Germany security reports

T

Thüringer Literaturrat e.V.

literaturland-thueringen.de

45

Literaturland Thüringen is a cultural-literary initiative focused on presenting the literary heritage and contemporary literary scene of the Thüringen region in Germany. It operates as a non-profit platform supported by recognized cultural institutions such as the Thüringer Literaturrat e.V., Sparkassen-Kulturstiftung Hessen-Thüringen, and media partners MDR Kultur and MDR Thüringen. The website offers a rich repository of articles, images, indexes of places and persons, and multimedia content aimed at literature enthusiasts and the general public interested in regional culture. Technically, the website is built on WordPress 4.9.26 with several plugins enhancing user experience, including Leaflet.js for interactive maps and cookie consent mechanisms for GDPR compliance. While the site uses HTTPS and has a cookie consent banner, it relies on outdated WordPress and jQuery versions, which may expose it to security vulnerabilities. The site lacks explicit security headers and visible contact emails or phone numbers on the homepage, although a contact form is available. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent but requires updates to its CMS and libraries to mitigate potential risks. No advanced security policies or incident response contacts are published. The absence of a vulnerability disclosure policy and security.txt file indicates room for improvement in transparency and security readiness. Overall, Literaturland Thüringen is a trustworthy and professionally presented cultural platform with good content quality and user experience. Strategic updates to its technical stack and enhanced security measures are recommended to maintain and improve its security posture and compliance.

L

Lese-Zeichen e.V.

lesezeichen-ev.de

40

Lese-Zeichen e.V. is a small non-profit cultural association based in Germany, dedicated to promoting literature and organizing literary events, readings, and podcasts. The website serves as a hub for event information, news, and cultural content targeting literature enthusiasts primarily in the Thuringia region. The organization maintains an active presence with detailed event calendars and multimedia content, including podcasts and videos. Technically, the website uses a modern Bootstrap framework with common JavaScript libraries and custom scripts, providing a responsive and user-friendly experience. However, some technical aspects such as mixed content loading and lack of security headers indicate room for improvement in security practices. The security posture is moderate, with client-side password hashing implemented but lacking comprehensive protections like CSRF tokens and secure script delivery. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a significant gap given GDPR requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to improve trust and compliance.

The Landesarbeitsgemeinschaft Jazz in Thüringen e. V. is a regional non-profit organization dedicated to promoting jazz music within the Thuringia region of Germany. The website serves as a cultural hub, providing information and networking opportunities for jazz enthusiasts and local jazz clubs. It maintains partnerships with several regional jazz clubs, as evidenced by multiple external links. The site is built on the Contao CMS platform and utilizes common JavaScript libraries such as jQuery and Colorbox, indicating a moderate level of technical maturity. The website is accessible, mobile-optimized, and presents a consistent branding aligned with its cultural mission. However, it lacks advanced privacy and security features such as cookie consent mechanisms and security headers, which are important for compliance and protection.

B

Bundesministerium für Bildung und Forschung

digitalpaktschule.de

56

The website digitalpaktschule.de is an official German government platform managed by the Bundesministerium für Bildung und Forschung (Federal Ministry of Education and Research). It serves as the authoritative source for the DigitalPakt Schule initiative, which aims to enhance digital infrastructure and competencies in German schools. The site provides comprehensive information, resources, and updates targeted at schools, educators, students, parents, and related stakeholders. It holds a strong market position as a government-backed educational resource with clear branding and trust signals. Technically, the website employs modern JavaScript libraries such as jQuery and Modernizr, uses the Slick Carousel for UI elements, and integrates Matomo analytics with a privacy-conscious opt-in mechanism. The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with GDPR. However, it lacks explicit security policy pages, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is solid but could be improved with additional transparency and security best practices. The website is safe for general audiences, contains no adult or questionable content, and maintains high trustworthiness. The domain registration data aligns well with the website content, confirming legitimacy and consistency with a government entity. Strategic recommendations include publishing security policies, incident response information, and implementing additional security headers to enhance trust and compliance.

M

Mitteldeutsche Bildungsakademie in Trägerschaft der MMB gGmbH

bildungsakademie-mmb.de

49

Mitteldeutsche Bildungsakademie in Trägerschaft der MMB gGmbH is a non-profit educational organization based in Germany, focused on supporting schools and leadership teams in their development and transformation processes. The organization offers key services including school development, educational events, and leadership qualification programs. The website is professionally designed, well-structured, and targets educational institutions primarily in the central German region. Technically, the site is built on WordPress with modern libraries such as jQuery and Swiper.js, hosted on host-on.net servers. It employs cookie consent management via Borlabs Cookie, ensuring compliance with GDPR regulations. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence for the educational sector.

G

Gemeindedienst der EKM

gemeindedienst-ekm.de

46

The Gemeindedienst der EKM is a non-profit church service organization affiliated with the Evangelische Kirche in Mitteldeutschland (EKM). It provides a broad range of services including consulting, education, event organization, fundraising, and material provision primarily targeted at church communities and church districts. The website reflects a well-structured and professional presence with clear contact channels and relevant content for its audience. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and slick carousel, hosted on Eastlink infrastructure, and is mobile optimized with moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and explicit incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and aligns well with its church affiliation.

L

LUKAS Hydraulik GmbH

lukas.com

59

LUKAS Hydraulik GmbH is a well-established German manufacturer specializing in hydraulic products for rescue equipment and industrial applications. With a history dating back to the 1940s and a domain registered since 1995, the company operates as a subsidiary of IDEX Corporation, reinforcing its market credibility. The website effectively communicates the company's expertise, product range, and global dealer network, targeting industrial clients, rescue services, and job seekers. Technically, the site is built on Joomla CMS with modern front-end libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and CSRF protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a professional and trustworthy corporate presence.

A

AWG Fittings GmbH

awg-fittings.com

52

AWG Fittings GmbH is a medium-sized German manufacturer specializing in mobile and stationary fire protection equipment, including firefighting fittings and nozzles. The company holds a strong market position as a worldwide leading manufacturer serving fire departments, industry, and other users globally. Their website reflects a professional and consistent brand image with multi-language support, targeting an international audience. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, hosted by the reputable Hetzner Online GmbH. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the website is trustworthy and professionally maintained, but could improve in compliance and security transparency.

A

art@tec Agentur für Design- und Webkommunikation

art-at-tec.de

45

art@tec Agentur für Design- und Webkommunikation is a small German agency specializing in creative design and web communication services, including graphic design, corporate identity, web development, and video animation. The company targets businesses seeking professional design and web solutions, positioning itself as a reliable and creative partner in the regional market. The website is built on TYPO3 CMS, indicating a mature technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and anonymized Google Analytics tracking, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, with clear contact information and consistent branding.

B

Berufsverband der Kinder- und Jugendärzt*innen e.V. (BVKJ)

bvkj.de

58

The Berufsverband der Kinder- und Jugendärzt*innen e.V. (BVKJ) is a well-established professional association representing pediatricians and youth doctors in Germany. With approximately 11,500 members, it plays a significant role in advocating for optimal healthcare for children and adolescents. The website serves as a comprehensive portal offering member services, educational resources, political statements, and healthcare projects through its subsidiary BVKJ-Service GmbH. The organization maintains a strong market position as a leading non-profit in the pediatric healthcare sector in Germany. Technically, the website is built on the TYPO3 CMS platform, utilizing modern compressed CSS and JavaScript assets, and jQuery-based libraries for enhanced user experience including mobile navigation. Hosting is provided by SchlundTech, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a formal security policy or incident response contacts. No vulnerability disclosure or security.txt files are present. Privacy compliance is partially addressed with a comprehensive privacy policy but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for its target audience. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance. The domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

The Zentrum für Mittelalterausstellungen e.V. is a small non-profit cultural organization based in Magdeburg, Germany, dedicated to medieval exhibitions and cultural-historical projects. Their website serves as an informational portal highlighting brochures, podcasts, and events related to medieval history. The organization maintains a modest but clear online presence with official contact details and published materials supporting their mission. Technically, the website is built on WordPress with common plugins such as Events Manager and H5P, utilizing Bootstrap and jQuery for frontend functionality. The site is hosted with domain control via GoDaddy name servers and uses HTTPS, ensuring basic security. However, the site lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. From a security perspective, the site demonstrates a moderate posture with HTTPS enabled and no visible sensitive data exposure. The absence of security headers and vulnerability disclosure policies suggests a need for enhanced security practices. Privacy compliance is partially addressed through a linked privacy policy document, but no cookie consent or terms of service pages were found. Overall, the website is functional and trustworthy for its niche audience but would benefit from technical and security enhancements to improve user trust and compliance with modern standards.

K

Kloster Memleben

kloster-memleben.de

60

Kloster Memleben is a cultural heritage site in Germany focused on preserving and presenting imperial history and monastic traditions. The website serves as an informational portal for visitors, offering details on exhibitions, guided tours, events, and visitor amenities such as a café and museum shop. The target audience includes tourists, local visitors, and history enthusiasts. The business operates primarily as a small-scale cultural and hospitality entity with a regional focus. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting services. The site employs modern web technologies including HTML5, CSS, and JavaScript, with a responsive design optimized for mobile devices. Performance is moderate, with standard Squarespace assets and no heavy third-party scripts detected. From a security perspective, the site enforces HTTPS with HSTS enabled, indicating strong SSL configuration. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosures. Privacy compliance is partial, with a cookie consent banner present but no accessible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional front for Kloster Memleben, though improvements in privacy documentation and security transparency would enhance compliance and user trust.

S

Studienzentrum Josefstal

jugendarbeit.de

67

Jugendarbeit.de is an educational platform operated by Studienzentrum Josefstal, offering free, practical self-learning courses targeted at professionals and volunteers in child and youth work. The website is positioned as a niche provider in the education sector within Germany, focusing on competency development for youth workers. The platform leverages WordPress with BuddyBoss and LearnDash LMS technologies, integrating multimedia content via Vimeo and employing anti-spam measures through CleanTalk. The site demonstrates good digital maturity with structured data for SEO and a professional design optimized for mobile users. Security posture is solid with HTTPS and standard security headers, though lacks visible privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced privacy compliance and clearer contact and security policies.

T

Thüringer Ministerium für Soziales, Gesundheit, Arbeit und Familie

tmasgff.de

51

The website represents the official online presence of the Thüringer Ministerium für Soziales, Gesundheit, Arbeit und Familie, a government ministry in the German state of Thüringen. It provides information related to social affairs, health, labor, and family services. The site targets citizens and stakeholders interested in these public sectors. The business model is that of a government entity focused on public service and information dissemination. The site is well-branded and consistent with government standards, using the TYPO3 CMS platform and hosted by Alfahosting.

N

Netzwerk Biodynamische Bildung gGmbH

biodynamische-ausbildung.de

10

The website biodynamische-ausbildung.de represents the Netzwerk Biodynamische Bildung gGmbH, a small non-profit organization focused on providing a three-year dual vocational training in biodynamic and ecological agriculture. The platform serves a niche audience interested in sustainable farming education in Germany. The site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, indicating a moderate level of digital maturity. The technical infrastructure is adequate with good mobile optimization and SEO practices, though performance is moderate and accessibility is basic. Security posture is acceptable with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Anthroposophische Gesellschaft in Deutschland e.V.

anthroposophische-gesellschaft.org

45

The Anthroposophische Gesellschaft in Deutschland e.V. is a well-established non-profit organization dedicated to promoting the spiritual and cultural movement of Anthroposophy founded by Rudolf Steiner. The website serves as a comprehensive platform for members and interested parties, offering news, events, publications, and educational resources. It holds a strong market position within the spiritual and cultural sector in Germany, targeting individuals and institutions interested in Anthroposophy and related reform movements. The organization operates with a medium-sized footprint and a clear mission to foster cultural and spiritual development.

Parzival-Jugendhilfe is a small, non-profit educational and youth support organization based in Karlsruhe, Germany. It operates as part of the Parzival-Zentrum Karlsruhe and offers integrative educational services based on Waldorf pedagogy, targeting male youths aged 12 to 18. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on its educational mission. Technically, the site is built on WordPress with modern SEO practices via Yoast SEO and uses standard web technologies such as jQuery. Hosting is provided by kasserver.com, as indicated by the nameservers. Security posture is adequate with HTTPS enforced and some anti-spam measures, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is basic with a privacy and cookie policy present but no active cookie consent mechanism. Overall, the website is trustworthy and well-positioned within its regional educational sector.

V

Vierte Orte GmbH

office-friends-olpe.de

36

Office & Friends Olpe, operated by Vierte Orte GmbH, is a coworking space provider located in Olpe, Germany. The company offers flexible workspace solutions including flex desks, private offices, meeting rooms, virtual offices, and event spaces tailored for freelancers, startups, and entrepreneurs. Their market position is regional with a focus on fostering community and productivity in a modern environment. The website is professionally designed using WordPress and Elementor, featuring clear navigation, mobile optimization, and integrated cookie consent mechanisms. Technically, the site uses modern web technologies and is hosted on kasserver.com with proper HTTPS configuration. Security posture is solid with no visible vulnerabilities, though security headers could be improved. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a trustworthy and professional business presence.

C

CHARLOTTE | Stiftung

charlotte-stiftung.org

49

CHARLOTTE | Stiftung is a small non-profit foundation based in Berlin, Germany, established in 2019 by the Charlottenburger Baugenossenschaft. The foundation focuses on providing financial support to residents in need, particularly for health-related home modifications and support for disabled youth and elderly care. The website is built on TYPO3 CMS and uses modern web technologies including jQuery and Google Maps API. It offers donation options via bank transfer and PayPal, with clear contact information and legal disclosures. The site is well-structured, mobile-optimized, and provides relevant content for its target audience. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is good with a privacy policy present, though no cookie consent mechanism is detected. Overall, the website demonstrates a trustworthy and professional online presence for a local charitable foundation.

E

ebsygon.com

ebsygon.com

52

Ebsygon.com is a German-based digital solutions provider specializing in the digitalization of the energy sector. Founded in 2022, the company positions itself as a niche player offering technology-driven services to energy industry stakeholders. The website is professionally designed using WordPress with the Avada theme and includes essential business information such as privacy policies and legal imprint, targeting primarily German-speaking audiences in the energy domain. Technically, the site employs modern web technologies and plugins, ensuring good mobile optimization and SEO readiness. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements like DNSSEC and enhanced security headers could be made. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, the site reflects a trustworthy and professional business presence with moderate technical maturity and good compliance standards.

Seenotrettershop is a German e-commerce website specializing in maritime rescue-themed merchandise such as books, clothing, collectibles, and art prints. The site targets enthusiasts and supporters of maritime rescue services, offering a niche product catalog through an online retail model. The platform is built on the Gambio e-commerce software and integrates PayPal for payment processing, indicating a moderate level of digital maturity. The website is well-structured with clear navigation, responsive design, and product presentation, supporting a positive user experience. However, the absence of privacy and cookie policies, as well as terms of service, indicates gaps in compliance and transparency. Security posture is adequate with HTTPS and secure forms but lacks advanced security headers and documented incident response mechanisms. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced privacy compliance and security best practices.

W

wbv Media

wbv-media.de

57

wbv Media is a well-established German family-owned media and logistics company with over 150 years of history. It operates through three main business units: Distribution, Communication, and Publication, serving public clients, scientific communities, and online shops. The company positions itself as a reliable partner with scalable logistics and communication services, emphasizing tradition and innovation. Technically, the website uses modern frameworks like UIkit and jQuery, is mobile-optimized, and implements a cookie consent mechanism with blocking access until consent is given. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

V

Vonovia SE

vonovia-sozialstiftung.de

69

Vonovia Sozialstiftung is a social foundation affiliated with Vonovia SE, a leading real estate company in Germany. The foundation focuses on providing social support and assistance to tenants, fostering community engagement and social welfare. The website is professionally designed with consistent branding aligned to Vonovia, targeting tenants and social stakeholders. The technical infrastructure leverages Microsoft Azure DNS and Cookiebot for GDPR-compliant cookie management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit privacy policy visibility. Overall, the website is trustworthy, safe, and compliant with basic privacy regulations, serving its non-profit social mission effectively.

V

Vonovia SE

wohnen-und-gesellschaft.de

64

Vonovia SE operates the website wohnen-und-gesellschaft.de, focusing on housing and societal topics related to the concept of 'Heimat' (home). The site serves as a platform to engage residents and stakeholders in the real estate sector, reflecting Vonovia's position as a leading real estate enterprise in Germany. The website content is professionally presented with consistent branding and targets a general audience interested in housing and community issues. Technically, the site leverages Azure DNS infrastructure and integrates Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. However, explicit privacy policies and terms of service pages are not clearly found, which could be improved for transparency. Security posture is moderate with no visible security headers or incident response contacts, but the use of HTTPS is assumed given the domain and cookie consent implementation. Overall, the site is trustworthy and professionally managed but would benefit from enhanced security and compliance disclosures.

V

Vonovia SE

vonovia.com

70

Vonovia SE is a large enterprise operating in the real estate sector primarily in Germany. The company manages residential properties and offers related services to tenants and partners. The website serves as a corporate portal providing information about the company, its subsidiaries, and services. The site is professionally designed with consistent branding and targets a broad audience including tenants, investors, and partners. Technically, the website employs modern web technologies including JavaScript, CSS3, and uses Cookiebot for GDPR-compliant cookie consent management. Analytics tools such as econda and Google services are used for traffic analysis and marketing optimization. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces domain trust slightly, but the overall security posture is good. Overall, the website is a professional and trustworthy corporate site with moderate technical maturity and good privacy compliance. Strategic improvements include publishing privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

T

TRENZ GmbH

trenz-ppu.com

67

TRENZ GmbH operates a specialized e-commerce website offering high-performance portable pilot units (PPUs) designed for the maritime industry. Their products focus on precise GNSS navigation, advanced sensor integration, and rugged design for maritime professionals and pilots. The company positions itself as a niche provider with a strong emphasis on product quality and customer support, including firmware updates and device management applications. The website is built on the Shopify platform, leveraging modern web technologies and e-commerce capabilities to serve its target audience effectively. Technically, the website demonstrates a mature digital infrastructure with fast performance, mobile optimization, and integration of analytics and marketing tools such as Google Analytics and Klaviyo. Security measures include HTTPS enforcement and hCaptcha for form protection, although some security headers are missing, which could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. The security posture is generally good, with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. This discrepancy should be investigated further to ensure the domain's authenticity and reduce risk. Overall, the website presents a professional and trustworthy front for a specialized maritime technology business, but domain registration inconsistencies and minor security header gaps suggest areas for improvement to enhance trust and security.

S

s.m.s, smart microwave sensors GmbH

smartmicro.com

67

smartmicro® is a German-based company specializing in the design, development, and manufacture of advanced radar solutions for traffic management, automotive, and airborne applications. With over 26 years of experience, the company positions itself as a leading specialist in high-performance radar technology, offering products and engineering services tailored to professional and industrial clients. Their website reflects a strong market presence with detailed product information, use cases, and a clear focus on innovation and quality. The technical infrastructure of the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, complemented by marketing and analytics tools such as Google Analytics, Pardot, and Cookiebot for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital presence. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Security headers are partially implemented, and no vulnerabilities were detected in the visible content. The absence of WHOIS registration data is a notable anomaly that slightly diminishes trust but does not directly impact the website's operational security. Overall, smartmicro® presents a professional and trustworthy online presence with strong business credibility and good privacy compliance. Strategic improvements in security transparency and domain registration clarity would further enhance their security posture and stakeholder confidence.

N

Nota AI

nota.ai

67

Nota AI is a technology company specializing in hardware-aware AI model optimization and on-device AI solutions tailored for various industries such as industrial safety, surveillance, intelligent transportation systems, and driver monitoring. The company positions itself as a provider of seamless AI optimization platforms and AI solutions, including the NetsPresso® LLM Optimization Service for foundation models at the edge. The website is professionally designed using Squarespace, featuring modern technologies and good mobile optimization. It integrates Google Analytics and Tag Manager for tracking and Weglot for multilingual support. Security posture is strong with HTTPS and HSTS enabled, though the absence of explicit privacy policies and terms of service pages slightly reduces privacy compliance. The WHOIS data is unavailable due to privacy protection, which is typical for tech companies but limits transparency. Overall, the site is trustworthy and business credible, with a moderate to good security and privacy posture.

D

DVV Media Group GmbH

thb.info

67

The website www.thb.info is a professional German maritime news portal operated by DVV Media Group GmbH. It provides daily news, industry insights, and subscription-based content focused on shipping, ports, logistics, and maritime economy. The site targets maritime professionals and stakeholders, offering services such as newsletters, podcasts, job listings, and company guides. The business model is primarily subscription-driven with advertising revenue. Technically, the site is built on TYPO3 CMS and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. The WHOIS data is malformed and unavailable, which slightly reduces domain trust but does not outweigh the professional presentation and established brand. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

D

DVV Media Group GmbH

shipandoffshore.net

65

Ship & Offshore is a specialized maritime industry media platform operated by DVV Media Group GmbH, providing news, reports, and subscription-based specialist publications focused on shipbuilding, offshore, and maritime technology sectors. The website demonstrates a mature digital infrastructure using TYPO3 CMS, integrated with modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and consent-based tracking, though explicit security headers could be improved. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or domain registration issues, which impacts trustworthiness from a domain legitimacy perspective. Overall, the site offers professional content and user experience suitable for maritime professionals and industry stakeholders.

T

TRENZ GmbH | Maritime Software & Hardware IT Solutions

trenz.de

61

The website www.trenz.de appears to be a small business site hosted on the Wix platform, utilizing standard Wix technologies and Google Tag Manager for analytics. The content available in the provided HTML snippet is minimal and primarily technical, with no visible business descriptions, contact information, or policy documents. The site is accessible without any WAF or security challenge blocking access. Security posture is basic with HTTPS enabled but lacking security headers and privacy compliance documentation. Overall, the site demonstrates a basic digital presence with room for improvement in content richness, privacy compliance, and security best practices.

D

DVV Media Group GmbH

dvvmedia.com

61

DVV Media Group GmbH is a well-established media company specializing in transport, logistics, and mobility sectors. With over 70 years of experience and a strong presence in Germany and the UK, it provides a wide range of media products including magazines, newsletters, websites, and events. The company operates under the umbrella of the Rheinische Post Mediengruppe, enhancing its credibility and market reach. The website is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and domain transfer protections, though some security headers and DNSSEC are missing. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy and cookie consent mechanisms. Overall, the site is trustworthy and serves its target audience effectively.

D

DVV Media Group GmbH

maritime-archives.com

53

Maritime Archives is a specialized digital archive platform operated by DVV Media Group GmbH, providing access to maritime industry publications such as Schiff&Hafen, Ship&Offshore, and New Ships. The platform targets maritime professionals and researchers, offering subscription-based and pay-per-access services. The website is professionally designed with consistent branding and good content relevance, supporting German and English languages. Technically, the site is built on ASP.NET WebForms with jQuery and Bootstrap, hosted on plusserver.com, and integrates Usercentrics for cookie consent and Google Analytics with IP anonymization for privacy compliance. Security posture is adequate with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business history, indicating legitimacy. Overall, the site scores well on business credibility and privacy compliance, with moderate technical and security scores.

D

DVV Media Group

dvvmedia-shop.de

57

DVV Media Shop is a specialized e-commerce platform operated by DVV Media Group, offering subscriptions, books, and event access focused on transport, logistics, rail, maritime, defense, and industrial sectors. The website targets professionals and businesses seeking up-to-date trade media and industry insights. The platform is well-positioned in its niche market with a professional digital presence and consistent branding. Technically, the website employs modern security and privacy tools including HTTPS, Google reCAPTCHA v3, Matomo analytics, and Usercentrics consent management, hosted on PlusServer infrastructure. Security posture is solid with room for improvement in security headers and explicit security policies. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly linked privacy policy and terms of service in the analyzed content. Overall, the website is trustworthy, professional, and safe for general audiences.

D

deltacity

deltacity.net

71

deltacity is an independent digital service provider based in Germany specializing in the development of sophisticated digital platforms across digital health, commerce, and content management sectors. The company offers comprehensive services including strategic consulting, creative conception, innovative software development, and technical implementation. Their website reflects a professional and consistent brand presence with clear service offerings and active recruitment efforts, indicating a medium-sized enterprise with a solid market position in the technology sector. Technically, the website is built on Drupal 10 CMS, employs Matomo for analytics with user consent management via CookieFirst, and integrates multimedia content through Vimeo. The site is mobile-optimized with good SEO and accessibility features, although some security headers are not explicitly detected. HTTPS is enforced, and privacy policies are comprehensive and GDPR compliant. From a security perspective, the site demonstrates good practices such as encrypted connections and cookie consent but lacks visible incident response contacts or vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding suggest a legitimate business. This discrepancy warrants further investigation to confirm domain ownership and registration status. Overall, deltacity presents a trustworthy and professional digital agency with a mature digital infrastructure. Strategic recommendations include enhancing security headers, publishing explicit security policies, and resolving WHOIS inconsistencies to strengthen trust and compliance.

G

Greenpeace e. V.

greenpeace.de

70

Greenpeace e. V. is a well-established non-profit environmental organization based in Germany, focused on climate protection, biodiversity, and peace advocacy. The website serves as a comprehensive platform for public education, activism, and fundraising, targeting environmentally conscious individuals and supporters. It maintains a strong market position as a leading environmental NGO with a large audience and consistent branding. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party tools such as Usercentrics for consent management and Google Tag Manager for analytics. Hosting is provided by Colt Technology Services, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is partial due to the absence of a clearly linked privacy policy and terms of service. Overall, Greenpeace.de presents a trustworthy, professional, and content-rich website with minor gaps in privacy and security transparency. Strategic improvements in these areas would enhance compliance and user trust.

E

Econics Institute e.V.

econics.institute

53

Econics Institute e.V. is a small, non-profit thinktank founded in 2025 in Germany, specializing in ecosystem research and practical expertise related to the climate crisis. The organization promotes the concept of 'Ökonik', learning from nature's economic processes to foster sustainable human economic activities. The website is professionally designed using WordPress and Elementor, with good SEO and privacy compliance features including a cookie consent banner. Security posture is solid with HTTPS enforced, though security headers are absent and no explicit security policy is published. WHOIS data is privacy protected but consistent with the organization's founding timeline. Overall, the site presents a trustworthy and credible digital presence for a niche academic and environmental audience.

B

Bergwaldprojekt e.V.

bergwaldprojekt.de

57

Bergwaldprojekt e.V. is a well-established German non-profit organization dedicated to environmental conservation, specifically focusing on forest, moor, and open land ecosystem protection and restoration. With over 35 years of experience, it mobilizes thousands of volunteers annually for ecological projects and environmental education. The organization also engages corporate partners and donors to support its mission. The website reflects a mature digital presence built on Drupal 11, featuring privacy-conscious analytics and comprehensive cookie consent mechanisms. Contact information and social media channels are clearly presented, enhancing trust and engagement. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Overall, the site is professional, accessible, and well-optimized for mobile and SEO.

pg-webstudio is a small German web design and development service provider specializing in custom websites using popular CMS platforms such as Wordpress, Drupal, Grav, Contao, and Joomla. The company targets local businesses and individuals in Göttingen and surrounding areas, offering a comprehensive range of services including SEO, responsive design, interactive maps, and ongoing website maintenance. The website showcases a strong portfolio of client projects across various industries, demonstrating technical versatility and design expertise. Technically, the site uses modern web standards and frameworks like Bootstrap 4 and jQuery, hosted on Alfahosting servers. Mobile optimization and user experience are excellent, with clear navigation and professional content. Security posture is moderate with cookie consent implemented and form nonce tokens present, but lacks visible HTTP security headers and explicit security policies. No active analytics tracking or advertising is detected, enhancing privacy compliance. WHOIS data aligns with the website's business focus, indicating legitimacy. Overall, the site is professional, trustworthy, and well-structured.

R

Remote Sensing Solutions

remote-sensing-solutions.de

62

Remote Sensing Solutions is a German company specializing in geospatial intelligence for environmental monitoring, leveraging remote sensing and AI technologies. The company offers a range of services including forest and carbon monitoring, AI platforms for transparency and supply chain verification, consulting, and clean energy assessment. Their market position is strong within Germany with 25 years of experience, targeting environmental organizations, government agencies, and businesses requiring compliance and monitoring solutions. Technically, the website is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is good with HTTPS and reCAPTCHA usage, but lacks explicit security headers and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. WHOIS data is missing, which raises concerns about domain legitimacy despite professional website content. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

K

Katholische Marien-Grundschule

marien-grundschule.de

56

Katholische Marien-Grundschule is a small Catholic primary school located in Berlin, Germany, affiliated with the Archdiocese of Berlin. The school provides education primarily for children with specific support needs, emphasizing a holistic and values-based approach. The website serves as an information portal for parents, students, and the community, offering details about school services, events, and contact information. The site is well-structured and professionally maintained, reflecting the institution's commitment to transparency and community engagement. Technically, the website is built on Joomla CMS with modern plugins and demonstrates good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate educational institution.

L

Landesverband der Kita- und Schulfördervereine Berlin-Brandenburg e.V.

lsfb.de

47

The Landesverband der Kita- und Schulfördervereine Berlin-Brandenburg e.V. operates as a regional non-profit association supporting daycare and school support organizations in the Berlin-Brandenburg area. The website serves as an informational and advocacy platform targeting parents, educators, and affiliated support groups. The organization positions itself as a key regional player in educational support, focusing on community engagement and resource provision. Technically, the website is built on WordPress CMS with modern frameworks such as Bootstrap and Elementor, hosted by Alfahosting. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. Accessibility is enhanced by a dedicated accessibility tool, and cookie consent mechanisms are implemented, reflecting a moderate level of digital maturity. From a security perspective, the site benefits from HTTPS and updated software components but lacks explicit privacy policies, terms of service, and incident response contacts. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and compliance. Security headers are partially implemented, and no WAF or blocking mechanisms interfere with accessibility. Overall, the website is professionally designed and functional with good content relevance and user experience. However, to enhance trust and compliance, the organization should publish comprehensive privacy and security policies and provide clear contact channels for security incidents.

O

OEMUS MEDIA AG

welovewhatwedo.org

56

OEMUS MEDIA AG is a well-established German media company specializing in dental publishing, online media, and event management. The website analyzed is a dedicated anniversary campaign site celebrating 30 years of OEMUS, showcasing employee testimonials and company milestones. The company holds a strong market position as a key player in the dental media sector with a medium-sized operation based in Leipzig, Germany. Technically, the site uses modern frontend technologies including jQuery and Owl Carousel, hosted likely on AWS infrastructure. The site is mobile-optimized and professionally designed, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is transparent and consistent, though the domain age is relatively new compared to the company's long history, indicating a possible new campaign domain. No suspicious or malicious content was found, and the site is safe for general audiences.

O

OEMUS MEDIA AG

jobsuchtdich.de

43

The website jobsuchtdich.de is a German job portal operated by OEMUS MEDIA AG, focusing on providing job listings and recruitment advertising services. The site targets job seekers and employers primarily in Germany, positioning itself as a niche media company within the recruitment sector. The business model revolves around online job advertising and media services. Technically, the site is built on WordPress using Elementor and JetEngine plugins, hosted on servers with kasserver.com nameservers. The site includes cookie consent mechanisms via BorlabsCookie and SEO optimizations through Rank Math. However, there is a lack of visible privacy policy, terms of service, and explicit contact information, which impacts compliance and trust. Security posture is moderate with no detected security headers or incident response information, and SSL configuration details are not provided. Overall, the site is professionally designed, mobile optimized, and content is relevant and safe for general audiences.

+

+Pluswerk AG

pluswerk.digital

11

Pluswerk AG is a leading European full-service digital agency specializing in open-source technologies such as TYPO3, Pimcore, and Shopware. With a team of 160 experts across four countries, they provide comprehensive digital solutions including e-commerce, corporate websites, and online marketing. Their market position is strong, supported by multiple industry awards and partnerships, targeting B2B clients ranging from medium-sized enterprises to public institutions and universities. The company emphasizes innovation, efficiency, and measurable results in digital transformation projects. Technically, the website is built on TYPO3 CMS with integrations of Pimcore and Shopware platforms. The site demonstrates modern web practices including responsive design, accessibility considerations, and SEO optimization. Analytics are handled via privacy-conscious tools like Matomo with DoNotTrack and cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent with granular controls. However, explicit security headers and a public security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection, but the website's professionalism and trust signals support its legitimacy. Overall, Pluswerk AG presents a low-risk profile with a robust digital presence and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and security culture.

D+C - Development + Cooperation is a well-established online magazine focusing on global development issues such as poverty reduction, gender equality, governance, and sustainability. The website serves a global audience of development professionals, policymakers, and interested public by providing high-quality articles, interviews, and digital monthly editions. The business operates as a non-profit media entity with a clear mission to inform and engage on development topics. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses Google Tag Manager and Usercentrics for analytics and consent management, respectively. However, some security headers are not explicitly detected, and there is no visible security policy or vulnerability disclosure mechanism. Overall, the domain registration details align well with the website's professional and German-based media presence, indicating high legitimacy and trustworthiness.

D

DAAD (Deutscher Akademischer Austauschdienst)

alumniportal-deutschland.org

69

Alumniportal Deutschland is a digital networking platform primarily serving alumni, universities, and organizations to facilitate international exchange, events, and career development. It is affiliated with the DAAD, a reputable German academic exchange service, which strengthens its market position and trustworthiness. The platform offers a variety of services including community engagement, job boards, and learning resources, targeting international alumni and academic professionals. Technically, the website uses modern frontend frameworks such as Vue.js and Nuxt.js, delivering a responsive and accessible user experience with good SEO practices. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and follows best practices in form handling and data privacy, although explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a strong focus on privacy compliance and user engagement.

I

ifa – Institut für Auslandsbeziehungen

ifa.de

56

ifa – Institut für Auslandsbeziehungen is a German non-profit cultural institution dedicated to promoting international cultural exchange, arts, research, and civil society engagement. The organization offers programs such as the CrossCulture fellowships, art exhibitions, research publications, and digital cultural projects, positioning itself as a key player in international cultural relations. The website reflects a professional and consistent brand image, targeting professionals and stakeholders in the cultural and research sectors.

G

Germany Trade & Invest (GTAI)

germanyworks.com

60

Germany Means Business is a government-backed platform operated by Germany Trade & Invest (GTAI) to facilitate international business expansion into Germany. The website provides comprehensive market intelligence, investment consulting, and expert guidance to global companies seeking to register and grow their business in Germany. The platform positions itself as a reliable gateway to Europe's largest economy, leveraging official federal support and a strong industry network. Technically, the site is built on modern frameworks such as Astro, uses a headless CMS (Storyblok), and integrates privacy-compliant consent management and analytics tools. Security posture is strong with HTTPS, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled. The domain is newly registered but consistent with the recent launch of the platform. Overall, the website demonstrates high professionalism, excellent content quality, and trustworthy government affiliation, making it a credible resource for business investors.

F

Facts about Germany

tatsachen-ueber-deutschland.de

64

The website 'Facts about Germany' serves as an official multilingual information portal providing comprehensive facts about Germany's politics, economy, culture, and society. It targets a broad international audience including researchers, policy makers, and the general public. The site is government-backed and positions itself as a trusted source of factual information about Germany. Technically, it is built on Drupal 10 CMS, employs modern JavaScript modules, and integrates a Usercentrics Consent Management Platform to ensure GDPR compliance. Google Tag Manager is used for analytics with default consent set to denied, reflecting a privacy-conscious approach. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks visible security headers and explicit incident response or vulnerability disclosure pages. Overall, the site is professionally designed, mobile-optimized, and accessible, with high content quality and trustworthiness. Recommendations include adding security headers, publishing a security.txt file, and providing clearer incident response contacts to enhance security posture and compliance.