Germany security reports

C

Castelli-Cycling

castelli-cycling.com

71

Castelli-Cycling is a premium cycling apparel brand offering high-performance and custom cycling clothing targeted at cycling enthusiasts and athletes globally. The website is professionally designed with a clear focus on e-commerce retail, providing a broad range of products and custom options. The company maintains a consistent brand presence with multilingual support and strong social media integration. Technically, the site uses modern web technologies including Google Analytics, HubSpot forms, Cookiebot for consent management, and Matomo analytics, hosted on a CMS platform named Kleecks. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced, use of reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS domain registration data is a notable concern for domain transparency and trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced domain registration transparency and explicit security policies.

M

Messe München GmbH

analytica.de

60

analytica.de is the official website for the analytica trade fair, a world-leading event for laboratory technology, analytics, and biotechnology organized by Messe München GmbH. The site serves a large professional audience including market leaders and decision-makers in the industry, providing comprehensive information about upcoming events, exhibitor registration, and conference programs. The website demonstrates a high level of digital maturity with modern web technologies, strong privacy compliance via Usercentrics CMP, and integration of analytics and advertising tools. Security posture is robust with HTTPS, security headers, and no detected vulnerabilities. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

M

Metrohm AG

metrohm.com

62

Metrohm AG operates a professional website targeting the German market, specializing in chemical analysis instrumentation including titration, ion chromatography, electrochemistry, and spectroscopy. The company is positioned as a global leader in manufacturing and distributing laboratory and process analytical systems. The website demonstrates a mature digital presence with modern technologies such as Vue.js, Adobe Experience Manager CMS, and integrated analytics tools like Adobe Analytics and New Relic. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via OneTrust. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly disclosed. The domain WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and external partner references support legitimacy. Strategic recommendations include publishing explicit security and incident response policies and adding a vulnerability disclosure program to enhance trust and compliance.

MEA Group GmbH is a well-established German manufacturing company specializing in building systems and water management products, including light wells, drainage channels, and related technical solutions. The company positions itself as a market leader with over 130 years of experience, targeting professional users such as architects and construction industry professionals. Their website offers comprehensive product catalogs, technical documentation, and digital services such as BIM and CAD data, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins and frameworks like Bootstrap, ensuring good mobile optimization and SEO. The presence of cookie consent mechanisms and Google Tag Manager indicates attention to privacy and analytics. However, some security headers and explicit security policies are not clearly visible, suggesting room for improvement in security posture. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the lack of published incident response or vulnerability disclosure policies limits transparency. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, though the professional website content mitigates concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration details.

Focus Rostfrei is a specialized German trade magazine dedicated to stainless, acid-resistant, and heat-resistant steels. It serves industry professionals by providing news, technical articles, event information, and directories. The website is professionally designed using WordPress CMS and integrates multiple plugins for enhanced user experience, including e-paper subscriptions and event management. The site is GDPR compliant with a clear privacy and cookie policy, and it supports multilingual sister publications targeting broader European markets. Technically, the site uses modern web technologies and maintains good performance and mobile optimization. Security posture is solid with HTTPS and secure login forms, though improvements like implementing a Content-Security-Policy header and publishing incident response contacts are recommended. The domain WHOIS data is missing or not publicly available, which raises concerns about registration legitimacy despite the active and professional website presence. Overall, the site is a credible industry resource but should address WHOIS transparency and enhance security headers to improve trust and compliance.

K

Körber-Stiftung

eustory.eu

45

EUSTORY is a well-established European non-profit network initiated by Körber-Stiftung, focused on organizing research-based history competitions for young people across more than 20 countries. The website reflects a professional educational platform targeting youth, educators, and history enthusiasts, with a clear mission to promote understanding and overcome divisions through historical research. The network has a medium-sized presence with a long history dating back to 2000, supported by a reputable foundation.

T

The smarter E Europe

thesmartere.de

53

The smarter E Europe is a leading organizer of exhibitions and conferences focused on integrated energy solutions, including green hydrogen, solar energy, storage, and e-mobility. The website serves a broad audience of industry professionals, exhibitors, visitors, and startups, providing comprehensive event information, exhibitor services, and digital content. The platform is well-positioned in the European energy event market with a strong brand presence and consistent messaging. Technically, the website employs modern JavaScript libraries, professional iconography, and integrates a GDPR-compliant consent management platform (Usercentrics). It uses Google Tag Manager and Jentis for analytics and tracking, alongside Friendly Captcha for bot protection. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses consent management and bot mitigation tools, indicating a mature security posture. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for its target audience. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

E

ees Europe

ees-europe.com

56

ees Europe operates as Europe's largest and most international exhibition and conference platform focused on batteries and energy storage systems. The website presents a professional and comprehensive digital presence, targeting industry professionals, exhibitors, and visitors interested in energy storage technologies. The business model centers on event organization, providing exhibition spaces, conference programs, and industry networking opportunities. The site is well-branded and consistent, with a clear focus on the energy sector and related innovations such as green hydrogen and battery production. Technically, the website employs modern JavaScript libraries, consent management tools, and tracking services, indicating a mature digital infrastructure. The site is mobile-optimized and offers good SEO and accessibility features, though some improvements in accessibility could be made. Security posture is solid with HTTPS enforced and use of captcha and consent management, but lacks explicit security policies and incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which impacts trustworthiness. However, the website content and structure strongly suggest a legitimate and professional business operation. No direct contact emails or phone numbers were found on the homepage, which could be improved to enhance business credibility. Overall, the site is well-designed and functional, with good privacy compliance and moderate user tracking. Strategic recommendations include publishing detailed security policies, improving contact information availability, and verifying domain registration details to enhance trust and compliance.

I

Intersolar Europe

intersolar.de

57

Intersolar Europe operates as the world’s leading exhibition platform for the solar industry, focusing on photovoltaics, energy storage, and related renewable energy technologies. The website provides comprehensive information for visitors, exhibitors, and conference attendees, positioning itself as a key industry event organizer in Germany. The platform supports event applications, exhibitor services, and industry news dissemination, targeting solar industry professionals globally. Technically, the website employs modern JavaScript libraries, FontAwesome Pro icons, and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. The site is mobile-optimized with good SEO practices and uses HTTPS with strong SSL configuration. Security measures include bot protection via Friendly Captcha and cookie consent management, though explicit security policy and incident response pages are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. The WHOIS data is minimal but consistent with a legitimate business domain. The website maintains a professional design, clear navigation, and trustworthy content, supported by active social media channels and partner event links. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Recommendations include publishing dedicated security and incident response policies and enhancing security headers to further improve the security posture.

G

GS1 Germany GmbH

gs1-germany.de

66

GS1 Germany GmbH is a medium-sized company providing global product identification standards such as EAN/GTIN barcodes and GS1 Complete services to businesses primarily in retail, manufacturing, and transportation sectors. The company holds a strong market position as the official GS1 standards provider in Germany, serving over 95,000 customers. Their website is built on TYPO3 CMS, featuring modern technologies including jQuery and Google Tag Manager, and implements cookie consent management via CookieFirst. The site is well-structured, mobile-optimized, and provides comprehensive contact information including emails, phone numbers, and a customer login portal. Security posture is good with HTTPS enforced and secure login forms, though additional security headers and published policies could enhance trust. No adult or questionable content is present, making the site suitable for general audiences.

O

Obeta

obeta.de

70

The website obeta.de appears to be a German-language e-commerce or product catalog platform, leveraging modern web technologies such as Next.js and custom JavaScript frameworks like Sirius and Oxomi. It integrates third-party services including Cookiebot for cookie consent management and Google Maps API for location services. The site is accessible without any blocking or WAF challenges, indicating good availability. However, the absence of explicit privacy policies, terms of service, and contact information on the main page limits transparency and user trust. The WHOIS data is minimal and shows an unusual domain status 'connect', which may indicate incomplete registration or a parked domain, raising concerns about domain legitimacy. Overall, the technical infrastructure is modern and moderately optimized for performance and mobile use, but security posture could be improved by implementing security headers and explicit policies.

H

HARDY SCHMITZ

hardy-schmitz.de

66

HARDY SCHMITZ operates a professional B2B online shop specializing in electrical wholesale products for industry, trade, and crafts in Germany. The company offers a comprehensive product range exceeding 500,000 items, emphasizing fast delivery with next-day shipping for orders placed before 19:00. Their services extend beyond product sales to include logistics, cable assembly, KNX programming, and lighting planning, positioning them as a versatile supplier in the energy and industrial retail sectors. The website is well-structured and designed to cater to a professional audience, reflecting a medium-sized enterprise with consistent branding and a strong market presence. Technically, the website employs modern JavaScript libraries such as Tiny Slider and integrates Google Tag Manager and Usercentrics for analytics and consent management, indicating a mature digital infrastructure. Hosting is managed via cows.de, with Pimcore CMS inferred from HTML structure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous script loading enhancing user experience. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers and visible privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with the hosting provider, with no privacy protection or suspicious patterns identified. Overall, the security posture is solid but could be improved by publishing clear privacy policies and enhancing header configurations. The overall risk assessment is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include adding comprehensive privacy and terms of service documents, improving security headers, and making contact and incident response information more accessible to enhance trust and compliance.

E

Emil Löffelhardt GmbH & Co. KG

loeffelhardt.de

46

Emil Löffelhardt GmbH & Co. KG operates a professional B2B website focused on the electrotechnical wholesale sector, serving electricians, industry, public authorities, and trade customers primarily in Germany. The company is a medium-sized, family-owned business with over 115 years of experience, positioning itself as a reliable and knowledgeable partner offering a broad product range, consulting, and services including training and logistics. The website is built on TYPO3 CMS and employs modern web technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and Matomo analytics configured with cookie consent enforcement, though explicit cookie banners and security headers are missing. The WHOIS data aligns with the business claims, indicating legitimacy and consistency. Overall, the site reflects a trustworthy and professional business presence with room for improvement in privacy compliance and security best practices.

A

Alexander Bürkle

alexander-buerkle.de

63

Alexander Bürkle is a well-established German company specializing in electrical wholesale and technology services, targeting primarily the crafts, industry, and specialized trade sectors. Their website presents a professional and comprehensive digital presence with multiple branded subsidiaries and partner domains, indicating a mature business ecosystem. The technical infrastructure includes modern consent management via Usercentrics and a GraphQL API for search functionality, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy policies, which are areas for improvement. Overall, the website is accessible and trustworthy, with no signs of malicious content or blocking mechanisms.

M

Mitegro GmbH & Co. KG

markenlust.de

59

Mitegro GmbH & Co. KG operates a professional electro wholesale cooperation platform in Germany, focusing on providing top brands and quality products to specialized retailers, craftsmen, and industry sectors. The website serves as a marketing and informational hub for their brand partners and target audience, emphasizing quality, performance, and security in their offerings. The company positions itself as a strong market player within the German electro wholesale industry, leveraging partnerships with well-known brands such as Bosch, Liebherr, Miele, and Siemens. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frontend technologies including jQuery, Bootstrap, and Slick Carousel for responsive and interactive user experience. The site is mobile-optimized and includes SEO best practices such as meta tags and structured navigation. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, reflecting a mature digital compliance posture. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's business claims, indicating a legitimate and professionally managed domain. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security policy transparency and advanced security headers. The risk profile is low, and the site is suitable for its business purpose with recommendations to enhance security posture further.

The website etrisbank.de is currently inaccessible, returning a 403 Forbidden error with minimal HTML content indicating a firewall block. This prevents any meaningful analysis of the website's content, services, or user interface. The domain is registered with standard German name servers via INWX, suggesting legitimate registration, but no further business details or digital assets are publicly accessible. The lack of accessible content and security headers, combined with no visible privacy or cookie policies, results in a very low digital maturity and security posture score. Without access to the site, it is impossible to evaluate the company's market position, services, or compliance status. Strategic recommendations focus on resolving access issues, enabling HTTPS, and publishing essential compliance and contact information.

R

Regionalverband Großraum Braunschweig

regionalverband-braunschweig.de

49

Regionalverband Großraum Braunschweig is a regional governmental organization responsible for regional development, mobility, and sustainable planning in the Großraum Braunschweig area of Germany. It coordinates public transport services, regional planning, and climate protection initiatives, serving multiple cities and counties. The website reflects a mature digital presence using TYPO3 CMS and modern frontend technologies, with good mobile optimization and accessibility. Privacy and cookie consent mechanisms are implemented in compliance with GDPR. Security posture is solid with HTTPS and consent management, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

M

metronom

ich-will-zu-metronom.de

52

Metronom is a prominent private railway company in Germany, offering career opportunities primarily in train operation and passenger services. The website serves as a recruitment portal, providing detailed job listings, employee testimonials, and benefits information. The company positions itself as a stable employer with a focus on teamwork and diversity. Technically, the site leverages modern web technologies including React and integrates with the Talention recruitment platform, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site reflects a professional and trustworthy business presence with a good balance of user experience and security.

M

metronom Eisenbahngesellschaft mbH

der-enno.com

54

The website www.der-enno.com represents a regional train service operated by metronom Eisenbahngesellschaft mbH, focusing on providing comfortable, modern, and environmentally friendly transportation in parts of Lower Saxony, Germany. The platform offers real-time timetable information, ticketing options, and customer service features, targeting commuters and regional travelers. The site is well-structured with a progressive web app implementation, ensuring good mobile responsiveness and accessibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data raises some concerns about domain transparency, but the overall content and branding indicate a legitimate business. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and improving domain registration transparency.

N

NETINERA Deutschland GmbH

netinera-karriere.de

52

NETINERA Deutschland GmbH operates a professional career portal focused on railway and transportation jobs in Germany. The website serves as a recruitment platform for a large group of regional transport companies under the NETINERA Holding umbrella. It targets a broad audience including students, graduates, career changers, and experienced professionals, offering job listings and application facilitation. The company is positioned as a regional leader in the German transportation sector with a strong brand presence and multiple subsidiaries. Technically, the website is built on Craft CMS, hosted behind Cloudflare, and employs modern web technologies including SVG graphics and JavaScript. The site is mobile optimized, accessible, and SEO friendly with proper meta tags and Open Graph data. Security posture is strong with HTTPS, security headers, and CSRF protection on forms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not directly visible on the main pages, and no terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and secure, supporting the business goals effectively.

M

MoorFutures - MoorFutures

moorfutures-mv.de

45

The website 'MoorFutures - MoorFutures' is a German-language platform focused on environmental sustainability, specifically offering carbon certificates related to moorland rewetting projects in Mecklenburg-Vorpommern, Germany. The business appears to be a small, niche entity founded around 2022, targeting environmentally conscious individuals and organizations interested in climate protection. The website uses WordPress CMS with the Avada theme and Yoast SEO plugin, indicating a moderate level of technical infrastructure and digital maturity. The design and content quality are good, with clear focus and consistent branding, but lack comprehensive privacy and security policies. Security posture is weak due to missing security headers and unclear SSL configuration. No contact information or privacy compliance mechanisms are visible, which impacts trust and compliance scores. Overall, the site is safe and professional but would benefit from enhanced security and privacy practices.

Z

Zweckverband Personennahverkehr Saarland (ZPS)

zps-online.de

10

Zweckverband Personennahverkehr Saarland (ZPS) operates as a regional public transportation authority in Saarland, Germany, focusing on coordinating and planning local passenger transport services including rail and bus networks. The website serves residents and commuters in the region, providing information on transport tasks, schedules, and news. The organization positions itself as a key regional player in public transport management with a medium-sized operational scale. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. It employs Matomo analytics for privacy-conscious user tracking and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, explicit security headers are not clearly detected, and no public security or incident response policies are found. No vulnerabilities or suspicious content are evident, and the site maintains a good security posture overall. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector transportation role effectively. Strategic improvements in security headers and incident response transparency could further enhance its security maturity and stakeholder trust.

R

Rolph

rolph.de

55

Rolph.de is a regional public transport information portal dedicated to mobility in Rheinland-Pfalz, Germany. It provides news, updates, and resources related to local public transportation, including bus networks and the Deutschlandticket. The website targets residents and travelers in the region seeking reliable and up-to-date transit information. The platform appears to be affiliated with regional transport authorities or government entities, supported by references to official ministries and verified Facebook domain ownership. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel for UI components. It integrates common marketing and analytics tools including Google Tag Manager, Google Analytics, Facebook Pixel, and advertising networks like DoubleClick and The Trade Desk. The site implements a GDPR-compliant cookie consent mechanism and is mobile-optimized with good accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent opt-in mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain registration data is consistent and appropriate for a public service website, enhancing trustworthiness. Overall, Rolph.de presents a professional, secure, and privacy-conscious platform serving the transportation sector in Rheinland-Pfalz. Strategic improvements could include adding explicit security headers, publishing terms of service and security policies, and providing direct contact information to enhance transparency and user trust.

V

Verkehrsverbund Rhein-Mosel

vrminfo.de

55

The Verkehrsverbund Rhein-Mosel (VRM) operates as a regional public transportation network in Germany, coordinating 47 transport companies across a large geographic area serving approximately 1.3 million residents. The website provides comprehensive information about public transport lines, ticketing, and network services, targeting regional commuters and travelers. The site is built on the TYPO3 CMS platform, indicating a mature and professional technical infrastructure. Integration with Cookiebot and Google Analytics demonstrates a commitment to privacy compliance and user analytics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the website is accessible, well-structured, and trustworthy for its intended audience.

V

Verkehrsverbund Rhein-Neckar GmbH

vrn.de

49

Verkehrsverbund Rhein-Neckar GmbH operates as a regional public transportation authority in the Rhein-Neckar area of Germany, providing comprehensive services including bus, train, and tram schedules, ticketing, and mobility solutions such as carsharing and e-scooters. The website serves as a central portal for journey planning, traffic updates, and customer service, targeting commuters and general public users in the region. The business model is focused on facilitating public transport and mobility services within a defined geographic area, positioning VRN as a key regional transport provider. Technically, the website is built on the Imperia CMS platform and leverages modern web technologies including jQuery, Leaflet for maps, and Foundation for responsive design. It integrates Matomo analytics with user consent, demonstrating a mature approach to data privacy. Accessibility features such as skip links and visual assistance tools are implemented, enhancing usability for diverse users. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transport entity. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy communication. The overall risk is low given the nature of the business and the absence of suspicious indicators. Strategic recommendations include publishing a dedicated security policy, providing incident response contact details, enhancing HTTP security headers, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

R

Regentalbahn GmbH

zugsammen.de

51

Die Länderbahn GmbH, betrieben unter Regentalbahn GmbH, ist ein führendes privates Eisenbahnverkehrsunternehmen im regionalen Personennahverkehr in Deutschland und Tschechien. Die Website präsentiert umfassende Karriere- und Ausbildungsangebote, unterstützt durch moderne Technologien wie Talention für Recruiting und Matomo sowie Google Tag Manager für Analytics. Die technische Infrastruktur ist modern, mobiloptimiert und nutzt Cloudflare als Hosting- und DNS-Anbieter. Die Sicherheitslage ist solide mit HTTPS und Cookie-Consent-Mechanismen, jedoch fehlen explizite Sicherheitsrichtlinien und Incident-Response-Kontakte. Die Website ist vertrauenswürdig, professionell gestaltet und bietet klare Kontaktinformationen, was die Glaubwürdigkeit stärkt.

E

erixx GmbH

erixx.de

56

erixx GmbH is a regional passenger rail service provider operating in Niedersachsen and northern Germany, focusing on routes through Harz, Heide, and Wendland. The company is positioned as a trusted regional transportation operator with a clear business model centered on passenger rail services. The website provides comprehensive travel information, live schedules, ticketing options, and customer support, targeting regional train passengers. The parent company is Netinera, a known transportation group, which adds to erixx's market credibility. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates a Progressive Web App manifest for enhanced user experience. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with embedded third-party widgets for timetable and route planning. From a security perspective, the website enforces HTTPS and follows several best practices, though explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible in the HTML. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact limits transparency in security governance. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing explicit incident response contacts to improve security posture and trust.

M

metronom Eisenbahngesellschaft mbH

der-enno.de

52

The website www.der-enno.de represents a regional rail transport service operated by metronom Eisenbahngesellschaft mbH, serving the Hannover region and surrounding areas in Lower Saxony, Germany. It provides comprehensive travel planning tools, live timetable data, customer support, and career opportunities, positioning itself as a key regional transportation provider. The site is well-branded, professionally designed, and targets commuters and regional travelers with localized German content and an English alternative. Technically, the site employs modern web technologies including a Progressive Web App (PWA) framework, service workers, and integrates third-party public transport widgets from fahrplaner.vbn.de. Hosting and DNS are managed via Cloudflare, ensuring robust performance and security. The site is mobile-optimized with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, and does not publish a vulnerability disclosure policy. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with strong business credibility and technical implementation. The security posture is good but could be enhanced with additional transparency and security headers. The risk level is low, with no detected vulnerabilities or suspicious content.

G

Good Time Holding GmbH

gt-holding.de

48

Good Time Holding GmbH is a well-established German holding company specializing in children's and family entertainment, managing several subsidiaries and a portfolio of popular brands. The website reflects a professional and modern digital presence built on Drupal 10, with strong mobile optimization and clear navigation. Privacy compliance is well addressed through a comprehensive privacy policy and an integrated consent management system (Klaro). Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Overall, the website is trustworthy, safe, and well-aligned with the company's business focus.

M

Mitegro GmbH & Co. KG

mitegro.de

61

Mitegro GmbH & Co. KG operates as a cooperative alliance of eight medium-sized, owner-managed electrical wholesale companies in Germany and Austria, collectively managing approximately 250 locations. The company primarily serves the industrial sector and electrical installation trades, providing marketing, sales promotion, digitalization, IT concepts, training, centralized billing, and contract negotiations with industry partners to strengthen market position and competitiveness. The website is professionally designed using TYPO3 CMS, featuring modern technologies such as Google Tag Manager and Google Analytics with a compliant cookie consent mechanism. The site is well-structured, mobile-optimized, and provides clear contact information and social media presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the digital maturity is moderate to good, supporting the business model effectively.

F

FEGIME Deutschland

fegime.de

59

FEGIME Deutschland is a German association of medium-sized electrical wholesalers, providing extensive services to its 45 family-owned member companies and their partners. The organization holds a leading market position in the German electrical wholesale sector, representing a significant turnover and a broad network of locations. The website is professionally designed using TYPO3 CMS, with moderate technical maturity including Matomo analytics for user tracking. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. Contact is primarily via web forms, with no direct emails or phone numbers clearly presented. Overall, the site is trustworthy, business-focused, and safe for general audiences.

E

EGE Elektro-Großhandel Einkauf GmbH

ege-bonn.de

44

EGE Elektro-Großhandel Einkauf GmbH is a well-established German community of electrical wholesalers with over 50 years of experience. The company focuses on providing quality products, personalized service, and attractive purchasing conditions to electrical trade and industry partners across Germany. Their website reflects a professional and consistent brand image, emphasizing trust and partnership. Technically, the site is built on TYPO3 CMS with Bootstrap 5, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is supported by a clear privacy and cookie policy with consent mechanisms. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and technical hardening.

D

DEHA Elektrohandelsgesellschaft mbH & Co. KG

deha.de

56

DEHA Elektrohandelsgesellschaft mbH & Co. KG is a medium-sized German company operating in the manufacturing and retail sectors of the electrical industry. The company acts as a cooperative partner connecting manufacturers, trade, and craft professionals, providing marketing support, product data management, and key account management services. Their market position is strengthened by a group of five shareholder companies, each with their own domain and presence. The website is professionally designed using TYPO3 CMS and integrates modern web technologies including a consent management platform to ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing trust and user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the website reflects a credible and professional business with a solid digital presence.

W

Wirtschaftsinitiative Smart Living e.V.

smart-living-germany.de

43

Wirtschaftsinitiative Smart Living e.V. is a German non-profit association comprising approximately 40 companies, associations, and alliances focused on advancing the digitalization of home and living environments. The organization aims to establish Germany as a leading international market for Smart Living applications, offering services such as a showroom map, information on funding, and organizing working groups and events. The website is professionally designed using WordPress with Yootheme and UIkit frameworks, providing good mobile optimization and clear navigation. However, it lacks visible cookie consent mechanisms and security headers, which are important for GDPR compliance and security best practices. The security posture is moderate with HTTPS enabled but could be improved with additional headers and policies. The domain WHOIS data is limited but consistent with a small non-profit entity. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security practices are recommended.

C

CONCEPTNET GmbH

conceptnet.de

53

CONCEPTNET GmbH is a well-established media agency based in Regensburg, Germany, founded in 1996. The company specializes in creative and technical services including web development, app development, marketing, SEO, corporate design, and digital business solutions. They leverage TYPO3 CMS and operate their own hosting infrastructure, ensuring data security and performance. Their market position is strong regionally with a Silver Membership in the TYPO3 Association and a comprehensive portfolio of services targeting businesses seeking professional media and digital solutions. The website reflects a professional and consistent brand image with clear navigation and detailed service descriptions. Technically, the site uses modern web technologies and analytics tools such as Matomo and Google Analytics, with a good security posture including a strict Content-Security-Policy. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site is trustworthy, well-maintained, and suitable for its target audience.

R

reev

reev.com

63

reev is a specialized B2B company providing software solutions for eMobility charging management, targeting companies, businesses, real estate sectors, and fleet operators. The company offers a comprehensive platform and partner ecosystem to facilitate easy management and billing of electric vehicle charging stations. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and hosted on a reputable provider, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in explicit security policies and vulnerability disclosures. Overall, the domain and WHOIS data confirm a legitimate and established business with consistent branding and trust signals.

P

Power2Drive Europe

powertodrive.de

50

Power2Drive Europe operates as a prominent international exhibition and conference platform specializing in charging infrastructure and e-mobility. The website provides comprehensive event information, exhibitor resources, and industry news, targeting professionals and stakeholders in the energy and transportation sectors. The business model centers on event organization and industry engagement, positioning itself as a key player in the European e-mobility market. Technically, the website employs modern JavaScript libraries, including FontAwesome Pro and Usercentrics for consent management, alongside Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although some technical details such as CMS and hosting specifics remain unclear. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and use of captcha mechanisms, but lacks explicit security policies and vulnerability disclosure channels. Privacy compliance is strong, evidenced by a comprehensive privacy policy and active cookie consent management. Business credibility is supported by consistent branding, social media presence, and detailed event content, though direct contact details and company registration information are limited. Overall, the website is professional, trustworthy, and well-suited for its audience, with recommendations to enhance security headers, publish incident response contacts, and improve accessibility for a more robust digital presence.

N

Niedax Rico Engineering

rico-engineering.de

49

Rico Engineering GmbH is a German engineering company specializing in cable route planning and mechanical services with over 50 years of experience. The company operates as part of the Niedax Group and targets industrial clients requiring expert planning support throughout all project phases. The website is professionally designed using TYPO3 CMS and modern web technologies, providing clear navigation and relevant business content. Contact information is prominently displayed, supporting effective client communication. The technical infrastructure is solid, hosted likely by Deutsche Telekom, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website reflects a credible and trustworthy business presence with room for enhanced security and compliance maturity.

B

Boecker Stahl-Service GmbH

boecker-stahl-service.de

51

Boecker Stahl-Service GmbH is a medium-sized steel service center based in Germany, specializing in cold-rolled, surface-finished flat steel products such as coils, sheets, and slit strips. The company operates with approximately 25 employees and is part of the larger Niedax Group, a global player in electrical installation products and services. The website reflects a professional and consistent brand presence with detailed business descriptions and news updates, targeting industrial and manufacturing clients. Technically, the site is built on Joomla CMS with Uikit framework, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protections, though security headers and cookie consent mechanisms are lacking. Overall, the site is trustworthy and well-positioned in its market niche.

B

Bandstahl-Service-Hagen GmbH

bandstahlservice-hagen.de

51

Bandstahl-Service-Hagen GmbH is a well-established medium-sized manufacturing company based in Germany, specializing in slit strip processing from various steel types and offering contract slitting services for aluminum and stainless steel. The company serves a broad industrial customer base including automotive, construction, electrical, and supplier sectors, with a strong market presence spanning over three decades. The website reflects a professional digital presence built on Joomla CMS with modern frontend frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the company demonstrates credible business operations with clear contact information and partner affiliations, supported by consistent WHOIS data and domain legitimacy.

M

Münchener Verein Versicherungsgruppe

muenchener-assekuranz.de

63

Münchener Assekuranz is an insurance service platform associated with the Münchener Verein Versicherungsgruppe, a well-established insurance group in Germany. The website serves primarily German-speaking customers, offering insurance brokerage and customer login services. The business model focuses on providing insurance products and customer service through a secure online portal. The company maintains a consistent brand presence and targets a medium-sized market segment within the finance industry in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Usercentrics for consent management. Hosting and DNS services are provided via Cloudflare, enhancing security and performance. The site demonstrates good mobile optimization, accessibility, and basic SEO practices, although there is room for improvement in metadata and structured content. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a professional and trustworthy front for an insurance business but would benefit from enhanced privacy disclosures, security headers, and formalized security policies to improve compliance and user trust.

M

Münchener Verein Versicherungsgruppe

maklerview.de

48

Maklerview.de is a professional blog platform serving partners and intermediaries of the Münchener Verein Versicherungsgruppe, a German insurance group. The website provides industry news, practical tips, and community engagement content tailored for insurance brokers. It positions itself as a niche content hub within the finance sector, targeting German-speaking insurance professionals. The business model revolves around content delivery and community support rather than direct sales. The site is moderately sized and was founded around 2021, aligning with the domain's apparent age.

F

Frogblue

frogblue.com

61

Frogblue is a German-based company specializing in smart home and building technology solutions that emphasize simplicity, wireless connectivity, and security. The company targets consumers and businesses interested in modern, flexible smart home systems. Their market position is that of a niche manufacturer with a focus on German engineering quality. The website is professionally designed, multilingual, and optimized for user experience and SEO. Technically, the site is built on WordPress with modern plugins and analytics tools, including GDPR-compliant cookie consent mechanisms and hCaptcha for form security. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, though explicit security headers could be improved. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration issues or privacy protection, which slightly reduces trustworthiness. Overall, the site presents a credible and professional business presence in the smart home technology sector.

M

MOBOTIX AG

mobotix.com

68

MOBOTIX AG is a German company specializing in high-resolution IP security camera systems and IoT video technology. Established in 1999, the company offers innovative decentralized edge video solutions and software to improve operational efficiency and safety for businesses and organizations across multiple sectors including industry, government, healthcare, and retail. The website is professionally designed, multilingual, and provides comprehensive information about products, services, and partner programs. Technically, the site uses Drupal CMS with modern analytics tools like Google Analytics and Tag Manager, implementing privacy-conscious features such as IP anonymization and cookie consent mechanisms. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published incident response policies. WHOIS data for the domain is missing or unavailable, which is unusual for a .com domain and slightly impacts trustworthiness. Overall, the website is credible, well-maintained, and business-focused, with recommendations to improve security transparency and domain registration visibility.

N

Niedax Group

niedax-group.com

56

Niedax Group is a well-established German company specializing in cable management systems with over 100 years of experience. It operates globally with numerous subsidiaries and partners, serving industries such as energy, infrastructure, and manufacturing. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS with modern frontend technologies. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be enhanced. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the company's extensive footprint and professional presentation.

N

noris network AG

noris.net

69

noris network AG is a well-established premium IT service provider based in Germany, specializing in IT outsourcing, managed services, cloud computing, and colocation. With over 30 years of experience, the company serves primarily business clients in sectors such as finance and public administration. Their website reflects a mature digital presence with comprehensive service descriptions and strong trust signals including ISO 27001 certification and GDPR compliance. Technically, the site is built on WordPress with modern plugins and scripts, optimized for performance and mobile use. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit incident response and vulnerability disclosure policies are not publicly visible. Overall, noris network AG presents a credible, professional, and secure IT services business with a solid market position in Germany.

M

MENTOR - Die Leselernhelfer Nordhessen e.V.

mentor-nordhessen.de

45

MENTOR - Die Leselernhelfer Nordhessen e.V. is a regional non-profit organization dedicated to improving children's literacy and language skills through individual mentoring programs. Affiliated with the national MENTOR federation, it connects volunteer mentors with schools to provide weekly reading support for children aged 6 to 16. The website reflects a clear mission and target audience focused on education and community support. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap 5 and jQuery. It is hosted on servers indicated by the nameservers from agenturserver, suggesting a professional hosting environment. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and includes CSRF tokens and a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and security posture. Overall, the website is safe, professional, and trustworthy with a strong focus on privacy compliance and user protection. The main risks relate to missing security headers and lack of formal security documentation. Strategic improvements in these areas would strengthen the organization's digital security and compliance standing.

M

Münchener Verein Versicherungsgruppe

mv-maklernetz.de

65

Münchener Verein Versicherungsgruppe operates a professional insurance broker portal offering a wide range of insurance products including health, care, retirement, and business insurance. The company holds a strong market position in Germany, evidenced by multiple industry awards and certifications. The website targets insurance brokers and business customers, providing tools, calculators, and comprehensive product information to support daily operations. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google Analytics and Usercentrics for privacy compliance. The site is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS and consent management, though HTTP security headers could be improved. No vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Münchener Verein Versicherungsgruppe

mv-partnernetz.de

64

Münchener Verein Versicherungsgruppe operates a professional partner portal targeting insurance brokers and customers in Germany. The website offers comprehensive insurance products including health, life, pension, and business insurance solutions. It holds a strong market position as a multiple-time award-winning insurer, emphasizing trust and reliability. The portal supports partners with product details, contracts, and tools, reflecting a B2B and B2C hybrid business model. Technically, the site is built on TYPO3 CMS, integrates modern analytics and consent management tools, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and GDPR compliance, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.