderate level of digital maturity. The technical infrastructure is hosted by Variomedia AG, a known registrar and hosting provider. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. No contact information or incident response channels are clearly provided, which limits user trust and compliance with regulations. Overall, the website is professional and relevant but would benefit from improved security and privacy practices.

M

MK Netzdienste GmbH & Co. KG

mk.de

61

MK Netzdienste GmbH & Co. KG is a German telecommunications company specializing in providing intelligent network solutions including internet access, VPN, IP telephony, and data center services. The company targets business customers, distribution partners, ISPs, and carriers with a focus on secure, scalable, and innovative communication technologies. Their market position is that of a reputable regional provider with a strong emphasis on customer service and tailored business solutions. The website reflects a mature digital presence with a Joomla CMS platform, modern UIkit framework, and integration of advanced tools such as 3CX cloud telephony and Google reCAPTCHA for security. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is strong with HTTPS, DNSSEC, and no visible vulnerabilities, although some security headers could be improved. Overall, the domain registration is consistent with a legitimate business, despite limited WHOIS data due to DENIC privacy restrictions.

PANDI SERVICES J. & K. Brons GmbH is a well-established maritime claims management and P&I club correspondent service provider with a history dating back to 1865. The company operates internationally with multiple offices in Germany, the UK, Singapore, and Indian Ocean regions. It is part of the bMC Group and holds ISO 9001:2015 certification, reflecting a commitment to quality management. Their core services include claims management for ships, cargo, crew, and non-marine incidents, serving shipowners, insurers, and maritime professionals. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and service details.

C

Captain Förster GmbH

captainfoerster.de

47

Captain Förster GmbH is a well-established marine and cargo surveying company operating primarily in Germany with offices in Hamburg and Bremen. Founded in the 1970s, the company serves a global clientele including shipping companies, insurers, freight forwarders, and industrial clients. Their service portfolio is comprehensive, covering a wide range of marine survey and consultancy services. The company is part of the bMC GROUP and holds ISO 9001:2015 certification, underscoring their commitment to quality. The website reflects a professional and trustworthy business presence with clear contact details and compliance with data privacy regulations. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and specialized libraries for UI and cookie management. The site is mobile-optimized and includes a cookie consent mechanism with blocking until acceptance, demonstrating good privacy compliance. Analytics are handled via Matomo, an open-source platform, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses session and CSRF protection cookies. However, there is no explicit security policy or incident response contact information published, which could be improved. Security headers are not explicitly detected in the provided data, suggesting room for enhancement. No vulnerabilities or suspicious content were identified. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and incident response readiness would further strengthen their security posture.

B

bMC GROUP

salvageapp.com

53

SalvageApp is a specialized web application developed and operated by the bMC GROUP, targeting the marine claims sector. It offers a suite of modules designed to improve information flow, cost transparency, project scheduling, risk management, and reporting for marine salvage and insurance claims. The platform is provided complimentary to bMC GROUP clients, positioning it as a value-added service within a niche maritime insurance market. The website presents a professional and consistent brand image with clear contact information and detailed descriptions of its modules and benefits. Technically, the website is built on the Contao CMS with modern frontend technologies including Bootstrap and jQuery. It demonstrates good mobile optimization and user experience, though some SEO and accessibility features are basic. The site uses HTTPS and includes client login functionality, but lacks visible security headers and DNSSEC is not enabled, indicating room for security improvements. Analytics and tracking are implemented via brand-analytics.de, with a basic cookie consent mechanism in place. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the provided data. However, the absence of DNSSEC and security headers suggests moderate security posture. The domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy. Overall, SalvageApp's website is a credible, well-structured platform serving a specialized business audience with a moderate security posture and good business credibility. Strategic improvements in security headers, DNSSEC, and privacy compliance could enhance trust and resilience.

L

Legionäre Baseball AG

legionaere.de

52

The website legionaere.de represents the Guggenberger Legionäre Regensburg, a well-established baseball club in Regensburg, Germany, active since 1987. The club offers a variety of baseball-related services including team participation, training programs, fan merchandise, and event hosting. The site targets baseball enthusiasts, players, and the local community, positioning itself as a prominent regional sports club with a strong community focus. The business model revolves around sports engagement, community events, and merchandise sales. Technically, the website is built on WordPress using the Elementor framework, incorporating modern plugins for media and user interaction. The site is mobile-optimized, well-structured, and performs moderately well with good SEO and accessibility basics. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response information is published. Privacy and cookie policies are present and GDPR compliant, with a newsletter form collecting user emails securely. Overall, the website is professional, trustworthy, and provides a positive user experience.

D

Dynamics e.V.

dynamics-regensburg.de

55

Dynamics e.V. is a medium-sized student association based in Germany, composed of over 80 students from OTH and University Regensburg. Their primary focus is the design, construction, and competition of Formula Student race cars, providing educational and practical experience in automotive engineering and motorsport. The website serves as an information hub for current and prospective members, showcasing team activities, newsletters, and recruitment opportunities. Technically, the site is built on WordPress with Elementor, leveraging Cloudflare for DNS and CDN services, and integrates social media and Mailchimp for communication. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service. Overall, the site is professional, safe, and trustworthy, targeting students and motorsport enthusiasts.

T

Tennisclub TC Rot-Blau Regensburg

tc-rotblau.de

53

Tennisclub TC Rot-Blau Regensburg is a well-established tennis club founded in 1925, serving as one of the largest and leading tennis clubs in Bavaria and Germany. The club offers a broad range of services including tennis training for all age groups, membership benefits, event hosting, and an online merchandise shop. The website reflects a family-oriented sports organization with a strong local presence and community engagement. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for compliance, hosted on Goneo servers. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

Eisbaeren Regensburg

eisbaeren-regensburg.com

54

Eisbaeren Regensburg is a local German ice hockey team with an online presence focused on providing team information and engaging with fans. The website is built on WordPress using the Uncode theme and incorporates modern web technologies such as jQuery and Typekit fonts. The site includes a cookie consent mechanism via Usercentrics, demonstrating awareness of GDPR requirements, although explicit privacy and terms of service pages are not found. Security posture is moderate with HTTPS enabled and domain transfer protection set, but lacks DNSSEC and security headers. Overall, the site is functional, well-branded, and targeted at sports enthusiasts in the Regensburg region.

E

expeero

expeero.com

48

Expeero is a German-based technology company offering a SaaS platform focused on reputation management with a unique ecological angle by planting trees for each customer review. The company targets businesses seeking to improve their online reputation while demonstrating environmental responsibility. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Matomo analytics and Bootstrap framework. Security posture is solid with HTTPS and CSRF protections, though some security headers are missing and no explicit cookie consent mechanism is present. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, but the active and comprehensive website content supports business credibility. Overall, Expeero presents a trustworthy and innovative service with room for improvement in transparency and security practices.

B

bücher.de

buecher.de

62

bücher.de is a large German e-commerce platform specializing in the sale of books, audiobooks, eBooks, gifts, games, entertainment, and technology products. The website targets a general German-speaking audience and positions itself as a major player in the German online book retail market. The platform offers a broad catalog with over 15 million products and emphasizes convenience and free shipping for price-bound books. Technically, the website uses modern JavaScript libraries, integrates Google Tag Manager, Microsoft Clarity, and Criteo for analytics and marketing, and manages cookie consent via Klaro, indicating GDPR awareness. Security posture is good with HTTPS enforced, but lacks visible security headers and explicit security policies. No direct contact or privacy policy links were found in the provided content, which is a potential area for improvement. Overall, the website is professional, well-branded, and trustworthy with moderate to good technical implementation and privacy compliance.

The website www.saturn.de currently presents a Cloudflare Turnstile captcha challenge page blocking direct access to its content. This indicates a security mechanism to prevent automated access or abuse. Due to this, no substantive business content, policies, or contact information is accessible for analysis. The domain uses Akamai nameservers, suggesting professional hosting and a legitimate commercial presence. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance posture. Technically, the site employs modern WAF technology but does not expose further technical or security details on this page. Security posture is difficult to evaluate fully due to content blocking, but the presence of a WAF is a positive indicator. Overall, the site is currently inaccessible for full analysis, resulting in a low AI score and unknown compliance or business credibility status.

J

jpc

jpc.de

70

jpc.de is a well-established German e-commerce platform specializing in the sale of physical media products such as CDs, LPs, DVDs, Blu-rays, and books. The website offers a large catalog with over 4 million items and provides free shipping for vinyl and orders above 20 euros, targeting music and film enthusiasts primarily in Germany. The business model focuses on retail sales through an online shop with additional editorial content and a blog to engage customers. The site is professionally designed with consistent branding and good content quality, supporting both German and English languages.

D

Dussmann - Das Kulturkaufhaus

kulturkaufhaus.de

58

Dussmann - Das Kulturkaufhaus operates a professional online retail platform specializing in books, music, sheet music, and movies, primarily serving cultural enthusiasts in Berlin and beyond. The website reflects a medium-sized retail business with a strong cultural focus, offering curated products and hosting events and workshops. The digital infrastructure employs modern JavaScript libraries and tracking tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and secure form handling, though explicit privacy and cookie policies are not evident, indicating room for compliance improvement. Overall, the website presents a trustworthy and professional front, though enhancing transparency around privacy and contact information would strengthen user trust and regulatory compliance.

U

UKi Media & Events

automotive-interiors-expo.com

66

Automotive Interiors Expo Europe is a well-established trade event organized by UKi Media & Events, focusing on the automotive interiors sector and integrated within the broader Vehicle Tech Week Europe. The website serves as a comprehensive platform for industry professionals, OEMs, suppliers, designers, and engineers to connect, showcase innovations, and access industry news. The business model revolves around event organization, media publishing, and sponsorship facilitation, positioning itself as a key player in the automotive technology ecosystem. Technically, the site employs a modern tech stack including jQuery, Alpine.js, and multiple analytics and marketing tools, hosted on a reliable infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS, domain transfer protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, with extensive user tracking balanced by clear consent. No critical vulnerabilities or suspicious patterns were detected.

E

expondo

expondo.com

61

Expondo.de is a well-established German e-commerce platform specializing in professional equipment and tools for gastronomy, industry, and related sectors. With over 17 years of market presence, it offers a broad product range, expert services, and customer trust signals such as Trustpilot reviews and premium warranties. The website is built on modern technologies including Vue Storefront 2 and integrates advanced marketing and analytics tools. The platform demonstrates strong digital maturity with excellent design, mobile optimization, and user experience. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response contacts are not publicly visible. Overall, the site is trustworthy and professionally managed, serving business customers effectively.