Germany security reports

W

Web-Betreiber

web-betreiber.de

10

Web-Betreiber is a German network of developers, designers, content creators, and SEO experts offering comprehensive digital marketing, web development, and software tool services. The website presents a professional image with detailed team member profiles and client references, targeting businesses seeking expert web and marketing solutions in Germany. Technically, the site is built on WordPress with modern plugins such as Gravity Forms, Yoast SEO, and WP Rocket, hosted behind Cloudflare for performance and security. The security posture is solid with HTTPS enforced and GDPR-compliant privacy and cookie policies including consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform.

B

Behinderten- und Rehabilitations-Sportverband Berlin e.V.

sportbildung.berlin

36

The website sportbildung.berlin serves as the official training and licensing portal for the Behinderten- und Rehabilitations-Sportverband Berlin e.V., a regional sports association focused on disabled and rehabilitation sports in Berlin, Germany. It provides educational resources, licensing guides, and online application services for training and continuing education in the rehabilitation sports sector. The portal targets individuals and clubs involved in this niche sports community, offering structured information and digital services to support their certification and training needs. Technically, the site is built on TYPO3 CMS with Bootstrap 5 and jQuery, ensuring a modern and responsive user experience. It integrates Matomo analytics with privacy-conscious settings and uses HTTPS with a valid SSL certificate. However, DNSSEC is not enabled, and some security headers appear to be missing, indicating room for improvement in security hardening. The site is well-structured with clear navigation and good accessibility features, supporting a positive user experience. From a security and compliance perspective, the site demonstrates basic GDPR compliance with a privacy policy and cookie consent banner. However, it lacks visible terms of service, security policies, incident response contacts, and explicit business contact information, which are important for trust and legal completeness. The WHOIS data is consistent and legitimate, with a domain age appropriate for the business. No suspicious or malicious indicators were found. Overall, the website is a credible and professional portal for its niche audience but would benefit from enhanced security practices, clearer contact and legal information, and improved transparency to strengthen trust and compliance.

F

FUSSBALL.DE - Die Heimat des Amateurfußballs

fussball.de

10

FUSSBALL.DE is a prominent German online portal dedicated to amateur football, providing comprehensive match schedules, results, league tables, and club information across Germany. The platform serves amateur players, clubs, fans, and regional football associations, positioning itself as a key media resource in the German amateur football ecosystem. It offers additional services such as training resources, news, and an integrated shop for fans and participants. Technically, the website leverages modern JavaScript frameworks like AngularJS, integrates advanced cookie consent management via Usercentrics, and employs analytics tools including Adobe Analytics and Google Tag Manager. Hosting is managed through Amazon AWS, ensuring reliable infrastructure. Security posture is strong with HTTPS enforced and consent-based tracking, though explicit privacy and security policies are not found in the provided content. Overall, the site is well-structured, accessible, and professionally branded, with strong trust signals from official football association partnerships.

I

Institut für Auslandsbeziehungen (ifa)

kulturaustausch.de

49

Kulturaustausch is a cultural magazine operated under the Institut für Auslandsbeziehungen (ifa), focusing on international relations, culture, and society with contributions from global authors. The website serves as a platform for in-depth dossiers, articles, and print issues, targeting readers interested in diverse international perspectives. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and uses modern web technologies ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS and some security best practices, though additional headers could enhance protection. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a mature privacy stance. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is professional, trustworthy, and well-positioned in the media and non-profit cultural sector.

O

OEMUS MEDIA AG

designpreis.org

53

The website designpreis.org serves as the official platform for the ZWP Designpreis, an established German award recognizing outstanding dental practice designs. Operated by OEMUS MEDIA AG, the site provides comprehensive information about the competition, showcases winners, and facilitates applications. The target audience includes dental professionals and architects interested in innovative dental office design. Technically, the site is built on WordPress 6.8.2, uses Matomo for privacy-conscious analytics, and hosts media assets on Amazon S3, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, indicating room for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its niche business purpose.

P

Pfarrei Hl. Edith Stein

heiligeedithstein.de

46

The website represents the Catholic parish 'Hl. Edith Stein' located in Berlin, Germany, serving the local community with religious services, events, and pastoral care. It operates under the Erzbistum Berlin and targets parishioners and interested individuals in the region. The site provides comprehensive information about services, events, and community life, reflecting a small but active religious organization. Technically, the site is built on TYPO3 CMS, utilizing legacy jQuery libraries and Shadowbox.js for media display. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. Cookie consent is implemented with granular user choices, reflecting good privacy compliance. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and no published security or incident response policies are available. The site does not expose sensitive data and uses consent-based activation for tracking and media embeds. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is trustworthy and professional, with good content quality and privacy compliance. Recommendations include enhancing security headers, publishing security policies, and considering vulnerability disclosure mechanisms to improve security maturity and trust further.

W

wbv Distribution

wbv-distribution.de

58

wbv Distribution is a German family-owned logistics and fulfillment service provider specializing in sustainable supply chain solutions. Their key services include E-Commerce Fulfillment, PreFBA logistics, media and advertising logistics, and campaign logistics. The company positions itself as a reliable partner with over 125 years of logistics experience, emphasizing sustainability and certified quality management. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, supporting a high trust level. Technically, the website uses modern frontend technologies such as jQuery and UIkit, with Matomo analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by a German provider (Schlundtech). Security best practices include HTTPS and a cookie consent mechanism with blocking access until consent, though security headers and incident response information are not evident. The security posture is solid but could be improved by adding security headers and publishing a security policy or vulnerability disclosure. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the business claims, and the parent company relationship to wbv Media is clearly stated. Overall, the website is professional, secure, and compliant with GDPR, making it a trustworthy platform for its target B2B audience in logistics and fulfillment.

J

Jazzklub Altenburg

jazzklub-altenburg.de

43

Jazzklub Altenburg is a small, non-profit cultural organization based in Germany dedicated to promoting jazz music through concerts and community events. The website serves as an information hub for event schedules, membership, and gallery content, targeting jazz enthusiasts and local community members. The organization operates primarily as a cultural club with a focus on live music and membership engagement. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with common plugins such as Contact Form 7. Hosting is provided by RZone, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technical infrastructure is standard for small cultural organizations but could benefit from modernization and enhanced security measures. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit privacy or security policies. No cookie consent mechanism is present, indicating partial GDPR compliance. The absence of contact emails and phone numbers reduces direct communication options, relying instead on a contact form. Social media integration is present via Facebook and Instagram links. Overall, the security posture is moderate but could be improved with better headers, policies, and compliance mechanisms. The overall risk is low given the non-commercial nature and limited sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent and privacy compliance features, and enhancing contact information transparency to improve trust and compliance.

J

Jazzclub Sondershausen e.V.

jazzclub-sondershausen.de

55

Jazzclub Sondershausen e.V. is a small non-profit cultural organization based in Germany dedicated to promoting jazz music through live events and concerts. The website serves as a platform to announce upcoming events, showcase photo galleries from past concerts, and provide contact avenues primarily via a contact form. The organization leverages reputable external ticketing platforms to facilitate event ticket sales, enhancing trust and convenience for attendees. The site targets jazz enthusiasts and the local community, positioning itself as a key cultural player in the Sondershausen region. Technically, the website is built on WordPress 6.8.3 with Bootstrap 5 and jQuery, ensuring a modern and responsive design. The site demonstrates good SEO practices with comprehensive meta tags and Open Graph data, supporting social media sharing and discoverability. Mobile optimization is good, and the site loads with moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. There are no detected vulnerabilities or malicious scripts. However, the absence of security headers and a vulnerability disclosure policy indicates potential areas for enhancement. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented, which may be a compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include implementing cookie consent, adding security headers, publishing a vulnerability disclosure or security.txt file, and providing clearer direct contact information to improve user trust and compliance posture.

IG Jazz Arnstadt e.V. is a small non-profit cultural association based in Germany focused on organizing and promoting jazz music events in Arnstadt. The website serves as an information hub for upcoming concerts, ticket sales, and archival content related to jazz. The target audience primarily consists of jazz enthusiasts and the local community interested in cultural events. The organization maintains an active presence on social media platforms such as Facebook and Instagram and offers a newsletter subscription to engage its audience. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, booking, and GDPR compliance. The site is hosted on servers associated with avidesign.eu and employs HTTPS with a valid SSL certificate. Performance and mobile optimization are good, with SEO best practices implemented via Yoast SEO. The site includes a cookie consent mechanism compliant with GDPR regulations and uses Matomo for analytics and Mailchimp for marketing. From a security perspective, the site has HTTPS enabled and uses cookie consent tools to manage user privacy. However, no advanced security headers were detected, and there is room for improvement by implementing CSP, HSTS, and other HTTP security headers. No vulnerabilities or exposed sensitive data were found in the provided content. Incident response and security policies are not explicitly documented on the site. Overall, the website presents a professional and trustworthy front for a local cultural organization with good privacy compliance and moderate security posture. Recommendations include enhancing security headers, maintaining up-to-date software, and possibly publishing explicit security and incident response policies to improve trust and compliance.

Jazzclub Ilmenau e.V. is a small non-profit cultural organization based in Ilmenau, Germany, dedicated to promoting jazz music through event organization and community engagement. The website serves as an information hub for upcoming jazz events, membership opportunities, and sponsorship acknowledgments. The organization targets jazz musicians and enthusiasts within the local community, positioning itself as a key cultural institution in the region. Technically, the website is built using the Jekyll static site generator, hosted by manitu.net, and employs modern web standards with responsive design and good SEO practices. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The security posture is moderate with HTTPS enabled but missing several best practices such as security policies and incident response contacts. Overall, the website is trustworthy and professional but could benefit from enhanced privacy and security features to improve compliance and user trust.

Jazzclub Erfurt e.V. is a small non-profit cultural organization based in Germany focused on promoting jazz music through live events and concerts. The website serves as a platform to showcase upcoming events, ticket reservations, and club information targeting jazz enthusiasts and the local community. The organization benefits from cultural funding and maintains an active presence on social media platforms such as Facebook and Instagram. Technically, the website is built on the ClubDesk CMS platform, utilizing modern JavaScript libraries like jQuery, Featherlight, and Owl Carousel to enhance user experience. The site is mobile-optimized and includes accessibility features, although SEO and performance optimizations are basic. Security posture is moderate with HTTPS assumed but no explicit security headers detected. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, but no explicit terms of service or incident response policies are published. Overall, the site is trustworthy and professional, suitable for its cultural and community-oriented purpose.

Sonneberger Jazzfreunde e.V. is a non-profit cultural organization dedicated to promoting jazz music and small arts in the Thüringisch-Fränkischer region of Germany. The website serves as the official portal for the International Sonneberger Jazztage, a well-established jazz festival entering its 39th year. The organization relies on ticket sales, sponsorships, and partnerships with local businesses and cultural institutions to operate. The website provides detailed event information, partner acknowledgments, and ticket purchasing links, targeting jazz enthusiasts and regional visitors. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Tiny Slider, and Usercentrics for consent management. The site is mobile-optimized and presents a professional design with clear navigation. Hosting is provided by a German hosting provider, consistent with the regional focus of the organization. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and implements GDPR-compliant consent management. However, no explicit security headers or incident response policies are published, and no vulnerability disclosures or security certifications are evident. The absence of a terms of service page and limited security documentation suggests areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and SEO could further strengthen its posture and user trust.

J

Jazzclub Nordhausen e.V.

jazzclub-nordhausen.de

39

Jazzclub Nordhausen e.V. is a small non-profit cultural association based in Germany focused on organizing jazz music events and concerts. The website provides event listings, membership information, and historical background about the club. It targets jazz enthusiasts and the local community. The site is built on the Contao CMS platform and hosted by Cloudpit, using common JavaScript libraries for UI enhancements. The technical infrastructure is moderately mature with basic mobile optimization and SEO. Security posture is average with cookie consent implemented but lacking advanced security headers and explicit incident response policies. No blocking or WAF mechanisms interfere with content access. Overall, the website is trustworthy and professionally maintained but could improve in security and compliance transparency.

I

International Council of Sport Science and Physical Education (ICSSPE)

icsspe.org

46

The International Council of Sport Science and Physical Education (ICSSPE) is a globally recognized non-profit organization dedicated to advancing research, education, and policy in physical activity and sport. The website serves as a comprehensive platform for disseminating scientific resources, promoting events, and supporting its membership community. It targets professionals, researchers, and policymakers in the sport science and physical education sectors worldwide. Technically, the website is built on Drupal 7, utilizing common web technologies such as jQuery and Google services for analytics and maps. While the site is functional and moderately optimized for performance and mobile devices, there is room for modernization and enhanced accessibility. The presence of privacy and cookie policies with consent mechanisms reflects a good level of digital maturity and compliance with GDPR. From a security perspective, the site enforces HTTPS and anonymizes IPs in analytics, but lacks visible security headers and explicit incident response or security policy documentation. The WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site demonstrates a solid security posture but could benefit from additional hardening and transparency. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include updating the CMS, implementing security headers, and publishing security policies to enhance trust and compliance.

B

Bund der Freien Waldorfschulen e.V.

erziehungskunst.de

48

Erziehungskunst waldorf.leben is a German magazine dedicated to Waldorf pedagogy, published by the Bund der Freien Waldorfschulen e.V. The website serves educators, parents, and the Waldorf community by providing news, articles, and educational resources related to Waldorf education. It maintains a consistent brand presence with social media integration and structured content navigation. Technically, the site is built on TYPO3 CMS, using modern frontend libraries such as Slick Slider and FontAwesome, hosted on DomainControl nameservers. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security headers are not evident, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in security posture. Overall, the website is professional, content-rich, and trustworthy, with a moderate technical and security maturity level.

P

Pädagogische Forschungsstelle

waldorfbuch.de

64

Waldorfbuch is an online bookstore specializing in educational materials for Waldorf schools, offering books, DVDs, and resources across various subjects and school levels. The website targets educators, parents, and students interested in Waldorf pedagogy primarily in Germany. The business operates a niche e-commerce platform with a clear focus on Waldorf education materials. Technically, the site uses a custom CMS with common web technologies such as jQuery and FontAwesome, hosted on ipandmore.cloud. The website is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and incident response information. Privacy compliance is good with GDPR-aligned policies and cookie management. Overall, the site is trustworthy and professionally maintained, with room for improvement in security policies and technical headers.

H

Hearst Networks Germany GmbH & Co. KG

hearstnetworks.de

50

Hearst Networks Germany GmbH & Co. KG operates prominent Pay-TV channels and streaming services in the German-speaking market, including The HISTORY Channel and Crime + Investigation. As part of Hearst Networks EMEA, the company leverages content from A+E Global Media and local productions to serve a broad audience interested in factual entertainment. The website reflects a professional media business with consistent branding and clear business information. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates a comprehensive consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is well-structured, user-friendly, and trustworthy, supporting the company's market position as a regional media operator.

C

Crime + Investigation

crimeandinvestigation.de

52

Crime + Investigation is a specialized True Crime TV channel serving Germany, Austria, and Switzerland, offering pay-TV and streaming services including partnerships with providers like Sky and Amazon Prime Video Channels. The website reflects a professional media outlet with a focus on True Crime documentaries, podcasts, and related content, targeting German-speaking audiences interested in crime investigation media. The business operates within the media sector and is supported by partnerships with AE Networks and related entities. Technically, the site is built on TYPO3 CMS with modern web technologies and includes a comprehensive cookie consent mechanism, social media integration, and advertising via Google AdSense and Facebook Pixel. Security posture is good with HTTPS, security headers, and reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

H

Hearst Networks Germany GmbH & Co. KG

aenetworks.de

50

Hearst Networks Germany GmbH & Co. KG operates Pay-TV channels and streaming services focused on factual entertainment in the German-speaking market. As part of Hearst Networks EMEA, it leverages content from A+E Global Media and local productions to serve a niche audience interested in documentary and factual programming. The website is built on TYPO3 CMS and integrates modern web technologies including jQuery, Slick Slider, and consent management platforms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site presents a professional and trustworthy front with good compliance to GDPR and privacy standards.

T

The HISTORY Channel

history.de

56

The HISTORY Channel (www.history.de) is a German-language pay-TV broadcaster specializing in history documentaries and related educational content. It offers traditional TV programming alongside streaming services such as HISTORY Play via Amazon Prime Video Channels. The website demonstrates a professional media presence with consistent branding, a clear target audience of general viewers interested in history, and a business model focused on content distribution through multiple platforms. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates third-party services for analytics, advertising, and consent management. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the German media market.

VARTA AG operates a professional corporate website focused on consumer battery and energy storage products. The site is well-structured, multilingual, and uses TYPO3 CMS with modern web technologies. It targets consumers seeking reliable energy solutions including primary batteries, rechargeable batteries, special batteries, hearing aid batteries, lighting, and mobile power solutions. The website demonstrates good digital maturity with SEO optimization, cookie consent, and privacy policy compliance. Security posture is solid with HTTPS and some security best practices, though additional security headers could be implemented. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the overall legitimacy. No blocking or WAF challenges were detected, allowing full content access.

D

De'Longhi Appliances S.r.l

kenwoodworld.com

9

The website www.kenwoodworld.com/de-de represents the German localized site for Kenwood, a brand under De'Longhi Appliances S.r.l. The company specializes in kitchen machines, mixers, and household appliances, targeting general consumers seeking both entry-level and professional-grade products. The site demonstrates a consistent brand presence with good content quality and user experience, leveraging modern web technologies such as React and Chakra UI for a responsive and accessible interface. However, the absence of WHOIS registration details and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and WHOIS transparency.

The website de.jbl.com is the official German regional e-commerce store for JBL, a globally recognized audio brand under Harman International. It offers a wide range of audio products including speakers, headphones, soundbars, and gaming accessories, with additional services such as product personalization and customer support. The site targets consumers in Germany and the broader European market, positioning itself as a trusted direct sales channel with guarantees like free shipping, returns, and warranty. Technically, the site is built on Salesforce Commerce Cloud, leveraging modern JavaScript libraries and third-party services for analytics, personalization, and bot protection. It demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for customers. Recommendations include publishing explicit security and incident response policies and enhancing contact information for security reporting.

S

Online-Galerien für Fotografen mit Slideshow & Online Shop

scrappbook.de

58

Scrappbook.de is a German-based online platform offering photographers the ability to create online galleries with slideshow features and an integrated online shop. The website targets photographers seeking to showcase and sell their photographic works digitally. The business operates within the technology sector, focusing on niche services for the photography community. The platform is built on WordPress using the Total theme, indicating a mature but standard technical infrastructure. The site employs modern analytics and marketing tools such as Google Tag Manager, Segment Analytics, and Intercom, alongside a cookie consent mechanism via Cookiebot, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy policies suggests room for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.

S

solarLAGO

solarlago.de

59

solarLAGO is a specialized expert network focused on renewable energies and energy efficiency in the international Bodenseeregion. Established around 2016, it serves as a catalyst and connector for stakeholders from business, science, politics, and civil society to accelerate the energy transition. The website reflects a professional regional platform offering networking, knowledge exchange, project support, and educational activities. It targets a diverse audience interested in sustainable energy solutions within the region. Technically, the site is built on WordPress with modern plugins for SEO, cookie compliance, and interactive content such as sliders and event listings. The infrastructure is stable with a reputable registrar and no blocking mechanisms detected.

T

The HISTORY Channel

history.com

56

The HISTORY Channel website (www.history.de) serves as the German-language digital presence for a pay-TV channel specializing in history documentaries and related content. It offers TV programming schedules, streaming options via HISTORY Play, educational materials, and a blog. The site targets a general audience interested in history and documentary content, positioning itself as a reputable media provider in the German market. The business model revolves around pay-TV subscriptions and digital streaming partnerships, notably with Amazon Prime Video Channels. The website is professionally designed, with consistent branding and comprehensive content that supports its market position.

I

Informa Markets

spacetechexpo-europe.com

60

Space Tech Expo Europe is a leading B2B event organizer specializing in the space technology sector, hosting Europe's largest space industry exhibition and conference. The event connects over 950 exhibitors and 10,000 attendees, providing a platform for networking, knowledge sharing, and business development. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Bootstrap and integrates multiple analytics and marketing tools, including Google Analytics, Facebook Pixel, and consent management solutions. Security posture is solid with HTTPS and Content Security Policy headers, though additional headers could enhance protection. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which contrasts with the professional and trustworthy nature of the website content and its association with Informa Markets. Overall, the site demonstrates strong business credibility and technical maturity but should address domain registration transparency to improve trust.

R

ROBIN WOOD e.V.

robinwood.de

47

ROBIN WOOD e.V. is a German non-profit environmental organization dedicated to nature and climate protection through activism, campaigns, and public engagement. The website serves as a platform to inform supporters, promote campaigns, and solicit donations and memberships. It maintains a strong presence on multiple social media platforms and regularly publishes press releases and reports. The organization targets environmentally conscious individuals and activists. Technically, the website is built on Drupal 10 CMS, utilizing modern front-end libraries such as Bootstrap and Swiper.js for responsive design and interactive elements. Hosting is provided by Hostsharing, inferred from the nameservers. The site implements HTTPS with a good SSL configuration and includes a cookie consent banner with an opt-in mechanism, reflecting good privacy compliance practices. Matomo analytics is used for tracking with minimal user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks published security policies, incident response contacts, and a security.txt file, which are recommended for improved transparency and security readiness. Overall, the website is professional, trustworthy, and well-maintained, with good content quality and user experience.

The BundesBürgerInitiative WaldSchutz (BBIWS) is a German non-profit grassroots organization founded in 2017, dedicated to forest protection and environmental activism. The website serves as an information hub for citizen initiatives and individuals engaged in forest conservation across Germany, providing newsletters, petitions, and advocacy resources. The organization operates on a volunteer basis without membership fees, emphasizing community-driven environmental protection efforts. Technically, the website is built on the Jimdo Creator CMS platform, hosted by Jimdo, and employs standard web technologies including JavaScript and jQuery. It is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information is primarily via email, with no phone numbers or physical addresses disclosed. Overall, the website is functional and trustworthy for its non-profit purpose but could improve in security and compliance documentation.

A

Alltagswölfe GbR

alltagswoelfe.de

60

Alltagswölfe GbR is a small German business specializing in dog coaching, training, and seminars. The website is professionally designed using the Wix platform, targeting dog owners and trainers primarily in Germany. The company offers services such as Hundecoaching, Hundetraining, and organizes seminars and events to strengthen the bond between dogs and their owners. The business appears to have a local/regional market position with a clear focus on dog training and education. Technically, the website leverages Wix's Thunderbolt framework and standard web technologies, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and formal privacy or terms of service documentation. The domain WHOIS data is minimal, showing Wix DNS servers and a domain status of 'connect', which is unusual but consistent with Wix hosting. Overall, the website is accessible, safe, and trustworthy, but could improve in privacy compliance and security best practices.

Leise Worte Simone Kaste operates a niche service website focused on animal communication and related holistic services such as energy sessions, aromatherapy, and spiritual journeys. The website is built on the Jimdo Creator CMS platform and hosted by Jimdo GmbH, reflecting a small business digital presence. The content is primarily in German and targets animal owners interested in communicating with their pets. The site includes a cookie consent mechanism and basic privacy policy, indicating awareness of GDPR compliance. However, no explicit terms of service or security policies are present. Technically, the site uses standard Jimdo scripts and third-party widgets from POWr.io, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Overall, the website is professional and trustworthy for its niche but could improve in security and compliance documentation.

H

Hundetraining Möhring

hundetraining-moehring.de

10

Hundetraining Möhring is a small local dog training service provider based in Germany, offering a range of services including individual training, group courses, and professional dog walking. The website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery and Google Analytics for tracking. The site is well-designed with good navigation and mobile optimization, targeting dog owners in the Göttingen area. However, the website lacks essential compliance documents such as privacy and cookie policies, which is a significant gap in GDPR compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response contact information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

B

Berufsverband der Kinder- und Jugendärzt*innen e.V.

kinderaerzte-im-netz.de

57

Kinderaerzte-im-Netz.de is a comprehensive German healthcare information platform operated by the Berufsverband der Kinder- und Jugendärzt*innen e.V. (BVKJ), focusing on pediatric and adolescent health. The site offers extensive resources including disease information, vaccination schedules, developmental milestones, and preventive care tips, targeting parents, children, and healthcare professionals. It also provides a doctor search service and a dedicated mobile app for patient communication. The platform holds a strong market position as a trusted source in pediatric healthcare in Germany. Technically, the website is built on TYPO3 CMS and employs modern web technologies such as jQuery, FlexSlider, and FontAwesome. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized with good navigation and content structure, although some accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not publicly disclose a security policy or incident response contacts. No cookie consent mechanism is present, which is a minor compliance gap. No vulnerabilities or suspicious patterns were identified. Overall, the security posture is solid but could be improved with additional headers and transparency. The domain registration data aligns well with the website's purpose and business entity, indicating legitimacy. External links point to reputable partner and related domains. No adult or inappropriate content is present, making the site safe for general audiences. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen compliance and trust.

Z

ZEKO - Zentrale Ethikkommission bei der Bundesärztekammer

zentrale-ethikkommission.de

64

The Zentrale Ethikkommission (ZEKO) is an official ethics commission affiliated with the German Medical Association (Bundesärztekammer), established in 1994 to provide independent ethical guidance in medicine and related fields. The website serves as a platform for publishing ethical statements, resolutions, and supporting medical professionals and the public in ethical discourse. The target audience includes physicians, healthcare professionals, and interested members of the public. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap 5 and FontAwesome. It is hosted by SchlundTech and employs privacy-conscious analytics via Matomo and consent management through Cookiebot. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. While some security headers are not explicitly visible in the HTML, the overall posture is strong with no detected vulnerabilities. The WHOIS data aligns with the organization's official status, enhancing trust. Overall, the website presents a low-risk profile with strong compliance and professionalism. Strategic recommendations include enhancing explicit security headers and publishing a vulnerability disclosure policy to further strengthen security transparency.

W

Wissenschaftlicher Beirat Psychotherapie

wbpsychotherapie.de

65

The Wissenschaftlicher Beirat Psychotherapie is a German scientific advisory board established under § 8 PsychThG, jointly supported by the Bundesärztekammer and Bundespsychotherapeutenkammer. It provides expert opinions on the scientific recognition of psychotherapy methods, serving as an authoritative body in the healthcare regulatory landscape. The website reflects this official status with professional content, clear contact information, and compliance with data protection laws. Technically, the site is built on TYPO3 CMS, uses modern frontend frameworks like Bootstrap and FontAwesome, and integrates privacy-respecting analytics via Matomo alongside Cookiebot for consent management. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the site demonstrates a mature digital presence appropriate for a governmental advisory entity.

W

Wissenschaftlicher Beirat der Bundesärztekammer

wbbaek.de

61

The Wissenschaftlicher Beirat der Bundesärztekammer is an interdisciplinary scientific advisory board affiliated with the German Medical Association, providing expert consultation on medical and scientific matters related to legislation and medical practice. The website serves as an official communication platform, offering access to guidelines, statements, and annual reports, targeting medical professionals and stakeholders in healthcare governance. Technically, the site is built on TYPO3 CMS, employs modern frontend frameworks like Bootstrap 5, and integrates privacy-respecting analytics via Matomo. Cookie consent is implemented comprehensively, ensuring GDPR compliance. Security posture is solid with HTTPS and consent-based tracking, though security headers and incident response policies could be enhanced. Overall, the site is professional, trustworthy, and well-structured, reflecting its authoritative role in the healthcare sector.

A

Arzneimittelkommission der deutschen Ärzteschaft

akdae.de

69

The Arzneimittelkommission der deutschen Ärzteschaft (AkdÄ) is a scientific advisory committee affiliated with the German Federal Medical Association (Bundesärztekammer). It serves as an authoritative body providing drug safety information, pharmaceutical therapy guidelines, and regulatory statements to healthcare professionals in Germany. The website offers comprehensive resources including news updates, educational materials, and official publications, targeting medical practitioners and regulatory stakeholders. The business model is non-profit and focused on public health and safety. Technically, the website is built on the TYPO3 CMS platform, leveraging modern technologies such as Bootstrap 5 and FontAwesome for responsive and accessible design. Hosting is provided by SchlundTech, a reputable German hosting provider. The site demonstrates good digital maturity with GDPR-compliant cookie consent managed by Cookiebot and privacy-respecting analytics via Matomo. Performance and SEO are moderate to good, with clear navigation and mobile optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is a trustworthy, professional resource with high content quality and business credibility. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security posture and transparency.

B

Bund der Freien Waldorfschulen

jedestundezaehlt.de

50

The website 'Jede Stunde zählt' is a professionally developed educational campaign platform focused on promoting the career of Waldorf teachers in Germany. It is operated by the Bund der Freien Waldorfschulen, a recognized organization in the Waldorf education sector. The site offers comprehensive information about Waldorf schools, career entry guidance, job offers, and regional contact points for prospective teachers. The platform is well-positioned within its niche market, targeting educators and individuals interested in Waldorf pedagogy. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for GDPR-compliant cookie management. It uses Matomo for analytics, ensuring privacy-conscious tracking. The site is mobile-optimized, accessible, and SEO-friendly, hosted on a provider consistent with the domain's nameservers. Performance is moderate, with good design and navigation clarity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the website's purpose and market, enhancing trustworthiness. Overall, the website demonstrates a strong commitment to privacy compliance, user experience, and business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain a robust security posture.

W

Schönes für Baby, Kinder und Erwachsene | Waldorfshop

waldorfshop.eu

63

Waldorfshop.eu is an e-commerce platform specializing in educational and craft materials tailored for Waldorf schools, kindergartens, and families. The website offers a curated selection of sustainable, pedagogically valuable products including toys, craft supplies, and books from reputable brands such as Ostheimer and Grimm’s. The site targets parents, educators, and institutions interested in Waldorf pedagogy and sustainable childhood development. Technically, the site is built on the plentymarkets platform using Vue.js, with integrations for PayPal payments, Google Tag Manager, and various marketing and analytics tools. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policy pages are missing. WHOIS data is not publicly available due to EURid privacy policies, but the site’s professional presentation and use of trusted third-party services indicate legitimacy. Overall, the site is well-positioned in its niche market with room for improvement in privacy transparency and security disclosures.

C

CO2ero e.V.

co2ero.de

55

CO2ero e.V. is a German non-profit organization dedicated to climate protection through education and sustainable development initiatives primarily targeting schools and educational institutions. The organization offers workshops, campaigns, and resources to support climate action and sustainability goals, positioning itself as a niche leader recognized by UNESCO's BNE 2030 program. Their website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website employs modern web technologies including asynchronous JavaScript loading and Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is served over HTTPS with good performance and mobile optimization, though no explicit CMS or hosting provider details are evident. Accessibility is basic but functional, and SEO practices appear adequate. From a security perspective, the site benefits from HTTPS and privacy-aware analytics but lacks explicit security headers, a published privacy or cookie policy, and a vulnerability disclosure mechanism. Contact information is clearly provided, enhancing trust. The WHOIS data shows eco-friendly hosting consistent with the organization's mission but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website is safe, professional, and credible with room for improvement in privacy compliance and security best practices. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

S

Steiner Waldorf World

steinerwaldorf.world

50

Steiner Waldorf World is a specialized global educational platform dedicated to promoting and connecting Steiner, Waldorf, and anthroposophical schools, kindergartens, teacher training centers, and federations worldwide. The platform serves as an informational and networking hub, offering institution listings, an interactive world map, media resources, and organizational information. It targets educators, institutions, and the broader community interested in Waldorf education. The website is professionally designed, consistent in branding, and provides clear contact information and privacy compliance mechanisms. Technically, the website is built on TYPO3 CMS and integrates Google Maps for geolocation services. It uses modern web technologies including FontAwesome and jQuery. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility and security headers. Performance is moderate, and no major technical issues were detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable due to privacy or query failure, but the website's professional presentation and association with reputable organizations support its legitimacy. Overall, Steiner Waldorf World presents a trustworthy and well-maintained platform for the Waldorf educational community. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen its security posture and compliance.

V

Vereinigung der Waldorfkindergärten e.V.

waldorfkindergarten.de

48

The website www.waldorfkindergarten.de represents the Vereinigung der Waldorfkindergärten e.V., a non-profit association dedicated to supporting and informing about Waldorf kindergartens and pedagogy in Germany. It serves educators, parents, and interested individuals by providing educational resources, training information, and organizational news. The site positions itself as a leading association with a network of approximately 585 kindergartens, emphasizing Waldorf pedagogy and early childhood education. Technically, the website is built on the TYPO3 CMS platform, utilizing jQuery and the Powermail extension for forms. It employs Matomo (Piwik) for analytics, reflecting a privacy-conscious approach. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Hosting is managed via domain control servers typical for GoDaddy. From a security perspective, the site uses HTTPS and implements a cookie consent banner with opt-in/out options, supporting GDPR compliance. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic improvements in security headers, incident response transparency, and terms of service documentation would further strengthen its security and compliance stance.

W

Waldorf-Stiftung im Bund der Freien Waldorfschulen e.V.

waldorf-stiftung.de

43

The Waldorf-Stiftung im Bund der Freien Waldorfschulen e.V. is a German non-profit foundation dedicated to supporting and funding initiatives related to Waldorf education and pedagogy founded by Rudolf Steiner. The foundation targets Waldorf schools, educators, and supporters of Waldorf pedagogy, providing financial resources and promoting educational projects. The website reflects a well-established position within the Waldorf education community in Germany, emphasizing transparency and community engagement through detailed project disclosures and news updates. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, Parsley.js, and Magnific Popup. The site is mobile-optimized with good SEO practices and moderate performance. Hosting appears to be managed via domaincontrol.com name servers, likely GoDaddy, though exact hosting details are not disclosed. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with an opt-out for Google Analytics tracking. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is minimal but consistent with the website's purpose and domain name. Overall, the website presents a professional, trustworthy, and compliant digital presence for the foundation. Strategic improvements could include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to strengthen the security posture further.

B

Bundesschülerrat im Bund der Freien Waldorfschulen e.V.

waldorfsv.de

49

WaldorfSV is a German non-profit organization representing students of Waldorf schools at the federal level. The website serves as an informational and organizational platform, providing details about their activities, events such as the Bundesschüler*innentagung, and sections dedicated to philosophical and educational policy matters. The organization targets students and stakeholders within the Waldorf education community in Germany. Technically, the website is built on WordPress with Elementor and uses common plugins like Events Manager and Slider Revolution. It is hosted on Goneo servers and employs HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is adequate with no critical vulnerabilities detected, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

B

Bund der Freien Waldorfschulen

lebentanzen.de

42

The website lebentanzen.de serves as an informational and educational platform dedicated to Eurythmie, a movement art taught at Waldorf schools. It is operated by the Bund der Freien Waldorfschulen and targets teachers, prospective students, and those interested in Eurythmie education. The site provides resources on training institutes, job vacancies, and general information about Eurythmie as a pedagogical and artistic discipline. Technically, the site is built on WordPress using the Divi theme and includes interactive maps via the Ultimate Maps plugin. The infrastructure is modern and mobile-optimized, though some improvements in accessibility and SEO could be made. Security-wise, the site uses HTTPS with a good SSL configuration but lacks several security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-branded, reflecting its niche educational focus.

The Bund der Freien Waldorfschulen operates a specialized internal website serving the Waldorf school community in Germany. The site provides access to internal resources such as school master data, job postings, training opportunities, a material database, and personnel data management. The target audience is primarily educators and administrative staff within the Waldorf school network. The business model is that of an educational association providing digital tools and data management for its members. Technically, the website employs modern JavaScript and CSS technologies with deferred script loading to optimize performance. The presence of FullCalendar styling indicates some calendar-related functionality, likely in internal areas. Hosting appears to be managed via GoDaddy's DNS services. The site is moderately optimized for mobile devices and has a basic but functional design. However, no advanced SEO or accessibility features are evident from the provided data. From a security perspective, the site uses HTTPS (inferred but not explicitly confirmed), but no security headers were detected in the provided data. There are no visible privacy, cookie, or terms of service policies, which limits compliance with GDPR and other privacy regulations. No contact information or incident response details are publicly available, which reduces transparency and trust. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is functional for its internal audience but lacks several important security and compliance features. Strategic improvements in privacy policy publication, security header implementation, and contact transparency would enhance trust and compliance. The risk level is moderate given the internal nature of the site and lack of exposed sensitive data on the landing page.

P

Pädagogische Forschungsstelle beim Bund der Freien Waldorfschulen

forschung-waldorf.de

48

The Pädagogische Forschungsstelle beim Bund der Freien Waldorfschulen is a well-established non-profit educational research institution focused on advancing Waldorf pedagogy. It coordinates and supports numerous research projects, provides publications and teaching materials, and serves educators and researchers in the Waldorf education community primarily in Germany. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and performs moderately well. Hosting is managed via DomainControl, and the site uses HTTPS with a cookie consent mechanism, demonstrating compliance with privacy regulations. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of analytics or tracking scripts suggests a privacy-conscious approach. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

C

Crash Days

crashdays.de

39

Crash Days is a niche event-focused website promoting automotive crash testing events primarily targeting industry professionals and enthusiasts in Germany. The site provides links to event registration and related crash test service providers but lacks detailed business or contact information. Technically, the website uses basic web technologies including SVG graphics and JavaScript but does not employ advanced frameworks or CMS platforms. The site shows moderate performance and basic mobile optimization but lacks accessibility and SEO enhancements. Security posture is weak with no detected HTTPS confirmation, security headers, or privacy policies, exposing the site to potential risks and compliance issues. Overall, the site is functional for its limited purpose but requires significant improvements in security, privacy compliance, and business transparency to enhance trust and professionalism.

LEAB is a German-based company specializing in mobile energy solutions, primarily serving manufacturers and converters of emergency, special, and commercial vehicles across sectors such as BOS, service, transport, and leisure. The company is positioned as a specialist within the Micropower Group, offering tailored power supply systems and related services including application engineering, logistics, production, and training. The website reflects a professional and consistent brand image with detailed product highlights and industry focus. Technically, the site employs modern web technologies including Laravel Livewire and integrates privacy-conscious analytics via Plausible. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit privacy and cookie policies. Overall, LEAB demonstrates a credible and trustworthy digital presence aligned with its business objectives.