Germany security reports

L

lucanize

lucanize.de

62

lucanize is a small technology-focused digital services provider based in Germany, offering business consulting, web development, and digital marketing services. The website is currently under maintenance but provides clear contact information and privacy compliance mechanisms. The technical infrastructure is built on WordPress with modern plugins such as Real Cookie Banner Pro and Matomo Analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and bot protection via hCaptcha, though security headers are not explicitly detected. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the website presents a professional and trustworthy digital presence suitable for its target audience of businesses seeking digital solutions.

S

Stiftung Tierärztliche Hochschule Hannover

tiho-hannover.de

59

The Stiftung Tierärztliche Hochschule Hannover (TiHo) is a prominent academic institution specializing in veterinary medicine, combining modern science with university tradition to serve both humans and animals. The website reflects a well-established university foundation offering education, research, and clinical services. It targets a diverse audience including students, researchers, staff, and the general public interested in veterinary sciences. The institution maintains a strong market position in Germany's veterinary education sector with a comprehensive range of academic and research programs. Technically, the website is built on the TYPO3 CMS with a specialized higher education package, leveraging modern web technologies such as jQuery and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting appears to be managed by a reputable academic network provider (DFN). From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism compliant with GDPR. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a secure and privacy-aware posture suitable for an academic institution. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and maintaining up-to-date software components. The website is professional, trustworthy, and compliant with relevant privacy regulations, supporting its role as a reputable educational entity.

Die Musikschule des Landkreises Hof is a regional music education institution operating as a department of VHS Hofer Land e.V. The website provides comprehensive information about their educational offerings including early musical education, instrumental and vocal lessons, ensemble play, and various events. The target audience includes music students, parents, and adult learners within the Landkreis Hof region in Germany. The business model is non-profit and focused on community education. Technically, the website is built on WordPress with common plugins such as Yoast SEO and The Events Calendar, indicating a moderate level of digital maturity. The site is mobile-optimized, SEO-friendly, and uses HTTPS with a cookie consent mechanism, reflecting good technical standards. Hosting appears to be via domaincontrol.com name servers, likely GoDaddy. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie notice. Business credibility is supported by consistent branding and affiliation with a known educational organization. Overall, the website presents a low-risk profile with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding direct contact information to improve trust and compliance.

D

Diakoniewerk Martinsberg e.V.

dw-martinsberg.de

47

Diakoniewerk Martinsberg e.V. is a German non-profit organization focused on providing social and diaconal services to the community. The website serves as an informational platform targeting a general audience interested in social support and community assistance. The organization maintains a moderate market position within the regional non-profit sector, emphasizing human-centric services. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a standard but modern CMS infrastructure with good SEO practices. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is weak due to absence of security headers and incident response information, exposing potential risks. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

L

Lebenshilfe Hof

lebenshilfe-hof.de

54

Lebenshilfe Hof is a regional non-profit organization based in Germany, providing a range of social support services including early intervention, educational programs, therapeutic centers, workshops, and housing assistance. The website serves as an official information portal for their services and community engagement. The organization targets individuals and families seeking support in the Hof region, emphasizing inclusivity and social welfare. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Google Tag Manager for analytics and Usercentrics for GDPR-compliant consent management. The site demonstrates good mobile optimization and accessibility features, including integration with ReadSpeaker for text-to-speech functionality. Hosting is managed via agenturserver, a professional hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service documents. No vulnerability disclosure or incident response information is available, which could be improved to enhance trust and compliance. No suspicious or malicious activity was detected, and the content is safe for general audiences. Overall, Lebenshilfe Hof's website is professional and functional, supporting its mission as a non-profit social service provider. Strategic improvements in privacy documentation, security headers, and contact transparency would strengthen its security posture and compliance standing.

Jean-Paul-Grundschule is a local primary school based in Schwarzenbach an der Saale, Germany, serving students, parents, and the community with educational services and school-related information. The website provides clear contact details, school news, and links to relevant educational partners and government bodies. The site is built on WordPress with Bootstrap and jQuery, indicating a standard but modern technical infrastructure suitable for a small educational institution. The website is mobile-optimized and presents a consistent brand image with official logos and structured navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy PDF available but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and professional, though improvements in privacy and security transparency are recommended.

K

Kinder-Herzen-Glücklich machen e.V.

kinderherzen-gluecklich-machen.de

45

Kinder-Herzen-Glücklich machen e.V. is a German non-profit organization dedicated to supporting the healthy and happy development of children, particularly in kindergartens within the Hof and Wunsiedel regions. The organization focuses on aiding children from socially disadvantaged backgrounds, migrants, and those affected by crises such as the Ukraine war and the COVID-19 pandemic. Their efforts include supporting educators, running social and emotional development projects, and fostering community engagement through donations and volunteerism. The website reflects a well-established regional presence with clear communication and donation mechanisms. Technically, the website is built on WordPress with common plugins such as LayerSlider and Contact Form 7. It employs HTTPS and a cookie consent banner, indicating basic privacy compliance. The site is moderately optimized for performance and mobile use, though some security headers are missing. No advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response information. The absence of security headers and vulnerability disclosures indicates room for improvement. The WHOIS data aligns with the website's legitimacy, showing consistent registration and no privacy protection, appropriate for a non-profit. Overall, the website is professional, trustworthy, and focused on its charitable mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen compliance and trust.

Pfarrgemeinde St. Franziskus is a small non-profit religious organization serving the local community in Schwarzenbach an der Saale, Germany. The website provides information about church services, community groups, and events, targeting local parishioners and visitors. The site is built on WordPress and uses common plugins to manage content and photo galleries. The technical infrastructure is standard for a small community website, with HTTPS enabled and moderate performance. However, the site lacks visible privacy and cookie policies, contact emails, and phone numbers, which limits user trust and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

C

Caritas gGmbH St. Heinrich und Kunigunde

wohnen-fuer-erwachsene.de

59

Wohnen für Erwachsene is a German non-profit social care organization providing residential and supportive living services for adults with disabilities. The website is professionally designed, well-structured, and targets adults with disabilities and their families in the Lichtenfels region. It is affiliated with Caritas gGmbH, a recognized social service provider, enhancing its credibility and trustworthiness. The site offers detailed information about its facilities, services, and career opportunities, supported by social media presence on Facebook and Instagram. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies including service workers for progressive web app capabilities and Usercentrics for GDPR-compliant cookie consent management. The site is hosted on internet1.de nameservers and uses HTTPS, ensuring secure communication. Performance and mobile optimization are moderate to good, with basic accessibility features. From a security perspective, the website enforces HTTPS and uses a consent management platform, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website content and business, indicating legitimacy. Overall, the site demonstrates a solid security posture for a non-profit organization but could improve by adding explicit security headers and incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and continuous monitoring of third-party scripts to maintain compliance and security.

C

Caritas gGmbH St. Heinrich und Kunigunde

st-katharina-foerderzentrum.de

61

The website represents St. Katharina-Schule, a private special education center in Lichtenfels, Germany, affiliated with Caritas gGmbH. It provides specialized educational services for children with learning, language, and emotional-social development needs. The site is well-structured, professionally designed, and targets parents and guardians seeking specialized education services. The business operates as a non-profit under the Caritas umbrella, indicating a stable market position within the regional education sector. Technically, the website uses modern web technologies including jQuery, Usercentrics for cookie consent, and Snowplow for analytics, hosted on a reputable provider. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, though it lacks terms of service and incident response disclosures.

Michel IT-Service GmbH is a small German IT service company specializing in professional software development, individual software solutions, coaching, and web template programming. The company has approximately 25 years of experience, focusing on niche markets such as the textile and waste disposal industries. The website is well-structured, professionally designed, and clearly targets business clients and agencies seeking custom IT solutions. The technical infrastructure includes modern technologies such as .NET, C#, MS SQL Server, HTML5, CSS3, JavaScript, jQuery, and Bootstrap, hosted by a regional German hosting provider. Security posture is adequate with SSL/TLS encryption mentioned, but lacks explicit security headers and incident response policies. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism is implemented. Overall, the website and business present a trustworthy and professional image with room for security and compliance enhancements.

Kristiane Rubner operates as a small, local media design service provider based in Hof, Germany, specializing in layout, graphic design, typesetting, and related creative services. The website serves as a professional portfolio showcasing a broad range of client references, primarily local organizations and businesses. The business model is that of a sole proprietorship or freelance professional, targeting local clients seeking media design expertise. Technically, the website is built using standard web technologies including Bootstrap and jQuery, ensuring mobile responsiveness and a modern user experience. Hosting is provided by webhosting-franken.de, a regional hosting provider. The site lacks advanced CMS or analytics integrations, indicating a simple but effective digital presence. Performance is moderate with good mobile optimization but basic SEO and accessibility features. From a security perspective, the site does not exhibit advanced security measures such as security headers or explicit HTTPS enforcement (SSL status unknown). There are no forms or data collection points, reducing attack surface. However, the absence of privacy and cookie policies represents a compliance gap under GDPR. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and privacy compliance measures to reduce risk and improve user trust. Strategic improvements in these areas would strengthen the business's digital maturity and regulatory adherence.

Amt für Gemeindedienst, now operating as Wirkstatt evangelisch, is a church-affiliated institution providing support, education, and mission-related services to church employees, volunteers, and congregations primarily in Bavaria and Austria. The organization focuses on fostering community engagement, offering workshops, and distributing resources to strengthen church work and outreach. The website reflects a professional and consistent brand identity aligned with its religious and non-profit mission. Technically, the site is built on TYPO3 CMS with integrations such as Matomo for privacy-conscious analytics and CleverReach for newsletter management. While the site is generally well-structured and accessible, some outdated technologies like jQuery 1.4.4 present potential security risks. Security posture is moderate, with HTTPS enforced and minimal cookie use, but lacking explicit security headers and published security policies. Overall, the site is trustworthy, privacy-aware, and serves its target audience effectively.

W

Wirkstatt evangelisch für Kirchen- und Gemeindeentwicklung

gemeindeakademie-rummelsberg.de

44

The website represents the Wirkstatt evangelisch, a church-affiliated educational and consulting institution in Bavaria, Germany. It offers training, coaching, and advisory services focused on church and community development. The site is well-structured, professionally designed, and targets church leaders and staff. Technically, it is built on Drupal 10 with Bootstrap and includes a modern cookie consent mechanism. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and published security policies. The domain and hosting appear legitimate and consistent with the organization's profile. Overall, the site is trustworthy and serves its niche audience effectively.

O

Ostbayerische Technische Hochschule Regensburg

oth-regensburg.de

62

The Ostbayerische Technische Hochschule Regensburg (OTH Regensburg) is a prominent higher education institution in Bavaria, Germany, offering a wide range of Bachelor, Master, and continuing education programs with a strong emphasis on applied sciences and research. The website reflects a well-established university with a strong market position, recognized by awards such as the Study-Check Award 2025. The institution targets students, researchers, and professionals seeking academic and career advancement. Technically, the website is built on TYPO3 CMS, employs modern JavaScript modules, and uses Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit published security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and demonstrates good security hygiene.

I

IfT Institut für Talententwicklung GmbH

vocatium.de

52

vocatium.de is a professionally maintained website operated by IfT Institut für Talententwicklung GmbH, focusing on organizing and promoting specialized career fairs for students and parents in Germany. The platform provides comprehensive information about vocational training and study opportunities, supporting young people in their career choices. The website demonstrates a consistent brand presence, active social media engagement, and clear navigation tailored to its target audience of students, parents, educators, and exhibitors. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and cookie consent management via Cookiebot. The hosting is stable with dedicated nameservers, and the site is accessible without WAF or blocking mechanisms. Performance and mobile optimization are good, though some improvements in accessibility and security headers could enhance the technical posture. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, aligning with GDPR requirements. Overall, vocatium.de presents a low-risk profile with a solid business credibility and technical foundation. Strategic improvements in security headers and incident response transparency would further strengthen its security posture.

E

Eckstein - das Haus der Evang.-Luth. Kirche in Nürnberg

eckstein-evangelisch.de

43

Eckstein is a medium-sized non-profit institution serving as the heart of the Evangelical Lutheran Church in Nuremberg. It offers a broad range of educational, counseling, and community services, hosting events and providing meeting spaces in the city center. The website reflects a well-structured, professionally designed platform that effectively communicates its mission and services to a general audience interested in evangelical church activities. Technically, the site is built on TYPO3 CMS with Bootstrap and incorporates modern web technologies ensuring good performance, mobile optimization, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is solid with HTTPS and privacy-conscious analytics, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, safe, and professionally maintained, supporting the institution's community-focused mission.

B

Bundesverband für Tiergesundheit e.V.

bft-online.de

50

The Bundesverband für Tiergesundheit e.V. (BfT) is a German industry association representing leading manufacturers of veterinary pharmaceuticals and feed additives. The website serves as an information hub for animal health topics, industry news, and regulatory updates, targeting veterinarians, animal owners, and industry stakeholders. The organization maintains a strong market position within Germany's animal health sector, providing publications, events, and advocacy services. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates Google Analytics and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS enforced and privacy-conscious analytics settings, though explicit security policies and incident response contacts are absent. Overall, the website is professional, well-structured, and trustworthy, with comprehensive privacy and cookie policies and active social media engagement.

E

Evangelische Brüder-Unität

herrnhut-entdecken.de

53

The website www.herrnhut-entdecken.de represents the Evangelische Brüder-Unität, a non-profit religious and cultural organization based in Herrnhut, Germany. It provides visitors with information about Herrnhut, exhibitions, guided tours, and related cultural heritage. The site targets a general audience interested in religious history and cultural exploration. The business model is informational and community outreach focused, with a niche market position within religious and cultural tourism. Technically, the website is built on TYPO3 CMS, utilizing standard web technologies such as Bootstrap and FontAwesome. The site is moderately performant, mobile-optimized, and has good SEO practices. Accessibility is basic but present. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected in the HTML content. Cookie consent is implemented, and privacy policy is available, indicating GDPR compliance. However, there is no visible incident response or security policy documentation. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and indicates a legitimate domain registration. Overall, the website is professional, trustworthy, and suitable for its intended audience. Strategic improvements could focus on enhancing security headers, adding terms of service and incident response policies, and improving accessibility features to strengthen compliance and user trust.

G

Graf-Zinzendorf-Stiftung

zinzendorf.de

55

The Graf-Zinzendorf-Stiftung is a small non-profit foundation based in Germany focused on promoting the legacy of Nikolaus Ludwig Graf von Zinzendorf, particularly in relation to church, mission, and society. The foundation supports projects primarily connected to the Evangelische Brüder-Unität – Herrnhuter Brüdergemeine and engages donors and supporters through its website. The site is well-structured, professionally designed, and provides clear contact information and privacy compliance features, including a cookie consent mechanism. Technically, the website is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies or incident response information. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. The domain WHOIS data is limited but consistent with the foundation's profile, showing no suspicious patterns. Overall, the website is trustworthy, safe, and serves its target audience effectively.

H

Herrnhuter Missionshilfe e.V.

herrnhuter-missionshilfe.de

55

Herrnhuter Missionshilfe e.V. is a German non-profit mission organization affiliated with the Evangelische Brüder-Unität. It supports over 60 projects across 9 countries, working closely with local church provinces and partners. The website serves as an information hub for their mission work, fundraising, and community engagement, targeting a general audience interested in religious mission and charitable activities. Technically, the site is built on TYPO3 CMS with responsive design and modern web standards, providing a good user experience and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

Y

YGG-Workgroups

solutionondemand.com

39

SolutionOnDemand is a German-based small business offering a proprietary Content Management System (CMS) tailored for compact and professional websites, alongside professional web design services. The company, identified as YGG-Workgroups, has been operating since at least 2003, with a stable domain registration consistent with its business history. The website content is primarily in German and targets a broad audience interested in CMS solutions and web design. The business model focuses on software product sales and related web design services, positioning itself as a niche CMS provider in the German market. Technically, the website relies on legacy technologies including Flash (via SWFObject), which is deprecated and poses security and accessibility challenges. The site uses basic HTML and CSS with no modern frameworks detected. Hosting and domain registration are managed through German providers, but there is no evidence of HTTPS enforcement or modern security headers, which impacts the site's security posture. The website lacks mobile optimization and accessibility features, and SEO practices are basic. From a security perspective, the site shows several weaknesses: absence of HTTPS enforcement, no DNSSEC, no security headers, and use of deprecated Flash content. Privacy compliance is minimal, with a privacy policy page present but lacking GDPR compliance indicators and no cookie consent mechanism. No contact emails, phone numbers, or incident response contacts are visible, limiting transparency and trust. The WHOIS data is consistent and legitimate, with no suspicious patterns. Overall, the website scores moderately low on AI evaluation due to outdated technology, weak security posture, and limited privacy compliance. Strategic improvements in security, privacy, and modernization of technology stack are recommended to enhance trustworthiness and compliance.

H

Holzhofer Consulting GmbH

holzhofer-consulting.de

64

Holzhofer Consulting GmbH is a specialized consulting firm based in Munich, Germany, focusing on data protection, IT, and information security services. With over 14 years of experience, the company positions itself as a pioneer in external data protection officer services and information security management. Their key offerings include GDPR compliance consulting, ISO 27001 certification support, risk management, audits, and employee training. The firm targets medium-sized enterprises primarily within Germany, emphasizing practical and tailored solutions to ensure business continuity alongside compliance. Technically, the website employs modern web technologies such as Bootstrap for responsive design and Matomo for privacy-conscious analytics. Hosting is managed via kundencontroller.de, consistent with the domain's nameservers. The site is well-structured, mobile-optimized, and demonstrates good SEO practices, although some accessibility features could be enhanced. No CMS was explicitly detected, suggesting a custom or lightweight solution. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. The presence of numerous industry-recognized certifications and a clear incident response section indicates a mature security posture. No vulnerabilities or suspicious domains were detected, and the privacy settings in analytics reflect a commitment to user privacy. Overall, Holzhofer Consulting presents a professional, trustworthy, and secure online presence aligned with its business focus. Strategic improvements in cookie consent, security headers, and vulnerability disclosure would further enhance compliance and security posture.

V

Versorgungswerk der Landesapothekerkammer Hessen

apothekerversorgungswerk.de

40

The Versorgungswerk der Landesapothekerkammer Hessen operates as a pension insurance provider specifically for pharmacists and pharmaceutical interns in the Hessen region of Germany. It serves a niche healthcare sector audience with a focus on membership management, pension services, and providing relevant legal and organizational information. The website reflects a regional public service entity with a clear and consistent branding aligned with the Landesapothekerkammer Hessen. Technically, the website is built on a custom CMS (cms Morpheus) and uses standard web technologies such as HTML5, CSS, and Font Awesome icons. Hosting is provided by kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic mobile and accessibility features. SEO and metadata are present but minimal, with no advanced structured data or analytics detected. From a security perspective, the site uses no-cache headers but lacks advanced security headers and explicit HTTPS confirmation in the provided data. No security or incident response policies are published, and no contact emails or phone numbers are directly visible, relying instead on contact forms. There are no signs of vulnerabilities or malicious content, but improvements in security posture and privacy compliance are recommended. Overall, the website is trustworthy and professional, serving its intended audience effectively. However, enhancements in privacy policy visibility, cookie consent, security headers, and incident response transparency would strengthen its compliance and security posture.

The website 'meistro Connect' appears to be a minimal landing page for a software application or service, primarily targeting German-speaking users. The site uses modern web technologies including React and Next.js, with Material-UI for styling. The presence of Google Analytics and Google Tag Manager indicates some level of user behavior tracking. However, the site content is very limited, showing only a logo and a loading spinner, with no visible business or contact information on the homepage. Privacy compliance is addressed through a cookie consent mechanism and a privacy policy page in German, but no terms of service or security policies are present. The domain is hosted on German servers, consistent with the language and domain, but WHOIS data is minimal, limiting full trust assessment.

K

Kassenärztliche Vereinigung Hessen

asv-hessen.de

59

The website www.asv-hessen.de represents the Kassenärztliche Vereinigung Hessen, a regional healthcare authority in Germany focused on the ambulante spezialfachärztliche Versorgung (ASV), which is a specialized outpatient care service for rare and severe diseases. The site provides comprehensive information for healthcare professionals and institutions about participation, billing, and regulatory frameworks. It serves as an authoritative resource for the ASV program in Hessen, targeting medical specialists, hospitals, and patients. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like jQuery and Matomo for analytics. The site is hosted on Anexia servers, uses HTTPS with good SSL configuration, and implements GDPR-compliant cookie consent mechanisms. The design is professional, mobile-optimized, and accessible, with clear navigation and relevant metadata enhancing SEO. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. However, it lacks publicly visible security policies, incident response contacts, and advanced security headers, which are recommended for improved security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, serving its public healthcare mission effectively. Strategic improvements in security transparency and incident response readiness would further enhance its security maturity.

K

Kassenärztliche Vereinigung Hessen

bereitschaftsdienst-hessen.de

57

The website www.bereitschaftsdienst-hessen.de serves as an informational portal for the Ärztlicher Bereitschaftsdienst (ÄBD) in the German state of Hessen. It provides users with an interactive map and search functionality to locate medical on-call service centers, including specialized services for children and ophthalmology. The site is operated by the Kassenärztliche Vereinigung Hessen, a regional healthcare association, positioning itself as a trusted public healthcare resource for residents of Hessen. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Leaflet for map rendering with OpenStreetMap tiles. The site is hosted on Anexia nameservers and employs HTTPS, ensuring secure communication. The design is responsive and accessible, with features like font size adjustment and high contrast modes enhancing usability. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR principles. However, it lacks explicit privacy policies, terms of service, security headers, and incident response information, which are areas for improvement. No vulnerabilities or suspicious elements were detected in the content or WHOIS data, indicating a generally secure posture. Overall, the website is a reliable and professional resource for healthcare service information in Hessen, though it would benefit from enhanced privacy disclosures and security best practices to strengthen compliance and user trust.

I

information.medien.agrar e.V.

ima-agrar.de

57

information.medien.agrar e.V. is a German non-profit organization focused on providing educational media, projects, and resources related to agriculture. The website serves educators, schools, agricultural professionals, and the general public interested in German agriculture. It offers a variety of media products, educational materials, and organizes projects and events to promote agricultural knowledge. The organization maintains a clear market position as an established non-profit in the agricultural education sector in Germany. Technically, the website is built on Joomla CMS using the Yootheme template and UIkit framework, supplemented by Bootstrap components and Day.js for date/time handling. It is hosted behind Cloudflare DNS, uses HTTPS with excellent SSL configuration, and implements modern web standards ensuring good performance, mobile optimization, and accessibility. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs CSRF tokens in forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The site integrates multiple trusted third-party services for analytics, marketing, and retargeting, with transparent cookie usage. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It provides clear contact information and maintains consistent branding. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.

B

Böklunder

boeklunder.de

40

Böklunder is a well-established German manufacturer and retailer specializing in traditional sausage products with a history spanning over 75 years. The company offers a variety of award-winning sausages and related culinary content such as recipes, targeting a general consumer audience interested in quality meat products. The website is professionally designed using TYPO3 CMS, featuring clear navigation and good mobile optimization. It integrates analytics via etracker but lacks a visible cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the site reflects a credible and trustworthy business presence with room for improvement in privacy compliance and security transparency.

L

Landwirtschaftsverlag GmbH

profi.de

54

profi.de is a German professional media website specializing in agricultural technology news, tests, and practical farming advice. It operates under Landwirtschaftsverlag GmbH, a recognized media publisher. The site offers subscription services, an online shop, and multimedia content targeting professionals in the agricultural sector. Technically, the website employs modern web technologies including Google Tag Manager, Usercentrics for consent management, and ad services via Google Ad Manager. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, profi.de presents a professional, trustworthy digital presence with moderate to good technical maturity.

T

Startseite | top agrar

topagrar.com

62

Top agrar is a German-language agricultural news and information website providing up-to-date news, market prices, and specialized content for the agricultural sector. It targets German-speaking agricultural professionals and stakeholders with a broad range of services including news, newsletters, subscription options, job market listings, and agricultural weather information. The website is well-branded and professionally designed, reflecting a mature media business model reliant on advertising and subscriptions. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Usercentrics for consent management. It uses HTTPS with secure cookie attributes and integrates advertising and analytics services with user consent. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and published privacy or terms of service documents in the provided content. No contact information for security incidents or data protection officers was found, and no vulnerability disclosure mechanism is present. The WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content and design but would benefit from improved transparency in domain registration, explicit privacy and terms policies, and enhanced security headers and disclosures.

A

AGRITECHNICA

agritechnica.com

56

AGRITECHNICA is a globally recognized trade fair specializing in agricultural machinery, positioning itself as the leading event in this sector. The website serves as an information portal for the 2025 event, targeting agricultural professionals and industry stakeholders. The business model revolves around event organization and industry networking, with a strong market position as a premier trade fair in manufacturing for agriculture. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, indicating a mature digital infrastructure. However, some performance and security aspects could be improved, such as implementing security headers and enhancing privacy compliance. Security posture is moderate with no evident vulnerabilities but lacks visible security best practices and policies. Overall, the site is professional and trustworthy but would benefit from improved transparency and security measures.

E

Erholungszentrum Büsum

erholungszentrum-buesum.de

56

Erholungszentrum Büsum is a hospitality business located in Büsum, Germany, offering accommodation services including single, double, and family rooms, as well as event hosting and a regional cuisine restaurant. The website is professionally designed using WordPress with the Divi theme and Yoast SEO plugin, providing a good user experience and clear navigation. Contact information including a phone number and inquiry forms are prominently displayed, facilitating customer engagement. However, the site lacks visible privacy and cookie policies, which is a compliance gap. Technically, the site uses modern web technologies but has a broken video element and lacks explicit security headers, which could be improved to enhance security posture. Overall, the domain registration data is consistent with the business claims, indicating legitimacy. The site is safe for general audiences with no adult or questionable content detected.

The website www.hylide.com represents the hylide® platform, currently under redevelopment and operated by YGG-Workgroups media agency based in Germany. The platform aims to provide extensive information and services related to hylide®, targeting business users interested in media and digital solutions. The site includes a customer login portal, indicating a SaaS or platform-based business model. The content is primarily in German and currently basic, reflecting the redevelopment status. Technically, the website uses a custom CMS named hylide, with frontend technologies including jQuery and blueimp Gallery. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, there is no evidence of advanced analytics, tracking, or advertising technologies. The performance is moderate with room for improvement in technical implementation and security. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy. No incident response or security policy information is provided. The site uses HTTPS (assumed from URL), but SSL configuration details are unavailable. Overall, the security posture is basic and requires enhancements to meet modern standards. The overall risk assessment indicates a moderately trustworthy business presence but with significant gaps in domain registration transparency and security best practices. Strategic recommendations include improving domain registration visibility, implementing security headers, adding privacy and cookie policies, and enhancing technical and security maturity.

YGG-Workgroups Medienagentur is a small German full-service media agency specializing in internet presence, software development, multimedia, and graphic design. Their website content is primarily in German and targets a general audience seeking media and web services. The agency uses a proprietary CMS platform named SolutionOnDemand and hosts their website on servers associated with kasserver.com. The site design and navigation are basic but functional, reflecting a small local business profile. From a technical perspective, the website employs standard HTML and CSS without modern JavaScript frameworks or advanced technologies. There is no evidence of advanced performance optimization or mobile responsiveness beyond basic levels. The absence of visible scripts or analytics tools suggests limited digital marketing or tracking capabilities. Security posture is weak, with no detected HTTPS/SSL configuration or security headers. There is no cookie consent mechanism or explicit privacy compliance indicators beyond a basic privacy policy page. The WHOIS data is consistent with the website's business claims and hosting provider, indicating legitimacy. However, the lack of contact information and security best practices reduces trustworthiness. Overall, the website presents a low to moderate risk profile but requires improvements in security, privacy compliance, and contact transparency to enhance business credibility and user trust.

Messe Stuttgart is a well-established trade fair organizer based in Stuttgart, Germany, founded in 1918. The company operates a large venue hosting numerous trade fairs, congresses, and exhibitions, serving both business clients and the general public. Their website reflects a mature digital presence with comprehensive event listings and structured data to enhance discoverability. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates consent management for privacy compliance. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

B

Buth Maschinen + Technik GmbH & Co. KG

buthgrav.com

61

Buth Maschinen + Technik GmbH & Co. KG is a medium-sized German company specializing in the sale and service of industrial machinery for advertising technology and manufacturing sectors. With over 32 years of market presence, the company offers a broad portfolio including laser cutting machines, laser marking and engraving devices, milling machines, and equipment for light advertising. The website reflects a professional B2B business model targeting industrial clients and advertising professionals. Technically, the site is built on the Webflow platform, leveraging modern web technologies and integrating tracking tools such as Facebook Pixel and Google reCAPTCHA for security and marketing purposes. The website is well-structured, mobile-optimized, and provides clear contact information and product details. However, the WHOIS data for the domain is missing or indicates the domain may not be currently registered, which raises concerns about domain legitimacy and consistency with the company's claimed history. Security posture is generally good with HTTPS and some security best practices, but lacks explicit security headers and a cookie consent mechanism. Privacy and terms are available, indicating GDPR awareness. Overall, the site is professional and trustworthy in content but requires verification of domain registration and enhancement of security and privacy compliance.

H

Harmuth CNC-Frästechnik

harmuth-cnc.de

51

Harmuth CNC-Frästechnik is a German-based manufacturer specializing in the design, production, and servicing of professional CNC milling machines tailored for both standard and custom applications. The company emphasizes robust construction, longevity, and modern technology integration, serving industrial clients primarily in Germany and potentially broader European markets. Their business model focuses on manufacturing and direct sales, supported by software development and training services. The website reflects a professional and consistent brand image with clear contact information and multilingual support.

R

Rüffert Werbung GmbH

xpik.de

46

XPIK is a specialized software solution tailored for advertising technology companies, offering digital order management, calculation tools, time tracking, and project evaluation features. The company behind the software is Rüffert Werbung GmbH, based in Germany, targeting small to medium-sized businesses in the advertising technology sector. The website is professionally designed, mobile-optimized, and provides clear contact channels including a contact form, phone, and email. Technically, the site runs on WordPress with modern plugins ensuring GDPR compliance and user consent management. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant, and well-positioned within its niche market.

S

Straße der Moderne. Kirchen in Deutschland c/o Deutsches Liturgisches Institut

strasse-der-moderne.de

50

Straße der Moderne is a specialized cultural and informational website dedicated to showcasing modern church architecture in Germany. It operates under the Deutsches Liturgisches Institut and provides detailed insights into churches, architects, and artistic elements of modern ecclesiastical buildings. The site targets architecture enthusiasts, church visitors, and those interested in religious cultural heritage. Technically, the website is built on WordPress with modern JavaScript libraries such as UIkit and MixItUp, and it employs SEO best practices via Yoast SEO. The site is mobile-optimized and includes a GDPR-compliant cookie consent mechanism powered by the Complianz plugin. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No explicit incident response or security policy information is provided. Overall, the website is professional, trustworthy, and well-maintained, with a clear niche focus and good user experience.

Ö

Ökumenisches Stundengebet e. V.

oekumenisches-stundengebet.de

51

Ökumenisches Stundengebet e. V. operates as a small non-profit network focused on promoting ecumenical liturgical spirituality in Germany. The organization leverages shared traditions across Christian confessions to foster community through the celebration of the daily hours (Tagzeitenliturgie). Their website serves as an informational and resource hub, offering materials, consultation, and networking opportunities for religious communities and individuals interested in this spiritual practice. The site is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence for a niche religious organization. Technically, the website is built on WordPress 6.8.3, utilizing common plugins such as Contact Form 7 and GDPR Cookie Compliance. Hosting is provided via rzone.de, with HTTPS enforced and cookie consent mechanisms in place, indicating a good baseline for security and privacy compliance. The absence of advanced security headers and incident response information suggests room for improvement in security maturity. No analytics or advertising tools were detected, aligning with the organization's non-commercial nature. From a security perspective, the site demonstrates good practices including HTTPS usage and GDPR compliance, with no visible vulnerabilities or exposed sensitive data. However, the lack of a published security policy, incident response contacts, and vulnerability disclosure mechanisms indicates limited transparency and preparedness for security incidents. The WHOIS data is minimal but consistent with a small non-profit entity, with no suspicious patterns detected. Overall, the website is safe, trustworthy, and well-suited for its target audience. Strategic recommendations include enhancing security transparency, adding incident response information, and implementing additional security headers to strengthen the security posture. These steps will improve trust and resilience while maintaining compliance with privacy regulations.

D

Deutsches Liturgisches Institut

liturgie.de

44

The Deutsches Liturgisches Institut is a specialized non-profit organization dedicated to liturgical research, education, and resource provision primarily for German-speaking clergy, church musicians, and laypersons interested in liturgy. The website serves as a portal for accessing publications, courses, events, and practical liturgical materials. The institute maintains a consistent and professional online presence with clear contact information and institutional references. Technically, the site is built on WordPress with common plugins like jQuery and RoyalSlider, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The absence of public WHOIS data is consistent with privacy protection practices common for non-profits. Overall, the site is trustworthy, safe, and well-aligned with its mission.

B

Bonn.digital GbR

bonn.digital

70

Bonn.digital GbR is a small digital communication agency based in Germany, specializing in social media consulting, community management, event organization, and media production. The company targets businesses and institutions seeking to leverage social media and digital platforms effectively. Their market position is that of a regional expert agency with a strong focus on Bonn and surrounding communities. The website is professionally designed, content-rich, and actively maintained with a blog featuring recent posts up to 2025. Technically, the site runs on WordPress with WooCommerce and German Market plugins, indicating e-commerce capabilities and compliance with German market regulations. The presence of cookie consent mechanisms and Matomo analytics shows attention to privacy and data tracking.

D

Die evangelische Kirche

kirche-entdecken.de

44

Kirche-entdecken.de is a German non-profit educational website operated by the Evangelische Kirche, targeting children to explore and learn about the Christian faith through interactive content, games, quizzes, videos, and crafts. The platform is well-established and sponsored by major regional church organizations, positioning it as a trusted resource for religious education for children in Germany. Technically, the site is built on the TYPO3 CMS platform, uses modern web technologies, and is hosted on German infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and privacy-respecting analytics via Matomo, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit terms of service or security policy pages are found. Overall, the site is safe, professional, and trustworthy with no adult or questionable content.

K

Kirche im Grünen

kircheimgruenen.de

44

Kirche im Grünen is a small non-profit religious organization based in Germany that offers outdoor church services and events across various scenic regions including the Fichtelgebirge, Bayerischer Wald, and the Alpine area. The website serves as an informational portal inviting visitors to participate in these spiritual gatherings in nature. The organization positions itself as a niche provider of religious services emphasizing connection with nature. Technically, the website is built on Drupal 10 CMS with Bootstrap framework, leveraging jQuery and other standard web technologies. It is hosted on a German hosting provider (kunde24.de) and demonstrates moderate performance with good mobile optimization. The site is accessible, well-structured, and provides a good user experience with clear navigation. From a security perspective, the site uses HTTPS and secure form submissions but lacks advanced security headers and published security policies. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present. No incident response or vulnerability disclosure information is available. Overall, the security posture is adequate but could be improved with additional best practices. The website is free from adult or questionable content and maintains a high trustworthiness level. External links are relevant and point to partner church tourism sites. No advertising or tracking scripts are detected, indicating a privacy-conscious approach. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. The overall risk is low, with recommendations focusing on enhancing security headers, cookie consent, and incident response transparency.

K

Kirche und Tourismus in Bayern | Kirche & Tourismus in Bayern

kirche-tourismus-bayern.de

44

The website kirche-tourismus-bayern.de serves as an informational and promotional platform dedicated to church-related tourism and spiritual activities in Bavaria, Germany. It aggregates and links to various partner organizations offering services such as mountain church services, open churches, pilgrimage routes, church music events, and group accommodations. The target audience primarily includes tourists and visitors interested in religious and spiritual tourism within the Bavarian region. The business model is informational, supporting regional church tourism initiatives and community engagement. Technically, the site is built on Drupal 10 CMS, leveraging modern web technologies including jQuery, Bootstrap 5, and various Drupal modules for menus and sliders. The site is hosted on servers associated with kunde24.de, indicating a professional hosting environment. The website demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. There is no cookie consent mechanism detected, which may affect GDPR compliance. No analytics or tracking scripts are present, indicating minimal user tracking. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website is trustworthy and professional, with a clear focus on its niche market. Strategic improvements include implementing cookie consent, enhancing security headers, publishing security policies, and providing clearer contact details to improve compliance and user trust.

W

WNP Medien GmbH

wnp.de

40

WNP Medien GmbH operates the WNP Verlag website, a specialized publishing company founded in 1992 focusing on trade magazines in the visual communication sector. Their portfolio includes leading magazines such as Werbetechnik, SIP, Digital Signage, and Wraps, targeting professionals and businesses in signmaking, printing, and digital signage industries. The company maintains a professional online presence with clear contact information and digital editions accessible via their site. Technically, the website is built on the hylide CMS platform, utilizing modern web technologies including jQuery and blueimp Gallery for interactive content. The site is mobile-optimized with responsive design and good SEO practices, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No incident response contacts or vulnerability disclosure mechanisms are published, representing areas for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which can be addressed with targeted improvements to policies and technical controls.

O

ORMED GmbH, a company of Enovis

djoglobal.de

60

Enovis, represented by ORMED GmbH, is a leading global provider specializing in orthopedic aids and physical therapy solutions in orthopedics, traumatology, and sports medicine. The company targets both healthcare professionals and patients, offering a comprehensive range of products, digital therapy applications, and educational services. Their market position is strong, supported by a professional and well-structured website that reflects their expertise and commitment to quality healthcare solutions. The website is primarily in German and serves the German and Austrian markets.

A

Aspekte GmbH

djkshop.de

52

The DJK Shop, operated by Aspekte GmbH, is an e-commerce platform specializing in merchandise for the DJK Sportverband and DJK Sportjugend communities. The website offers a range of branded sports articles available for online purchase, targeting members and affiliates of the DJK sports organizations in Germany. The business operates as a niche retailer with a direct-to-consumer model, emphasizing exclusive distribution through Aspekte GmbH.

D

Dipl. Ing. Hartmut Schreiber

hartmutschreiber.com

48

The website hartmutschreiber.com represents a small-scale professional service focused on software architecture, primarily using .NET technologies such as C#. The site is targeted at businesses or professionals seeking software development and architecture expertise. The business appears to be an individual consultant or small entity based in Germany, with a domain age consistent with a long-standing presence since 2009. The website content is basic but relevant, with a clear navigation structure and moderate branding consistency. Technically, the site uses Joomla! CMS with standard web technologies including jQuery and Font Awesome. Mobile optimization and accessibility are basic but functional. Security posture is moderate; while HTTPS is presumably enabled (not explicitly stated), no DNSSEC or security headers are present, and no cookie consent mechanism is implemented, which impacts GDPR compliance. Contact information is limited to a contact form with no explicit emails or phone numbers displayed. No social media or certifications are visible, limiting trust signals. Overall, the site is functional and professional but could benefit from enhanced security and privacy features.