Germany security reports

L

Landkreis Kulmbach

landkreis-kulmbach.de

52

Landkreis Kulmbach operates as a regional government authority in Germany, providing a wide range of public services including citizen services, vehicle registration, waste management, health and social services, education, and environmental initiatives. The website serves as a comprehensive portal for residents and stakeholders, offering access to information, forms, and contact points. The organization holds a stable market position as a public sector entity with a focus on community engagement and regional development. Technically, the website is built on TYPO3 CMS, leveraging modern responsive design and web standards to ensure accessibility and usability across devices. The infrastructure appears professionally managed, likely hosted under Deutsche Telekom domains, with secure HTTPS connections and optimized content delivery. However, some areas such as cookie consent and security headers could be improved to enhance compliance and security. From a security perspective, the site enforces HTTPS and provides warnings against phishing attempts, indicating awareness of security risks. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies and incident response contacts suggests room for maturity in security governance. Overall, the site maintains a good security posture appropriate for a government website. The overall risk assessment is low, with recommendations focusing on enhancing privacy compliance through cookie consent mechanisms, publishing security policies, and implementing additional security headers. These improvements will strengthen trust and regulatory adherence while maintaining the site's role as a reliable public service platform.

D

dm-drogerie markt GmbH + Co. KG

lust-an-zukunft.de

68

The website 'Lust an Zukunft' is a community engagement platform operated by dm-drogerie markt GmbH + Co. KG, a large retail company in Germany. The site focuses on supporting local initiatives for a livable and open society, aligning with the company's corporate social responsibility efforts. The platform is well-branded and consistent with dm's retail and community values, targeting a general audience interested in social initiatives and retail services. Technically, the site employs modern web technologies including JavaScript modules and CSS, with a self-hosted Matomo analytics solution integrated via Cookiebot for GDPR-compliant user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks explicit security headers and a published security policy. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the brand identity. Overall, the website demonstrates a mature digital presence with strong privacy compliance and a trustworthy business profile.

D

Deutsch-Polnisches Jugendwerk / Polsko-Niemiecka Współpraca Młodzieży

sherpa-bne.org

42

The website sherpa-bne.org serves as an educational platform dedicated to Education for Sustainable Development (BNE), targeting youth and organizers involved in international youth encounters primarily between Germany and Poland. It is operated under the auspices of the Deutsch-Polnisches Jugendwerk and Polsko-Niemiecka Współpraca Młodzieży, reflecting a non-profit mission to promote sustainable and future-oriented youth exchanges. The platform offers thematic content, practical methods, and project examples to support sustainable development education in youth projects. Technically, the site is built on WordPress 6.8.3 with a modern tech stack including jQuery, Lightbox2, Slick Carousel, and WPML for multilingual support. It uses Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized and accessible, with good SEO practices and moderate performance. Hosting and domain registration are consistent and legitimate, with no signs of privacy protection or suspicious registrations. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no visible cookie consent mechanism or published security/incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low, with the site presenting a trustworthy, professional, and educational resource. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security policies to improve compliance and trust.

Zusammen im Austausch is a German-Polish youth exchange platform operated under the Deutsch-Polnisches Jugendwerk (DPJW). It serves as an informational and resource hub for youth organizations, schools, and partners involved in cross-border cooperation projects. The website provides categorized project examples, search functionality for educational institutions, and practical tools to support cooperation. The platform targets youth and educational stakeholders interested in fostering German-Polish relations through exchange programs. Technically, the site is built on WordPress 4.5.2 with common plugins such as Contact Form 7 and Slider WD, and integrates Google Analytics and YouTube APIs for tracking and media embedding. While the site is functional and well-structured with good navigation and mobile optimization, it uses an outdated WordPress version, which poses security risks. No explicit cookie consent or comprehensive privacy policy is present, indicating partial GDPR compliance. Security headers are not detected, and no incident response or vulnerability disclosure policies are found, suggesting room for improvement in security posture. Overall, the website is credible and professional but would benefit from technical and compliance updates to enhance security and privacy.

D

DIE.PROJEKTOREN – FARYS & RUSCH GBR

dieprojektoren.de

44

DIE.PROJEKTOREN – FARYS & RUSCH GBR is a small German creative agency specializing in design and presentation services with over 20 years of experience. Their focus areas include nature and climate protection, social issues, education, and culture. The agency offers a broad range of services including corporate design, illustration, photography, film, and web development, targeting socially conscious organizations and cultural institutions. The website is professionally designed using WordPress and modern plugins, providing a good user experience and clear contact information. Technically, the site uses HTTPS and modern web technologies but lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No security or incident response policies are published, indicating room for improvement in security posture. Overall, the domain registration data aligns with the website's claims, supporting legitimacy. The site is safe for general audiences with no adult or questionable content detected.

F

Fränkischer Marienweg

fraenkischer-marienweg.de

53

Fränkischer Marienweg is a small non-profit organization dedicated to promoting the cultural and religious heritage of the Franconia region in Germany through the Fränkischer Marienweg pilgrimage route. The website provides comprehensive information about the pilgrimage, including events, downloadable route data, and useful resources for pilgrims. It targets pilgrims, tourists, and cultural enthusiasts interested in Marian devotion and regional heritage. The site is built on WordPress with Elementor and uses reputable plugins for event management and file downloads, reflecting a moderate to good level of digital maturity.

B

Bayerisches Staatsbad Bad Steben

bad-steben.de

51

Bayerisches Staatsbad Bad Steben operates a regional health and wellness spa specializing in radon and moor therapies located in the Naturpark Frankenwald, Germany. The website serves as an information and booking platform targeting tourists and patients seeking therapeutic and wellness services. The business holds a solid market position as a state-recognized spa with unique natural healing offerings. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and YouTube integration, hosted by Int-Tech. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, security headers, and privacy compliance, though there is room for improvement in formal security policy publication and incident response readiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

Evangelische Kirchengemeinde und Pfarrei Bad Steben

badsteben-evangelisch.de

44

The website www.badsteben-evangelisch.de serves as the official online presence for the Evangelical Lutheran Church communities of Bad Steben, Bobengrün, and Langenbach in Bavaria, Germany. It provides visitors with information about church services, community events, liturgical calendars, and church music activities. The site targets local community members and guests interested in the Evangelical Lutheran faith and related cultural events. The business model is non-profit and community-focused, emphasizing religious and cultural engagement rather than commercial activities. Technically, the website is built on Drupal 10 CMS with Bootstrap for responsive design and includes modern JavaScript libraries such as Klaro for cookie consent management and OpenLayers for map display. The site is mobile-optimized, accessible, and well-structured, with good SEO practices. Hosting is provided by kunde24.de, consistent with the domain's WHOIS data. From a security perspective, the site uses HTTPS (implied by canonical URLs), implements a cookie consent mechanism, and avoids exposing sensitive data. However, no explicit security headers or incident response policies are published, and no terms of service or vulnerability disclosure statements are present. The site shows good privacy compliance with GDPR through its privacy policy and consent manager. Overall, the website is trustworthy, professionally maintained, and suitable for its community and religious audience. Recommendations include enhancing security headers, publishing security and incident response policies, and adding terms of service to improve transparency and compliance.

S

Stiftung Kinder forschen

haus-der-kleinen-forscher.de

53

Stiftung Kinder forschen is a German non-profit foundation dedicated to promoting early STEM (MINT) education for sustainable development in kindergartens, after-school care, and primary schools. The organization offers professional training, practical educational resources, and pedagogical support targeting educators and institutions involved in early childhood and primary education. The website reflects a well-established entity with a clear mission and a strong presence in the education sector in Germany. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Matomo analytics for data collection and user insights. The site is hosted by hosting.de, a reputable German hosting provider, and employs HTTPS with strong security headers, ensuring secure and trustworthy user interactions. The cookie consent mechanism is implemented via OneTrust, demonstrating compliance with GDPR and privacy best practices. From a security perspective, the site shows a mature posture with enforced HTTPS, content security policies, and no visible vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy or vulnerability disclosure page, which could enhance transparency and incident response readiness. The presence of a data protection officer contact aligns with GDPR requirements, reinforcing the site's commitment to data privacy. Overall, Stiftung Kinder forschen's website is professional, secure, and compliant with privacy regulations, serving its educational mission effectively. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further strengthen trust and security posture.

P

Partnerschaften für Demokratie der Landkreise Wunsiedel i. Fichtelgebirge, Tirschenreuth, Hof und Stadt Hof

demokratie-leben-in-der-mitte-europas.de

42

The website demokratie-leben-in-der-mitte-europas.de serves as an informational and funding portal for democracy promotion projects in the German regions of Wunsiedel i. Fichtelgebirge, Tirschenreuth, Hof, and the city of Hof. It operates under the federal program "Demokratie leben!" supported by the German Ministry for Family Affairs. The site provides resources for project funding, event announcements, and contact information for coordination offices. Technically, the site is built on WordPress 6.8.3, with a modern responsive design and good accessibility features. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving a small regional government/non-profit audience.

The Landkreisjugendarbeit und Kreisjugendring Kulmbach website serves as the official online presence for the regional youth work and youth council in Kulmbach, Germany. It provides information, event announcements, and resources targeted at children, youth, families, and youth workers in the community. The organization operates under the Landratsamt Kulmbach, emphasizing community engagement and youth development. The website is well-structured, content-rich, and professionally presented, reflecting a stable regional public service entity. Technically, the site is built on WordPress 6.7.4 with Bootstrap and FontAwesome, ensuring modern design and mobile responsiveness. Hosting appears to be with Deutsche Telekom, indicated by the nameservers. The site loads with moderate performance and includes accessibility and SEO best practices, though some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. No incident response or security policies are published, which could be improved to increase trust and preparedness. Overall, the website is trustworthy, safe, and professionally managed, with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and published security policies would enhance the site's compliance and security posture.

K

Kreisjugendring Hof

kjr-hof.de

50

Kreisjugendring Hof is a regional non-profit organization affiliated with the Bayerischer Jugendring, focused on youth work and community engagement in the Hof district of Germany. The website provides detailed information about youth programs, training courses like Juleica, event organization, and equipment rental services. The organization targets youth, volunteers, and families, positioning itself as a key regional player in youth development and support. Technically, the site is built on WordPress with modern plugins such as Elementor and Slider Revolution, hosted behind Cloudflare DNS for performance and security. The site is well-structured, mobile-optimized, and accessible, with a good level of SEO and privacy compliance including GDPR-aligned cookie consent and a privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved and a vulnerability disclosure mechanism is absent. Overall, the site is trustworthy, professional, and serves its community effectively.

U

USU Software AG

usu.com

66

USU Software AG is a technology company specializing in IT service management, IT asset management, and AI-driven enterprise solutions. The company positions itself as a leader in optimizing IT operations and elevating service delivery through innovative cloud, risk management, and cost control solutions. Their website reflects a mature digital presence with comprehensive product offerings and resources targeting IT professionals and enterprise decision makers. Technically, the site is built on HubSpot CMS with extensive use of modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the professional branding and external references support the company's credibility. Overall, USU demonstrates a robust business and technical foundation with room for improvement in transparency around security and domain registration details.

D

Deutscher Akademischer Austauschdienst

daad.de

66

The Deutscher Akademischer Austauschdienst (DAAD) is the world's largest funding organization dedicated to the international exchange of students and researchers. The website serves as an official platform providing comprehensive information about scholarships, academic exchange programs, and services for universities. It targets students, academics, and educational institutions primarily in Germany but also internationally. The DAAD operates as a non-profit organization with a strong market position in the education sector. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted on Microsoft Azure infrastructure, and employs Bootstrap for responsive design. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, implements standard security headers, and includes a cookie consent mechanism compliant with GDPR. However, it lacks a dedicated security policy or incident response contact information, which could enhance transparency and trust. Overall, the DAAD website is professional, secure, and compliant with privacy regulations, reflecting the organization's credibility and commitment to international academic cooperation. Strategic improvements could focus on publishing explicit security policies and vulnerability disclosure channels to further strengthen its security posture.

MHedia.de is a small German technology business specializing in smart web solutions, operated by Marcel Hifinger. The website is minimalistic, providing basic contact information and a clear indication of the business focus on web solutions. The market position appears local and small scale, targeting a general audience in Germany. The business model is service-oriented, likely offering web development or consulting services. Technically, the website is a simple static HTML/CSS site hosted on kasserver.com with no detected CMS or advanced frameworks. The site lacks mobile optimization and accessibility features, and no analytics or tracking technologies are present. The absence of HTTPS and security headers suggests a basic technical infrastructure with room for improvement in security and performance. From a security perspective, the site does not display privacy, cookie, or terms of service policies, nor any incident response or vulnerability disclosure information. No security best practices such as HTTPS or security headers are evident, which lowers the security posture. However, no critical vulnerabilities or suspicious elements were detected. The domain WHOIS data aligns with the website content and hosting provider, supporting legitimacy. Overall, the website is functional but basic, with moderate trustworthiness. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

B

Bonn.digital

bonn.social

70

Bonn.social is a localized Mastodon social media instance serving the Bonn and Rhein-Sieg region, operated by Bonn.digital, a social media agency based in Bonn, Germany. The platform provides decentralized social networking services tailored to the local community and enthusiasts of the region. The website is well-structured, with clear information about administration, contact, and community guidelines, fostering trust and engagement among users. Technically, the site leverages modern web technologies including Mastodon, React, and ES modules, ensuring a responsive and user-friendly experience across devices. The platform is integrated into the Fediverse, promoting decentralized social media interaction. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. WHOIS data is privacy protected, which is common for such services, but limits transparency. Overall, the site demonstrates a solid security posture and business credibility appropriate for its scope and audience.

N

National Association of German Cooperative Banks (BVR)

bvr.de

59

The National Association of German Cooperative Banks (BVR) serves as the umbrella organization for cooperative banks in Germany, providing strategic partnership, advocacy, and service provision to its members. The website reflects a well-established institution with a clear market position as a leading association in the German banking sector. Key services include lobbying, social engagement, and a protection scheme for cooperative banks. The target audience primarily consists of cooperative banks and financial stakeholders within Germany. Technically, the website is built on IBM Domino XPages technology, utilizing Dojo Toolkit and jQuery libraries, with additional components like Jssor Slider and Bootstrap Notify. The site demonstrates moderate performance and good mobile optimization, though some technologies are somewhat dated. SEO and accessibility are adequately addressed through structured data and meta tags. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal security policy or incident response contact. No vulnerability disclosure or security.txt file is present. Privacy compliance is mostly met with a comprehensive privacy policy, but no cookie consent mechanism is evident. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The security posture is adequate but could be improved with modern security best practices and enhanced privacy controls. The domain WHOIS data is consistent with the organization's identity, supporting legitimacy and trustworthiness.

V

Venus GmbH

venus.bayern

51

Venus GmbH, transitioning to Venus Ai, operates a Social Knowledge Graph platform that integrates community sourced data from tourism, administration, and regional infrastructure to foster digital sovereignty and regional development. The company targets municipalities, tourism associations, public sector entities, and social organizations primarily in Germany. Their platform leverages open data and AI to semantically link and enrich information, enabling innovative digital applications and improved data quality. Technically, the website is built on TYPO3 CMS with modern web technologies, responsive design, and accessibility features, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the website and business present a trustworthy and professional image with clear contact information and active social media presence.

V

vkm Bayern

vkm-bayern.de

76

The vkm-Bayern website represents a regional non-profit union dedicated to church and diaconal employees in Bavaria, Germany. It focuses on advocating for fair wages, employee rights, and fostering a strong service community. The organization positions itself as a strong regional player within its niche, targeting employees in religious and social service sectors. The website content is professionally presented, with clear branding and consistent messaging aligned with its mission. Technically, the website is built on WordPress using Elementor and WooCommerce, indicating a mature digital infrastructure capable of supporting content management and e-commerce functionalities. Hosting is via AWS DNS services, ensuring reliable availability. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting good digital maturity and regulatory adherence. Performance and mobile optimization are adequate, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies and incident response contacts, which are recommended for transparency and preparedness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy and professionally managed, with room for improvement in security transparency and accessibility. Strategic recommendations include publishing a security policy, incident response contacts, and enhancing accessibility compliance to strengthen user trust and regulatory adherence.

Z

Zentrum Verkündigung der EKHN

zentrum-verkuendigung.de

59

Zentrum Verkündigung der EKHN is a non-profit religious organization affiliated with the Evangelische Kirche in Hessen und Nassau, providing a broad range of church-related services including publications, events, spiritual resources, and music programs. The website serves as an important regional hub for church members, volunteers, and stakeholders, offering comprehensive content and resources tailored to their needs. The organization maintains a clear and consistent brand presence with good content quality and user experience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating Matomo for analytics. Hosting is provided by SchlundTech, a reputable provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive digital maturity level. From a security perspective, the site uses HTTPS with a solid SSL configuration and secure form handling. However, it lacks explicit security policies and incident response information publicly available, which could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms in place. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a trustworthy and professional digital presence for a religious non-profit entity, with recommendations to enhance security headers and publish security-related policies to further strengthen its posture.

D

Deutsches Liturgisches Institut

dli.institute

44

The Deutsches Liturgisches Institut operates as a specialized non-profit institute dedicated to liturgical research, education, and resource provision primarily for German-speaking religious communities. The website serves as a portal for accessing publications, educational courses, event information, and practical liturgical aids. The organization maintains a consistent brand presence and provides clear contact information, reinforcing its credibility within its niche market. Technically, the website is built on WordPress and utilizes common libraries such as jQuery and RoyalSlider. While the site is accessible and functional with moderate performance, some technical improvements are recommended, including enforcing HTTPS on all resources and enhancing security headers. The site lacks a cookie consent mechanism, which is a compliance gap under GDPR regulations. From a security perspective, the site uses HTTPS but does not implement advanced security headers or mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to TLD restrictions, but the domain appears legitimate and actively maintained. Overall, the security posture is moderate but could benefit from improvements in security best practices and privacy compliance. The overall risk is low given the non-profit nature and content focus, but strategic enhancements in technical security and privacy compliance would strengthen trust and reduce potential risks.

M

Mach Kirchenmusik

mach-kirchenmusik.de

57

Mach Kirchenmusik is a specialized non-profit platform focused on promoting church music through education, events, and community engagement in Germany. The website serves musicians, students, and church communities by providing resources, event listings, and opportunities to participate in church music activities. The platform maintains a professional and consistent brand presence with excellent content quality and user experience. Technically, the site is built on Drupal 10, uses Matomo Analytics for privacy-conscious tracking, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

E

Evangelisch-Lutherische Kirche in Bayern

bayern-evangelisch.de

50

The Evangelisch-Lutherische Kirche in Bayern operates a comprehensive and professionally designed website serving as the digital presence for one of the 20 regional churches within the Evangelische Kirche in Deutschland. The site provides extensive information on religious services, community programs, educational resources, and church-related events, targeting evangelical Christians and interested individuals in Bavaria. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as jQuery, Bootstrap, and MediaElement.js, with good mobile optimization and accessibility features. Privacy and cookie policies are well implemented, including user consent mechanisms, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a high level of professionalism and trustworthiness appropriate for a government-affiliated religious institution.

I

Interkulturell Evangelisch in Bayern

interkulturell-evangelisch.de

55

Interkulturell Evangelisch in Bayern is a small non-profit organization focused on promoting intercultural church development, multilingual worship services, and diversity-sensitive pastoral care within Bavaria. The website serves as an informational platform providing resources and links related to anti-discrimination and ecumenical cooperation among international congregations. The organization targets church communities and intercultural groups, positioning itself as a niche regional entity within the non-profit sector. Technically, the website is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard JavaScript libraries. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The presence of a cookie consent banner indicates some level of privacy compliance, although explicit privacy policies and terms of service are absent. From a security perspective, the site enforces HTTPS and includes scripts to harden fetch and XHR requests. However, it lacks explicit security headers and does not provide incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected, and the site is accessible without WAF or security challenges. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and contact transparency. Strategic enhancements in these areas would strengthen trust and compliance posture.

C

Chorverband in der Evangelischen Kirche in Deutschland e.V. (CEK)

choere-evangelisch.de

54

The Chorverband in der Evangelischen Kirche in Deutschland e.V. (CEK) is a well-established non-profit umbrella organization representing over 15,000 evangelical church choirs and nearly 250,000 singers across Germany, including a significant number of children and youth. The organization focuses on promoting church singing through various activities such as sing weeks, training, publications, and community support initiatives. The website reflects a professional and consistent brand presence, targeting choir members, church musicians, and related stakeholders within Germany. The digital infrastructure is based on a modern WordPress CMS with relevant plugins for GDPR compliance and user engagement, hosted on netcup servers.

E

Evangelische Hochschule Nürnberg

evhn.de

48

The Evangelische Hochschule Nürnberg is a state-recognized higher education institution affiliated with the Evangelical Lutheran Church in Bavaria. It offers a range of degree programs primarily in social work, health and nursing, education, management, and church-diaconal studies. The institution targets students, prospective students, and professionals seeking further education in related fields. The website reflects a well-established regional educational provider with a strong focus on social and church-related disciplines. Technically, the website is built on Drupal 10, utilizing modern JavaScript libraries such as Splide.js for UI components and Usercentrics for GDPR-compliant cookie consent management. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. The site is hosted on servers associated with m-online.net, with multiple nameservers indicating a robust DNS setup. Performance and mobile optimization are good, with accessibility and SEO features well implemented. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy pages or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the website content, supporting legitimacy and trustworthiness. Overall, the site demonstrates a mature security posture appropriate for an educational institution. The risk profile is low, with no signs of malicious activity or suspicious domains. Recommendations include publishing a formal security policy, incident response contacts, and adding security headers to enhance protection. The website is suitable for general audiences, with no adult or questionable content detected.

E

Evangelischer KITA-Verband Bayern e.V.

evkita-bayern.de

49

The Evangelischer KITA-Verband Bayern e.V. is a regional non-profit association representing childcare providers affiliated with the Evangelical Lutheran Church in Bavaria. The organization offers advisory services, training, information, and advocacy for kindergartens and daycare providers. Their website reflects a professional and consistent brand image, targeting childcare professionals and church organizations in Bavaria. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, though it lacks published formal security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with its business purpose.

R

Religionspädagogisches Zentrum der Evangelisch-Lutherischen Kirche in Bayern

rpz-heilsbronn.de

46

The Religionspädagogisches Zentrum Heilsbronn is a specialized non-profit educational institution affiliated with the Evangelisch-Lutherische Kirche in Bayern. It focuses on religious pedagogy, offering training, materials, and event hosting primarily for educators and church workers in Bavaria. The website reflects a well-structured, content-rich platform with clear navigation and a professional design, targeting religious educators and related audiences. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Piwik (Matomo) analytics for user tracking. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and privacy compliance mechanisms such as cookie consent. The domain WHOIS data is minimal but consistent with a legitimate small non-profit entity. Overall, the website presents a trustworthy and professional digital presence with room for enhanced privacy and security practices.

Wirkstatt evangelisch is a newly established institution within the Evangelical Lutheran Church in Bavaria, formed by merging three church departments to provide consolidated support, training, and consulting services to church employees and communities. The website presents a clear mission focused on collaboration, spirituality, and organizational efficiency within the church context. Technically, the site is built on WordPress with a modern theme, showing good mobile optimization and accessibility, though some SEO and security header improvements are possible. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and a cookie consent mechanism. Overall, the site is trustworthy, compliant with GDPR, and professionally presented, reflecting its non-profit church affiliation.

L

Landesverband für Evangelische Kindergottesdienstarbeit in Bayern

kirche-mit-kindern.de

49

The website www.kirche-mit-kindern.de represents the Landesverband für Evangelische Kindergottesdienstarbeit in Bayern, a non-profit organization dedicated to supporting children's church services in Bavaria, Germany. It offers educational resources, training programs, newsletters, and event information tailored to church workers and families involved in religious education for children. The organization holds a regional leadership position within its niche. Technically, the site is built on TYPO3 CMS, a professional and mature content management system, with responsive design and good accessibility features. The website employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers or explicit security policies are published. From a security perspective, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of a formal security policy or incident response contact is noted as an area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic recommendations include enhancing security transparency, publishing incident response details, and adding security headers to further strengthen the security posture.

B

BelWü-Koordination

belwue.de

60

BelWü is a regional data network provider serving scientific and educational institutions in Baden-Württemberg, Germany. It connects universities, colleges, schools, and public libraries, offering a range of network and internet services tailored to the academic sector. The website presents a clear and professional overview of its services and organizational structure, targeting institutional users within the region. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and clear navigation, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS assumed but missing explicit security headers and cookie consent mechanisms. The WHOIS data aligns with the academic nature of the service, using university name servers and Deutsche Telekom infrastructure, supporting legitimacy. Overall, the site is trustworthy and functional but could improve privacy compliance and security best practices.

W

webfactory GmbH

webfactory.de

59

webfactory GmbH is a well-established German web agency founded in 1997, specializing in custom websites and web applications primarily for companies, organizations, and public institutions. The company emphasizes long-term partnerships and high-quality, sustainable digital solutions. Their market position is strong within the German-speaking market, supported by a portfolio of reputable clients and projects. Technically, the website uses a modern stack including PHP, Symfony, and a proprietary CMS called wfDynamic, with privacy-conscious analytics via Matomo. The site is well-optimized for performance, accessibility, and mobile devices. Security posture is solid with HTTPS and privacy-respecting analytics, though some security policy disclosures and cookie consent mechanisms could be improved. Overall, the business credibility and professionalism are high, with clear contact information and consistent branding.

W

Wach- und Werkschutz Kurt Strube GmbH

wws-strube.de

57

Wach- und Werkschutz Kurt Strube GmbH is a medium-sized German company specializing in fullservice security and facility management services, primarily serving cultural institutions and businesses. Founded in 1983, the company has a long-standing presence in the Emsland region and offers a broad range of services including security personnel, building cleaning, facility management, and temporary staffing. Their website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. The company maintains active social media profiles and provides transparent contact information, enhancing trust and accessibility. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Slider Revolution, and Borlabs Cookie for privacy compliance. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. Security-wise, the site enforces HTTPS and uses security plugins like Wordfence, but lacks explicit security headers and a published security policy or incident response information. Cookie consent is implemented in compliance with GDPR. Overall, the security posture is solid but could be improved by adding security headers, a vulnerability disclosure policy, and incident response contacts. The domain WHOIS data aligns well with the business claims, showing consistency and legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. The website content is safe for general audiences with no adult or questionable material. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility features to further strengthen compliance and trust.

P

PERBILITY GmbH

concludis.de

52

PERBILITY GmbH operates the website www.mein-helix.de, offering enterprise-grade HR software solutions with a focus on high-volume recruiting through their product concludis. The company targets large organizations requiring efficient applicant management and seamless system integration. The website is professionally designed, multilingual (German and English), and provides comprehensive information about their services including onboarding, apprenticeship management, e-learning, and AI assistance. Technically, the site uses modern web technologies, including Matomo analytics and Leadinfo tracking, with hosting likely provided by Noris Network. Security posture is solid with HTTPS and CAPTCHA protections, though some improvements in security headers and incident response disclosures are recommended. Privacy compliance is mostly met with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-branded, and serves a specialized B2B market segment effectively.

P

PERBILITY GmbH

concludis.com

52

PERBILITY GmbH operates the website www.mein-helix.de, offering enterprise-grade HR software solutions with a focus on high-volume recruiting through their product concludis. The company targets large organizations and enterprises requiring efficient applicant management and seamless system integration. The website is professionally designed, content-rich, and provides clear pathways for engagement such as demo requests. Technically, the site employs modern tracking tools like Matomo and Leadinfo, uses Cloudflare Turnstile CAPTCHA for form security, and is hosted on reputable nameservers. Security posture is strong with HTTPS and security headers in place, though improvements can be made in cookie consent and explicit security policies. Overall, the site reflects a mature digital presence suitable for its market segment.

D

Deutsche Forschungsgemeinschaft e.V.

gerit.org

56

GERiT is a comprehensive information portal operated by the Deutsche Forschungsgemeinschaft (DFG) in partnership with DAAD and HRK, providing detailed data on over 33,000 German research institutions. It serves students and researchers domestically and internationally, offering institutional profiles, job listings, doctoral program information, and links to DFG-funded projects. The portal is bilingual and well-structured, reflecting a mature digital presence. Technically, the site uses modern web technologies including React and integrates search capabilities via Apache Lucene/Solr. It employs Google Maps API for geolocation features and maintains good mobile responsiveness and accessibility standards. While no explicit CMS is detected, the platform appears custom-built for its specialized content. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements could be made by enabling DNSSEC and adding security headers. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with a clear and comprehensive privacy policy and cookie management. Overall, GERiT represents a trustworthy, authoritative resource in the German academic research sector. Strategic recommendations include enhancing DNS security, publishing a formal security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and security.

C

Aktuelle COVID-19 Zahlen weltweit | corona-zahlen-heute.de

corona-zahlen-heute.de

65

The website corona-zahlen-heute.de is a German-language informational portal focused on providing up-to-date COVID-19 statistics worldwide and detailed data for Germany. It aggregates official data sources and presents them with visualizations and detailed regional breakdowns. The site targets the general public interested in pandemic tracking and health data. Technically, the site uses modern web technologies including JavaScript, SVG for maps, Google Fonts, and Google Adsense for monetization. Hosting is via Cloudflare, providing performance and security benefits. Security posture is strong with HTTPS enforced and Content-Security-Policy headers present, though additional headers could improve security further. Privacy compliance is moderate; a cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found in the provided content. No direct contact information or incident response contacts are visible. Overall, the site is professional, trustworthy, and safe for general audiences, with a moderate AI score reflecting good content and technical implementation but some gaps in privacy and contact transparency.

E

Evangelisch-Lutherisches Dekanat Hof

dekanat-hof.de

46

The website www.dekanat-hof.de represents the Evangelisch-Lutherisches Dekanat Hof, a regional church organization in Germany providing religious, community, and social services. The site is well-structured, content-rich, and targets local community members including families, youth, and churchgoers. It offers information on events, contact persons, and church music groups, reflecting a strong community engagement focus. Technically, the site is built on Drupal 10 with modern web technologies and includes GDPR-compliant cookie consent mechanisms. The hosting is managed via kunde24.de, and the site shows good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or malicious content were detected. WHOIS data is limited but consistent with the site's purpose and hosting. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

A

Ambulante Ethikberatung für Hochfranken e.V.

ethikberatung-hochfranken.de

44

Ambulante Ethikberatung für Hochfranken e.V. is a small non-profit association founded in 2022, providing ambulatory ethics consultation services in the Hochfranken region of Germany. The organization focuses on supporting patients, their families, and healthcare professionals in ethical decision-making related to end-of-life care. The website presents a professional and consistent brand image, with clear contact information and detailed descriptions of services and team members. Technically, the site uses modern web technologies including Bootstrap and jQuery, hosted by a regional provider, and is mobile-optimized with good SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is good with a privacy policy available, though no cookie consent mechanism is present. Overall, the website is trustworthy and well-suited for its target audience.

The website bernhard-lichtenberg-hof.de serves as the official online presence for the Catholic parish Bernhard Lichtenberg in Hof, Germany. It provides comprehensive information about church services, community events, pastoral contacts, and religious education. The site targets local parishioners and visitors interested in the Catholic community activities within the Hof region. The business model is non-profit, focusing on spiritual and community services. The website is well-branded, consistent, and contains trust indicators such as official contact details and legal disclosures.

T

TFG ONLINE PLUS

tfgonlineplus.de

56

The website 'TFG ONLINE PLUS' appears to be a business-oriented platform hosted in Germany, utilizing a mobile-friendly jQuery Mobile framework. The site enforces HTTPS via client-side redirection and integrates a Usercentrics cookie consent mechanism, indicating some level of GDPR compliance. However, the content is minimal and lacks explicit business descriptions, contact information, or legal disclosures, which limits the ability to fully assess the business model or market position. Technically, the site uses standard JavaScript libraries and is hosted by Adacor, a reputable hosting provider. Security posture is moderate with HTTPS enabled but missing important HTTP security headers and no visible incident response or security policies. Privacy compliance is partial due to the presence of a cookie consent but absence of a privacy policy. Overall, the site is functional but would benefit from enhanced transparency and security hardening.

K

KKV Aktuell

kkv-aktuell.de

54

KKV Aktuell is a German non-profit association website providing current information about the KKV Bundesverband. The site targets members and potential members interested in the organization's activities and membership opportunities. The business model is focused on community engagement and information dissemination within a niche non-profit sector. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and jQuery, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in privacy and security transparency.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Hof/ BDKJ-Regionalverband Hof-Kulmbach

jugend-im-dekanat-hof.de

57

The website represents a regional Catholic youth pastoral office and youth organization in the Hof and Kulmbach areas of Germany, affiliated with the Erzdiözese Bamberg. It provides information on youth work, events, subsidies, and contact details for local offices. The site targets youth, volunteers, and community members involved in church-related youth activities. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for privacy-respecting analytics, and integrates accessibility features effectively. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No incident response or vulnerability disclosure policies are found. Overall, the site is trustworthy, professional, and safe for general audiences.

The website www.eucharistinerinnen.de represents the Kongregation der Schwestern Dienerinnen Jesu in der Eucharistie, a small non-profit Catholic religious community based in Germany. The site provides comprehensive information about their spiritual mission, community activities, youth programs, and opportunities for engagement. The organization has a long-standing history, celebrating 100 years, and targets individuals interested in Catholic spirituality and religious life. Technically, the website is built on the Jimdo CMS platform, utilizing standard web technologies such as jQuery and bxSlider for galleries. It is hosted by one.com and employs HTTPS with a good SSL configuration. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. Privacy and cookie policies are present and GDPR compliant, including a functional cookie consent mechanism. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks some advanced security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing no suspicious registration patterns. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. Strategic recommendations include enhancing security headers, adding explicit security policies, and possibly including contact emails for better communication. The site effectively serves its niche audience with clear content and navigation.

C

Caritas gGmbH St. Heinrich und Kunigunde

caritasheim-hof.de

62

Caritas gGmbH St. Heinrich und Kunigunde is a well-established non-profit organization providing comprehensive social care services in Bavaria, Germany. Their offerings include senior care, disability support, childcare, and educational services, positioning them as a regional leader in healthcare and social services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to seniors, people with disabilities, children, and youth. Technically, the site uses modern JavaScript libraries, consent management tools, and tracking services, hosted likely on infrastructure associated with Deutsche Telekom AG. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy disclosures are lacking. Overall, the site is trustworthy and serves its audience effectively but would benefit from enhanced privacy compliance and security transparency.

K

Katholische Kindertagesstätte St. Klara Schwarzenbach

kiga-schwarzenbach.de

60

Katholische Kindertagesstätte St. Klara Schwarzenbach is a small, community-focused Catholic childcare institution located in Schwarzenbach/Saale, Germany. The website provides comprehensive information about their childcare services including nursery (Krippe), kindergarten, and school-age child care, targeting parents and guardians in the local area. The institution is affiliated with the Archdiocese of Bamberg, which supports its legitimacy and trustworthiness. The website content is well-structured, accessible, and includes detailed contact information and privacy policies, reflecting a professional and community-oriented organization. Technically, the website is built on the alkacon Mercury CMS platform, utilizing JavaScript, Matomo analytics for privacy-conscious tracking, and OpenStreetMap for location services. The site is mobile-optimized and includes strong accessibility features, enhancing usability for a broad audience. Performance is moderate, with room for optimization, but overall the technical infrastructure supports the business needs effectively. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and there is no dedicated security or incident response policy page. No vulnerabilities or exposed sensitive data were found, indicating a solid security posture for a small institution. The absence of a security.txt file or incident response contacts suggests areas for improvement in transparency and readiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

The website represents the Katholische Kindertagestätte Sankt Antonius, a Catholic kindergarten located in Oberkotzau, Germany. It serves as an informational portal for parents and the local community, providing details about the kindergarten's pedagogical approach, organizational information, news, events, and contact details. The site targets parents and guardians seeking childcare and early education services within a religious framework. The business operates as a small non-profit educational institution with a local community focus. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, FancyBox, Revolution Slider, JWPlayer, and Google reCAPTCHA for bot protection. It is hosted on servers associated with internet1.de and uses HTTPS with a good SSL configuration. The site is mobile-optimized and includes accessibility features, though some areas could be improved. Analytics are handled via Matomo with privacy-conscious anonymous tracking fallback. From a security perspective, the site follows best practices such as HTTPS enforcement, cookie consent with granular user control, and bot protection. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present and should be implemented. No vulnerabilities or exposed sensitive data were detected. Incident response and security policy documentation are absent, which is typical for small non-commercial sites but recommended for improvement. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. It complies with GDPR through a comprehensive privacy policy and cookie consent mechanism. The domain WHOIS data is minimal but consistent with a legitimate small educational entity. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party libraries to ensure ongoing security and compliance.

K

Kindergarten und Kinderkrippe "Regenbogen" Naila

kiga-regenbogen-naila.de

59

Kindergarten und Kinderkrippe "Regenbogen" Naila is a small, community-focused childcare and educational institution located in Naila, Germany. Affiliated with the Catholic Archdiocese of Bamberg, it provides kindergarten and nursery services with a strong emphasis on pedagogical concepts, parental cooperation, and community engagement. The website serves as an information portal for parents and guardians, detailing operational hours, fees, registration procedures, and educational philosophy. Technically, the website is built on the alkacon Mercury CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and accessibility, featuring a cookie consent mechanism and structured data for enhanced SEO and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent for external content, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie management. Overall, the website presents a trustworthy, professional, and user-friendly digital presence for a local educational institution. Strategic improvements could focus on enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

The website represents the Katholische Kindertagesstätte St. Josef, a Catholic daycare center located in Münchberg, Germany. It provides comprehensive information about childcare services including kindergarten, nursery, and school-age care, targeting parents and families in the local community. The site is well-structured with clear navigation and includes sections for organizational details, pedagogical concepts, staff, and parent resources. The business operates as a non-profit educational childcare provider with a local community focus. Technically, the website is built on a CMS platform associated with kirche-bamberg.de, utilizing modern web technologies such as jQuery, Bootstrap, Font Awesome, and Matomo for analytics. It employs HTTPS with good SSL configuration and includes a cookie consent banner supporting GDPR compliance. The site is mobile-optimized and provides a generally good user experience, although some advanced security headers are missing. From a security perspective, the website demonstrates good practices including HTTPS enforcement, cookie consent with opt-in/out options, and use of Google reCAPTCHA for forms. However, explicit security policies and incident response contacts are not found, and no vulnerability disclosure or security.txt files are present. The domain WHOIS data is consistent with the website content and hosting provider, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its target audience effectively with relevant content and a clear business model. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility features.

Kindergarten St. Pius is a local early childhood education institution based in Hof, Germany, affiliated with the Archdiocese of Bamberg. The website serves as an informational portal for parents and guardians, providing details on organizational aspects, staff, enrollment, events, and contact information. The business model is non-profit and community-focused, targeting families in the region. The website is well-structured, professionally designed, and mobile-optimized, reflecting a good level of digital maturity for a small educational institution. Technically, it leverages common web technologies such as Bootstrap, jQuery, and Matomo analytics, hosted on a domain consistent with its religious affiliation. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with clear GDPR-aligned policies and user consent options. Overall, the site is trustworthy, safe, and professionally maintained, with no critical vulnerabilities or suspicious elements detected.