Germany security reports

The website arbeitgebernet.de serves as a members-only portal for the Vereinigung Bergischer Unternehmerverbände e.V. (VBU®), a regional business association in Germany. It provides comprehensive resources and tools to support employers in areas such as labor law, social law, tariff agreements, personnel management, and economic data. The portal targets member companies, offering them access to categorized documents, newsletters, surveys, and seminar registrations. The business model is membership-based, focusing on delivering specialized content and services to its audience. The website maintains a professional and consistent brand presence, reinforcing trust among its users. Technically, the site employs a traditional web stack with jQuery UI, Modernizr, and Piwik (Matomo) for analytics. The site is moderately optimized for mobile devices and performance, with deferred script loading and responsive images. However, it lacks advanced security headers and publicly visible privacy or cookie policies, which are critical for compliance and user trust. The login form collects user credentials securely via HTTPS, but no explicit security policies or incident response contacts are provided. From a security perspective, the site benefits from HTTPS and basic best practices but misses opportunities to enhance security posture through headers and transparency about data protection. The absence of privacy and cookie policies, as well as vulnerability disclosure information, indicates gaps in compliance with GDPR and modern security standards. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, arbeitgebernet.de is a professionally maintained portal with solid business credibility but requires improvements in privacy compliance and security transparency to meet higher standards. Strategic enhancements in these areas will strengthen user trust and regulatory adherence.

C

Cruise Gate Hamburg GmbH

cruisegate-hamburg.de

49

Cruise Gate Hamburg GmbH operates the cruise terminals in Hamburg, managing berth allocations and serving as the central contact for cruise operators. The company also markets Hamburg as a cruise destination internationally. The website is professionally designed, primarily in German, and targets cruise operators, passengers, and tourism stakeholders. Technically, the site uses modern JavaScript libraries such as jQuery and Video.js, with a CMS likely Kirby. It is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact is mainly via forms, with no direct emails or phone numbers visible. Social media presence is strong, enhancing trust and engagement.

H

Hamburg Port Authority (HPA)

tideelbe.info

54

The website www.tideelbe.info serves as an informational blog managed by the Hamburg Port Authority (HPA), focusing on sediment management and the Tideelbe river to ensure navigable water depths for ships in Hamburg's harbor. It provides news, analyses, and downloadable reports targeted at the general public and stakeholders in maritime transport and environmental sectors. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on TYPO3 CMS, a reputable open-source content management system, and employs Matomo analytics configured to respect user privacy by disabling cookies and honoring DoNotTrack signals. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. However, no explicit cookie consent mechanism was detected, which may impact full GDPR compliance. From a security perspective, the site uses HTTPS and shows good security practices, but lacks visible security headers and published security policies or incident response contacts. The WHOIS data for the domain is unavailable or protected, limiting transparency and trust verification, though the official branding and content quality mitigate some concerns. Overall, the website presents a trustworthy and professional platform for disseminating port-related environmental information, with moderate technical and privacy compliance maturity. Strategic improvements in cookie consent, security policy publication, and WHOIS transparency would enhance its security posture and user trust.

I

Industrie – Wasser – Umweltschutz e.V.

iwu-dueren.de

45

Industrie – Wasser – Umweltschutz e.V. (IWU) is a regional non-profit association serving industrial companies with a focus on environmental law and water management. The organization provides legal advice, administrative procedure support, environmental policy representation, and training for environmental officers. It collaborates closely with regional industry associations and municipalities, positioning itself as a key environmental service provider in its region. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the site is built on WordPress with Visual Composer and uses standard web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Overall, the site is trustworthy and compliant with GDPR, though improvements in security practices and transparency could enhance its posture.

H

Haus der Industrie

hausderindustrie.de

40

Haus der Industrie is a German-language website likely representing an industrial or business entity, though explicit business details are not present in the accessible content. The site uses WordPress with common plugins such as Bootstrap and Visual Composer, indicating a standard CMS-based infrastructure. The technical setup is moderate with basic mobile optimization and no advanced analytics or marketing tools detected. Security posture is basic, with HTTPS enabled but lacking security headers and visible security policies. No privacy or cookie policies were found, and no contact information is provided, limiting user trust and compliance. Overall, the site is accessible and functional but lacks comprehensive business and security information.

V

Vereinigte Industrieverbände von Düren, Jülich, Euskirchen und Umgebung e.V.

extraviv.de

38

The website extraviv.de serves as a members-only information portal for the Vereinigte Industrieverbände von Düren, Jülich, Euskirchen und Umgebung e.V., a regional industry association in Germany. It provides employers and association members with access to documents, newsletters, event information, and other resources relevant to their business operations and networking. The site is primarily in German and targets local employers within the manufacturing and non-profit sectors. Technically, the site uses a custom or unknown CMS with JavaScript libraries such as jQuery UI and Modernizr, hosted on servers associated with kasserver.com. The design is professional and consistent, though mobile optimization and accessibility are basic. Security posture is moderate with a login form secured by POST but lacks advanced security headers and cookie consent mechanisms. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's business purpose, indicating legitimacy. Overall, the site scores well on business credibility and content quality but could improve technical implementation and security practices.

Internet Port Hamburg GmbH (IPHH) is a medium-sized German technology company specializing in datacenter solutions, colocation, managed services, and fiber optic network connectivity exclusively for business customers. Founded in 1996 and operating under the parent company Portus Data Centers Company, IPHH positions itself as a reliable partner offering customized infrastructure and consulting services tailored to enterprise needs. The website reflects a professional and consistent brand image with detailed service descriptions and certifications such as ISO/IEC 27001 and Health Data Hosting (HDS) France, underscoring its commitment to security and compliance. Technically, the website is built on the Contao Open Source CMS platform and leverages modern JavaScript libraries like jQuery, Swipe.js, and Colorbox for enhanced user experience. The site is mobile-optimized with good navigation clarity and moderate performance. However, there is room for improvement in accessibility and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and cookie consent mechanisms suggests areas for enhancement. The WHOIS data for the domain www.iphh.net is unavailable, which raises some concerns about domain registration transparency. Despite this, the website content, certifications, and contact information indicate a legitimate and established business. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, IPHH demonstrates a mature digital presence with a strong focus on security and customer service, though improvements in privacy compliance and domain registration transparency are recommended.

Internet Port Hamburg GmbH (IPHH) is a medium-sized German company founded in 1996, specializing in providing colocation, housing, managed services, and IP/fiber optic connectivity exclusively to business customers. Positioned as a reliable full-service provider, IPHH emphasizes personalized service, technical excellence, and compliance with industry standards such as ISO/IEC 27001 and Health Data Hosting (HDS) certifications. Their business model focuses on B2B enterprise clients requiring secure and customized data center solutions. The website reflects a professional and consistent brand image with clear contact information and detailed service offerings. Technically, the website is built on the Contao Open Source CMS and utilizes modern JavaScript libraries such as jQuery, Swipe.js, and Colorbox for enhanced user experience. The site is mobile-optimized with good navigation clarity and moderate performance. SEO and accessibility are basic but adequate for the target audience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and cookie consent mechanisms are missing. The security posture is bolstered by the company's ISO certifications and clear emphasis on data center security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website and business present a trustworthy and professional image with room for technical and compliance enhancements. Strategically, IPHH should verify and publish domain registration details, implement cookie consent mechanisms, and provide clear incident response contacts to strengthen security culture and regulatory compliance. These steps will improve customer trust and align with best practices in data protection and cybersecurity.

S

STORK Umweltdienste GmbH

stork-umwelt.de

46

STORK Umweltdienste GmbH is a medium-sized German company specializing in recycling, waste disposal, and raw material recovery with over 30 years of experience. The company operates from Magdeburg with a strong focus on environmental sustainability, supported by ISO 14001 certification. Their services include recycling, container services, mobile processing technology, and logistics leveraging trimodal transport connections. The website is professionally designed using TYPO3 CMS, providing clear navigation and multilingual support. Contact information and social media presence enhance business credibility. Security posture is good with HTTPS and cookie consent mechanisms, though no explicit security policy or incident response contacts are published. Overall, the website reflects a trustworthy and established business with a solid digital presence.

K

Kath. St. Marien - Oberschule Berlin

marienschule-berlin.de

59

Kath. St. Marien - Oberschule Berlin is a Catholic secondary school located in Berlin Neukölln, Germany, offering integrated secondary education and gymnasium programs. The website serves as an information platform for students, parents, and the local community, providing details about school life, events, job offers, and administrative services. The school is sponsored by the Archdiocese of Berlin, which is reflected in the website's branding and partner links. Technically, the site is built on Joomla CMS with modern web technologies including jQuery and Bootstrap, and it incorporates GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

K

Katholische Schule Sankt Franziskus

kssf-berlin.de

58

Katholische Schule Sankt Franziskus is a well-established Catholic educational institution in Berlin offering primary, integrated secondary, and gymnasiale oberstufe education. The website reflects a mature digital presence with comprehensive content, including news, events, and detailed service information for students and parents. The technical infrastructure is based on Joomla CMS with modern web technologies and good mobile optimization. Security posture is solid with HTTPS, GDPR-compliant cookie consent, and no evident vulnerabilities. However, some security headers could be improved. Overall, the site is trustworthy and professionally maintained, supporting the school's long-standing reputation.

K

Katholische Schule Salvator

salvator-grundschule.de

59

Katholische Schule Salvator is a Catholic primary school located in Berlin, Germany, operating under the sponsorship of the Erzbistum Berlin. The website serves as an information portal for parents, students, and the local community, providing news, event updates, and essential school information. The school emphasizes a community-oriented, faith-based educational approach. The website is built on Joomla CMS and incorporates modern web technologies and GDPR-compliant cookie consent mechanisms. It offers clear contact details and regularly updated content, reflecting an active and engaged institution. Security-wise, the site uses HTTPS and cookie consent best practices but lacks explicit security policies or vulnerability disclosures. Overall, the site is trustworthy, professional, and well-maintained, suitable for its educational purpose.

K

Katholische Theresienschule Berlin

theresienschule.de

57

Katholische Theresienschule Berlin is a well-established Catholic educational institution operating under the Archdiocese of Berlin. The website serves as an information hub for students, parents, and the school community, providing news, event updates, and service information. The school emphasizes community engagement and offers a variety of extracurricular activities and workshops. The domain age and content reflect a mature and credible organization with a long history dating back over a century. Technically, the website is built on Joomla CMS with modern web technologies including jQuery and Bootstrap. It features a GDPR-compliant cookie consent mechanism and is served over HTTPS with good security practices. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security headers and formal security policies are missing. From a security perspective, the site demonstrates a solid baseline with HTTPS enforcement and cookie management. There are no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and preparedness. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-maintained, suitable for its educational purpose. Strategic recommendations include enhancing security transparency, adding incident response information, and implementing additional security headers to further harden the site against potential threats.

K

Katholische Schule Sankt Hildegard

kssh-berlin.de

61

Katholische Schule Sankt Hildegard is a recognized Catholic educational institution in Berlin providing primary and secondary education with a focus on children and youth with specific educational needs. The website serves as an information portal for students, parents, and educators, offering news, events, and service information. The school is supported by the Archdiocese of Berlin and holds a digital education certification (fobizz Schule 2024/25). The site is well-structured, professionally designed, and regularly updated with relevant content.

S

Superchat

superchat.de

66

Superchat is a German-based technology company specializing in AI-powered messaging solutions for businesses. Their platform integrates popular communication channels such as WhatsApp Business to streamline customer interactions, automate follow-ups, and enhance sales and support processes. The company targets a broad range of industries and team functions, positioning itself as a comprehensive B2B SaaS provider with a strong focus on GDPR compliance and customer experience. Technically, the website is built on modern frameworks like Next.js and React, hosted on AWS infrastructure, and employs consent management tools to comply with privacy regulations. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not publicly visible. Overall, the site demonstrates professional design, excellent content quality, and strong market positioning, but could improve transparency by publishing privacy policies and security disclosures.

K

Katholische Studierende Jugend

ksjberlin.de

45

KSJ Berlin is a non-profit youth organization focused on engaging students and young people in Berlin through volunteer activities, school participation, and societal involvement. The organization operates as part of the Catholic youth umbrella (BDKJ) but is inclusive of all beliefs. Their website provides information about membership, events, and community platforms such as a Discord server. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Fonts, and is hosted with domain control services. It is mobile optimized and includes SEO best practices. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of youth in Berlin.

okaJ is a small non-profit youth organization based in Berlin, Germany, focused on providing an open, catholic, and active community for young people. The organization supports youth groups within the church, offers networking opportunities, spiritual programs, and volunteer engagement. The website reflects a professional and consistent brand image targeting youth and youth groups in the Berlin area. Technically, the site is built on WordPress with common plugins and uses Google reCAPTCHA for form security. While the site is well designed and user-friendly, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain and website appear legitimate and trustworthy for their stated purpose.

K

KjG Berlin

kjg-berlin.de

56

KjG Berlin is a small non-profit Catholic youth organization based in Germany, focused on engaging young people in community activities, education, and events within the Catholic framework. The website serves as an informational and organizational platform for members and interested parties, providing updates, event information, and contact details primarily via email. The organization maintains a presence on social media platforms such as Instagram and Facebook to reach its target audience. Technically, the website is built on WordPress, utilizing standard web technologies such as PHP, JavaScript, and CSS. The site is served over HTTPS with a valid SSL certificate, ensuring secure communication. While the site demonstrates good mobile optimization and basic SEO practices, it lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security. From a security perspective, the site shows a moderate security posture with HTTPS enabled but missing several security headers and no visible incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent banner is a gap. Overall, KjG Berlin presents a trustworthy and professional online presence for a small non-profit organization. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance compliance and security posture, supporting the organization's credibility and user trust.

J

Jugendverbände der Gemeinschaft Christlichen Lebens - Diözesanverband Berlin

j-gcl.berlin

42

J-GCL Berlin is a small non-profit youth organization focused on Christian community activities within the Berlin region. The website serves primarily as an informational portal presenting the organization's identity, social media presence, and contact email. The business model centers on community engagement and youth involvement in Christian life, positioning itself as a local entity without commercial operations. Technically, the website is built on a simple HTML5 and CSS stack with some JavaScript for UI enhancements, using the HTML5 UP design template and Font Awesome icons. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; while the domain is registered with a reputable German registrar and protected against unauthorized transfers, the site lacks DNSSEC, security headers, and visible HTTPS enforcement details. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the site is safe, with no adult or questionable content, but would benefit from enhanced security and compliance measures.

D

DJK Landesgemeinschaft Berlin e.V.

djk-berlin.de

58

DJK Landesgemeinschaft Berlin e.V. is a regional Catholic sports association in Berlin, Germany, serving approximately 500,000 members across more than 1,000 clubs nationally. The organization focuses on promoting sports activities, events, and community engagement within the Catholic sports community. Their website provides comprehensive information about the association, news, events, and member clubs, targeting members and interested parties in the sports and religious community. Technically, the website is built on AmphiCMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, featuring responsive design and moderate performance. Security posture is solid with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its non-profit mission effectively.

L

Lobbe

lobbe.app

56

Lobbe operates a German-language website providing digital tools and services for waste management, including a personalized waste collection calendar, container ordering, and recycling location information. The company targets residents in German municipalities where it operates, positioning itself as a regional service provider with a medium-sized business profile. The website is built on WordPress with modern plugins and demonstrates good content quality, accessibility, and SEO optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response details could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves its intended audience effectively.

L

Lobbe Containerdienst

containerdienst-lobbe.de

51

Lobbe Containerdienst is a German company specializing in container rental services for various waste types including construction debris and garden waste. The company offers an online platform for customers to order containers easily. The website is built on WordPress using Elementor and incorporates SEO best practices with Yoast SEO and structured data. The technical infrastructure is modern and supports good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled and some privacy measures in place, but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

M

Markt Thüngen

markt-thuengen.de

44

Markt Thüngen is a small municipal government entity located in Unterfranken, Germany, serving approximately 1,450 residents. The website provides comprehensive information about the community, local history, energy infrastructure including solar parks, and municipal services. It positions itself as a modern community rooted in tradition, with a focus on sustainability and local business support. The site is built on a WordPress platform using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure is stable with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Overall, the website is professional, trustworthy, and serves its community well, though improvements in privacy compliance and security policies would enhance its risk profile.

S

Stadtwerke Hammelburg GmbH

stadtwerke-hammelburg.de

53

Stadtwerke Hammelburg GmbH is a regional utility company serving the Hammelburg area in Germany, providing essential services including electricity, gas, water, heat supply, and telecommunications via their HAB-Net DSL service. The company also operates local amenities such as the Saaletalbad swimming pool and parking facilities. Their market position is that of a trusted regional provider with a diversified portfolio catering to both residential and business customers. The website reflects a professional and consistent brand image with clear service offerings and customer support channels. Technically, the site is built on Joomla CMS with modern frontend technologies and includes a comprehensive GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the regional energy and telecommunications sectors.

Z

Zentralverband Deutscher Schornsteinfeger e.V.

zds-schornsteinfeger.de

54

Zentralverband Deutscher Schornsteinfeger e.V. (ZDS) is a well-established German trade union and professional association serving the chimney sweep industry since 1907. The organization provides member services including advocacy, education, publishing, and employment support. The website reflects a mature digital presence with clear navigation, professional content, and active social media engagement. Technically, the site is built on Liferay CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. Security posture is adequate with HTTPS and secure login forms, but lacks visible security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-suited for its target audience of industry professionals and members.

L

LAG Main4Eck

fabuly.de

9

Fabuly.de is a regional discovery platform focused on the Bavarian Untermain area, offering curated content and interactive maps for nature, history, technology enthusiasts, and sustainability advocates. The platform includes a related ecoKompass subsite dedicated to promoting sustainable projects and eco-friendly solutions. The website is professionally designed with consistent branding and good content relevance, targeting a general audience interested in regional exploration and sustainability. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted on servers indicated by the nameservers your-server.de and second-ns domains. Mobile optimization and navigation clarity are good, though accessibility features are basic. Security posture is moderate with no visible security headers or advanced policies, and no cookie consent mechanism is present. WHOIS data is minimal but consistent with a small regional platform. Overall, the site is safe, trustworthy, and compliant with GDPR based on the presence of a privacy policy, but improvements in security headers and contact transparency are recommended.

HÜF-NRW is a regional educational organization providing professional development and training services primarily for technical and administrative staff across 36 cooperating universities in North Rhine-Westphalia, Germany. Their offerings include a broad event program and a comprehensive e-learning platform accessible via ILIAS. The website is built on TYPO3 CMS, leveraging modern web technologies and privacy-conscious analytics through Matomo. The site demonstrates good compliance with GDPR and cookie consent regulations, providing clear contact information and social media presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website reflects a professional and trustworthy educational service with a medium-sized organizational footprint.

R

RWTH Aachen University

git.nrw

53

git.nrw is an educational platform operated under the auspices of RWTH Aachen University, providing a centralized GitLab instance and related services to universities in the NRW region of Germany. The platform supports version control, issue tracking, CI/CD, and offers educational courses and profiling quizzes to enhance learning experiences. The website is professionally designed with excellent content quality and clear navigation, targeting students and experts within the academic community. Technically, the site uses modern static site generation with Hugo, Tailwind CSS, and JavaScript modules, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy consent mechanisms implemented, though explicit security policies and vulnerability disclosure mechanisms are absent. WHOIS data confirms the domain's legitimacy and university affiliation, reinforcing trustworthiness. Overall, git.nrw represents a credible, well-maintained educational service with strong technical and privacy compliance foundations.

Uniatlantico Shipping GmbH & Co. KG is a Hamburg-based shipping company established in 2004, providing diversified maritime services including shipmanagement, chartering, liner service, forwarding, and agency. The company serves clients across agriculture, construction, mining, oil & gas, and renewable sectors, positioning itself as a medium-sized player with a global footprint and multiple offices worldwide. The website reflects a professional and consistent brand image with clear service offerings and fleet information. Technically, the site uses a Contao CMS with jQuery and Typekit fonts, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not publish security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and business credible, though improvements in security and privacy practices are recommended.

R

REYTAN VODKA GmbH

reytan-vodka.com

50

REYTAN VODKA GmbH is a small premium vodka brand established in 2023, emphasizing Polish heritage and high-quality craftsmanship. The company operates an e-commerce enabled website built on WordPress with WooCommerce and Elementor, targeting adult consumers interested in premium alcoholic beverages. The website features age verification and GDPR-compliant cookie consent mechanisms, reflecting a mature approach to regulatory compliance. Technically, the site is hosted by Hetzner Online GmbH, uses HTTPS, and integrates Google Analytics for traffic insights. Security posture is solid but could be improved with additional HTTP security headers and published security policies. Overall, the site presents a professional and trustworthy brand image with clear contact information and social media presence.

H

Hanse Business Travel GmbH

hanse-bt.de

54

Hanse Business Travel GmbH is a Hamburg-based company specializing in corporate travel management services since 1995. The company offers a wide range of services including marine travel, business trips, group travel, limousine and transfer services, hotel bookings, car rentals, travel insurance, visa processing, private jet services, and travel tools. Their market position is that of a trusted, experienced travel service provider focused on personalized and professional customer service for business clients. Technically, the website is built on WordPress using the Oxygen Builder framework, enhanced with modern JavaScript libraries such as GSAP and AOS for animations, and optimized for performance with WP Rocket. The site is mobile-friendly, well-structured, and SEO-optimized, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not visibly configured, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website presents a professional and trustworthy online presence with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to further strengthen trust and security maturity.

A

Anschütz GmbH

anschuetz.com

69

Anschütz GmbH is a well-established German company specializing in maritime navigation systems, including gyro compasses, integrated bridge systems, autopilots, and radar systems. With over 100 years of expertise, it serves a global maritime audience including commercial shipping, naval forces, and specialized vessels. The company operates multiple subsidiaries internationally, reflecting a medium-sized enterprise with a strong market position in the transportation sector. The website is professionally designed, content-rich, and optimized for user experience and SEO, leveraging TYPO3 CMS and modern web technologies. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR adherence. Security posture is good with HTTPS and privacy-respecting analytics, though some security headers and explicit policies could be improved. The absence of WHOIS registration data is a notable concern, suggesting a need for further verification of domain legitimacy. Overall, the site reflects a credible and professional business presence with minor gaps in transparency and security documentation.

MACS Maritime Carrier Shipping GmbH & Co. is a well-established shipping company with over 35 years of experience, specializing in multipurpose maritime cargo transport across Southern Africa, Europe, the UK, and the USA/Mexico. The company operates a fleet equipped with cranes capable of handling diverse cargo types, emphasizing professional, timely, and personalized service. The website reflects a mature digital presence built on ASP.NET Web Forms and DNN CMS, incorporating modern JavaScript libraries and Bootstrap for responsive design. Privacy and cookie compliance are well addressed with clear policies and consent mechanisms. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. The missing WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the site is professional, user-friendly, and business-focused, serving a global shipping clientele.

H

Heinrich Wegener & Sohn Bunkergesellschaft m.b.H.

wegener-bunker.de

43

Heinrich Wegener & Sohn Bunkergesellschaft m.b.H. is a specialized German company providing marine fuels and lubricants worldwide, with a strong reputation built over more than 50 years. The company emphasizes quality, sustainability, and certified standards such as ISO 9001 and IMPA membership. Their target audience includes maritime shipping companies and related stakeholders. The website is built on TYPO3 CMS with Bootstrap and jQuery, featuring a professional design and good mobile responsiveness. Matomo analytics is used with privacy-conscious settings disabling cookies. Security posture is solid with HTTPS and some privacy measures, but lacks advanced security headers and formal incident response disclosures. Contact information is comprehensive with multiple phone numbers but no public emails or contact forms. Overall, the site is trustworthy and business-focused with room for improvement in privacy and security transparency.

I

IBT Bunkering & Trading

ibtbunker.com

44

IBT Bunkering & Trading is a well-established global bunker trader based in Hamburg, Germany, with over 45 years of market presence. The company specializes in marine fuel supply, offering services such as spot trading, formula-based contracts, and price hedging to shipping companies worldwide. Their business model focuses on building long-term, reliable relationships with clients and suppliers, supported by a strong network and industry memberships. Technically, the website employs modern web technologies including Bootstrap and JavaScript, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled and domain registration is stable, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security practices would strengthen its posture.

H

Hamburg Port Authority

hamburg-port-authority.de

47

Hamburg Port Authority (HPA) is a large public entity managing the port infrastructure of Hamburg since 2005. It provides comprehensive services including infrastructure planning, port safety, traffic management, and real estate management. The website reflects a mature digital presence with a structured navigation system, multilingual support, and integration of modern web technologies such as TYPO3 CMS and video content. The organization maintains active social media channels and uses consent management and analytics tools to monitor user engagement. Security posture is strong with HTTPS and security headers in place, though privacy policy documentation and incident response contacts could be improved. Overall, the site is professional, trustworthy, and serves a broad audience including port users, residents, and business partners.

V

Vereinigte Industrieverbände von Düren, Jülich und Euskirchen e.V.

vivdueren.de

10

The Vereinigte Industrieverbände von Düren, Jülich und Euskirchen e.V. is a well-established regional industrial association representing multiple manufacturing sectors including paper, metal, textile, and chemical industries. The organization provides a broad range of services such as labor law consultation, compliance management, social and tariff policy advocacy, and educational programs aimed at supporting its member companies. Their website reflects a professional and consistent brand presence with clear communication of their mission and services, targeting regional industrial businesses and stakeholders. Technically, the website is built on WordPress using modern plugins like Slider Revolution, WPBakery Page Builder, and Yoast SEO, hosted likely by NetCologne. The site is mobile optimized, SEO-friendly, and includes structured data for enhanced search engine understanding. Security measures include HTTPS enforcement and a cookie consent mechanism, with indications of Wordfence security plugin usage, though some security headers are missing. From a security perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contacts, which could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-compliant cookie consent. Overall, the website is trustworthy, professionally maintained, and serves its business purpose effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

V

Vereinigung Bergischer Unternehmerverbände e.V.

vbu-net.de

55

The Vereinigung Bergischer Unternehmerverbände e.V. (VBU®) is a regional employer association in Germany representing 560 companies and approximately 60,000 employees. The organization provides legal representation, public relations, personal management consulting, and networking services primarily targeting small and medium-sized enterprises in the Bergisch region. The website is professionally designed, content-rich, and well-structured, offering news, events, and detailed service descriptions. Technically, the site is built on WordPress with modern plugins for SEO and cookie consent, ensuring good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Overall, the site demonstrates high business credibility and trustworthiness with no critical vulnerabilities detected.

Z

Zukunftsindustrie.de

zukunftsindustrie.de

53

Zukunftsindustrie.de is a German career portal focused on the metal and electrical industries, emphasizing opportunities in the energy transition and high-tech sectors. The website serves as an information hub and job portal targeting professionals and job seekers interested in these industries. The platform is positioned as a niche resource supporting industry growth and workforce development in Germany. Technically, the site is built on ASP.NET Web Forms, uses Cookiebot for GDPR-compliant cookie management, and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. Hosting is managed via internet1.de, with proper SSL and security headers implemented, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, CSRF protections, and cookie consent mechanisms, though the site lacks a publicly available security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate tracking and advertising transparency. Recommendations include publishing explicit security and incident response policies, improving accessibility, and maintaining regular audits of third-party scripts to enhance security further.

D

Die Arbeitgeber der Metall- und Elektroindustrie

standort-staerken.de

10

The website 'Standort stärken – Tarifrunde 2024' serves as an official communication and campaign platform for the employers of the metal and electrical industry in Germany. It provides timely news, videos, data, and event information related to the 2024 collective bargaining round. The site targets industry stakeholders and employers, positioning itself as a trusted source for campaign updates and industry insights. The business model focuses on information dissemination and stakeholder engagement within the manufacturing sector. Technically, the website is built on WordPress, utilizing common plugins such as Contact Form 7 and Google reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, with external widgets from Elfsight enhancing social media integration. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Social media links and official branding contribute to business credibility. Overall, the website presents a professional and trustworthy front for its intended audience, with moderate technical maturity and a solid security baseline. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance its posture and trustworthiness.

I

Industrieverband Steine und Erden Baden-Württemberg e.V.

azubiste.de

51

The website www.bockaufsteine.de serves as an educational and promotional platform for vocational training in the stones and earths industry in Baden-Württemberg, Germany. It is operated by the Industrieverband Steine und Erden Baden-Württemberg e.V., an industry association. The site provides detailed information about various professions, training paths, and career opportunities, targeting young people interested in apprenticeships. The business model focuses on industry promotion and education rather than direct commercial services. Technically, the website is built on a simple CMS (cumodis simple cms) and uses standard web technologies such as HTML5, CSS3, and JavaScript. It is hosted on German UI-DNS nameservers and employs HTTPS with good SSL configuration. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. However, it lacks advanced SEO features, accessibility enhancements, and modern frameworks. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers, incident response policies, vulnerability disclosure mechanisms, and contact information for security issues. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy for its intended audience. It demonstrates good privacy compliance and business credibility but could improve its technical and security posture by adding security headers, explicit policies, and contact details. The domain WHOIS data is minimal but consistent with the business purpose, supporting legitimacy.

T

Transportbeton-Fahrerschulung

btb-fahrerschulung.de

53

The website www.btb-fahrerschulung.de serves as a multilingual educational platform dedicated to driver training for transport concrete vehicles, operated under the auspices of the Bundesverband Transportbeton. It offers structured learning materials including videos, checklists, and quizzes aimed at improving driver knowledge and safety. The site targets transport concrete vehicle drivers primarily in Germany and surrounding regions, providing content in multiple languages to accommodate diverse users. Technically, the site is built on WordPress with WPML for multilingual support, hosted on Hetzner servers, and employs Matomo analytics for privacy-conscious user tracking. The design is professional and mobile-optimized, with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, though security headers are not evident and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, though improvements in security and privacy transparency are recommended.

B

Bundesverband Transportbeton

betonwissen.de

54

BetonWissen is an educational and informational platform affiliated with the Bundesverband Transportbeton, serving the transport concrete industry in Germany. The website consolidates training and knowledge resources targeted at professionals in this niche sector. Technically, the site is built on WordPress and hosted by Hetzner, a reputable German hosting provider, indicating a stable and professional infrastructure. The website demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy page detected. Business credibility is strong due to clear affiliation with a recognized industry association, but contact information is not readily found in the provided content. Overall, the site is professional and trustworthy but could improve in privacy transparency and security best practices.

U

Universität Duisburg-Essen

uni-due.de

57

The Universität Duisburg-Essen is a prominent German university offering a wide range of educational and research services. The website reflects a well-established institution with a clear focus on serving students, researchers, alumni, and staff. It provides comprehensive information about study programs, research activities, campus life, and international cooperation. The university maintains a strong digital presence with official social media channels and updated news content. Technically, the website is built on the IMPERIA CMS platform and uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It incorporates MathJax for mathematical content rendering. The site is mobile-optimized and accessible, with good SEO practices evident. However, some modern security headers and explicit security policies are not visible, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS (implied by domain and standard practice, though SSL details are not explicit in the data). No WAF or blocking mechanisms were detected, and no critical vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is supported by a comprehensive GDPR privacy policy, but cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is professional, trustworthy, and well-maintained, suitable for its educational mission. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance.

E

Evangelische Kirche in Mitteldeutschland (EKM)

wahlen-ekm.de

45

The website www.wahlen-ekm.de serves as an informational and organizational platform for the Evangelical Church in Central Germany (EKM) focusing on the 2025 church council elections (GKR-Wahl). It provides comprehensive resources including election preparation, candidate search, voting procedures, and educational materials for church members and candidates. The site targets church community members and volunteers, supporting their engagement in church governance. The organization is a medium-sized non-profit religious entity with a strong regional presence in Germany. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Slick Carousel, and Piwik/Matomo analytics. It is hosted on eastlink.de servers and demonstrates good mobile responsiveness and SEO practices. However, no explicit CMS was detected. Performance is moderate with room for optimization, and accessibility is basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. Privacy compliance is partial; a privacy policy exists but no cookie consent mechanism was detected. User tracking is moderate via Piwik/Matomo analytics. Overall, the website is professional, trustworthy, and well-aligned with its organizational mission. Strategic improvements include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to strengthen compliance and user trust.

I

Internationaler Audiodienst (iad)

audiodienst.de

57

Internationaler Audiodienst (iad) is a specialized media service provider focused on producing radio contributions, podcasts, and media training primarily for evangelical church organizations and private radio stations in central Germany. The company offers a comprehensive service model including consulting, production, moderation, and publication of audio content. Their market position is niche and regionally focused, serving clients such as the Evangelische Kirche in Mitteldeutschland and private broadcasters in Thüringen and Sachsen-Anhalt. The website reflects a professional and consistent brand image with good content quality and clear navigation.

D

Domain-Offensive

domainoffensive.de

77

Domain-Offensive is a German-based domain registration and web hosting provider offering affordable, secure, and climate-neutral services including domain hosting, webspace, DNS, SSL certificates, and email solutions. The company operates under Greenmark IT GmbH and targets individuals and businesses seeking reliable web project support. The website is built on WordPress with modern plugins such as Elementor and Yoast SEO, optimized for performance and mobile responsiveness. Security measures include HTTPS enforcement, GDPR-compliant cookie consent, and Google reCAPTCHA integration for form protection. While no explicit security policy or incident response contacts are published, the overall security posture is strong with good SSL configuration and security headers. The domain registration data aligns well with the business claims, indicating legitimacy and transparency.

O

Oranto GmbH

studienplattform.eu

50

Oranto GmbH operates the Studienplattform.eu website, offering a comprehensive, customizable study platform solution tailored for clinical and non-clinical studies. The platform integrates CMS, CRM, and LMS functionalities with a strong emphasis on GDPR compliance and data protection. The company targets research institutions and organizations requiring flexible, privacy-conscious study management tools. The website reflects a professional, well-structured digital presence with clear business focus and contact transparency. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including HTML5 video and Matomo analytics configured for privacy (cookies disabled). The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. HTTPS is enforced, ensuring secure data transmission. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms could be enhanced. Overall, the website and business present a trustworthy, professional image with moderate technical maturity and good privacy awareness. Strategic enhancements in security transparency and consent management would further strengthen trust and compliance.

O

Oranto GmbH

oranto.ch

56

Oranto GmbH is a small technology service provider specializing in professional web and app development, primarily leveraging the TYPO3 CMS platform. The company targets businesses and organizations seeking enterprise-grade web solutions with a strong focus on customer-oriented consulting and practical implementations. Their market position is that of a niche expert in TYPO3-based enterprise websites, offering a range of services including hosting, SEO, workshops, and training. Technically, the website is built on TYPO3 CMS with modern JavaScript usage and integrates Matomo analytics for user tracking. The site is mobile-optimized with good SEO practices and moderate performance. Hosting details are not explicitly disclosed. The technical infrastructure reflects a mature digital presence suitable for their business model. From a security perspective, the website enforces HTTPS and uses best practices such as asynchronous script loading and no visible sensitive data exposure. However, it lacks visible security headers, a cookie consent mechanism, and formal security or incident response policies. The privacy policy is present but basic, with no explicit GDPR compliance indicators or cookie consent banners. Matomo analytics suggests some privacy-conscious tracking but without explicit user consent mechanisms. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to improve trust and compliance.

E

Evangelische Kirche von Westfalen, Landeskirchenamt

archiv-ekvw.de

44

The Landeskirchliches Archiv der Evangelischen Kirche von Westfalen serves as the central archival institution for the Evangelical Church in Westphalia, Germany. It provides archival services, consultation on document management, family research support, and promotes historical and church-related research. The website is professionally designed, targeting church officials, researchers, and the general public interested in ecclesiastical history. It operates under the parent organization Evangelische Kirche von Westfalen and maintains a clear organizational structure with accessible contact points. Technically, the website is built on TYPO3 CMS with jQuery, reflecting a mature and stable technology stack. The site is mobile-optimized, accessible, and SEO-friendly, although it lacks some modern security headers and cookie consent mechanisms. HTTPS is enforced, ensuring secure communications. The absence of tracking and advertising scripts indicates a privacy-conscious approach. From a security perspective, the site demonstrates good practices with HTTPS and no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in implementing security headers, cookie consent, and publishing security policies. The WHOIS data aligns well with the website's organizational identity, confirming legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and serves its niche audience effectively. Strategic enhancements in security and privacy compliance would further strengthen its posture and user trust.