Germany security reports

O

oikos-Institut

oikos-institut.de

43

The oikos-Institut is a small non-profit organization dedicated to supporting mission and ecumenical work within the Westphalian church region in Germany. The website provides information about their services, events, and educational materials aimed at church communities and related stakeholders. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities and uses Matomo for analytics, reflecting a moderate level of digital maturity. The site is well-designed, mobile-optimized, and offers a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published privacy or security policies. Overall, the domain registration is consistent with the organization's regional and non-profit nature, indicating legitimacy. Strategic improvements include publishing comprehensive privacy and security policies and enhancing security headers to strengthen compliance and trust.

G

Gute Botschafter GmbH

gute-botschafter.de

47

Gute Botschafter GmbH is a German-based medium-sized company specializing in brand positioning and marketing communication services. Their website presents a professional and comprehensive overview of their offerings, targeting primarily medium-sized enterprises and non-profit organizations. The company emphasizes authentic and sustainable brand communication, supported by a multidisciplinary team. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Lottie animations, with Google Tag Manager integrated for analytics and marketing purposes. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and includes a consent mechanism for tracking but lacks explicit privacy and terms of service pages, as well as some security headers, which are areas for improvement. WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, the website scores well on content quality, business credibility, and technical implementation, with moderate scores on security posture and privacy compliance.

E

Evangelische Landeskirche in Württemberg

kirchensteuer-wirkt.de

57

The website kirchensteuer-wirkt.de is an official platform representing multiple regional evangelical churches in Germany, primarily focused on educating and informing about the Kirchensteuer (church tax) and its impact. It provides detailed information on church financing, usage of funds, and offers tools such as a Kirchensteuer calculator. The site targets church members and interested individuals, emphasizing transparency and community engagement. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and incorporates accessibility features, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Kulturkirche St. Stephani

kulturkirche-bremen.de

49

Kulturkirche St. Stephani is a small non-profit cultural organization based in Bremen, Germany, focused on providing a diverse program of cultural events including art exhibitions, concerts, and community activities. The website reflects a well-structured and professionally designed platform that serves its target audience effectively. The organization is affiliated with the Evangelische Studierenden Gemeindschaft and Kirche Bremen, enhancing its credibility and community reach. Technically, the website is built on TYPO3 CMS and utilizes modern JavaScript libraries such as jQuery, Slick Slider, and Masonry for interactive and responsive user experience. The site includes a cookie consent mechanism and integrates Matomo analytics for user behavior tracking, demonstrating a commitment to privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing legitimate domain registration without privacy protection, appropriate for a public cultural entity. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security policies and accessibility. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance to strengthen trust and resilience.

E

Ev.-Luth. Kirche in Oldenburg (ELKiO)

kirchenrecht-oldenburg.de

59

The website kirchenrecht-oldenburg.de serves as the official online legal reference system for the Evangelical Lutheran Church in Oldenburg, Germany. It provides comprehensive access to current and archived church laws, regulations, and related legal documents, targeting church officials, legal professionals, and members of the church community. The site offers search functionality and downloadable e-book formats, supporting transparency and accessibility of church legal frameworks. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, and Matomo (Piwik) for analytics with user consent mechanisms. Hosting is provided by SchlundTech, a known German hosting provider. The site is mobile-optimized with good navigation clarity and SEO practices, though no explicit CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS and implements cookie consent in compliance with GDPR. However, there is no evidence of advanced security headers or a published security policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The site does not appear to use any advertising or affiliate marketing, focusing solely on informational content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It is safe for general audiences and free from adult or questionable content. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

U

United4Rescue – Gemeinsam Retten e.V.

united4rescue.org

58

United4Rescue is a German non-profit alliance dedicated to supporting civilian sea rescue operations in the Mediterranean. The organization connects various societal groups and NGOs to raise awareness and funds to prevent loss of life at sea. Their business model relies on donations, memberships, and fundraising campaigns, supported by an online shop selling branded merchandise. The website is professionally designed, multilingual, and provides clear navigation and relevant content for its humanitarian mission. Technically, the site uses modern tracking and consent tools, hosted by a German provider, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent, though some security headers and DNSSEC could be improved. No direct contact emails or phone numbers are publicly listed, but contact forms and social media channels are available. WHOIS data aligns well with the organization's profile, indicating legitimacy and consistency. Overall, the website is trustworthy, compliant with GDPR, and effectively supports the organization's mission.

D

Deutscher Evangelischer Kirchentag

kirchentag.de

51

The Deutscher Evangelischer Kirchentag website represents a well-established non-profit organization dedicated to organizing large-scale biennial religious and cultural events in Germany. The site provides comprehensive information about upcoming events, community engagement, and volunteer opportunities, targeting a broad audience interested in faith, culture, and social dialogue. The organization maintains a strong market position as a leading event organizer within the German evangelical community. Technically, the website is built on TYPO3 CMS, employs modern web standards, and integrates Matomo analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and provides cookie consent mechanisms, though it lacks visible advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements, making it a reliable digital presence for the organization.

U

Uniper

uniper-digital.de

60

Uniper Digital operates a secure customer login portal leveraging Microsoft Azure B2C identity services. The website serves as an authentication gateway for Uniper's digital energy services, targeting customers and partners in the energy sector. The platform uses modern OAuth2 and OpenID Connect protocols to ensure secure access. The technical infrastructure is robust, hosted on Azure cloud, and employs contemporary JavaScript frameworks and libraries. Security posture is strong with HTTPS enforced and secure token handling, although explicit security headers could be improved. Privacy compliance is limited on the login page, lacking visible privacy and cookie policies. Overall, the site reflects a mature digital presence aligned with corporate branding and security best practices.

B

Brinkmann (a brand within the Putzmeister Group)

estrichboy.de

65

EstrichBoy, a brand within the Putzmeister Group, is a well-established manufacturer and global leader in construction and mining machinery, specializing in concrete and mortar pumping equipment and screed conveyors. The company has a strong European presence and a comprehensive dealer network, supported by professional training and service offerings. The website reflects a mature digital presence with multi-language support and integrated dealer search functionality. Technically, the site is built on the Liferay CMS platform with modern JavaScript frameworks and analytics tools, ensuring a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement, CSP nonce usage, and OAuth2 authentication endpoints, although some security headers could be explicitly verified and enhanced. Privacy compliance is well addressed with clear cookie and data privacy policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's business objectives.

S

SANY Europe

sanyeurope.com

65

SANY Europe operates as a major manufacturer and distributor of construction and port machinery, cranes, and electric trucks targeting the European market. The company maintains a professional digital presence with a multilingual WordPress-based website, dealer portals, and a merchandise shop, indicating a mature business model focused on industrial clients and dealers. The technical infrastructure leverages modern web technologies and analytics tools such as Matomo, providing a solid foundation for digital operations. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies, which could be improved to enhance trust and compliance. The absence of publicly available WHOIS data raises concerns about domain registration transparency, which slightly impacts overall trustworthiness. Overall, the website is professional, content-rich, and safe for general audiences, but could benefit from enhanced privacy and security disclosures.

The website mycybershop.de currently serves as a minimal landing page with very limited content, primarily displaying a logo linked to an external domain (mycybergroup.com). There is no substantive business description, contact information, or user engagement features present. The technical infrastructure is basic, hosted on Schlundtech servers with no visible CMS or modern web technologies. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no privacy or cookie policies, which also impacts GDPR compliance. Overall, the site appears to be either under development or a placeholder rather than a fully operational e-commerce platform. Strategic improvements are necessary to enhance trust, security, and user experience.

Mitteldeutsche Hartstein-Industrie AG is a well-established German company specializing in the production and supply of raw and construction materials, infrastructure construction, recycling, and related services. With a history spanning over 119 years and a network of 42 locations, the company serves primarily business clients in the construction and infrastructure sectors. Their business model focuses on B2B supply and service provision, emphasizing sustainability and quality. The website reflects a professional and consistent brand image, supported by certifications such as Fair Company 2025 and active social media engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and Font Awesome. It integrates analytics tools like Matomo and Google Analytics and uses Google Maps API for location services. The site is mobile-optimized and offers good SEO and accessibility features, although some accessibility improvements could be made. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. The domain registration data is consistent with the company's identity and history, supporting a high trust level. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a credible digital presence for the company. Strategic improvements in security policy transparency and accessibility could further enhance trust and compliance.

V

Verein Deutscher Zementwerke e.V.

vdz.info

69

The Verein Deutscher Zementwerke e.V. (VDZ) operates as a leading research and competence center for the cement, concrete, and environmental protection sectors in Germany. Established in 1877, it serves as a non-profit association providing technical, scientific, and economic-political services including research, certification, consulting, and training to the cement industry and related stakeholders. The website reflects a mature and professional organization with comprehensive service offerings and a strong market position in the energy and manufacturing sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including SVG graphics and asynchronous JavaScript modules for enhanced user experience. It integrates Matomo analytics for privacy-conscious user tracking and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained digital infrastructure. From a security perspective, the site enforces HTTPS and employs secure form handling practices. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the WHOIS data aligns consistently with the website's claims, supporting legitimacy. Overall, the VDZ website demonstrates a high level of professionalism, security, and compliance suitable for its industry and audience. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and stakeholder confidence.

M

Messe Sinsheim GmbH

messe-sinsheim.de

61

Messe Sinsheim GmbH is a medium-sized German company specializing in organizing technically oriented public exhibitions and model building fairs across Germany and Europe. As a wholly owned subsidiary of the Schall-Gruppe, it holds a strong market position in the manufacturing and model building event sector. The website reflects a professional digital presence built on WordPress, leveraging modern plugins and caching technologies to deliver a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response contacts. The domain registration is consistent with the business history and hosting provider, indicating legitimacy and trustworthiness.

The website at tc-tools.de/tools/home/ is a minimal login portal requiring user authentication, with no publicly accessible content or business information. The page uses Bootstrap 5.0.2 for styling and scripts, loaded from a reputable CDN. There are no privacy, cookie, or terms of service policies visible, nor any contact or social media links. The technical infrastructure appears basic but functional, with no detected security headers or HTTPS status information available from the provided data. The WHOIS data indicates the domain is registered with German name servers, consistent with the .de TLD, but lacks detailed registrant information. Overall, the site is safe with no adult or explicit content, but lacks transparency and public-facing business details.

T

TC-Innovations GmbH

leader-shops.de

49

Leader Shops, operated by TC-Innovations GmbH, is a specialized e-commerce coaching platform focused on helping online shop owners achieve market leadership through proven strategies, sales psychology, and expert mentoring. The website is professionally designed, well-structured, and optimized for SEO and mobile devices. It leverages modern web technologies and the Shopware platform to deliver a seamless user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site demonstrates a mature digital presence with strong trust signals such as customer testimonials and industry awards.

R

Religionspädagogisches Institut Loccum

rpi-loccum.de

61

The Religionspädagogisches Institut Loccum (RPI Loccum) is a well-established non-profit educational institution affiliated with the Evangelisch-Lutherische Landeskirche Hannovers in Germany. It specializes in religious pedagogy and theological education, offering a broad range of professional development courses, events, and educational materials primarily targeting religious educators, schools, and church communities. The website reflects a mature organization with a 75-year history, providing comprehensive content and services in German. The business model focuses on education, training, and community engagement within the religious sector.

V

Verband der Metall- und Elektro-Industrie Nordrhein-Westfalen e.V.

metall.nrw

54

METALL NRW is a prominent employer association representing 26 regional employer associations in the metal and electrical industry sectors within North Rhine-Westphalia, Germany. The organization provides key services including labor relations, tariff negotiations, industry campaigns, and support for its approximately 2,100 member companies. The website reflects a professional and well-established entity with a clear market position as a leading regional industry association. Technically, the site is built on TYPO3 CMS, incorporates modern web technologies, and includes accessibility features such as the Eye-Able plugin. It employs Matomo analytics for privacy-conscious user tracking and enforces HTTPS for secure communications. Security posture is solid but could be improved by adding explicit HTTP security headers and incident response information. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the domain WHOIS data is privacy protected, which is justified for this type of organization, and the website content and structure strongly support its legitimacy and trustworthiness.

The website www.eisbein.com represents the Vereinigung Hamburger Schiffsmakler und Schiffsagenten e. V., promoting the traditional Eisbeinessen event held in Hamburg. This event serves as a key networking platform for maritime industry professionals, sponsors, and partners. The site provides detailed event information, partner acknowledgments, and historical context, targeting maritime stakeholders and event attendees. The business model revolves around event organization and sponsorship facilitation within the transportation sector. Technically, the site is built on WordPress using the Enfold theme, incorporating common plugins such as LayerSlider and Cookie Notice for enhanced user experience and compliance. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and an incident response contact. WHOIS data is missing, which slightly reduces trust but the professional site and partner ecosystem support legitimacy. Overall, the site is well-structured, trustworthy, and serves its niche audience effectively.

M

Markgrafenkirchen e.V.

markgrafenkirchen-bayern.de

44

Markgrafenkirchen e.V. is a small non-profit organization dedicated to promoting and preserving the cultural heritage of the Markgrafenkirchen churches in Bavaria, Germany. The website serves as an informational and community engagement platform, offering details about the churches, events, tours, and membership opportunities. It targets cultural tourists, local communities, and history enthusiasts interested in regional heritage. The organization is positioned as a regional cultural promoter with a focus on community involvement and heritage tourism.

K

Kirchenkreis Ansbach-Würzburg

kirchenkreis-ansbach-wuerzburg.de

44

Kirchenkreis Ansbach-Würzburg operates as a regional church district within the Evangelical Lutheran Church in Bavaria, serving multiple communities in Bavaria, Germany. The website provides information about church leadership, events, religious services, and community news. It targets church members and the local community, offering resources and updates relevant to their spiritual and community life. The organization is positioned as a non-profit religious entity with a medium-sized regional presence. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Bootstrap for responsive design and Klaro for cookie consent management. Hosting is provided by kunde24.de, a professional hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of analytics and advertising scripts suggests a privacy-conscious approach. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. The domain registration details are minimal but consistent with the hosting provider, and the website content aligns well with the domain's purpose. There are no indications of malicious activity or content safety concerns.

Digitale Hochschule NRW (DH.NRW) is a collaborative initiative focused on advancing digital transformation within higher education institutions in the German state of North Rhine-Westphalia. The platform supports cooperation among universities, providing shared digital infrastructure, research support, and services such as a centralized GitLab instance (git.nrw), high-performance computing resources, and open-source AI projects. The website reflects a well-established regional educational consortium with official backing from universities and the Ministry of Culture and Science of NRW. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no cookie consent mechanism is present, which are areas for improvement. From a security perspective, the site maintains a solid posture with encrypted connections and no signs of malicious content or vulnerabilities. The WHOIS data is privacy protected, which is common for public sector domains, and the domain's legitimacy is supported by its official university partnerships and government funding. No incident response or vulnerability disclosure policies are published, indicating potential gaps in transparency. Overall, DH.NRW presents a trustworthy, professional, and secure digital presence for a public educational consortium. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security policies, and enhancing accessibility to further strengthen compliance and user trust.

L

Landschaftspflegeverband Miltenberg e. V.

lpv-miltenberg.de

53

Landschaftspflegeverband Miltenberg e. V. is a regional non-profit organization dedicated to the preservation and care of the natural and cultural landscape in the Miltenberg district of Germany. The organization focuses on landscape maintenance, species protection, and community engagement through educational seminars and volunteer activities. Their market position is that of a trusted local environmental steward with a clear mission and active social media presence. Technically, the website employs a moderate technology stack including jQuery, Slick Slider, and Matomo for analytics, hosted on a professional hosting provider indicated by the nameservers. The site is well-structured, mobile-optimized, and includes accessibility features such as the eyeAble tool, reflecting a good level of digital maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, but security headers are not explicitly present, suggesting room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. The risk profile is low with recommendations to enhance security headers and publish security policies to further strengthen trust and compliance.

L

Lokale AktionsGruppe Main4Eck Miltenberg e.V.

main4eck.de

53

Lokale AktionsGruppe Main4Eck Miltenberg e.V. is a recognized local action group supported by the European Union and the Bavarian state, focusing on rural development in the region around Miltenberg and parts of Aschaffenburg in Germany. The organization acts as a key regional stakeholder facilitating projects, monitoring, and networking to promote sustainable development and education, including the educational platform fabuly. The website reflects a professional and consistent brand presence with clear contact information and active news updates. Technically, the site uses a modern but straightforward stack including jQuery, Slick Slider, and Matomo analytics, hosted likely on kasserver.com. Accessibility features and cookie consent mechanisms are implemented, supporting GDPR compliance. Security posture is good with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

A

Ausbildungskostenausgleichskasse im Schornsteinfegerhandwerk (AKS) GmbH

ausbildungskasse.de

53

Ausbildungskostenausgleichskasse im Schornsteinfegerhandwerk (AKS) GmbH is a specialized organization supporting vocational training in the chimney sweep trade in Germany. The company provides financial assistance to businesses that train apprentices in this niche craft, positioning itself as a key industry support entity. The website reflects a professional and consistent brand image, targeting businesses and apprentices within the trade. Technically, the site is built on the webEdition CMS platform and employs a modern frontend stack including jQuery, Bootstrap, and various UI libraries, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit published security policies or incident response information. Overall, the website is well-structured, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and header implementation.

M

MainBogen e.V.

mainbogen.de

48

MainBogen e.V. is a regional non-profit association dedicated to supporting local businesses and community engagement in the Bavarian Untermain region. Their initiatives include a loyalty card program (MainBogen-Card), vouchers redeemable at local shops, and an annual Christmas campaign with prizes, fostering local economic vitality and community spirit. The website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. WHOIS data is minimal but consistent with the hosting provider and regional focus, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence for a small regional non-profit.

C

City-USE GmbH & Co. KG

city-use.de

55

City-USE GmbH & Co. KG is a well-established cooperative energy partner based in Germany, specializing in providing tailored energy procurement and management solutions to municipal utilities. Founded in 1999, the company operates a certified data center and offers a broad portfolio of services including electricity and gas procurement, hosting, energy data management, and consulting on legal and technical topics. Their strong network of 16 municipal shareholders in the Unterfranken region positions them as a trusted regional player in the energy sector. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, GSAP animations, and accessibility tools like Eye-Able. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented effectively, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent with opt-in. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the business claims, showing consistency and legitimacy. Overall, the website presents a professional, trustworthy, and compliant digital front for City-USE GmbH & Co. KG. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trustworthiness.

O

OEMUS MEDIA AG

zwpstudyclub.de

54

ZWP Study Club is a professional online portal dedicated to dental continuing education, offering free access to live and on-demand webinars, as well as recorded lectures from international congresses. The platform targets dental professionals globally and is supported by OEMUS MEDIA AG and various partners. Technically, the website is built on WordPress with modern libraries such as jQuery, Bootstrap, and Owl Carousel, and uses Cloudfront CDN for hosting. Privacy and cookie policies are well implemented with user consent mechanisms, and Matomo analytics is configured with privacy in mind. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security and incident response policies are not published. Overall, the site is professional, trustworthy, and well-positioned in the dental education market.

Hübener Versicherung is a Europe-wide specialist insurance provider, operating primarily in the finance sector. The website presents a professional appearance with multilingual support, targeting European insurance clients. The technical infrastructure is based on WordPress CMS with performance optimizations such as WP Rocket and preconnect hints. The site uses Fathom Analytics for minimal user tracking, indicating a moderate level of digital maturity. Security posture is basic, with no advanced security headers or incident response information visible. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance features.

A

AMCS

amcsgroup.de

69

AMCS is a large international technology company specializing in performance sustainability software and intelligence solutions primarily for sectors such as waste management, recycling, transport, chemical, manufacturing, and utilities. The company offers B2B software solutions aimed at improving operational efficiency, compliance, and sustainability. The website demonstrates a mature digital presence with multiple regional contact points and active social media channels, indicating a well-established market position. Technically, the website uses modern web technologies including JavaScript, Google Tag Manager, Cookiebot for consent management, and Pardot for marketing automation. The CMS detected is Umbraco, a professional content management system. The site is mobile optimized and SEO friendly with appropriate meta tags and structured data, although some accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data is a concern but may be due to privacy protection or data source limitations. Overall, AMCS presents a professional and trustworthy online presence with good privacy compliance and security posture, though improvements in transparency around privacy policies, terms of service, and security disclosures are recommended to enhance trust and compliance.

Z

ZER-QMS Zertifizierungsstelle GmbH

zer-qms.de

44

ZER-QMS Zertifizierungsstelle GmbH is a German certification body specializing in quality, environmental, energy, and occupational safety management certifications. Their services include auditing and certification for standards such as ISO 9001, ISO 14001, OHSAS 18001, and DIN Spec 91436, targeting businesses seeking compliance and sustainability certifications. The company positions itself as a reliable partner with a focus on environmental and quality standards, supported by customer testimonials and recognized certifications. Technically, the website uses modern web technologies including HTML5, CSS3, and JavaScript libraries like Siema and SimpleBar for UI enhancements. The site is mobile-optimized and well-structured, though it lacks some advanced accessibility features and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a formal vulnerability disclosure policy, which are recommended for improved security posture. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance compliance and security maturity.

T

tegosgroup

tegos-group.com

63

tegosgroup is a medium-sized German company founded in 2017 specializing in cloud platform software solutions for optimizing business processes in the circular economy, particularly focusing on waste management, disposal, and recycling sectors. The website presents a professional and consistent brand image with good content relevance and user experience. Technically, the site is built on WordPress using Gravity Forms and jQuery UI, hosted by IONOS SE, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are found. Overall, the site is trustworthy but could improve privacy compliance and security transparency.

T

Terberg HS GmbH

terberg-hs.de

69

Terberg HS GmbH is a well-established German company specializing in the manufacture and service of advanced waste disposal vehicles, with over 150 years of industry experience. The company operates globally, targeting municipalities and private waste management firms, and is part of the Royal Terberg Group. Their product portfolio includes side loaders, rear loaders, and front loaders, supported by service and rental offerings. The website reflects a mature business with a professional digital presence, leveraging modern web technologies and multiple analytics tools with GDPR-compliant consent management. Security posture is solid with HTTPS and anonymized tracking, though some improvements in security headers and incident response transparency are recommended. Overall, the domain and business information align well, supporting a high legitimacy score.

G

GEFAHRGUTJÄGER GmbH

gefahrgutjaeger.de

65

GEFAHRGUTJÄGER GmbH is a specialized consulting and legal services provider focused on hazardous goods law, hazardous substances, waste management, immission control, and occupational safety. The company targets businesses and professionals requiring expert advice and training in compliance with German and EU regulations. Their market position is that of a niche specialist with a strong focus on regulatory compliance and education. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a mature digital presence. Integration of Google Analytics and Maps is managed with user consent, reflecting good privacy practices. Security posture is strong with HTTPS and security headers implemented, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

A

ASUP Online-Shop

asup.info

61

ASUP Online-Shop is a German B2B e-commerce platform specializing in professional work safety equipment and disposal products, including Big Bags and technical equipment. The company claims over 20 years of experience and targets business customers exclusively, offering a broad product range and services such as free shipping over a threshold and a 30-day money-back guarantee. The website is well-branded and professionally designed, with clear navigation and mobile optimization. Technically, it uses the Shopware CMS platform, integrates multiple analytics and marketing tools including Matomo, Google Tag Manager, and Pardot, and supports live chat via Tawk.to. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing and privacy policies are not explicitly found in the provided content. WHOIS data is privacy protected by Identity Digital, which is typical for commercial domains, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained.

O

okl & partner Rechtsanwälte PartG mbB

oklp.de

57

okl & partner Rechtsanwälte PartG mbB is a specialized law firm based in Germany, focusing on environmental and planning law with additional expertise in procurement, civil, and criminal law. The firm targets industrial clients, SMEs, and public sector entities, positioning itself as a market leader in its niche. The website reflects a professional service-oriented business model with a clear focus on legal advisory services. Technically, the website is built on WordPress using the Salient theme and several plugins including Yoast SEO and GDPR compliance tools. Hosting appears to be managed via GoDaddy, inferred from the domain's nameservers. The site demonstrates good mobile optimization and SEO practices but lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with no explicit security headers or incident response information found. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

P

PAULY Rechtsanwälte Köln

pauly-rechtsanwaelte-koeln.de

58

PAULY Rechtsanwälte Köln is a small law firm specializing in environmental and energy law based in Cologne, Germany. The website presents a professional appearance using WordPress with the Avada theme and includes SEO optimization via Rank Math PRO. The technical infrastructure includes Google Tag Manager for analytics and Borlabs Cookie for cookie consent management. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information such as emails or phone numbers were found in the provided content. Security posture is moderate with no detected security headers and unknown SSL configuration. WHOIS data is minimal with generic hosting name servers and no detailed registrant information, which slightly reduces trustworthiness. Overall, the website is functional and professionally designed but would benefit from enhanced transparency and security practices.

S

sensis GmbH

sensis.de

56

sensis GmbH is a specialized software company focused on developing tailored system solutions for the waste management industry in Germany. Their offerings cover municipal waste management, recycling and recovery plants, commercial waste processes, and innovative digital recycling yard solutions. The company targets municipal enterprises, commercial waste handlers, and recycling facilities, positioning itself as a niche provider with strong industry expertise. The website reflects a professional and consistent brand image with clear contact channels and customer references. Technically, the site is built on a modern React and Next.js stack, providing good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms are missing. Overall, the site scores well on business credibility and content quality, with minor improvements recommended in security and privacy transparency.

B

BRANDI Rechtsanwälte Partnerschaft mbB

brandi.net

48

BRANDI Rechtsanwälte Partnerschaft mbB is a well-established German law firm with a history dating back to 1895, offering specialized legal and notarial services across multiple German cities and an international partner office in Paris. The firm targets medium to large enterprises and private clients requiring expert legal counsel, particularly in economic law and related fields. Their market position is strong regionally with international cooperation, supported by over 100 lawyers and 27 notaries. Technically, the website is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and privacy-respecting analytics, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or a query issue, which slightly impacts trustworthiness. Overall, the site is professional, trustworthy, and well-maintained, with room for enhanced transparency and security disclosures.

A

avocado rechtsanwälte

avocado.de

46

avocado rechtsanwälte is a well-established German law firm with multiple offices across major cities including Berlin, Frankfurt, Hamburg, Köln, München, and Brüssel. The firm offers comprehensive legal services across a broad range of sectors such as energy, transport, banking, real estate, media, education, healthcare, government, manufacturing, retail, and telecommunications. The website reflects a professional and mature market position, supported by numerous industry awards and certifications. The target audience primarily consists of businesses and professionals seeking expert legal counsel in Germany and Europe. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including Bootstrap, jQuery, and RequireJS, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

S

Stadt Obernburg a.Main

obernburg.de

55

Stadt Obernburg a.Main operates a comprehensive municipal website providing residents and visitors with information about city administration, public services, events, tourism, and cultural offerings. The site is well-structured, primarily in German, and targets local citizens and tourists. It maintains a consistent brand presence and offers clear contact channels including phone, email, and a contact form. The website leverages modern web technologies such as JavaScript, jQuery, and accessibility tools to enhance user experience. Hosting is managed via UI-DNS, a common provider for German municipal sites. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. It uses Matomo analytics configured to disable cookies by default, reflecting a privacy-conscious approach. However, no explicit security policy or incident response information is published, and security headers are not explicitly detected. The WHOIS data is limited but consistent with a legitimate municipal domain. No blocking or WAF mechanisms interfere with content access. Overall, the website demonstrates a solid technical and privacy foundation suitable for a government entity, with room for improvement in formal security disclosures and header implementations. The site is safe, free from adult or questionable content, and maintains a trustworthy online presence.

E

Erlenbach GmbH

erlenbach.de

48

Erlenbach GmbH is a German medium-sized manufacturing company specializing in particle foam processing equipment, including pre-expansion machines, block molding machines, and shape molding machines. The company targets industrial manufacturers requiring efficient EPS and EPP processing solutions. Their website is professionally designed using TYPO3 CMS, offering multilingual support and a clear navigation structure. They provide comprehensive product information, customer testimonials, and training services via an Experience Center. Technically, the site is moderately optimized with cookie consent and uses Matomo for analytics, reflecting a good level of digital maturity. Security posture is adequate but could be improved by implementing standard HTTP security headers and publishing explicit security policies. Contact information is clearly presented with obfuscated emails to reduce spam risk. Overall, the website is trustworthy and business-focused with no signs of malicious or adult content.

The Bruno H. Schubert-Stiftung is a German non-profit environmental foundation dedicated to promoting biodiversity and nature conservation. It is known for awarding the Frankfurt Conservation Award, one of Germany's most prestigious private environmental prizes. The website is professionally designed, content-rich, and targets individuals and organizations interested in environmental protection. The foundation has a strong reputation supported by testimonials from notable figures in academia and conservation. Technically, the website runs on WordPress with a modern theme and uses standard technologies such as jQuery and lazy loading for images. It is mobile-optimized and performs moderately well. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not present. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site lacks advanced security headers and a vulnerability disclosure policy, which are recommended for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a trustworthy and credible digital presence for the foundation, with minor technical and security enhancements recommended to further strengthen its posture.

E

European Natural Forest School

naturalforest.eu

53

The European Natural Forest School is a specialized educational program dedicated to natural forestry and ecology, targeting advanced students and young professionals in forestry and conservation fields. It operates as a small-scale, donor-supported initiative with partnerships including The Natural Forest Academy and donors such as the Frankfurt Zoological Society and Dieter Mennekes Umweltstiftung. The program aims to provide expert knowledge and practical field experience in natural forest ecology, conservation, and management, with the next session planned for 2026. Technically, the website is built on WordPress using Elementor and the JupiterX theme, leveraging modern plugins and libraries such as Vue.js and jQuery. The site is moderately performant, mobile-optimized, and accessible at a basic level. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and aligned with its educational mission but would benefit from enhanced privacy and security practices.

W

Wildnis in Deutschland

wildnisindeutschland.de

58

Wildnis in Deutschland is a well-established non-profit initiative dedicated to creating and protecting wilderness areas in Germany. The website serves as an educational and advocacy platform, providing comprehensive information about wilderness, conservation efforts, and related funding programs. It targets environmentalists, policymakers, researchers, and the general public interested in nature preservation. The initiative is supported by a coalition of 22 conservation organizations, positioning it as a key player in the German environmental sector. Technically, the website is built on WordPress using the Enfold theme, enhanced with SEO and security plugins such as Yoast SEO and Contact Form 7 with reCAPTCHA. The hosting is managed via INWX, a reputable German registrar. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured data implemented for enhanced search engine understanding. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs reCAPTCHA to protect forms from spam. While explicit security headers are not fully visible in the HTML, the overall posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. It effectively communicates its mission and engages its audience professionally. Strategic recommendations include enhancing security headers, publishing incident response contacts, and considering a security.txt file to improve vulnerability disclosure transparency.

F

Ferienhof Wübbold

alfsee-familienurlaub.de

41

Ferienhof Wübbold operates a family-oriented hospitality business focused on farm and nature vacation experiences at Alfsee, Germany. The website presents a professional and consistent brand image with clear contact information and social media presence. The technical infrastructure is based on Joomla CMS with modern frameworks like Bootstrap and jQuery, supporting good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal privacy and terms policies. Overall, the site is safe, trustworthy, and well-suited for its target audience of families seeking vacation rentals and farm experiences.

F

Ferienhof Hardthöhe

ferienhof-hardthoehe.de

50

Ferienhof Hardthöhe is a family-oriented farm holiday business located in Germany's UNESCO World Heritage site Oberes Mittelrheintal. The company offers a variety of accommodation options including chalets, wooden houses, and apartments, alongside farm activities such as pony courses, riding school, kids farm, and wellness services. The website is built on TYPO3 CMS with Bootstrap, featuring modern design and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The site demonstrates strong GDPR compliance and provides comprehensive privacy and cookie policies. Positive trust signals include multiple Google reviews and a regional tourism award. Overall, the website presents a professional and trustworthy digital presence for a small hospitality business.

B

Bauer Martin Ferienhof

bauer-martin.de

55

Bauer Martin Ferienhof is a family-oriented hospitality business offering vacation stays on a farm at the Baltic Sea in Germany. The website presents a professional and well-structured digital presence, leveraging WordPress with Elementor and NitroPack for performance optimization. The business targets families seeking wellness and farm experiences, with key services including luxury wellness houses, children's activities, and horse riding. The site complies with GDPR through a comprehensive privacy and cookie policy and employs hCaptcha for form security. Security posture is strong with HTTPS and security headers, though formal security policies and incident response details are absent. Overall, the site is trustworthy and well-optimized, with moderate user tracking via Google Tag Manager. Recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

E

Evangelisches Medienhaus GmbH

gemeindebaukasten.de

59

The website www.gemeindebaukasten.de is a professionally designed platform offering a modular website builder service tailored for churches, diaconal organizations, youth groups, and related non-profit entities primarily in Germany. Operated by Evangelisches Medienhaus GmbH, it provides personalized support, privacy-compliant tools, and hosting within Germany, positioning itself as a niche provider in the religious and community sector. The site leverages TYPO3 CMS and integrates Matomo analytics with a strong focus on GDPR compliance and accessibility. Security posture is solid with HTTPS and consent management, though explicit security policies and headers could be enhanced. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

E

Evangelisches Medienhaus GmbH

komm2print.de

56

The website komm2print.de is an online print portal specializing in customized print products for church communities and districts in Germany. Operated by Evangelisches Medienhaus GmbH, it offers a streamlined Web2Print service with standardized and individual print solutions including business cards, invitations, signage, and fundraising flyers. The portal targets religious organizations seeking high-quality communication materials. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies could be improved. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.