Germany security reports

H

Haldenslebener Recycling- und Umweltdienst GmbH

umweltdienst-erxleben.de

42

Haldenslebener Recycling- und Umweltdienst GmbH is a medium-sized environmental services company based in Germany, specializing in recycling, container services, machinery rental, and related activities. As part of the STORK Unternehmensgruppe since 2016, it benefits from group synergies and holds ISO 14001 certification, underscoring its commitment to environmental management. The company targets construction firms, private builders, and industrial clients with a broad service portfolio including waste management and raw material supply. Technically, the website is built on TYPO3 CMS with modern frontend technologies, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no signs of suspicious or adult content.

R

Recycling OWL GmbH

recycling-owl.de

44

Recycling OWL GmbH is a medium-sized company specializing in the recycling, treatment, and recovery of mineral materials with a focus on metal recovery. As part of the STORK Unternehmensgruppe since 2018, it operates a strategically located facility in Hille with trimodal transport connections (road, rail, and waterway), enabling efficient and environmentally friendly logistics. The website reflects a professional business presence with clear service offerings and a focus on sustainability and logistics efficiency. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response information. Overall, the domain registration aligns with the business claims, and no suspicious patterns were detected. The site is free from adult or questionable content and maintains a high trustworthiness level.

S

STORK Umwelt GmbH

stork-leipzig.de

46

STORK Umwelt GmbH is a medium-sized German company specializing in recycling, waste management, and resource recovery, primarily serving the Leipzig/Halle region. The company operates under the umbrella of the STORK Unternehmensgruppe and offers a range of services including container services, mobile processing technology, and civil engineering. The website reflects a professional and consistent brand image with clear communication of services and certifications such as ISO 14001:2015. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes a cookie consent mechanism, indicating a reasonable level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

S

STORK ALU Recycling GmbH

stork-alu.de

44

STORK ALU Recycling GmbH operates as a specialized industrial company focused on the efficient and innovative recovery of metals, particularly aluminum, copper, and stainless steel. Their core business revolves around advanced metal recycling technologies such as the Schwimm-Sink-Anlage (sink-float separation) to ensure high purity in metal recovery. The company is positioned as a competent player within the German manufacturing and recycling sector, serving industrial clients requiring sustainable raw material cycles. The website reflects a professional and consistent brand image aligned with its parent company, Stork Gruppe, and targets industry stakeholders and partners. From a technical perspective, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript and CSS, with good mobile optimization and SEO practices. The site is served over HTTPS with a cookie consent mechanism in place, indicating compliance with GDPR requirements. However, some security best practices such as comprehensive security headers and published security policies are absent, representing areas for improvement. Security posture is moderate with no critical vulnerabilities detected in the visible content. The absence of incident response contacts and vulnerability disclosure policies suggests limited transparency in security governance. WHOIS data is minimal but does not raise immediate concerns, though more detailed registrant information would enhance trust. Overall, the site is safe, professional, and compliant with privacy norms but could benefit from enhanced security documentation and technical hardening. Strategically, the company should focus on strengthening its security framework, publishing clear policies, and improving accessibility features to maintain trust and compliance. The digital infrastructure is solid but could be modernized further to improve performance and resilience against emerging threats.

S

STORK Umweltdienste GmbH

stork-mobil.de

44

STORK Umweltdienste GmbH operates as a specialized provider of mobile mineral waste processing technology, focusing on modular mobile solutions for the treatment of slag, ash, construction debris, and dredged material. The company is positioned within the energy and transportation sectors, serving industrial clients requiring on-site processing capabilities. Their business model centers on B2B services with a strong emphasis on modularity and customization. The website reflects a medium-sized enterprise with consistent branding and professional presentation, supported by a parent company, STORK Unternehmensgruppe. Technically, the site is built on TYPO3 CMS with modern web standards, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels.

BeSt Bernauer Stadtmarketing GmbH is a small-sized city marketing company founded in 2009, dedicated to promoting the city of Bernau bei Berlin. The company manages cultural events, visitor centers including the UNESCO World Heritage Bauhaus visitor center, and tourist information services. The website reflects a well-structured and content-rich platform targeting residents, tourists, and cultural enthusiasts. Technically, the site uses Contao CMS with modern frontend frameworks like Bootstrap and SwiperJS, and integrates analytics tools such as Google Analytics and Matomo. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response information. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

F

Frau Heike Bobusch-Seefeld

the-new-art.de

57

The website www.the-new-art.de represents the online presence of artist Heike Bobusch, specializing in original acrylic paintings and abstract canvas art. The site offers virtual 360° tours of the gallery and promotes commissioned artwork services. The business operates as a small-scale art seller based in Berlin, Germany, targeting art enthusiasts and potential buyers interested in unique, hand-painted pieces. The website is well-structured with clear navigation and professional content, including customer testimonials and detailed contact information. Technically, the site uses a custom CMS (tourcms3), krpano for immersive virtual tours, and Howler.js for audio support. It is hosted on 1&1 IONOS infrastructure with HTTPS enabled, ensuring secure connections. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. Privacy policy is comprehensive and GDPR compliant, but no explicit terms of service or incident response policies are found. Overall, the website is trustworthy, professionally maintained, and suitable for its niche market.

F

Förderverein Finower Wasserturm und sein Umfeld e.V.

wasserturm-finow.de

58

The Förderverein Finower Wasserturm und sein Umfeld e.V. operates a cultural museum dedicated to preserving the industrial heritage of the Messingwerksiedlung and the Finower Wasserturm in Germany. The website offers detailed historical content, virtual 360° tours, and visitor information, targeting cultural enthusiasts and regional tourists. The organization is a small non-profit founded in 2003, relying on donations and volunteer support. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and specialized 360° tour software (krpano) integrated with the VR-Easy CMS. Hosting is provided via rzone.de nameservers. Security posture is adequate with HTTPS and client-side validation but lacks advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility.

V

VR-EASY Marketing

faszination-tegernsee-schliersee.de

56

VR-EASY Marketing operates the website faszination-tegernsee-schliersee.de, offering immersive 360° virtual tours and panoramas focused on the Tegernsee and Schliersee regions in Germany. The business targets tourists, local hotels, and destination marketing organizations by providing high-quality virtual tour creation and marketing consulting services. The website is well-structured, content-rich, and professionally presented in German, with clear contact information and legal disclosures. Technically, the site uses modern web technologies including krpano for panorama viewing, Google Maps API, and Google Analytics with IP anonymization, hosted on servers indicated by the mga-intermedia.com nameservers.

M

Ministerium der Justiz des Landes Nordrhein-Westfalen

vr-jva.nrw

55

The website vr-jva.nrw is an official government digital platform operated by the Ministerium der Justiz des Landes Nordrhein-Westfalen, providing a virtual 360° tour of correctional facilities in North Rhine-Westphalia, Germany. It serves an educational and informational purpose, targeting the general public and potential applicants interested in the justice system. The site features interactive virtual tours, quizzes, and contact forms to engage users. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and licensed krpano software for immersive virtual tours. Hosting is provided by Global Village GmbH, with a domain registered under the government ministry. The site is mobile-optimized and includes basic accessibility features, though SEO and privacy compliance could be improved. From a security perspective, the site uses HTTPS and input validation on forms but lacks DNSSEC and important security headers. No privacy or cookie policies are present, representing compliance gaps. The WHOIS data confirms legitimacy and consistency with the government entity. No signs of blocking or WAF interference were detected. Overall, the site is trustworthy and professionally implemented but would benefit from enhanced privacy compliance, security hardening, and explicit incident response information to improve user trust and regulatory adherence.

O

Open Telekom Cloud

open-telekom-cloud.com

63

Open Telekom Cloud is a European-focused cloud service provider offering Infrastructure as a Service (IaaS) and managed cloud solutions primarily targeting business customers and enterprises. It operates under the Deutsche Telekom umbrella, emphasizing data sovereignty and compliance with European regulations such as GDPR. The website presents a professional and comprehensive digital presence with detailed product offerings, partner integrations, and community engagement. Technically, the site is built on modern PHP frameworks and the Neos CMS, delivering a responsive and accessible user experience. Security posture is strong, with HTTPS enforcement, security headers, and certifications like ISO 27001. Privacy compliance is well addressed with cookie consent mechanisms and detailed policies. The absence of WHOIS data is a minor anomaly but does not detract from the overall trustworthiness given the strong brand and professional presentation.

E

Evangelische Kirche der Pfalz

pfalz-evangelisch.de

57

The Evangelische Kirche der Pfalz is a large non-profit religious organization serving as one of the 20 regional churches within the Evangelical Church in Germany (EKD). Their website provides comprehensive information about church activities, events, community engagement, job opportunities, and press releases. The target audience includes church members and the general public interested in religious and community topics. The organization maintains a strong market position within the German religious sector, supported by consistent branding and a professional online presence. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, Swiper.js for interactive elements, and Usercentrics for GDPR-compliant cookie management. The site is hosted on German VPS servers, optimized for mobile devices, and includes strong accessibility features such as an accessibility dashboard and keyboard navigation aids. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response information, and a vulnerability disclosure mechanism. The WHOIS data aligns well with the website content, indicating legitimacy and consistency. Overall, the site demonstrates a mature security posture with room for improvement in formal security documentation. The overall risk is low, with strong compliance to privacy regulations and good technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding a security.txt file to improve transparency and incident handling readiness.

N

N/A

deutschland.de

62

deutschland.de is an official German government digital platform providing comprehensive information about Germany's politics, business, culture, society, and global partnerships. It targets a broad international audience with multilingual content, interactive features, and multimedia presentations. The website is professionally designed and well-structured, reflecting a high level of digital maturity and content quality. The technical infrastructure is based on Drupal 10 CMS, enhanced with modern web technologies such as responsive images, HTML5 video, and a consent management platform (Usercentrics) to ensure privacy compliance. Google Tag Manager is used for analytics with strict consent settings denying ad personalization, indicating a privacy-conscious approach. Security posture is solid with HTTPS implied, consent management implemented, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and incident response contacts are not found, suggesting room for improvement in security transparency and incident readiness. Overall, the website represents a trustworthy and authoritative source of information about Germany, with strong branding consistency and a high level of professionalism. Strategic recommendations include publishing explicit privacy and terms policies, enhancing security headers, and providing clear contact channels for security and data protection inquiries.

L

Landratsamt Miltenberg

landratsamt-miltenberg.de

61

Landkreis Miltenberg operates a professional and comprehensive local government website providing residents and stakeholders with current news, career opportunities, departmental information, and citizen services. The site is well-structured, accessible, and includes privacy and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and a reputable CMS (Contao), hosted on a known provider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and serves its public sector role effectively.

S

sensis+wiegon

digitalerwertstoffhof.de

51

sensis+wiegon is an innovative competence cluster specializing in digital and autonomous waste management solutions for municipalities and businesses in Germany. With over 30 years of experience, the company offers a comprehensive suite of services including cloud portals, mobile apps, hardware installations, and software integration to modernize waste collection and recycling processes. Their market position is strengthened by multiple awards and a strong focus on customer service and digital transformation. Technically, the website employs modern JavaScript libraries, analytics tools like Matomo and LinkedIn Insight Tag, and is likely built on Django, ensuring a robust and scalable infrastructure. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is solid with HTTPS and CSRF protections, though additional security headers and a published security policy would enhance trust. Overall, sensis+wiegon presents a credible and professional digital presence aligned with its business goals.

R

REMEX GmbH

remex.de

59

REMEX GmbH is a leading expert in mineral resource management and recycling, specializing in the disposal, recycling, and recovery of mineral waste materials. As part of the REMONDIS Group, REMEX offers comprehensive services including mineral waste processing, production of substitute building materials, metal recovery, landfill management, and environmental remediation. The company targets businesses in construction, industry, and waste management sectors, positioning itself as a market leader in Europe and Asia with approximately 50 years of experience. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and FriendlyCaptcha for form security. The site is well-structured, mobile-optimized, and provides multilingual support. Hosting and DNS management are professionally handled via brandshelter.com nameservers. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect contact forms. However, it lacks visible security headers and a formal vulnerability disclosure policy. Privacy compliance is strong with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, REMEX GmbH's website reflects a professional, trustworthy, and business-focused digital presence with room for improvement in security headers, cookie consent, and incident response transparency. The domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness.

M

Mönchengladbacher Abfall-, Grün- und Straßenbetriebe AöR

mags.de

26

Mönchengladbacher Abfall-, Grün- und Straßenbetriebe AöR (mags) is a municipal public service provider based in Mönchengladbach, Germany, specializing in waste management, green maintenance, and street services. The website serves as an informational portal for residents and businesses in the region, providing details about their service offerings. The site is built on TYPO3 CMS, a widely used open-source content management system favored by government entities, and is hosted on Mittwald servers. The presence of Usercentrics consent management and Matomo analytics indicates a moderate level of digital maturity with attention to privacy compliance. However, the absence of explicit privacy policies and terms of service pages suggests room for improvement in transparency and compliance documentation. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website is professional, trustworthy, and serves its public sector function effectively.

K

KrW Kreislaufwirtschafts- und Abfallverwertungs-Gesellschaft mbH

krw-gmbh.de

10

KrW Kreislaufwirtschafts- und Abfallverwertungs-Gesellschaft mbH is a medium-sized German company specializing in professional recycling and disposal services, particularly for hazardous waste from automotive workshops, trade, and industry. With over 20 years of experience and a fleet of more than 250 specialized vehicles, the company operates nationwide from its base in Duisburg. The website reflects a professional business model focused on comprehensive waste management solutions including consulting, logistics, and disposal services. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of a cookie consent mechanism and privacy policy demonstrates good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and formal policies are recommended. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

E

Evangelische Kirche der Pfalz

raeume-fuer-morgen.de

10

The website 'Räume für morgen' is a project initiative by the Evangelische Kirche der Pfalz focused on the sustainable and future-oriented use of church buildings. It aims to reduce CO2 emissions and optimize building usage through community engagement and innovative concepts. The site targets church communities and stakeholders interested in ecological and social aspects of church infrastructure. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap 5 and jQuery, providing a responsive and user-friendly experience. The cookie consent mechanism is well implemented, supporting GDPR compliance. Security posture is solid with HTTPS and cookie management, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

F

Freunde der Katholischen Theresienschule in Berlin-Weißensee e.V.

theresienball.de

9

The website 'Theresienball' represents a non-profit educational event organized by the Freunde der Katholischen Theresienschule in Berlin-Weißensee e.V. It serves as a platform to promote and provide information about the annual school ball, targeting students, parents, and teachers. The site is built on WordPress with WooCommerce and Tickera plugins to support ticketing and event management functionalities. The technical infrastructure is modern and includes common web technologies such as jQuery and Font Awesome, with a responsive design suitable for mobile devices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner. Overall, the site is professional, trustworthy, and focused on community engagement.

V

VR-EASY GmbH

vr-easy.com

10

VR-EASY GmbH operates a specialized SaaS platform enabling users to create, manage, and share virtual 360° tours online without the need for software installation. The company targets small to medium businesses, educational institutions, real estate professionals, and municipalities, offering tiered subscription packages tailored to various sectors. Their market position is that of a niche provider with innovative features such as integration of multimedia content and marketing tools, supported by reputable partners like Deutsche Telekom and EU funding. The website is primarily in German with English alternatives, reflecting a focus on the German market. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Popper.js, hosted on the Open Telekom Cloud which emphasizes green energy. The platform is web-based with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility is basic. The site lacks a CMS, indicating a custom-built solution. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers such as CSP or HSTS. No vulnerability disclosure or incident response policies are visible. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but no cookie consent mechanism is detected. Contact information is clear and professional, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned in its niche. Security improvements and enhanced privacy mechanisms would further strengthen its posture. The domain registration data aligns well with the business claims, supporting legitimacy.

The website 'Schulerzbistum' appears to be a minimal portal page primarily embedding another PHP page via an iframe. The content is very limited, with no visible business descriptions, contact information, or user interaction elements. The technical infrastructure relies on basic web technologies including jQuery and custom JavaScript, with no advanced frameworks or CMS detected. The site lacks modern SEO and accessibility features and shows minimal mobile optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating poor compliance with GDPR and related regulations. Overall, the site presents a low trust profile with limited business credibility and minimal content quality.

B

BBW Recycling Mittelelbe GmbH

bbw-recycling.de

46

BBW Recycling Mittelelbe GmbH is a medium-sized German company specializing in the recycling of construction waste and supply of recycled building materials. The company operates a large facility with advanced processing capabilities, serving construction and waste management sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and clear navigation. The technical infrastructure is modern with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking some advanced security headers and explicit security policies. Overall, the website reflects a trustworthy and compliant business presence with room for security and legal documentation improvements.

S

STORK Unternehmensgruppe

stork-gruppe.de

44

STORK Unternehmensgruppe is a medium-sized, well-established European service company specializing in waste disposal and recycling, with over 30 years of operational history. The group comprises 23 companies across 13 locations, employing more than 460 staff. Their core competencies include mineral waste processing, mobile and stationary recycling technologies, and specialized services such as industrial cleaning, demolition, and hazardous material remediation. The company targets B2B clients across Europe, positioning itself as a leader in efficient metal recovery and sustainable environmental solutions. Technically, the website is built on TYPO3 CMS, featuring modern web technologies and a responsive design, though some performance and accessibility improvements are possible. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and published incident response policies. Overall, the domain and website content align well, supporting legitimacy and trustworthiness.

B

buff.rocks GmbH

buff.media

54

buff.rocks GmbH is a small digital and advertising agency based in Magdeburg, Germany, specializing in creative and strategic services including TYPO3 CMS web projects, design, campaigns, content marketing, hosting, and digital transformation. The company is part of the +Pluswerk network, enhancing its market position and service capabilities. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and Matomo analytics for user tracking, with good performance and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is unavailable or malformed, limiting domain registration trust verification, but the business legitimacy is supported by consistent branding, client testimonials, and industry memberships. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility.

W

WBV - Westfälischer Bibliographischer Verlag

kirchenrecht.shop

56

Kirchenrecht.shop is an e-commerce platform specializing in customized and preconfigured legal text collections related to the Evangelische Kirche von Westfalen. The business operates in a niche market serving church members and legal professionals interested in church law. The website is professionally designed with clear navigation and offers a Rechtstexte-Konfigurator tool for personalized document creation. The platform is built on a Shopware Saltation theme, leveraging modern web technologies and Google reCAPTCHA for form protection. Hosting and domain registration are consistent with the business location and operations, supporting legitimacy. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is adequate with a comprehensive privacy policy linked externally, but no cookie consent mechanism is present. Overall, the website is safe, trustworthy, and well-positioned within its market niche.

Z

Zartbitter e.V. Köln

sinaundtim.de

57

Zartbitter e.V. Köln operates the 'Sina und Tim' project, a well-established non-profit initiative focused on preventing sexual abuse of children through educational materials such as picture books, theater plays, audio plays, and expert lectures. The organization has a strong market position in Germany as a pioneer in this sensitive field, supported by donations and sponsorships. The website reflects this mission with clear, child-appropriate content and a professional presentation. Technically, the website is built on WordPress with modern plugins and themes, including a robust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site demonstrates a responsible approach to privacy and security, with transparent contact information and no signs of malicious activity or adult content. The domain registration is consistent with the organization's profile, though registrant details are minimal. Strategic recommendations include enhancing security headers, adding terms of service, and publishing a security policy to further strengthen trust and compliance.

Z

Zartbitter e.V. Köln

washilft.org

61

WAS HILFT is a German non-profit project operated by Zartbitter e.V. Köln, dedicated to combating sexual violence through education, support, and awareness. The website offers multimedia content, legal information, and prevention theater aimed primarily at youth and their social circles. The project is funded by governmental and city institutions, reinforcing its legitimacy and trustworthiness. Technically, the website is built on WordPress with common plugins and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent implemented, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie management in place. Overall, the website is professional, trustworthy, and safe for general audiences.

Zartbitter e.V. operates an online webshop focused on educational and preventive materials related to child protection, sexual abuse prevention, and child rights. The website offers a variety of products including books, brochures, posters, and multimedia targeted primarily at parents, educators, and professionals working with children and youth. The business model is a niche non-profit e-commerce platform serving the German-speaking market (Germany, Austria, Switzerland). Technically, the website is built on WordPress with WooCommerce and uses several plugins for product display, discount rules, and GDPR compliance. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers. Performance is moderate with a good user experience and clear navigation. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, security headers like Content-Security-Policy and HSTS are not evident and should be implemented. There is no published security policy or incident response contact information. Overall, the website is safe, professional, and trustworthy for its target audience. The lack of direct contact information and detailed WHOIS data slightly limits business credibility assessment. Strategic improvements in security headers and transparency around security policies would enhance trust and compliance.

Tribune Group GmbH is a Berlin-based investment, holding, and management company specializing in media, education, and lifestyle projects globally. The company operates multiple subsidiaries and partner platforms primarily focused on dental and pharmaceutical continuing education, as well as lifestyle media. Their market position is supported by recognized certifications such as ADA CERP and ACPE accreditation, indicating a strong foothold in professional education sectors. Technically, the website employs modern frontend technologies including Bootstrap 4.3.1, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, the site lacks some advanced security headers and explicit privacy and cookie policies, which are critical for compliance and trust. The domain registration is consistent with the business claims, showing a well-established presence since 2009. Security posture is moderate; while HTTPS is implied, no security headers or DNSSEC are enabled, and no incident response or vulnerability disclosure information is provided. The absence of privacy and cookie policies reduces privacy compliance scores. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling security headers and DNSSEC, establishing incident response contacts, and improving accessibility and SEO features to strengthen digital maturity and trustworthiness.

D

Dental Tribune International

dental-tribune.com

57

Dental Tribune Germany is a professional online portal delivering daily news, webinars, market and product information focused on the dental industry in Germany. It is part of the global Dental Tribune International network, providing dental professionals, students, and industry stakeholders with up-to-date trends and innovations in dentistry. The website offers a variety of content including news articles, educational webinars, events, and a marketplace for dental products and services. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Bootstrap, and Matomo analytics, and is hosted on AWS Cloudfront CDN, ensuring reasonable performance and availability. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism present but no explicit privacy policy found in the provided content. The domain WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the website content and branding align with a reputable international dental media company. Overall, the site is professional, content-rich, and serves its target audience effectively.

O

OEMUS MEDIA AG

oemus.com

51

OEMUS MEDIA AG is a well-established German media company specializing in dental medicine publications and professional education. The company offers a broad portfolio including specialist journals, seminars, and congresses targeting dental professionals. Their website reflects a mature business with a strong market position in the healthcare media sector, supported by 30 years of experience. Technically, the site uses standard web technologies such as jQuery and hosts media assets on Amazon S3, delivering moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and HTTP security headers. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively.

J

Jugendliche stärken

jugendlichestaerken-niedersachsen.de

55

Jugendliche stärken Niedersachsen is a regional educational and support platform focused on strengthening youth mental health and social cohesion in schools. The platform targets students, teachers, and parents in Niedersachsen, Germany, providing educational content, guidance, and resources to foster understanding and support for psychological challenges. It is a publicly funded initiative, indicated by the presence of the Niedersachsen logo and the MSH project logo, emphasizing its non-profit and educational nature. The website is well-structured, with clear navigation and content tailored to its audience, including dedicated sections for different user groups and topics related to mental health and social influences. Technically, the website employs modern web technologies such as htmx and hyperscript for dynamic content loading and interaction, and is hosted on AWS infrastructure. It uses Matomo for privacy-conscious web analytics with explicit cookie consent and opt-out mechanisms, reflecting a strong commitment to user privacy and GDPR compliance. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and integrates cookie consent with Do Not Track settings in analytics. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data and DNS configuration align with the hosting provider and business claims, supporting the legitimacy of the domain and platform. Overall, Jugendliche stärken Niedersachsen presents a trustworthy, privacy-conscious, and professionally maintained platform serving an important educational and social function. Strategic improvements could include adding explicit security policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to further strengthen trust and compliance.

Z

Zartbitter e.V.

zartbitter.de

64

Zartbitter e.V. is a German non-profit organization focused on counseling and prevention of sexual violence against children and youth. The organization provides direct counseling services, educational workshops, and training for parents and professionals. It is recognized nationally for its engaging materials and theater productions addressing sensitive topics such as digital violence and children's rights. The website reflects a mature, well-structured digital presence with clear branding and comprehensive content tailored to its target audience. Technically, the website is built on WordPress using Elementor and several specialized plugins for events, SEO, and cookie management. Hosting is provided by SchlundTech, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR. Security posture is solid with HTTPS enforced and no obvious vulnerabilities or exposed sensitive data. However, some recommended security headers are not explicitly detected, and no formal security policy or incident response contact is published. The site does not appear to use extensive tracking or advertising, focusing instead on user privacy and minimal data collection. Overall, Zartbitter e.V. presents a trustworthy, professional online presence appropriate for a sensitive non-profit mission. Strategic improvements could include publishing a security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen trust and compliance.

S

SCHWING Stetter

schwing.de

49

SCHWING Stetter is a well-established German manufacturer specializing in concrete machinery and equipment, including truck-mounted concrete pumps, mixers, stationary pumps, and mixing plants. The company serves the construction industry globally with a broad product portfolio and after-sales services. Their website reflects a professional and consistent brand presence, targeting construction professionals and equipment buyers. The site is built on TYPO3 CMS and employs modern web technologies with a focus on privacy, as evidenced by the use of Matomo analytics and a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and domain registration consistent with the business history. However, there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

D

DJK Landesverband NRW e.V.

vollwertsport.de

46

The website www.vollwertsport.de represents the DJK Landesverband NRW e.V., a small non-profit organization focused on promoting values in sports through seminars, events, and educational products. The site serves a niche audience interested in sports education and community engagement within the NRW region of Germany. The business model revolves around non-profit activities supplemented by an e-commerce shop offering value-based sports products. Technically, the site is built on a modern WordPress platform using WooCommerce and Avada theme, with SEO and cookie consent mechanisms properly implemented. Security posture is good with HTTPS and cookie consent, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and legal pages. No critical security or content safety issues were detected.

D

DJK Sportjugend

djk-sportjugend.de

61

DJK Sportjugend is a German non-profit youth sports organization affiliated with the Catholic DJK-Sportverband. It focuses on inclusive youth work, social and cultural diversity, and prevention initiatives such as anti-racism and sexualized violence prevention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of young people and sports communities. Technically, the site uses modern web technologies and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a strong legitimacy score.

S

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau)

djk-spandau.de

47

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau) is a German non-profit sports club offering a variety of sports activities such as badminton, boule, gymnastics, Nordic walking, skate biathlon, sports shooting, table tennis, volleyball, and archery. The club targets local community members including children, adults, and people interested in inclusive sports programs. The website reflects a well-structured and accessible platform with clear navigation and content relevant to its audience. It maintains partnerships with reputable sports organizations, enhancing its community presence and trustworthiness. Technically, the website is built on Joomla CMS with modern web technologies including Bootstrap and jQuery. It is hosted on servers associated with kasserver.com and employs HTTPS with a cookie consent mechanism compliant with GDPR. Accessibility features such as screen reader support and contrast modes are implemented, indicating a commitment to inclusive design. Performance is moderate with good mobile optimization. From a security perspective, the site uses HTTPS and cookie consent banners but lacks visible security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate hosting setup. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk assessment is low with recommendations to enhance security headers, add incident response contact information, and maintain regular updates to Joomla and plugins. The website is professional, trustworthy, and compliant with privacy regulations, serving its community effectively.

S

SiteCockpit

sitecockpit.com

55

SiteCockpit is a professional SaaS provider specializing in digital accessibility solutions, offering products such as accessibility widgets, monitoring tools, and statement generators. The company targets businesses and website owners aiming to comply with accessibility regulations and improve user experience. Their market position is that of a specialized technology provider with integrations across major CMS and e-commerce platforms. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates with HubSpot for marketing and analytics, and uses Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website is well-designed, mobile-optimized, and GDPR-compliant, supporting a high level of trust and professionalism. However, the absence of WHOIS data slightly reduces transparency and trustworthiness. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and incident response contacts to enhance security posture and trust.

H

Hagemeister GmbH & Co. KG

hagemeister.de

62

Hagemeister GmbH & Co. KG is a German manufacturing company specializing in clinker bricks, including facade clinker, paving clinker, shaped clinker, and functional clinker bricks. The company targets architects, builders, and construction professionals, providing high-quality building materials that contribute to aesthetic and functional construction projects. Their website reflects a professional and consistent brand image with a clear focus on their product offerings and services. Technically, the website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager, HubSpot, and Cookiebot for analytics, marketing, and cookie consent management. The site is mobile-optimized with good SEO and accessibility features, providing a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not found, which could be improved. The domain registration data is consistent with the business identity, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security policy transparency and technical performance could further enhance trust and resilience.

E

Evangelische Kirche von Westfalen

kirchenrecht-westfalen.de

62

The website kirchenrecht-westfalen.de serves as an official online legal reference system for the Evangelical Church of Westphalia, providing comprehensive access to church laws, ordinances, and related legal documents. It targets church officials, legal professionals, and members interested in church law. The platform offers systematic navigation, search functionality, and downloadable e-book formats, positioning itself as a trusted resource within its niche. Technically, the site employs Bootstrap for responsive design, Font Awesome for icons, and Matomo (Piwik) for analytics, indicating a modern and privacy-conscious infrastructure. Hosting is managed by SchlundTech, a known German hosting provider. The site is mobile-optimized with good navigation clarity and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting GDPR awareness. However, no explicit privacy policy, terms of service, or security headers were detected, suggesting areas for compliance and security enhancement. No vulnerabilities or suspicious content were found, and the domain registration aligns well with the church's identity, supporting legitimacy. Overall, the site is a professional, secure, and trustworthy resource for church law, with recommendations to improve privacy disclosures and security headers to enhance compliance and user trust.

D

Domain-Offensive

do.de

77

Domain-Offensive is a German-based domain registration and web hosting provider offering affordable, secure, and climate-neutral services including domain hosting, webspace, DNS, SSL, and email solutions. The company operates under Greenmark IT GmbH and targets individuals and businesses seeking reliable web project partners. The website demonstrates a mature digital infrastructure built on WordPress with Elementor and Yoast SEO, optimized for performance and mobile responsiveness. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a comprehensive cookie consent mechanism compliant with GDPR. While explicit security headers could be enhanced, the overall security posture is solid with no evident vulnerabilities. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

Oranto GmbH

studienplattform.ch

53

Oranto GmbH operates the Studienplattform.ch, a specialized software platform designed to facilitate clinical and non-clinical studies with integrated CMS, CRM, and LMS capabilities. The company positions itself as a niche provider with a decade of experience, offering tailored study design and management solutions primarily targeting research institutions and clinical study leaders. The platform emphasizes data protection and GDPR compliance, catering to a German-speaking audience with professional and clear content presentation. Technically, the website is built on TYPO3 CMS and employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Overall, the website demonstrates a mature digital presence with good usability and trustworthiness, though cookie consent and formal security policies could be enhanced for full compliance.

O

Oranto GmbH

study-platform.eu

49

Oranto GmbH operates the Study-Platform.eu website, offering a comprehensive software solution for clinical and non-clinical study management. Their platform integrates survey systems, content management, participant management (CRM), learning management (LMS), and statistical monitoring tools, emphasizing GDPR compliance and data protection. The company targets researchers and organizations requiring flexible, customizable study design and execution tools. The website reflects a niche market position with a decade of experience in customized study software development. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, accessible, and well-structured with good SEO practices. However, some improvements are needed in cookie consent mechanisms and publishing security policies. From a security perspective, the site uses HTTPS with good SSL configuration and avoids third-party API integrations, reducing attack surface. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security headers and incident response information suggests room for enhancement in security posture. WHOIS data is unavailable due to EURid privacy policies, which is common but slightly reduces transparency. Overall, the website presents a professional, trustworthy front for a small technology company specializing in study software solutions. Strategic recommendations include implementing cookie consent, publishing terms and security policies, adding security headers, and providing vulnerability disclosure contacts to strengthen compliance and trust.

G

Greystyle.com

greystyle.com

44

Greystyle.com is a small German-based graphic and web design company established since 2002, specializing in clean programming solutions and elegant design. Their market position is niche-focused, serving clients primarily in the cultural and ecclesiastical sectors in Germany. The website showcases a comprehensive portfolio of projects, emphasizing CMS development, corporate design, and print media. Technically, the site uses XHTML, JavaScript libraries including jQuery and Highslide, and Matomo for analytics, but includes some outdated Flash content. Security posture is moderate with privacy policies in place and anonymized analytics, but lacks visible security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional presentation. Overall, the site is functional and trustworthy but would benefit from modern security and privacy enhancements.

F

FRAMETRAXX UG (haftungsbeschränkt)

frametraxx.de

54

FRAMETRAXX UG operates a specialized e-commerce platform offering royalty-free (gemafreie) music for various applications including YouTube, advertising, film, and commercial use. The company targets content creators, agencies, and businesses seeking legally secure music licensing solutions. Their market position is that of a niche provider with a comprehensive catalog and clear licensing models, supported by a professional website and trusted client logos. Technically, the website is built on the Gambio e-commerce platform with modern JavaScript libraries and Google Tag Manager integration, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

D

Deutsche Atlantische Gesellschaft e.V.

ata-dag.de

38

The Deutsche Atlantische Gesellschaft e.V. is a German non-profit organization dedicated to informing and engaging the public on German and European security policy, NATO objectives, and transatlantic relations. The organization operates through events, seminars, lectures, podcasts, and publications, targeting individuals and entities interested in security and defense topics. Their market position is that of an established, reputable non-profit within the government and policy sector in Germany. Technically, the website is built on WordPress, utilizing common libraries such as jQuery, Bootstrap, and Font Awesome, with SEO optimization via Yoast. Hosting appears to be managed through kasserver.com. The site is moderately performant, mobile-optimized, and includes analytics via Matomo, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, alongside a cookie consent mechanism. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for the organization, with good content quality and business credibility. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust.

B

Brangs + Heinrich

brangs-heinrich.de

55

Brangs + Heinrich is a German-based company specializing in packaging solutions, including stretch films and other protective packaging materials. The company targets business customers requiring packaging and securing products, positioning itself as a solutions provider in the manufacturing sector. The website is built on WordPress with a moderate technical infrastructure, including common plugins for multilingual support, forms, and search functionality. The use of Cookiebot for cookie consent demonstrates a commitment to privacy compliance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and incident response information is absent. Overall, the website is professional and trustworthy, with room for improvement in explicit contact information and security policies.

S

Sachsenröder GmbH & Co. KG

sachsenroeder.com

61

Sachsenröder GmbH & Co. KG is a well-established German manufacturing company specializing in innovative natural fiber-based materials such as Vulkanfiber SAVUTEC® and Laufrollen GESADUR®. Founded in 1881, the company holds a strong market position as a pioneer in sustainable industrial materials, offering products that contribute to environmental responsibility and high performance. Their website reflects a professional and consistent brand image, targeting industrial and sustainability-conscious audiences. Technically, the site is built on WordPress with modern plugins for SEO, translation, and cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact and business information.

I

Institut der deutschen Wirtschaft

iwd.de

45

The website www.iwd.de serves as the information service of the Institut der deutschen Wirtschaft, providing up-to-date economic analyses, research results, and background information on current economic topics primarily focused on Germany and Europe. It targets professionals, policymakers, academics, and the general public interested in economic affairs. The business model revolves around disseminating economic knowledge through articles, dossiers, newsletters, and interactive graphics, positioning itself as a reputable and authoritative source in the German economic research landscape. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript, CSS, and integrates analytics tools such as Matomo and Google Tag Manager. It employs Usercentrics for GDPR-compliant consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine visibility. Hosting is managed via domaincontrol.com (GoDaddy), a common and reliable provider. From a security perspective, the website enforces HTTPS with a strong SSL configuration and uses consent management for cookies, reflecting good privacy practices. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The site demonstrates a moderate to high security posture but could enhance transparency and technical security controls. Overall, www.iwd.de is a professional, trustworthy, and content-rich platform with strong compliance to privacy regulations and a solid technical foundation. Strategic recommendations include implementing security headers, publishing a security policy and incident response information, and adding a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen the site's security posture and trustworthiness.