Germany security reports

O

OEMUS MEDIA AG

zwp-online.info

10

ZWP online is a professional German-language news portal focused on the dental industry, providing daily news, market information, product details, educational content including CME, and multimedia resources such as videos and podcasts. The site targets dental professionals, industry stakeholders, and students, positioning itself as a leading source of dental news in the German-speaking market. The business operates under OEMUS MEDIA AG, a known media company specializing in healthcare and dental sectors. Technically, the website employs a modern tech stack including jQuery, Font Awesome, Moment.js, Chart.js, JWPlayer, and integrates marketing and analytics tools like Sendinblue, Matomo, and PushOwl. The site is mobile-optimized with good SEO practices and a professional design, though some accessibility features are basic. Performance is moderate with room for improvement. Security posture is solid with HTTPS enforced, CSRF tokens present, and cookie consent mechanisms implemented. However, the absence of explicit security headers and lack of published security policies or incident response contacts are areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site is trustworthy and professional, but the lack of publicly available WHOIS data and registrant information slightly reduces domain trustworthiness. Strategic recommendations include improving security headers, publishing security and incident response policies, and providing clearer contact information to enhance user trust and compliance.

C

CURIA (formerly Femtec.Alumnae)

curia-netzwerk.de

47

CURIA is a well-established non-profit network dedicated to supporting women in STEM fields in Germany. With over 1,000 members and partnerships with reputable companies, it offers career development, networking, and annual conferences. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Technically, it runs on WordPress with modern front-end technologies and uses plugins for analytics and contact forms. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and serves its target audience effectively.

S

Sozialverband Deutschland e.V.

diebessererente.de

54

Sozialverband Deutschland e.V. (SoVD) is a well-established German non-profit organization dedicated to social justice and strengthening the statutory pension system. The website focuses on educating the public about the benefits of the statutory pension, advocating for policy improvements, and providing social counseling services. It targets German residents, pensioners, and socially vulnerable groups. The organization positions itself as a trusted voice in social policy with a strong digital presence and comprehensive content offerings. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and integrates privacy-respecting tools such as Klaro for cookie consent and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses privacy-friendly embedded content, and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy compliance and professional content. Strategic improvements in security headers and explicit incident response policies could further enhance trust and resilience.

N

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH

bbw-bremen.de

56

Nordic CAMPUS Berufsbildungswerk Bremen gGmbH is a well-established non-profit vocational training institution in Germany focused on educating and supporting young people with disabilities. With over 40 years of experience and multiple locations, it offers a broad range of training programs, personal and health support services, and fosters inclusion through strong partnerships and community engagement. The website reflects a professional and inclusive brand with comprehensive content and clear navigation. Technically, the website uses a custom or unknown CMS with a technology stack including jQuery and responsive design elements. Hosting is provided by a German ISP (Ewetel). The site is mobile-optimized and SEO-friendly but lacks some modern security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. Security posture is moderate with HTTPS enforced and email obfuscation in place, but missing explicit security headers and incident response contacts. No vulnerabilities or malware indicators were found. Overall, the site is trustworthy and professionally maintained, with room for security enhancements. The risk level is low, with recommendations to improve security headers, publish a security policy, and enhance incident response transparency to further strengthen trust and compliance.

D

DeMa IT

dema-it.com

53

DeMa IT is a small German IT service provider based in Cologne, specializing in web design, software and app development, and IT services. The company targets business customers seeking tailored IT solutions and emphasizes customer satisfaction and long-term relationships. Their website reflects a professional and consistent brand image with clear service offerings and partner logos. Technically, the site uses modern web technologies including Laravel backend, Cloudflare DNS/CDN, and standard frontend frameworks. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is good with a GDPR-compliant privacy policy and cookie consent mechanism, though no terms of service or incident response policies are visible. Overall, the website is trustworthy and functional with moderate security maturity.

H

HBS IT GmbH

hbs-it-gmbh.de

54

HBS IT GmbH is a professional IT services company based in Germany, specializing in digital transformation, IT infrastructure, Industrial Internet of Things (IIOT), and web development. The company targets businesses seeking tailored IT solutions to support their digital future. Their market position is that of a regional expert with a focus on delivering customized and transparent IT services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website is built on WordPress with Elementor and optimized using WP Rocket. It employs modern web technologies including jQuery and Font Awesome, hosted on servers associated with rzone.de. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, supported by caching and lazy loading techniques. From a security perspective, the site enforces HTTPS and includes security headers, although explicit security policies and incident response information are not published. Cookie consent is managed via Borlabs Cookie, indicating GDPR compliance. No critical vulnerabilities or security issues were detected in the analysis. The domain WHOIS data aligns with the website's geographic and business claims, supporting legitimacy. Overall, HBS IT GmbH presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic improvements could include publishing detailed security policies, enhancing accessibility, and adding a vulnerability disclosure mechanism.

M

mediagrafen

mediagrafen.de

58

mediagrafen is a small, specialized internet agency based in Bielefeld, Germany, founded in 2008. The company focuses on providing tailored web design, SEO, and digital solutions primarily using TYPO3 CMS. Their market position is regional with clients across Germany and neighboring countries, emphasizing quality, strategic digital development, and long-term partnerships. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that targets businesses and organizations seeking reliable web solutions. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and Google Analytics with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the site demonstrates high professionalism and trustworthiness with clear contact information and client references.

The Verband für Sicherheit in der Wirtschaft Hessen (VSW) is a professional association serving as a key interface between government security agencies and the private sector in Germany, particularly in Hessen. It provides a platform for information exchange, networking, and professional development through seminars, events, and an expert pool. The organization collaborates closely with federal and state security bodies, enhancing its credibility and influence in the security domain. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern web technologies and a responsive design that caters well to its professional audience. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent mechanisms, and integrates Google reCAPTCHA to protect forms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, well-maintained, and aligned with its business mission.

P

Projekt Pilgerheiligtum

pilgerheiligtum.de

50

Projekt Pilgerheiligtum is a well-established non-profit religious initiative based in Germany, focused on promoting the pilgrimage of the Mater Ter Admirabilis image within Christian communities. With over 25 years of history and a network of thousands of pilgrimage images, it serves as a spiritual and community-building platform. The website offers rich content, multilingual support, and various services including newsletters, online prayer sessions, and a shop for religious materials. Technically, the site is built on WordPress using Elementor and WooCommerce, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is strong, reflecting GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its niche.

S

SMJ-Bamberg

smj-bamberg.de

60

SMJ-Bamberg is a small non-profit youth organization based in Scheßlitz, Germany, focused on organizing children and youth activities such as camps, weekend retreats, and day trips. The organization operates on a volunteer basis and is part of the international Schönstatt Movement. The website serves as an official information portal for the community and interested participants. Technically, the website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. The site is moderately optimized for mobile devices and has a good design quality with clear navigation. Security-wise, the site uses HTTPS and includes some security hardening scripts, but lacks comprehensive security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security documentation.

S

Schönstattbewegung Frauen und Mütter

s-fm.de

42

The Schönstattbewegung Frauen und Mütter website represents a small non-profit religious community focused on women and mothers within the Catholic Church in Germany. The organization provides spiritual support, events, publications, and community engagement. The website is well-structured, content-rich, and clearly targeted to its niche audience. The technical infrastructure is based on the concrete5 CMS platform, with standard web technologies such as jQuery and Bootstrap grid. The site is mobile-optimized and performs moderately well, though some modernization could improve performance and security. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and an outdated CMS version present potential risks. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.

The Schönstatt Familienbewegung Deutschland is a German non-profit organization focused on supporting families and couples through community events, spiritual engagement, and educational materials. Their website reflects a well-structured platform offering event information, media resources, and networking opportunities tailored to their target audience of families and young couples. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a compliant cookie consent mechanism, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and active consent management. Overall, the website presents a trustworthy and professional image consistent with its mission and audience.

S

Schönstatt-Bewegung Deutschland, PressOffice Schoenstatt

schoenstatt.de

53

The Schönstatt-Bewegung Deutschland operates a German-language website providing news, events, and spiritual resources related to the Schönstatt religious movement. The organization targets members and interested parties within the Christian community, offering livestreams, newsletters, and educational materials. The website reflects a medium-sized non-profit entity with a consistent brand presence and a focus on community engagement. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.21. The site is served over HTTPS, but lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. Security posture is moderate; the site uses HTTPS and does not expose sensitive data, but the absence of security headers and use of outdated libraries present potential risks. No incident response or vulnerability disclosure policies are publicly available. WHOIS data is consistent and supports the legitimacy of the domain. Overall, the website is trustworthy and safe for general audiences, but could benefit from enhanced security practices and privacy compliance measures to improve user trust and regulatory adherence.

M

Magistrat der Stadt Hanau

demokratie-leben-hanau.de

48

The website www.demokratie-leben-hanau.de represents a government-affiliated non-profit partnership focused on promoting democracy, diversity, and tolerance in Hanau, Germany. It serves as a platform to coordinate local civil society actors, government bodies, and political stakeholders to foster community engagement and support projects aligned with these values. The site provides comprehensive information on funding opportunities, ongoing projects, events, and contact details, reflecting a well-structured and community-oriented business model. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring responsive design and moderate performance. Hosting is provided by SchlundTech, a reputable German hosting provider. The site employs HTTPS with a valid SSL configuration and includes CSRF tokens in forms, indicating attention to security best practices. However, some HTTP security headers appear to be missing, which could be improved. From a security and compliance perspective, the site demonstrates good GDPR compliance with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and professional, but there is no explicit security policy or incident response information available. No vulnerabilities or suspicious content were detected, and the site maintains a safe content rating suitable for general audiences. Overall, the website is trustworthy, professionally maintained, and fulfills its role as a local government and civil society communication platform. Strategic recommendations include enhancing security headers, adding explicit security policies, and maintaining up-to-date software to further strengthen its security posture.

The website 'Europa für Niedersachsen' serves as an official government portal for the German state of Niedersachsen, focusing on European Union funding programs and regional development initiatives. It provides comprehensive information, resources, and news updates related to EU funding opportunities such as EFRE, ESF+, ELER, and Interreg programs. The portal targets residents, businesses, and organizations within Niedersachsen seeking to engage with EU-funded projects and regional development activities. Technically, the site is built on the Powerslave Liveserver CMS and employs modern web technologies including jQuery, Video.js, FancyBox, Slick Carousel, and Matomo analytics configured to disable cookies, reflecting a moderate level of digital maturity and privacy awareness. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, while HTTPS is presumed (given the URL), no explicit security headers were detected in the provided HTML, and no cookie consent mechanism was found, which are areas for improvement. The WHOIS data is limited due to DENIC's privacy policies but aligns with official government infrastructure, supporting the domain's legitimacy. No vulnerabilities or suspicious content were identified. Overall, the site demonstrates a solid business and technical foundation with a high trust level appropriate for a government entity. Strategic enhancements in security headers and privacy compliance would further strengthen its posture.

W

Wochenblatt für Landwirtschaft & Landleben

wochenblatt.com

61

Wochenblatt für Landwirtschaft & Landleben is a well-established German media outlet focused on agriculture and rural life, targeting families and professionals in the agricultural sector. The website offers weekly news, a marketplace, newsletters, and an online shop, positioning itself as a trusted information source with a strong regional presence. Technically, the site is built on modern frameworks such as Next.js and React, with integration of Usercentrics for cookie consent and Google services for analytics and advertising. Security posture is generally good with HTTPS enforced and consent management in place, but lacks explicit security headers and published privacy policies, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, although the website content and branding are professional and consistent. Overall, the site is safe, family-friendly, and provides valuable content to its audience, but should enhance transparency and security practices to improve trustworthiness.

L

Landwirtschaftsverlag GmbH

elite-magazin.de

55

Elite Magazin is a reputable German media publication specializing in dairy farming and agricultural topics. It serves a professional audience of dairy farmers and herd managers by providing news, expert articles, seminars, and subscription-based content. The website is well-structured, mobile-optimized, and integrates modern technologies including Google Tag Manager, Usercentrics CMP for GDPR compliance, and Google Ad Manager for advertising. The business is part of Landwirtschaftsverlag GmbH and partners with top agrar and agrarshop.de, indicating a strong market position in agricultural media. Security practices are solid with HTTPS and consent management, though some security headers and policies could be improved. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

I

INTERVISTA AG

intervista-ag.de

49

INTERVISTA AG operates as a specialized provider of sales automation and digitalization software solutions primarily targeting the insurance and finance sectors in Germany. Their offerings include consulting, software development, and operational services designed to enhance sales efficiency and digital transformation for their clients. The company positions itself as a partner for businesses seeking to outperform competitors through innovative technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Beaver Builder and Yoast SEO, indicating a mature digital infrastructure. The presence of tracking and analytics tools like Matomo and Leadinfo suggests an active approach to user engagement and lead generation, although privacy compliance mechanisms are lacking. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit policies. Overall, the website is professional and content-rich but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

B

Bonn.digital

nachhaltigezukunft.camp

67

The website nachhaltigezukunft.camp represents the Barcamp Nachhaltige Zukunft, an open conference focused on sustainability actors in the Bonn-Rhein-Sieg region. It serves as a platform for knowledge exchange, networking, and community engagement among local initiatives, NGOs, businesses, and interested individuals. The event is supported by local government entities and economic development agencies, positioning it as a reputable regional sustainability forum. Technically, the site is built on WordPress 6.8.3 with a modern, responsive design and uses Matomo for privacy-conscious analytics. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The WHOIS data is privacy-protected, which is typical for such event sites, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-aligned with its community-focused mission.

B

Bonn.digital GbR

digitalesbonn.de

71

Bonn.digital GbR is a small, regionally focused digital communication agency based in Germany, specializing in social media consulting, community management, and event services. Founded in 2013, the company targets businesses and institutions primarily in Bonn, offering expert guidance on digital communication strategies and event moderation. Their website is professionally designed, content-rich, and actively maintained with a blog featuring recent posts relevant to social media trends and digital events. Technically, the website is built on WordPress with WooCommerce and German Market plugins, indicating compliance with regional e-commerce regulations. The site uses modern web technologies including jQuery, FontAwesome, and WPBakery Page Builder. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, but some security headers are missing. Privacy compliance is partial; while a cookie consent mechanism is implemented, explicit privacy and terms of service pages were not found in the provided content. Contact information is available via phone and contact page, but no direct company email addresses are visible. Social media presence is strong, enhancing trust and outreach. Overall, Bonn.digital presents as a credible and professional digital agency with a good security baseline and active digital presence. Enhancing privacy documentation and security headers would further strengthen their posture.

B

BarCamp Bonn

barcampbonn.de

61

BarCamp Bonn is a regional community event platform focused on open, participant-driven sessions for the Bonn and Rhein-Sieg area. The website presents a professional and consistent brand image supported by reputable local partners and sponsors. The event format encourages active participation and networking within the digital community. Technically, the site is built on WordPress, hosted by taenzer.hosting, and integrates a Pretix ticketing widget and Matomo analytics with privacy-conscious settings. Security posture is solid with HTTPS and no exposed sensitive data, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned for its community event purpose.

B

Boden & Bauschutt GmbH & Co. KGaA

bodenbauschutt.de

61

Boden & Bauschutt GmbH & Co. KGaA operates a specialized digital platform targeting the construction and waste management sectors in Germany. Their platform leverages artificial intelligence to streamline administrative tasks, improve resource efficiency, and ensure regulatory compliance. Supported by EU and German government funding, the company positions itself as an innovative leader in sustainable mineral waste management and circular economy solutions. Key services include AI-driven document processing, intelligent batch management, a marketplace for mineral waste, and digital sampling protocols. The business model is B2B SaaS with a freemium approach for waste producers and commission-based fees for waste processors. Technically, the website is built on Webflow CMS, integrates Google Tag Manager and Analytics, and employs Cloudflare services including Turnstile captcha for security. The site demonstrates excellent mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, cookie consent mechanisms, and no detected vulnerabilities. However, explicit security policies and incident response contacts are not published. Overall, the website reflects a mature digital presence with high professionalism and trustworthiness. The security and privacy compliance are robust, though improvements could be made in transparency around security policies and vulnerability disclosures. The domain WHOIS data aligns well with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis.

S

Startup City Hamburg

startupcity.hamburg

64

Startup City Hamburg is an official city platform dedicated to supporting and connecting startups within Hamburg's vibrant ecosystem. It offers comprehensive resources including startup registration, funding opportunities, investor connections, job listings, and event information. The platform targets entrepreneurs, investors, corporates, and support organizations, positioning itself as a central hub for startup activities in Hamburg. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Leaflet.js, integrates a consent management platform (Usercentrics), and uses self-hosted Matomo analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is moderate, with cookie consent mechanisms in place but no explicit privacy policy or terms of service found in the analyzed content. Overall, the domain registration aligns well with the business purpose and location, enhancing trustworthiness. Strategic recommendations include enabling DNSSEC, publishing privacy and security policies, and adding vulnerability disclosure information to strengthen security and compliance.

H

HYLI

hyli.de

67

HYLI is a German-based technology company offering a secure digital platform for managing advance healthcare directives and other important personal documents. The platform targets individuals seeking reliable and GDPR-compliant digital storage solutions for their legal documents. HYLI positions itself as a niche provider with a user-friendly SaaS model, emphasizing security and privacy. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Google Cloud infrastructure, and integrates standard marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, HYLI enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms to comply with GDPR. However, it lacks a publicly available security policy or incident response page, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration and hosting details are consistent and trustworthy, with no suspicious patterns detected. The website content is professional, safe, and targeted at a general audience.

Q

qurix Technology GmbH

qurix.tech

60

qurix Technology GmbH is a boutique data technology consultancy based in Germany, founded in 2019. The company specializes in transforming businesses into data-inspired champions by providing independent, client-focused data solutions. Their market position is that of an independent boutique consultancy, emphasizing advocacy for clients free from technology provider influence. The website reflects a professional and consistent brand image, targeting companies seeking expert data consultancy services. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium, Google reCAPTCHA, and integrates third-party services like Calendly and ActiveCampaign for scheduling and marketing automation. Hosting is provided by Cronon GmbH, and the site employs HTTPS with good security headers, indicating a solid security posture. Analytics and marketing tools are used with appropriate consent mechanisms, reflecting good privacy compliance. Security-wise, the site enforces HTTPS, uses cookie consent banners, and includes reCAPTCHA to mitigate abuse. No critical vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, which could be improved. The absence of a published security policy or incident response contact is noted. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enabling DNSSEC, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.

P

plancraft

plancraft.de

61

Plancraft is a well-established German SaaS company providing specialized handwerkersoftware (craftsman software) designed to streamline and digitalize workflows for tradespeople and small to medium-sized craft businesses. The platform offers a comprehensive suite of tools including document creation, project and time management, mobile apps for field workers, and integration with accounting systems. With over 20,000 users and excellent customer ratings, Plancraft holds a strong market position in the German-speaking crafts sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, HubSpot forms, and cloud hosting with Google Cloud DNS. The site is well-optimized for performance, mobile responsiveness, and accessibility, featuring advanced tracking and telemetry for marketing and analytics. However, explicit privacy and terms of service pages are not clearly found, and security headers are not visibly implemented in the HTML. From a security perspective, the site uses HTTPS and domain registration data indicates a legitimate and stable business. Cookie consent is managed via a third-party service, and no critical vulnerabilities or exposed sensitive data were detected. Nonetheless, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represent areas for improvement. Overall, Plancraft presents a professional, trustworthy, and technically mature online presence with minor gaps in privacy and security documentation. Strategic enhancements in these areas would further strengthen compliance and user trust.

R

RAKETEN CREATIVE

raketen.info

60

RAKETEN CREATIVE is a small German web development company specializing in creating small to medium-sized websites, webshops, and web applications. The company emphasizes reliability, modern technology, and a customer-friendly approach, serving both direct clients and white-label customers. Their portfolio showcases diverse projects, indicating a focus on creative and professional web solutions. Technically, the website is built on WordPress with the Avada theme and uses popular plugins such as Slider Revolution and WP Rocket, indicating a mature digital infrastructure with good performance and mobile optimization. Security-wise, the site uses HTTPS and obfuscates email addresses to reduce spam, but lacks published privacy and cookie policies, and no advanced security headers were detected. The WHOIS data is malformed and unavailable, which limits domain trust verification, but the website content and contact information suggest a legitimate business. Overall, the site is professional and functional but would benefit from improved privacy compliance and security transparency.

T

Tourismuszentrale Fränkische Schweiz

fraenkische-schweiz.com

47

The website www.fraenkische-schweiz.com serves as the official tourism portal for the Fränkische Schweiz region in Bavaria, Germany. It provides comprehensive information on activities, accommodations, gastronomy, and events, targeting tourists and vacationers interested in this historic and scenic area. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on the TYPO3 CMS platform and integrates modern JavaScript libraries and Google Analytics for tracking. Security measures include HTTPS and a cookie consent mechanism, though explicit security headers and detailed security policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure full trust. Overall, the site is a reliable resource for regional tourism but would benefit from enhanced transparency in domain registration and security disclosures.

F

Das Fichtelgebirge: Fichtelgebirge

fichtelgebirge.bayern

47

The website www.fichtelgebirge.bayern serves as a regional tourism portal dedicated to the Fichtelgebirge region in Germany. It provides comprehensive information about accommodations, cultural events, outdoor activities, and regional specialties, targeting tourists and visitors interested in exploring the area. The site is multilingual, offering translations via Google Translate, enhancing accessibility for international visitors. Technically, the site is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery UI and Slick Carousel, and integrates Google Analytics for visitor tracking alongside a CookieFirst consent management system. Security-wise, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and vulnerability disclosure mechanisms. The WHOIS data is privacy protected, which is common for such regional tourism sites, and no suspicious patterns were detected. Overall, the site presents a professional and trustworthy digital presence for regional tourism promotion.

B

Bayreuth Marketing & Tourismus GmbH

bayreuth-tourismus.de

59

Bayreuth Marketing & Tourismus GmbH operates a comprehensive tourism website promoting Bayreuth, Germany, focusing on cultural attractions, events, and accommodations. The site targets tourists and visitors interested in exploring the region's heritage and leisure opportunities. It serves as a regional marketing authority with a strong digital presence and multilingual content to cater to international audiences. Technically, the website is built on WordPress with modern plugins and SEO tools, ensuring good performance, mobile optimization, and accessibility. Security measures include HTTPS, cookie consent management, and basic security headers, though there is room for improvement in advanced security policies and incident response transparency. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for visitors and stakeholders.

T

Tourismusverband Franken e.V.

frankentourismus.de

61

Tourismusverband Franken e.V. operates a comprehensive regional tourism website focused on promoting the Franconia region in Germany. The site offers extensive information on cultural, culinary, wellness, and outdoor activities, targeting tourists and visitors interested in exploring the area. The business model centers on tourism promotion and providing travel-related services including event listings and online booking options. The website is well-positioned as an official regional tourism association with a consistent brand and strong trust indicators such as verified social media presence and GDPR-compliant cookie consent. Technically, the website employs modern tracking and analytics tools including Google Analytics, Plausible, and Umami, integrated via Google Tag Manager. The site uses a custom or proprietary CMS with good mobile optimization, accessibility, and SEO practices. The presence of a strict referrer policy and HTTPS indicates a solid security foundation, although some security headers are missing. The cookie consent mechanism is robust and aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and preparedness. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the website's claims, indicating legitimacy. Overall, the website is professional, secure, and trustworthy with excellent content quality and user experience. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

O

Oberfranken Offensiv e.V.

oberfranken.de

50

Oberfranken Offensiv e.V. is a regional non-profit association dedicated to promoting the development, innovation, and cultural richness of the Oberfranken region in Germany. The website serves as an information portal highlighting regional projects, events, and campaigns to foster community engagement and regional pride. It targets residents, businesses, and institutions interested in the region's growth and quality of life. The association positions itself as a key regional player with a focus on innovation and community collaboration. Technically, the website is built on the Weblication CMS platform and uses modern web technologies including JavaScript, jQuery, and Font Awesome. It employs Piwik/Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and provides cookie consent controls but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's regional and organizational identity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance its security posture and transparency by adding formal security policies and incident response information.

U

unimess GmbH

unimess.de

46

unimess GmbH is a small, established internet and advertising agency based in Ulm, Germany, with over 25 years of experience. The company specializes in internet presence creation, web design, CMS implementation, SEO, SEA, programming, online shops, app development, cloud solutions, and business consulting. Their market position is regional with a focus on delivering tailored digital marketing and technology solutions. Technically, the website employs modern front-end frameworks such as Bootstrap and jQuery, with additional libraries for animations and user experience enhancements. The use of Matomo analytics reflects a privacy-conscious approach. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is good with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, though improvements in security transparency and compliance could enhance their posture.

T

top farmplan

topfarmplan.de

63

top farmplan is a German-based digital agriculture office platform designed specifically for farmers. It offers a comprehensive suite of tools including email, document management, field record keeping, and contact management, enabling farmers to maintain oversight of their operations anytime and anywhere. The business operates primarily on a subscription SaaS model, targeting the agriculture sector in Germany, with a medium-sized company profile and a founding date around 2017. The website reflects a professional and consistent brand image with excellent content quality and user experience.

R

rimondo

rimondo.com

59

rimondo.com is a specialized online platform dedicated to equestrian sports and horse breeding, providing users with access to show videos, results, breeding information, horse market listings, pedigrees, and statistics. The platform targets equestrian enthusiasts, breeders, and professionals primarily in Germany and Switzerland but serves a worldwide audience. The business operates under LV digital GmbH, indicating a medium-sized company with a focused niche market position. The website offers a paid Pro membership model to unlock full access to premium content and services. Technically, the site employs modern web technologies including Vue.js, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, HTTPS is enforced, CSRF tokens are present, and user consent is managed effectively, though explicit security headers and a public security policy are absent. The WHOIS data is missing, which is unusual and slightly reduces trust, but the professional presentation and clear business information mitigate concerns. Overall, rimondo.com presents a trustworthy, professional, and user-focused digital presence in the equestrian media sector.

L

LandReise.de

landreise.de

49

LandReise.de is a specialized online platform offering rural vacation accommodations primarily in German-speaking Europe. The company focuses on providing families, couples, and groups with access to unique farm stays, holiday homes, huts, and hideaways. Their market position is strong within the niche of rural hospitality, supported by a comprehensive and professionally designed website that facilitates booking and discovery of over 4,000 properties. Technically, the website employs modern web technologies including Statamic CMS, Tailwind CSS, and JavaScript modules, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the platform demonstrates a mature digital presence with clear contact channels and social media integration, but could improve privacy transparency and security documentation.

L

Landlust

landlust.de

60

Landlust is a well-established German media brand specializing in rural lifestyle content, including recipes, crafts, gardening, and nature-related topics. The website offers a rich user experience with professional design, clear navigation, and mobile optimization. It monetizes through content subscriptions, an e-commerce shop, and advertising partnerships. Technically, the site is built on modern frameworks such as Next.js and React, with integration of Usercentrics for GDPR-compliant consent management and Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant, and serves a broad audience interested in country living.

B

Bundesforum Lernort Bauernhof

forum-lernort-bauernhof.de

49

The Bundesforum Lernort Bauernhof is a German nationwide non-profit network established in 2006 that coordinates organizations, associations, ministries, and individuals dedicated to farm-based educational initiatives. The website serves as an information hub promoting the farm as an experiential learning environment, emphasizing sustainable development education for children and youth. The organization focuses on networking, material development, certification, and advocacy to integrate farm education into school curricula across Germany. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including jQuery and Font Awesome. It features a cookie consent mechanism but lacks a dedicated privacy policy page and explicit contact information. Security posture is generally good with HTTPS enabled, but security headers are not evident and no vulnerability disclosure or incident response information is provided. WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures.

I

i.m.a - information.medien.agrar e.V.

landwirtschaftmachtschule.de

47

The website 'Landwirtschaft macht Schule' is an initiative by i.m.a - information.medien.agrar e.V. aimed at integrating agriculture into school education in Germany. It connects farmers with schools to provide practical and sustainable learning experiences, promoting awareness of regional food production and agricultural practices. The platform offers resources, training, and a network for teachers, farmers, and associations, positioning itself as a niche educational non-profit with a strong focus on sustainability and hands-on learning. Technically, the website is built on the MYOB CMS platform using modern frameworks such as UIkit and jQuery. It features responsive design, good navigation, and moderate performance. The site employs HTTPS with a cookie consent mechanism, ensuring GDPR compliance. However, it lacks some advanced security headers and explicit incident response or vulnerability disclosure information. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or exposed sensitive data. The absence of tracking scripts and minimal user data collection aligns with privacy best practices. The WHOIS data is limited but consistent with the site's professional and educational nature, showing no suspicious patterns. Overall, the website is trustworthy, well-structured, and serves its educational mission effectively. Strategic improvements in security headers, accessibility, and transparency regarding security policies could further enhance its posture and user trust.

I

i.m.a - information.medien.agrar e.V.

ima-shop.de

59

The website ima-shop.de operates as an online shop for i.m.a - information.medien.agrar e.V., a non-profit organization providing educational materials related to agriculture, nature, and nutrition. The platform targets educators, farmers, and consumers, offering a range of informational media and teaching resources. The business model is focused on e-commerce distribution of educational content, positioning itself as a niche provider in the agricultural education sector within Germany. The site demonstrates consistent branding and good content quality aligned with its mission.

K

Kassenärztliche Vereinigung Hessen

kvhessen.de

63

The Kassenärztliche Vereinigung Hessen (KVH) is a public law corporation responsible for ensuring medical care for statutory health insured persons in the German state of Hessen. The website serves as an information and service portal for its members, including contracted physicians and psychotherapists, medical students, and patients. It offers comprehensive resources such as billing applications, practice management support, continuing education, and patient services. The organization holds a strong regional market position as the official healthcare authority in Hessen. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and is hosted by Anexia. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site uses Matomo for analytics with moderate user tracking and maintains GDPR compliance with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

U

Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut

unitaetsarchiv.de

55

The Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut is a specialized archival institution based in Germany, serving as the central archive for the worldwide Brüder-Unität and the European Continental Province. The website provides access to archival resources, restoration project information, public lectures, and publications. It targets researchers, historians, and community members interested in the Brüder-Unität heritage. The institution operates as a non-profit entity with a small organizational size and a focused niche in historical archival services. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized with good navigation and SEO practices, though hosting details and SSL configuration specifics are not provided. Cookie consent mechanisms are implemented, reflecting GDPR compliance. From a security perspective, the website shows basic best practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and incident response policies. No analytics or advertising scripts were detected, indicating minimal user tracking and a privacy-conscious approach. Overall, the website is professional, trustworthy, and well-suited for its archival mission. Recommendations include enhancing security headers, publishing a security policy, and clarifying SSL configurations to improve security posture and user trust.

E

Evangelische Mission in Solidarität (EMS)

ems-online.org

55

The Evangelische Mission in Solidarität (EMS) is a well-established non-profit organization based in Germany, focused on fostering global cooperation among churches and mission societies across Asia, Africa, Europe, and the Middle East. Their website reflects a mature digital presence with clear communication of their mission, partnership model, and key services including volunteer programs, educational initiatives, and fundraising. The organization maintains a medium-sized footprint with a network of 25 churches and 5 mission societies, emphasizing solidarity and sustainable development. Technically, the website is built on TYPO3 CMS, hosted by a reputable provider, and incorporates modern consent management and analytics tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and consent mechanisms, though some security headers and policies could be enhanced. Overall, the site is professional, trustworthy, and accessible, supporting the organization's credibility and outreach efforts.

E

Evangelische Brüder-Unität Herrnhuter Brüdergemeine

herrnhuter-spenden.de

57

The website www.herrnhuter-spenden.de serves as a donation portal for the Evangelische Brüder-Unität Herrnhuter Brüdergemeine, a religious non-profit organization based in Germany. It facilitates philanthropic support for various charitable projects including educational, health, environmental, and social initiatives. The site prominently features affiliated institutions such as Herrnhuter Missionshilfe and the Graf-Zinzendorf-Stiftung, positioning itself as a trusted platform for donors interested in religious and social causes. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and FontAwesome for responsive and accessible design. The site demonstrates good mobile optimization and clear navigation, with a cookie consent mechanism indicating GDPR compliance. However, no explicit security headers or incident response policies are published, suggesting room for improvement in security transparency. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. No WAF or blocking mechanisms are detected, and no vulnerabilities or tracking scripts are evident. The WHOIS data aligns well with the website's business claims, enhancing trustworthiness. Overall, the security posture is solid but could benefit from enhanced header configurations and published policies. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant presence suitable for its non-profit mission. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and enhancing accessibility features to further strengthen the platform's security and compliance posture.

I

IfT Institut für Talententwicklung GmbH

parentum.de

52

The website parentum.de is a professionally designed platform operated by IfT Institut für Talententwicklung GmbH, focusing on organizing career fairs for parents and youth in Germany. It serves as an informational and event promotion site, providing details about upcoming parentum career fairs across various German cities. The site leverages TYPO3 CMS and modern web technologies, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are well implemented with GDPR compliance, supported by Cookiebot for consent management. Security posture is adequate with HTTPS enforced, though additional security headers and incident response information could enhance trust. The domain registration and hosting details are consistent and trustworthy, with no signs of suspicious activity. Social media presence on TikTok and Instagram supports outreach and engagement. Overall, the site is a reliable educational event platform with a solid technical foundation and good privacy practices.

N

Netzwerk Digital

elkb-digital.de

63

Netzwerk Digital is a Bavarian digital transformation network focused on church and diaconal sectors, providing knowledge sharing, training, and collaboration services. The website is professionally designed, well-structured, and targets church professionals interested in digital tools and practices. Technically, it is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, hosted on infrastructure using GoDaddy name servers. Security posture is good with HTTPS and consent-based analytics, though some security headers could be improved. Overall, the site is trustworthy and compliant with privacy regulations, with clear contact points primarily via email and forms.

E

Evangelische Kirche in Deutschland (EKD)

fundus-medien.de

58

Fundus Medien is a cooperative image and media database operated by the Evangelische Kirche in Deutschland (EKD) and 15 regional churches. It provides free access to a large collection of images, graphics, and drawings for church and diaconal media and public relations work. The website targets church media professionals and volunteers, offering a user-friendly platform with registration and upload capabilities. Technically, the site is built on TYPO3 CMS, uses Cookiebot for GDPR-compliant cookie consent, and Matomo for privacy-respecting analytics. The site is well-structured, mobile-optimized, and professionally designed. Security practices include HTTPS enforcement and cookie consent blocking mechanisms, though some security headers could be improved. Overall, the site demonstrates a strong commitment to privacy and compliance, with clear contact information and trust signals from official church domains.

The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.

Vogel Software GmbH is a small, established German software company specializing in custom software development, particularly in Warenwirtschaft (inventory management) and Produktionsplanung (production planning) systems using Visual FoxPro and .NET technologies. Founded in 1989, the company offers tailored software solutions, coaching, and porting services, targeting SMEs in various sectors including trade, industry, and engineering firms. Their flagship products include vmAuftrag and the StarLib C# framework. The website reflects a professional and consistent brand image with detailed business and contact information, supporting their market credibility. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for form security. Hosting is managed via nshost2.de name servers, and the site includes analytics via Piwik. While the site is mobile-optimized and SEO-friendly, some security best practices like security headers (CSP, HSTS) are missing, and no cookie consent mechanism is implemented despite cookie usage. From a security perspective, the site uses HTTPS and protects its contact form with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture. The risk level is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to strengthen compliance and trust.

F

Frankfurt Zoological Society

fzs.org

69

Frankfurt Zoological Society is a well-established non-profit organization dedicated to wildlife and ecosystem conservation, focusing on protected areas and wilderness preservation. Founded in 1858, it operates internationally with projects in 18 countries and maintains a strong presence through partnerships and subsidiaries such as the Frankfurt Zoological Society – U.S. and Zoo Frankfurt. The organization relies on donations, sponsorships, and memberships to fund its conservation efforts and engages a broad audience including conservationists, donors, and the general public. Technically, the website is built on WordPress using modern plugins like Contact Form 7 and Relevanssi Live Search, with a moderate performance profile and good mobile optimization. The site employs HTTPS and domain management best practices but lacks DNSSEC and explicit security headers, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response information suggests room for enhancement. The domain registration is consistent with the organization's history, registered since 1997 with a reputable registrar, supporting high legitimacy. Overall, the website is professional, trustworthy, and content-rich, serving its audience effectively. Strategic improvements in security headers, cookie consent, and explicit security policies would further strengthen its security and compliance posture.