Germany security reports

K

Katholische Studierendengemeinde Edith Stein

ksg-berlin.de

44

KSG Edith Stein Berlin is a Catholic student community organization based in Berlin, Germany, focused on providing spiritual guidance, social events, and advisory services to students. The website serves as a hub for community engagement, event announcements, and contact information, targeting students and university communities in Berlin. The organization operates as a non-profit entity with a clear mission to support student life through faith-based and social activities. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery and Google Fonts. It is hosted on NSHost2 name servers and employs HTTPS for secure communication. The site demonstrates good digital maturity with mobile optimization, clear navigation, and integration of social media channels. Security posture is solid with HTTPS and secure form handling, though it lacks advanced security headers and explicit security policies. Privacy compliance is evident with a privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, serving its community effectively.

F

Fort- und Weiterbildung Freising

theologischefortbildung.de

51

Fort- und Weiterbildung Freising is a specialized educational institution providing continuing education and training services primarily for church employees in Germany. The organization offers a broad range of events, workshops, and further education programs focused on theological and pastoral topics, positioning itself as a regional leader in this niche. The website reflects a professional and consistent brand image, targeting a well-defined audience with clear service offerings. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and several JavaScript libraries to enhance user experience and interactivity. The site is mobile-optimized and features good navigation and SEO practices. However, there is no evidence of a common CMS, suggesting a custom or bespoke platform. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. However, explicit security headers and incident response policies are not publicly visible, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy standards. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic improvements in security policy transparency and technical security controls would further strengthen the site's security and compliance standing.

S

Software AG – Stiftung

sagst.de

49

The Software AG – Stiftung is a large, well-established non-profit foundation based in Germany, focused on funding social, educational, and ecological projects primarily in Germany and Europe. The website is professionally designed using TYPO3 CMS, with a clear structure, multilingual support, and strong privacy compliance including GDPR-aligned cookie consent via Klaro and Matomo analytics. The foundation's significant capital and project portfolio position it as a key player in the German non-profit sector. Technically, the site uses mature technologies and demonstrates good mobile optimization and accessibility, though security headers and explicit security policies are not publicly visible. No blocking or WAF mechanisms interfere with content access, and no suspicious or malicious content is detected.

N

Netzwerk Biodynamische Bildung gGmbH

netzwerk-biodynamische-bildung.de

41

Netzwerk Biodynamische Bildung gGmbH is a German non-profit organization that unites Demeter training initiatives to promote biodynamic agricultural education. The website serves as an information hub and fundraising platform, operating the Demeter Ausbildungsfonds to support new organic farmers. The organization targets aspiring biolandwirte, educational institutions, and supporters of sustainable agriculture. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Borlabs Cookie, hosted on kasserver.com. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and aligned with its non-profit mission.

S

St. Elisabeth Caritassozialstation

ambulante-pflege-detmold.de

55

St. Elisabeth Caritassozialstation is a small healthcare provider specializing in ambulatory nursing and care services in Detmold, Germany. Their offerings include elderly care, treatment nursing, family care, household support, and emergency call services. The organization operates under the St. Elisabeth Stiftung, reflecting a Christian humanistic approach to care. The website is professionally designed using WordPress with modern SEO tools, providing clear and relevant content targeted at individuals and families requiring ambulatory care services. Technical infrastructure is solid with HTTPS and modern libraries, though hosting details are not explicit. Security posture is good with no visible vulnerabilities, but lacks explicit security policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its regional healthcare market.

The BKC-Spendenportal website serves as an online donation platform operated by the Bank für Kirche und Caritas eG, targeting charitable organizations primarily within the church and caritas sectors in Germany. It facilitates the connection between donors and charitable projects, providing a streamlined platform for online donations. The website is professionally designed with clear navigation and content relevant to its audience, emphasizing transparency and trust through visible contact information and testimonials. Technically, the site is built on the Contao Open Source CMS and leverages common JavaScript libraries such as jQuery, Colorbox, and Isotope for enhanced user experience. Hosting is provided by Schlundtech, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices, although performance is moderate rather than fast. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for improved security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the site maintains a good security baseline appropriate for its business model. The overall risk assessment is low, with the site presenting a trustworthy and professional front for its niche market. Strategic recommendations include formalizing security policies, adding vulnerability disclosure mechanisms, and enhancing security headers to further strengthen trust and compliance.

S

SCM Bundes-Verlag

bundesverlag.de

55

SCM Bundes-Verlag operates the bundes-verlag.net website, offering a range of Christian magazines and media products targeting children, teenagers, adults, and church community workers. Established in 2004, the company holds a solid market position in the niche Christian media retail and subscription sector in Germany. The website provides e-commerce capabilities for subscriptions, digital reading, and gift bundles, supported by a professional and consistent brand presence. Technically, the site uses a custom CMS with modern web technologies, including Matomo analytics for privacy-conscious user tracking. Mobile optimization and accessibility are well addressed, contributing to a good user experience. Security posture is adequate with HTTPS enforced and CSRF protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

K

Komm Shop

komm-webshop.de

56

Komm Shop operates as a specialized e-commerce platform offering Christian promotional materials and gifts primarily targeting religious communities and individuals in Germany. The website presents a professional and consistent brand image with a broad product range including books, cards, gifts, and religious items. The business model focuses on online retail with personal consultation and fast shipping as key service differentiators. Technically, the site is built on the Shopware CMS platform, utilizing modern JavaScript libraries and standard web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

L

Luther-Verlag

lutherverlag.de

48

Luther-Verlag operates a German-language e-commerce platform specializing in evangelical books, calendars, and religious materials. With a history dating back to 1911, the company targets German-speaking customers interested in faith-based literature and related products. The website presents a professional and consistent brand image with clear navigation and a focused product catalog. Technically, the site runs on the modified eCommerce Shopsoftware platform, leveraging modern JavaScript libraries such as jQuery and bxSlider, and employs HTTPS with cookie consent mechanisms to comply with GDPR. Analytics are handled via Matomo, emphasizing privacy-conscious tracking. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, the site is trustworthy, well-maintained, and serves its niche effectively.

E

Evangelische Zeitung

evangelische-zeitung.de

62

Evangelische Zeitung is a German news media organization founded in 2017, delivering news content from a Christian perspective. The website serves a general audience interested in authentic life stories and real news, positioning itself as a niche media outlet within the German media landscape. The business model centers on digital news publishing with a focus on quality content and Christian values. Technically, the website employs modern web technologies including Next.js, AWS hosting, and integrates analytics tools such as Google Analytics and Smartocto Insights, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features appear basic. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks explicit security headers and formal incident response mechanisms. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security transparency.

E

Evangelisches Medienhaus GmbH

kirchenwahl.de

58

The website www.kirchenwahl.de serves as the official informational platform for the 2025 church elections within the Evangelical Church in Württemberg. It provides comprehensive election details, candidate databases, campaign materials, and voter guidance targeted primarily at church members aged 14 and above. The platform is managed by the Evangelisches Medienhaus GmbH, a non-profit entity, and positions itself as an authoritative source for election-related content within the church community. Technically, the site is built on TYPO3 CMS, a robust and mature content management system, and integrates privacy-conscious analytics via Matomo with cookies disabled. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Embedded content such as YouTube videos uses privacy-enhanced modes, reflecting a commitment to user privacy. From a security perspective, the site enforces HTTPS and implements a consent management system compliant with GDPR and local data protection laws. However, explicit security headers are not evident in the HTML content, and no published security or incident response policies are found. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the website's purpose and legitimacy. Overall, the website presents a professional, trustworthy, and privacy-conscious platform for its target audience. It effectively balances content quality, technical implementation, and privacy compliance, with minor recommendations to enhance security headers and incident response transparency.

C

ChurchTools Innovations GmbH

church.tools

58

ChurchTools Innovations GmbH operates a GDPR-compliant all-in-one software platform designed to support churches in administration and communication. The company targets Protestant, Catholic, and Free Churches, providing tools to manage people, groups, events, finances, and communication, positioning itself as a leading church software provider in Germany with over 3000 clients. The website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress, Elementor, and Matomo analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the domain and website present a trustworthy and mature digital presence suitable for their market niche.

M

Medienhaus der Evangelischen Kirche in Hessen und Nassau (EKHN)

indeon.de

66

indeon.de is an evangelical online magazine operated by the Medienhaus der Evangelischen Kirche in Hessen und Nassau (EKHN), targeting German-speaking audiences interested in faith, social issues, culture, and regional news. The website offers editorial content, podcasts, and newsletters, positioning itself as a trusted regional media outlet with a consistent brand and good content quality. Technically, the site is built on TYPO3 CMS, hosted on Hetzner infrastructure, and employs modern web technologies including Matomo analytics and Facebook Pixel for marketing and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and incident response policies could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and safe for general audiences.

K

Katholisches Bildungswerk Lippe e.V.

kbw-lippe.de

70

Katholisches Bildungswerk Lippe e.V. is a regional non-profit educational organization based in Germany, affiliated with the Erzbistum Paderborn. The organization offers courses, workshops, and events aimed at a broad audience interested in educational and cultural enrichment. Their market position is focused on serving the Lippe region with educational services. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, ensuring good SEO and privacy compliance. The site is mobile-optimized and accessible, with moderate performance. Security-wise, the site employs HTTPS and the Wordfence security plugin, providing a solid security posture without detected vulnerabilities. However, it lacks explicit security policies and incident response contact information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the organization.

Y

YOUPAX

youpax.de

62

YOUPAX is a German-language youth faith portal affiliated with the Archdiocese of Paderborn, providing religious content, community resources, and event information targeted at young people interested in Christian faith. The website offers a variety of thematic content including articles, journals, and social media engagement, positioning itself as a niche non-profit media platform within the Catholic Church in Germany. Technically, the site is built on the Weblication CMS, employs modern JavaScript libraries, and integrates analytics tools such as eTracker and Matomo, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and formal security policies, indicating room for improvement in security posture. Overall, the site is trustworthy, professionally designed, and compliant with GDPR, though it would benefit from enhanced transparency around security and incident response. The domain WHOIS data is minimal but does not raise immediate concerns, supporting the legitimacy of the site as a non-profit religious portal.

D

Dekanat Bielefeld Lippe

bielefeld-lippe.de

68

Dekanat Bielefeld Lippe is a regional Catholic church deanery serving as an administrative layer between the Erzbischöfliches Generalvikariat and local parishes in the Kreis Lippe, Bad Pyrmont, and Bielefeld areas. The organization provides support and coordination services to church institutions and communities, positioning itself as a key regional religious entity within Germany. The website reflects this mission with clear organizational information, contact details, and service descriptions. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, indicating a mature digital infrastructure. Analytics are handled via Matomo, ensuring privacy-conscious data collection. Security posture is strong with HTTPS enforced and Wordfence plugin active, though some security headers could be improved. Privacy compliance is robust with comprehensive policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving its target audience effectively.

C

Caritasverband für den Kreis Lippe und die Stadt Bad Pyrmont e.V.

caritas-detmold.de

50

The Caritasverband für den Kreis Lippe und die Stadt Bad Pyrmont e.V. is a regional non-profit organization providing a broad range of social services including general social counseling, debt counseling, refugee support, and legal advice. The website serves as an information and contact portal for individuals seeking assistance in the Lippe district and Bad Pyrmont city in Germany. The organization positions itself as a trusted local social service provider with a clear focus on community support and volunteer engagement. Technically, the website is built on WordPress 6.8.3 with common plugins such as Yoast SEO for search optimization and Borlabs Cookie for GDPR-compliant cookie management. The site uses HTTPS with a strong SSL configuration and is hosted on servers associated with rzone.de. The technical infrastructure is modern and supports good mobile responsiveness and accessibility, although some improvements in security headers could be made. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. The use of Google Analytics is compliant with user consent, reflecting moderate user tracking. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and considering a vulnerability disclosure mechanism to further strengthen the security posture and trustworthiness.

The website represents the Catholic daycare center St. Marien in Detmold, Germany, providing childcare and family support services. It operates under the umbrella of the Katholische Kindertageseinrichtungen Minden-Ravensberg-Lippe gemeinnützige GmbH, a non-profit organization. The site targets parents and families seeking quality early childhood education with a religious affiliation. The business model is community-focused, emphasizing inclusion, language development, and family partnership. Technically, the website is built on the dialogperfect® CMS platform, hosted via GoDaddy's domain services, and incorporates modern web standards including accessibility tools such as DigiAccess. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, safe, and professionally maintained, suitable for its target audience.

I

Institut St. Bonifatius

institut-st-bonifatius.de

44

Institut St. Bonifatius is a small, non-profit religious institute founded in 1949, operating internationally with a focus on spiritual formation, mission projects, and community service primarily in Europe, Africa, and Latin America. The website reflects a well-structured and content-rich platform targeting religious individuals and those interested in mission work and spiritual life. Technically, the site uses common JavaScript libraries such as jQuery and Slick Carousel, hosted on a domain managed via GoDaddy nameservers. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS assumed but lacking explicit security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility.

P

Pastoralverbund Lippe | Detmold

pv-lippe-detmold.de

54

Pastoralverbund Lippe | Detmold is a small non-profit religious organization serving the local community in Detmold, Germany. The website provides information about religious services, community groups, spiritual guidance, and social support initiatives. It targets parishioners and local residents interested in Catholic church activities. The organization maintains a consistent and professional online presence with a clear focus on community engagement and spiritual services. Technically, the website is built on TYPO3 CMS with modern frontend libraries and integrates a GDPR-compliant cookie consent mechanism via Cookiebot. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent properly managed, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and compliant with privacy regulations, reflecting a mature digital infrastructure for a small non-profit entity.

E

Evangelischer Kirchenkreis an Lahn und Dill

evangelisch-an-lahn-und-dill.de

49

The Evangelischer Kirchenkreis an Lahn und Dill is a regional church district within the Evangelical Church in the Rhineland, serving the communities of Wetzlar and Braunfels in Germany. The website provides comprehensive information about religious services, community support, counseling, events, and educational resources. It targets church members, affiliates, and the general public interested in the church's activities. The organization operates as a non-profit entity focused on spiritual and social services. Technically, the website is built on WordPress using the Avada theme and several plugins including Yoast SEO and Mailin for newsletter management. It is hosted on rzone.de servers and employs HTTPS for secure communication. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implementation enhancing discoverability. From a security perspective, the site uses HTTPS and some security best practices but lacks advanced security headers and a public security or privacy policy. Cookie consent is implemented, indicating some GDPR awareness. No critical vulnerabilities or suspicious content were detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its community well. Recommendations include adding a privacy policy, enhancing security headers, and publishing a vulnerability disclosure policy to improve compliance and security posture further.

E

Evangelisches Dekanat an der Dill

ev-dill.de

67

Evangelisches Dekanat an der Dill operates as a regional church deanery within the Evangelical Church in Hessen and Nassau, providing religious services, community support, and cultural events to its local population in Germany. The website serves as an information hub for events, news, and church-related activities, targeting a general audience including church members and the local community. The organization maintains a clear digital presence with contact information, social media links, and a newsletter subscription service. Technically, the website is built on TYPO3 CMS, leveraging PHP and JavaScript, and integrates Matomo analytics with a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and session management in place, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent and appropriate for the organization's profile. Privacy compliance is well addressed through detailed cookie policies and consent management. Overall, the site is professional, trustworthy, and suitable for its non-profit religious mission.

K

Kreissparkasse Göppingen

ksk-gp.de

69

Kreissparkasse Göppingen is a regional bank serving private and corporate customers in the Göppingen district of Germany. The website offers a comprehensive range of financial services including online banking, accounts, loans, investments, insurance, and real estate services. The bank positions itself as a trusted local financial institution with a strong focus on customer service and sustainability. Technically, the website is built on Adobe Experience Manager, uses modern web technologies, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-maintained.

E

Evangelischer Kirchenbezirk Geislingen-Göppingen

kirchenbezirk-geislingen-goeppingen.de

57

The Evangelischer Kirchenbezirk Geislingen-Göppingen website serves as an informational and community portal for one of the largest church districts within the Evangelische Landeskirche in Württemberg, Germany. It provides comprehensive details on worship services, events, pastoral care, church governance, and volunteer opportunities, targeting church members and the local community. The site is well-branded and consistent with official church identity, reflecting a medium-sized non-profit religious organization. Technically, the site is built on TYPO3 CMS with integrations such as Matomo analytics, Google Maps, and YouTube, indicating a modern and functional digital infrastructure. The website demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, HTTPS is enforced, cookie consent is managed properly, and no critical vulnerabilities are evident, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the site is trustworthy, professional, and safe for general audiences.

D

Diözese Rottenburg-Stuttgart

drs.de

57

The website www.drs.de serves as the official online portal for the Diocese Rottenburg-Stuttgart, a large regional religious organization in Germany. It provides news, event information, church locations, and counseling services to its target audience of approximately 1.6 million Catholics in Württemberg. The site is built on the TYPO3 CMS platform and integrates modern web technologies including jQuery, Matomo analytics, and Cookiebot for consent management. The technical infrastructure is solid, hosted by a reputable TYPO3 hosting provider, and employs HTTPS with good SSL configuration. Security posture is strong with privacy-conscious analytics and cookie consent mechanisms, though explicit security headers and policies could be improved. The site lacks a visible privacy policy and terms of service in the provided HTML, which is a compliance gap. No contact emails or phone numbers were found in the analyzed content, which may affect user support accessibility. Overall, the website is professional, trustworthy, and well-branded, serving its community effectively with good content quality and user experience.

G

Gemeinschaft Immanuel

immanuel-online.de

48

Gemeinschaft Immanuel is a small German Catholic charismatic lay community focused on promoting Christian unity, evangelization, and renewal of church and society. Their website serves as a hub for community information, events, and outreach to various age groups including families, youth, and seniors. The organization operates as a non-profit with a clear mission and active event calendar. Technically, the site is built on WordPress with common plugins such as Events Manager and Slider Revolution, hosted likely by Your-Server.de. The site is mobile optimized and well structured, though some improvements in accessibility and SEO could be made. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional for its community purpose.

Unsere Kirche is a German evangelical newspaper providing print and digital content focused on church news, reports, and community services. The website serves as a portal for subscriptions, digital e-paper access, advertising, and community engagement, targeting the evangelical Christian community in Germany. It partners with other evangelical publishers to expand its online content offerings. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Security measures include Google reCaptcha v3 for form protection and anonymized IP tracking in analytics, but lack explicit HTTP security headers and detailed security policies. The WHOIS data is incomplete and malformed, limiting domain trust verification, but the professional presentation and clear contact paths support legitimacy. Overall, the site is well-structured and compliant with GDPR, though improvements in security headers and transparency are recommended.

S

SCM Bundes-Verlag

bundes-verlag.net

10

SCM Bundes-Verlag operates the bundes-verlag.net website, an established German-language e-commerce platform specializing in Christian magazines and media products targeting a broad audience including children, teenagers, adults, and church volunteers. Founded in 2004, the company holds a solid market position within the niche Christian media sector in German-speaking countries. The website offers subscription services, digital reading options, gift bundles, and evangelistic media, reflecting a focused business model with clear target demographics. Technically, the site employs modern web technologies including JavaScript and CSS, with Matomo analytics for user tracking and a cookie consent mechanism ensuring GDPR compliance. The platform is mobile-optimized and provides a good user experience with clear navigation and professional design.

S

Stiftung Creative Kirche

creative-kirche.de

10

Stiftung Creative Kirche is a German non-profit foundation focused on faith-based community engagement through cultural events such as choral musicals, festivals, and digital church services. The organization targets a broad audience interested in religious and cultural activities primarily in the Ruhrgebiet region but also digitally beyond. The website is built on TYPO3 CMS and integrates modern analytics and consent management tools, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting the foundation's mission effectively.

A

AWISTA GmbH

awista.de

10

AWISTA GmbH is a well-established municipal service provider specializing in waste management and city cleaning in Düsseldorf, Germany. The company has a long history spanning over 150 years, positioning it as a trusted local service provider. Their website reflects a professional digital presence with clear branding, good content quality, and active engagement through social media channels. Technically, the site is built on modern frameworks such as Next.js and React, with integrated consent management via Cookiebot and analytics through Google Analytics and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience.

The Pax-BKC-Spendenportal is a German-language online donation platform operated by Pax-Bank für Kirche und Caritas eG, focused on connecting donors with charitable projects and organizations. The platform offers institutions the ability to collect donations online and showcases various projects aligned with sustainability goals. The website is professionally designed with clear navigation and good content relevance, targeting donors and non-profit organizations primarily in Germany. Technically, the site is built on the Contao CMS with modern JavaScript libraries enhancing user experience. Hosting is provided by venne-hosting.de, and the site uses HTTPS with a cookie consent mechanism ensuring GDPR compliance. However, no explicit security policy or incident response information is published, which could be improved to enhance trust and transparency. Overall, the platform demonstrates a solid security posture with no detected vulnerabilities or blocking mechanisms, making it a trustworthy resource for charitable giving.

P

Pax-Bank für Kirche und Caritas eG

pax-bkc.de

63

Pax-Bank für Kirche und Caritas eG is a specialized financial institution serving church and charitable organizations in Germany. The website reflects a professional banking service tailored to the non-profit sector, emphasizing trust and sector-specific financial solutions. The market position is niche, focusing on clients within the church and social sectors. Technically, the website employs modern frameworks such as Angular and integrates analytics tools like eTracker and Dynatrace Ruxit for performance monitoring and user tracking. The site is mobile-optimized with good SEO and accessibility basics, though some improvements are possible. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is partial, with cookie consent mechanisms present but no clear privacy or terms of service pages. Overall, the domain registration and hosting align well with the business identity, supporting legitimacy and trustworthiness.

E

Erzbistum Berlin

erzbistum-berlin.de

54

Erzbistum Berlin operates as the official Catholic Archdiocese for the Berlin, Brandenburg, and Vorpommern regions in Germany. The website serves as a comprehensive information and communication platform offering news, event calendars, religious education, pastoral services, and community support. It targets the Catholic community and related stakeholders, positioning itself as a key regional religious authority with a broad range of services including media, education, and social outreach. The business model is non-profit, focusing on community engagement and spiritual guidance. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. The presence of a detailed cookie consent mechanism and integration with analytics tools like etracker reflects a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs a granular cookie consent system, minimizing unnecessary data exposure. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or suspicious activities were detected. Overall, Erzbistum Berlin's website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR. It effectively supports its mission as a religious and community institution while maintaining a secure and user-friendly online presence.

Z

Zukunft Niederrhein

zukunft-niederrhein.de

10

Zukunft Niederrhein is a regional initiative representing sand and gravel companies in the Niederrhein area of Germany. The organization focuses on promoting the importance of sand and gravel extraction for infrastructure and regional development. Their website provides information on industry topics, environmental impact, and community engagement, targeting local residents and stakeholders. The business model centers on advocacy, information dissemination, and fostering dialogue about the regional raw materials industry. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Google Analytics for visitor tracking, complemented by a cookie consent mechanism to ensure GDPR compliance. The site is hosted on German providers with secure HTTPS configuration and moderate performance. Security posture is adequate with HTTPS and privacy-conscious analytics settings, but lacks explicit security policies or incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by adding more explicit security and compliance documentation.

W

World Dredgers GmbH & Co. KG

world-dredgers.de

49

World Dredgers GmbH & Co. KG is a specialized engineering company focused on the design, construction, and servicing of suction dredgers and related equipment for efficient gravel and sand extraction. The company emphasizes innovation, notably with its autonomous GPS-based movement control system for dredgers, enhancing operational efficiency and automation. Their market position is that of a niche specialist serving B2B clients in the energy and transportation sectors related to raw material extraction. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a credible small-sized enterprise with a clear business focus and parent company affiliation.

O

OTTO MAURER Assekuranzmakler GmbH

maurer-assekuranz.de

51

OTTO MAURER Assekuranzmakler GmbH is a specialized insurance brokerage firm focusing on inland navigation, construction, recycling, and related industries primarily in Germany and the BeNeLux region. With over 30 years of experience and affiliation to the HÜLSKENS-Firmenverband group, the company offers tailored insurance solutions including Flusskasko, P&I, machinery breakdown, and freight loss insurance. The website reflects a professional and consistent brand presence with clear service descriptions and multiple contact points. Technically, the website is built on the Contao Open Source CMS platform, utilizing common JavaScript libraries such as jQuery and Swipe.js for UI components. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting appears to be managed via Agenturserver, with no direct evidence of advanced security headers or analytics tools. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security policy or incident response contacts are published, and security headers are not evident. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though improvements in security policy transparency and technical security headers are recommended to enhance the security posture and trust further.

R

Ruhrmann Logistik GmbH & Co. KG

ruhrmann-logistik.de

51

Ruhrmann Logistik GmbH & Co. KG is a well-established logistics company specializing in bulk goods handling and port logistics with multiple locations in North Rhine-Westphalia, Germany. The company operates its own port facilities and is part of the larger Hülskens Firmenverband corporate group, which has a long history in the construction and logistics sectors. The website clearly targets business clients in transportation and waste management, offering comprehensive logistics services including ship disposition and specialized material handling. Technically, the website is built on the Contao CMS platform and uses common JavaScript libraries such as jQuery and Swipe.js for UI components. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO is well addressed with proper meta tags and structured data. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. The security posture is solid but could be improved by adding formal security and incident response policies and enhancing HTTP security headers. No vulnerabilities or suspicious elements were detected in the content or scripts. WHOIS data aligns well with the business claims, indicating a trustworthy domain with consistent registration information. Overall, the website presents a professional and credible business presence with good content quality and technical implementation. Strategic improvements in security transparency and incident response readiness would further strengthen trust and compliance.

H

Heinr. Elskes GmbH & Co. KG

elskes.de

51

Heinr. Elskes GmbH & Co. KG is a medium-sized, leading concrete manufacturing and supply company based in Nordrhein-Westfalen, Germany. The company operates under the Hülskens Holding group and offers a broad range of products including transport concrete, precast concrete elements, construction steel, and material testing services. Their market position is strong regionally, supported by sustainability certifications such as CSC Platinum and Gold, and a modern online ordering platform enhancing customer experience. The website reflects a professional and trustworthy business with clear contact channels and a focus on quality and sustainability. Technically, the site is built on the Contao CMS platform using modern JavaScript libraries, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable digital presence for the company.

H

Hülskens GmbH & Co. KG

huelskens-kies-sand.de

50

Hülskens GmbH & Co. KG is a well-established German company specializing in the extraction and supply of mineral raw materials such as sand and gravel, primarily serving the construction and infrastructure sectors. With over 100 years of experience and multiple regional subsidiaries, the company emphasizes sustainable land use and ecological projects alongside its core business. The website reflects a professional and regionally focused business model with clear communication of services and corporate values. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies including Bootstrap and jQuery. It is hosted on agenturserver infrastructure, with good mobile optimization and SEO practices. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. The absence of analytics scripts suggests a privacy-conscious approach. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant, with room for improvement in security policy transparency and header implementation. The risk level is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain and improve security and compliance posture.

I

it's owl

its-owl.de

45

it's OWL is a well-established competence network based in OstWestfalenLippe, Germany, focusing on digital and sustainable transformation for the industrial mid-sized sector. With over 230 members including world market leaders and hidden champions, it acts as a catalyst for innovation, research collaboration, and technology transfer. The website is professionally designed, multilingual, and rich in content, showcasing projects, events, and member companies. Technically, it is built on WordPress with modern frameworks and plugins, optimized for mobile and SEO. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit privacy and cookie policies as well as security headers. Overall, the domain and business information are consistent and trustworthy, though privacy compliance needs improvement.

RECYCLING magazine is a specialized media outlet providing trends, analyses, opinions, and factual news for the recycling industry. It offers both print and digital magazine subscriptions, organizes events, and publishes advertorials and newsletters targeting professionals and stakeholders in the recycling sector. The website is professionally designed using WordPress with Elementor and Yoast SEO, ensuring good content quality and user experience. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and eTracker, with a cookie consent mechanism in place to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and WHOIS transparency slightly reduce trust. Overall, the site is a credible and professional resource for its niche audience.

E

ECOTEC Fleet

ecotec-fleet.com

47

ECOTEC Fleet operates a medium-sized vehicle rental business specializing in waste collection and municipal vehicles in Germany. The company offers a large fleet of 400 vehicles including brands like ZOELLER and FAUN, targeting municipalities and commercial waste management clients. The website is professionally designed using WordPress with WooCommerce and Elementor, featuring multilingual support and SEO optimization. Contact details and cookie consent mechanisms are clearly implemented, but privacy and terms of service policies are missing. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional web presence.

TÜV SÜD is a globally recognized enterprise specializing in safety, security, and sustainability solutions, with a rich history spanning over 150 years. The company offers a broad range of services including testing, inspection, certification, auditing, training, and technical advisory across multiple industries such as energy, transportation, manufacturing, real estate, and healthcare. Their market position is that of a trusted partner for businesses seeking compliance and quality assurance worldwide. Technically, the website is built on modern frameworks such as Next.js and integrates advanced consent management tools like OneTrust, alongside Adobe's digital marketing and analytics solutions. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, TÜV SÜD employs strong HTTPS encryption, comprehensive security headers, and cookie consent mechanisms, indicating a robust security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt file suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low risk profile with strong trust indicators and professional content. The missing WHOIS data for the queried subdomain is a minor concern but likely a technical querying issue rather than a legitimacy problem. Strategic recommendations include enhancing public security disclosures, maintaining up-to-date third-party libraries, and improving incident response visibility.

E

Evangelisches Medienhaus GmbH

digendo.de

60

digendo.de is a German-language digital portal platform operated by Evangelisches Medienhaus GmbH, targeting primarily German-speaking users such as municipalities or community organizations. The platform offers subscription-based access to digital services with a focus on secure user login and account management. The website is professionally designed with consistent branding and provides essential legal and subscription information through linked partner domains. Technically, the site uses modern JavaScript frameworks like Vue.js and Bootstrap for responsive design, delivering a moderate performance experience. Security posture is adequate with HTTPS usage and secure password input features, but lacks explicit security headers and cookie consent mechanisms. No contact information or incident response details are directly available on the login page, which limits transparency. Overall, the site is safe, business-oriented, and trustworthy but could improve in privacy compliance and security best practices.

T

tobisRad

tobisrad.de

64

tobisRad is a regional bicycle rental, repair, sales, and delivery service provider operating primarily in the Ostholstein and Lübeck regions of Germany. The company offers a comprehensive range of services including bicycle and e-bike rentals, professional repair services, sales of high-quality bicycles, and a convenient delivery service to customers' locations. The website reflects a strong market position as a year-round service provider with multiple physical locations and a focus on customer convenience and quality service. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Klaviyo for marketing and analytics. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. Hosting appears to be via Webflow's infrastructure with Cloudflare services for security and performance. From a security perspective, the website enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and there is no publicly available security policy or incident response contact. No vulnerabilities or suspicious content were detected, indicating a generally good security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The business demonstrates credibility through detailed contact information, consistent branding, and transparent marketing practices. Strategic improvements in security headers and incident response disclosures could further enhance trust and security.

F

Ferienhof Hardthöhe

farm-wedding.de

49

Farm Wedding on Hof Hardthöhe is a specialized wedding and event venue located in Germany, offering comprehensive wedding planning and farm event services. The business targets couples seeking a rural, charming location for their wedding ceremonies and receptions, complemented by accommodation options and decoration services. The website is professionally designed using TYPO3 CMS and Bootstrap, providing a good user experience with clear navigation and mobile optimization. Social media integration and a cookie consent mechanism demonstrate digital maturity and privacy awareness. Security posture is adequate with HTTPS and cookie controls, though security headers and incident response information are absent. Overall, the site is trustworthy and well-positioned in its niche market.

F

Ferienhof Wübbold

ferienhof-wuebbold.de

44

Ferienhof Wübbold is a small hospitality business based in Germany offering farm holiday experiences and vacation rentals near the Alfsee area. The website presents a professional and family-friendly image, targeting families and holidaymakers seeking nature and farm-related vacations. The business operates primarily through holiday apartments and houses, emphasizing a niche market in regional farm tourism. Technically, the website is built on Joomla CMS with Bootstrap framework, incorporating modern web technologies such as jQuery and Font Awesome. Accessibility features and cookie consent mechanisms are implemented, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic best practices observed, though there is room for improvement in publishing privacy policies, terms of service, and security disclosures. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence. No critical security issues or suspicious content were detected.

N

Naturwald Akademie gGmbH

naturwald-akademie.org

63

Naturwald Akademie gGmbH is a German non-profit organization dedicated to ecological forest research, education, and consulting. Founded in 2016, it provides scientific projects, educational programs, and practical advice to forest owners and public entities to promote sustainable and resilient forest ecosystems. The website reflects a professional and well-structured digital presence with comprehensive content tailored to its target audience of forest stakeholders and environmental professionals. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration and WHOIS data align well with the organization's history and legitimacy, supporting a high trust level.

D

D&T Internet GmbH

dt-internet.de

56

D&T Internet GmbH is a small, established full-service internet service provider based in Cologne, Germany, with over 20 years of experience. The company specializes in TYPO3 CMS web development, cloud telephony solutions (Swyx HostedPBX), and offers additional cloud products such as online storage and web hosting. Their target audience includes businesses and organizations seeking professional internet and communication services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on TYPO3 CMS, enhanced with modern JavaScript libraries and frameworks like jQuery and Foundation, and includes accessibility and mobile optimization features. Matomo analytics is used with an opt-in cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a reliable technology service provider.

S

SERO Sekundärrohstoffhandel und Industriedemontagen GmbH

serogmbh.de

46

SERO Sekundärrohstoffhandel und Industriedemontagen GmbH is a specialized industrial service provider based in Lutherstadt Wittenberg, Germany, focusing on demolition, dismantling, hazardous material remediation, and recycling services. Founded in 1990 and now part of the STORK Unternehmensgruppe since 2024, the company serves industrial and chemical sectors with a comprehensive service portfolio including container services and scrap trading. The website reflects a professional and consistent brand presence with clear business information and contact details. Technically, the site is built on TYPO3 CMS with modern web technologies and offers good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and incident response disclosures. Overall, the website is trustworthy, safe, and compliant with basic GDPR requirements, supporting the company's credibility in its niche market.