Germany security reports

V

VertiGIS

topographics.de

61

VertiGIS is a German-based technology company specializing in geospatial software solutions for sectors including utilities, infrastructure, telecommunications, and construction. The company recently integrated TOPO graphics into its portfolio, enhancing its product offerings such as the VertiGIS Data Converter and VertiGIS Studio. The website demonstrates a professional presence with clear branding and targeted content for business clients in relevant industries. Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and user experience, delivering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and compliance with GDPR indicate legitimacy. Overall, VertiGIS presents a credible and well-maintained digital presence aligned with its business objectives.

I

Ingelheim am Rhein

ingelheim.de

66

The website www.ingelheim.de serves as the official digital presence for the city of Ingelheim am Rhein, Germany. It provides comprehensive information about city administration, politics, living environment, leisure activities, and municipal services. The site targets residents, visitors, and local businesses, offering a broad range of public services and community resources. The business model is that of a government municipal portal, focusing on transparency and citizen engagement. Technically, the website is built on the ionas4 CMS platform, utilizing modern web technologies such as JavaScript, SystemJS, and Web Components. It demonstrates good mobile optimization, accessibility, and SEO practices. Hosting is managed via agenturserver nameservers, indicating a professional hosting environment. Performance is moderate with a well-structured navigation system. From a security perspective, the site enforces HTTPS, uses security best practices like crossorigin and integrity attributes on resources, and integrates Google's invisible reCAPTCHA for bot protection. However, explicit privacy policies, terms of service, incident response contacts, and vulnerability disclosure mechanisms are not found, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, suitable for its government function. Strategic recommendations include publishing clear privacy and security policies, adding a security.txt file, and enhancing HTTP security headers to further strengthen the security posture.

C

co.met GmbH

ablesen.de

60

The website ablesen.de represents co.met GmbH, a German company specializing in digital meter reading and consumption data management services. Their offering includes a full-service solution for meter data acquisition, customer self-reading, and support for various meter technologies such as OMS-Funk and LoRaWAN. The company targets energy providers and meter operators, positioning itself as a specialized service provider in the energy sector. The website content is professional, well-structured, and primarily in German, reflecting a focused business audience. Technically, the website is built with standard HTML5 and CSS3, hosted on servers associated with Stadtwerke Saarbrücken Konzern, indicating reliable local infrastructure. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. No advanced frameworks or CMS platforms are detected, suggesting a lightweight and straightforward implementation. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks explicit security headers and a published security policy. The privacy policy is comprehensive and GDPR compliant, detailing data processing, retention, and user rights. No cookie consent mechanism or terms of service are found, which could be improved. No signs of WAF or blocking mechanisms are present, and no vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website demonstrates a solid business credibility and privacy compliance posture with room for improvement in security best practices and transparency. The risk level is low, but enhancing security headers, cookie management, and incident response information would strengthen trust and compliance.

J

Jugendamt der Erzdiözese

jugendplan.de

55

The website represents the Jugendamt der Erzdiözese, a church-affiliated youth office under the Erzbistum Bamberg. It provides detailed information on the Jugendplan, a strategic youth pastoral plan, targeting youth leaders and church youth organizations. The site is well-structured, with clear navigation and comprehensive content relevant to its audience. Technically, it uses the alkacon Mercury CMS platform, integrates Matomo analytics for privacy-conscious tracking, and includes accessibility features such as the eyeAble plugin. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Contact information is clearly presented with verified phone numbers and addresses, enhancing business credibility. Overall, the site is trustworthy, compliant with GDPR, and serves its non-profit, government-related mission effectively.

W

WeLocal World AG

welocal.cloud

62

WeLocal World AG is a German-based technology company specializing in providing comprehensive content management solutions tailored for media companies including TV and radio broadcasters, as well as enterprises. Their flagship product is a custom Content-Medien-Management-System (CMMS) that supports multi-platform content delivery including websites, mobile apps, smart TV applications, and streaming services. The company positions itself as a full-service provider offering hardware, software, and support services to its clients. Technically, the website leverages modern frameworks such as Vue.js and integrates privacy and analytics tools like Usercentrics and Matomo, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR compliance evident, although explicit security policies and incident response details are not published. Overall, the website is professional, well-structured, and trustworthy, supporting a positive business credibility profile.

L

LUKi e.V.

kirche.social

60

kirche.social is a niche Mastodon social networking instance operated by the non-profit organization LUKi e.V., focusing on Christian, interdenominational, and ecumenical communities. The platform provides a community-driven social experience within the fediverse, emphasizing privacy and open-source technologies. The website is well-structured, with good content quality and clear navigation, primarily targeting German-speaking users interested in church-related social networking. Technically, the site leverages modern frameworks such as React and Mastodon 4.4.8, ensuring a responsive and accessible user experience. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms and terms of service. Overall, the domain WHOIS data is privacy protected, which is justified for this non-profit community platform. The site demonstrates a trustworthy and professional presence within its niche.

F

Funke Medical

funke-medical.de

45

Funke Medical is a medium-sized German company specializing in manufacturing decubitus therapy systems, seating aids, and mobility aids, positioning itself as a leading provider in the healthcare sector within Germany. The website is professionally designed using WordPress with modern plugins and technologies, including Yoast SEO and Google Analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the site is trustworthy, compliant with GDPR, and targets healthcare professionals and patients needing mobility solutions.

P

Pohlig GmbH

pohlig.net

57

Pohlig GmbH operates in the healthcare sector specializing in orthopedic technology, providing orthoses, prostheses, and functional aids tailored for children and adults. The company positions itself as a specialized provider with a focus on clinical needs and treatment solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at patients and healthcare professionals. Technically, the site employs modern tracking technologies such as Google Analytics and Meta Pixel, alongside a robust cookie consent mechanism powered by Cookiebot, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and consent management in place, though the absence of explicit security headers and privacy policy pages suggests room for improvement. The WHOIS data is notably absent or inaccessible, which slightly undermines trustworthiness despite the professional presentation. Overall, the website is functional, secure, and compliant with basic privacy standards but would benefit from enhanced transparency and security documentation.

V

VEMA Versicherungsmakler Genossenschaft eG

vemaeg.de

63

VEMA Versicherungsmakler Genossenschaft eG is a well-established German cooperative founded in 1997, serving as the largest cooperative network for insurance brokers in Germany. The organization focuses on digitalization, product development, and continuing education for insurance brokers, providing a comprehensive B2B platform and various services including events and training. Their market position is strong, supported by a large user base and extensive service offerings. Technically, the website uses modern JavaScript libraries like jQuery and Slick Slider, with good mobile optimization and SEO practices, though no CMS or hosting provider is explicitly identified. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

P

pechschwarz®

pechschwarzmedia.de

51

pechschwarz® is a well-established digital agency specializing in strategy, design, and digital transformation with a strong focus on holistic brand consulting and creating impactful brand experiences. Founded in 2000 and based in Germany, the company serves a diverse clientele including B2B companies, e-commerce brands, tech startups, and medical practices. Their comprehensive service portfolio includes branding, web development, online marketing, content production, and CRM solutions, positioning them as a leading player in the digital marketing and branding sector. Technically, the website is built on WordPress with modern technologies such as jQuery, HubSpot integrations, Google reCAPTCHA, and performance optimizations via WP Rocket. The site demonstrates excellent mobile optimization, SEO practices, and fast performance. Hosting is provided by Hetzner Online GmbH, a reputable provider, and the domain is long-established, enhancing credibility. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, the site employs anti-fraud tools like ClickCease and Google reCAPTCHA, indicating a proactive security posture. No critical vulnerabilities or WAF blocking were detected. Overall, pechschwarz® presents a professional, trustworthy, and technically mature online presence with strong compliance and security practices. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing a formal security policy to further strengthen trust and security posture.

B

Behinderten-Sportverband Niedersachsen e.V.

bsn-ev.de

53

The Behinderten-Sportverband Niedersachsen e.V. (BSN e.V.) is a regional non-profit sports association in Germany focused on disability sports and rehabilitation training. Their website provides comprehensive information about their services, including rehabilitation sports and function training, targeting individuals interested in disabled sports within Niedersachsen. The site is built on TYPO3 CMS and incorporates modern web technologies such as Vue.js and jQuery, with integrated Google services for analytics and marketing. The presence of Cookiebot ensures GDPR-compliant cookie consent management. Security measures include HTTPS enforcement, security headers, and reCAPTCHA for form protection. No critical vulnerabilities or security issues were detected, and the site maintains a good privacy posture with a detailed privacy policy and cookie declaration. Overall, the website is professional, accessible, and trustworthy, serving its target audience effectively.

G

GenoHotel

genohotels.com

61

GenoHotel operates a group of business and conference hotels located in Germany, specifically near Cologne, Kassel, and Karlsruhe. The company emphasizes cooperative values such as community, openness, honesty, and trust, integrating these into their hospitality services. Their offerings include modern conference technology, hybrid event capabilities, wellness amenities, and dining options, targeting business travelers and corporate clients. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the website uses modern web technologies including Google Tag Manager for analytics, ConsentManager.net for cookie consent, and Slick Carousel for image sliders. The site is built on a CMS platform inferred as SiteHub and includes Google Maps integration. Performance and mobile optimization are good, though accessibility features are basic. The site enforces HTTPS and includes CAPTCHA on its contact form, enhancing security. Security posture is solid with encrypted connections and privacy compliance, including GDPR-aligned privacy and cookie policies. However, the absence of explicit security headers and published security policies or incident response plans indicates room for improvement. The WHOIS data is unavailable, which slightly reduces trust but the active, professional website and certifications like GreenSign support legitimacy. Overall, GenoHotel's digital presence is well-structured and trustworthy for its hospitality business, with recommendations to enhance security headers, publish security policies, and monitor domain registration status to strengthen trust and compliance.

G

GenoAkademie

genoakademie.de

70

GenoAkademie is a specialized partner for banks and cooperatives in Germany, focusing on personnel development through job trainings, seminars, e-learning, and webinars. The website is built on TYPO3 CMS and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent and Matomo for analytics. The site demonstrates a good level of digital maturity with responsive design and structured data for SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its target B2B audience.

S

Staatsoper Unter den Linden

staatsoper-berlin.de

70

Staatsoper Unter den Linden is a prestigious cultural institution in Berlin, combining centuries of tradition with modern artistic performances. The website serves as a portal for opera and concert enthusiasts, offering detailed event schedules, ticketing options, and multimedia content. The institution holds a significant market position as one of the world's leading opera houses. Technically, the website employs modern JavaScript libraries, video content, and a privacy manager, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

D

Deutscher Museumsbund e.V.

museumsbund.de

63

Deutscher Museumsbund e.V. is a prominent German national association representing museums and their employees. The organization focuses on advocacy, funding programs, publications, networking, and professional development to support sustainable and future-ready museums across Germany. Their website reflects a mature digital presence with comprehensive content tailored to museum professionals and cultural stakeholders. Technically, the site is built on WordPress with modern plugins and privacy-conscious analytics (Matomo), ensuring GDPR compliance and a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its non-profit cultural mission.

D

Deutsche Forschungsgemeinschaft

dfg.de

67

The Deutsche Forschungsgemeinschaft (DFG) is Germany's central research funding organization, supporting scientific research across disciplines. The website serves as a comprehensive portal for researchers, institutions, and stakeholders, offering detailed information on funding programs, scientific commissions, and international cooperation. It maintains a strong market position as a leading non-profit government entity in the research sector. Technically, the website is built on the CoreMedia Content Cloud CMS, leveraging modern JavaScript frameworks like Alpine.js and jQuery, and is delivered securely via HTTPS with a robust Content Security Policy. The site is well-structured, mobile-optimized, and integrates multiple official research portals and social media channels, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSP headers, and secure form handling. However, explicit privacy and cookie policies are not detected in the provided content, indicating room for improvement in privacy compliance. No vulnerabilities or suspicious elements were found. Overall, the site is professional, trustworthy, and safe for general audiences, with recommendations to enhance privacy transparency and incident response contact availability.

H

Heidelberg University

uni-heidelberg.de

57

Heidelberg University is a well-established academic institution in Germany, providing higher education and research services. The website serves as an informational portal targeting students, researchers, and academic staff. The technical infrastructure employs modern web technologies including JavaScript modules and MathJax for rendering mathematical content. The site uses Fathom Analytics for visitor tracking but lacks visible cookie consent mechanisms and comprehensive privacy policies, indicating room for improvement in privacy compliance. Security posture is moderate with no evident security headers or explicit incident response information. Overall, the website is functional but could benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

S

SLUB Dresden

arthistoricum.net

63

arthistoricum.net is a well-established digital platform dedicated to art history and art sciences, providing open access to scholarly publications, image collections, and research tools. It is affiliated with reputable German institutions such as SLUB Dresden and UB Heidelberg, and supported by the Deutsche Forschungsgemeinschaft, positioning it as a trusted academic resource in the education sector. The platform offers a variety of services including digital publishing, thematic portals, and podcasts aimed at researchers and the academic community. Technically, the website is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. The site uses HTTPS with strong SSL configuration, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data is unavailable or not publicly accessible, which slightly reduces transparency but does not detract from the site's legitimacy given its institutional backing. Security posture is generally good with secure form handling and no exposed sensitive data, but the absence of explicit security policies and incident response information suggests room for enhancement in governance and compliance documentation. Overall, the site is professional, content-rich, and trustworthy, serving a specialized academic audience effectively.

S

SLUB Dresden

netzwerk-graphische-sammlungen.com

64

arthistoricum.net is an academic platform dedicated to the documentation and networking of graphic art collections across Germany, Austria, and Switzerland. It is supported by reputable institutions such as SLUB Dresden and UB Heidelberg, providing a trusted resource for art historians and researchers. The website offers catalog search, publication platforms, and research tools focused on art on paper, including drawings and print graphics. Technically, the site is built on TYPO3 CMS and uses Matomo analytics, reflecting a modern and privacy-conscious infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, though it lacks some security headers and explicit incident response policies. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its institutional backing. Overall, arthistoricum.net is a credible, secure, and well-maintained academic resource with room for improvement in privacy compliance and security transparency.

D

Deutscher Rollstuhl-Sportverband e.V.

drs.org

63

The Deutscher Rollstuhl-Sportverband e.V. is a well-established German non-profit organization dedicated to promoting wheelchair sports. The website serves as an information hub for athletes, clubs, partners, and supporters, providing news, event calendars, membership information, and mobility projects. It targets the German wheelchair sports community and related stakeholders. The organization has a strong market position as the national association for wheelchair sports in Germany. Technically, the website is built on WordPress with a modern theme and several plugins supporting events, polls, maps, and cookie consent. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, DNSSEC is not enabled, and some security headers like CSP are missing, indicating room for improvement in security hardening. Security posture is solid with HTTPS and domain transfer protections, but lacks explicit vulnerability disclosure and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. The site maintains a minimal user tracking footprint and respects GDPR requirements to some extent. Overall, the website is professional, trustworthy, and serves its community well. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance its compliance and security posture.

M

Missionsprokur der Don Bosco Schwestern

fmamission.de

59

The Missionsprokur der Don Bosco Schwestern is a small German non-profit organization dedicated to supporting development aid projects worldwide, primarily through the efforts of the Don Bosco Sisters. The website clearly communicates its mission, provides donation options, and highlights key projects in various countries. The organization maintains a consistent brand presence and offers transparent contact and banking information to foster trust with donors. Technically, the site is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and implements a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS and CSRF protections, though some security headers are missing and no explicit security policies are published. Overall, the site is professional, accessible, and trustworthy, with moderate analytics tracking via Matomo and no signs of malicious content or blocking mechanisms.

V

VIDES Freiwilligendienst

vides-freiwilligendienst.net

63

VIDES Freiwilligendienst is a non-profit organization affiliated with the Don Bosco Sisters, providing international volunteer opportunities primarily in education and social services for young adults. The organization has a well-structured website offering detailed information about volunteer placements, preparation, and support, targeting socially engaged youth interested in global solidarity. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Swiper.js, and a proprietary CMS (siteswift). Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance of the site. Security posture is generally good with HTTPS and CSRF protections, but lacks explicit security policies or incident response contacts. Overall, the website is trustworthy and serves its non-profit mission effectively, though domain registration verification is recommended.

K

Katholische Nachrichten-Agentur (KNA)

kna-news.de

53

The website kna-news.de serves as a professional news portal operated by the Katholische Nachrichten-Agentur (KNA), targeting media professionals, press offices, and decision makers in church, politics, and economy sectors. It offers multimedia news content, specialized media services, and newsletters, positioning itself as an established media provider in Germany. The business model appears subscription-based, focusing on delivering curated news and media insights to a specialized audience. The site branding and content quality are consistent and professional, supporting a medium-sized media entity.

K

Katholische Nachrichten-Agentur (KNA)

kna-bild.de

74

KNA-Bild is the image agency of the Catholic News Agency (Katholische Nachrichten-Agentur), providing a specialized service focused on religious, cultural, and social news imagery primarily for German-speaking media professionals and institutions. The website demonstrates a moderate level of digital maturity with the use of JavaScript frameworks such as PrimeFaces and OmniFaces, and includes a cookie consent mechanism with analytics opt-in, reflecting some privacy awareness. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, though security headers are minimal and no explicit privacy policy or terms of service were found on the analyzed page. Contact information is not directly visible, which may impact user trust and support accessibility.

WirWunder is a German social platform created by the Sparkassen-Finanzgruppe in partnership with betterplace.org to support regional social projects and associations through donations and volunteer engagement. The platform offers project discovery by location and keyword, facilitating community support and charitable giving. Technically, the website uses modern JavaScript frameworks such as React, integrates mapping and autocomplete APIs from YellowMap, and employs Google Tag Manager for analytics. The site is mobile-optimized with a responsive design and includes accessibility and SEO best practices. Security-wise, the site enforces HTTPS, implements key security headers, and provides cookie consent mechanisms, though it lacks explicit published security policies or incident response contacts. Overall, the website is trustworthy, professional, and compliant with GDPR, serving a general audience interested in social good.

F

febis Service GmbH

foerdermittelauskunft.de

64

Foerderdata.de is a German-based online platform operated by febis Service GmbH that specializes in assisting individuals and businesses in finding and applying for government subsidies, particularly in the energy and renewable energy sectors. The website offers a comprehensive subsidy search service and application support, targeting a German-speaking audience interested in state funding programs. The company positions itself as a niche service provider with a focus on energy-related subsidies, leveraging digital tools to simplify access to funding opportunities. Technically, the website is built on WordPress using the Avada theme, integrating modern web technologies such as jQuery, Gravity Forms, and Cookiebot for cookie consent management. The site employs Google Tag Manager and HubSpot for analytics and marketing automation, indicating a mature digital marketing infrastructure. Performance is moderate with good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The use of multiple third-party marketing and tracking services increases the surface for privacy considerations but is managed with user consent. Overall, foerderdata.de presents a professional and trustworthy online presence with a solid business model focused on subsidy facilitation. Security posture is adequate but could be improved with enhanced headers and published policies. Privacy compliance is strong, supported by transparent cookie management. The domain registration is consistent with the business, though some DNS details suggest third-party hosting. Strategic recommendations include strengthening security headers, publishing incident response information, and maintaining transparency in data protection practices.

O

OTT Garagen

ott-garagen.de

49

OTT Garagen is a German manufacturer specializing in custom prefabricated concrete garages with over 50 years of industry experience. The company positions itself as a leading provider in Germany, offering a wide range of garage products and accessories, supported by a large exhibition and comprehensive customer service. The website reflects a mature digital presence with a professional design, clear navigation, and detailed product categorization. Technically, the site is built on Joomla CMS, uses Cookiebot for GDPR-compliant cookie consent, and integrates Google Analytics and Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and user consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the company's market position effectively.

B

buefet e.V.

buefet.de

54

buefet e.V. is a German non-profit organization dedicated to supporting elderly individuals, people with disabilities, and those requiring care to live independently and with social connection in Kirchheim unter Teck. The website presents a clear overview of their services, including assisted living at home, mobility support, recovery assistance, social activities, and counseling. Their market position is that of a local community service provider with a focus on social welfare. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile devices and SEO-friendly with Yoast SEO integration. The site loads at a moderate speed and offers a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is trustworthy and professionally maintained, with minor recommendations to improve security headers, cookie consent, and incident response transparency to further enhance compliance and security posture.

O

Olgäle-Stiftung für das kranke Kind e.V.

olgaele-stiftung.de

53

The Olgäle-Stiftung für das kranke Kind e.V. is a well-established non-profit foundation based in Stuttgart, Germany, dedicated to supporting sick children and their families, primarily through assistance to the Olgahospital. The foundation operates through donations, memberships, and fundraising campaigns, positioning itself as a trusted regional healthcare supporter. The website reflects this mission with clear content, professional design, and consistent branding aimed at donors, parents, and healthcare stakeholders. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and newsletter management, indicating a moderate to advanced digital maturity. Security posture is strong with HTTPS, Content-Security-Policy headers, and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site is trustworthy, professional, and well-suited to its audience and mission.

T

Turnverein Bissingen e.V.

tv-bissingen.de

10

Turnverein Bissingen e.V. is a local German sports club offering a variety of sports activities and community events. The website serves as an information hub for members and interested parties, providing details about departments, events, and contact information. The site is built on Joomla! CMS with modern frontend technologies and integrates Matomo for analytics and Usercentrics for cookie consent management. The overall technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or suspicious content were detected. Privacy compliance is good, with a clear privacy policy and consent mechanism. Business credibility is high given the clear presentation of contact information and consistent branding. The site is safe for general audiences and does not contain adult or questionable content.

Michaelshof-Ziegelhütte e.V. operates the Jugendhilfe Ziegelhütte, a non-profit youth social service organization located in Germany. The organization provides comprehensive educational and social support services for up to 40 youths and young adults annually, including schooling, workshops, residential groups, and family assistance based on anthroposophical principles. The website reflects a regional, community-focused institution with a clear mission and target audience of youth and families in need of social and educational support. Technically, the website is built on TYPO3 CMS, uses HTTPS, and includes basic cookie consent mechanisms, but lacks advanced security headers and incident response information. The site is accessible, professionally designed, and provides clear contact information, including phone and physical address, with a social media presence on Instagram. Security posture is moderate with room for improvement in headers and disclosure policies. Overall, the website is trustworthy and suitable for its audience, with no signs of malicious content or vulnerabilities.

Stiftung Tragwerk is a well-established German non-profit diaconal organization with nearly 200 years of history, providing social services primarily in the Esslingen and Göppingen regions. Their services focus on children, youth, families, adults, and elderly care, supported by approximately 670 employees across 46 locations. The website reflects a professional and consistent brand image, targeting community members, potential volunteers, and donors. Technically, the website is built on TYPO3 CMS with legacy JavaScript libraries such as jQuery 1.11.3 and lightbox components. Hosting is managed via net-server.de. The site performs moderately well with basic mobile optimization and SEO practices. However, some modernization opportunities exist, especially updating JavaScript libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no security headers were detected, and the use of outdated libraries presents potential vulnerabilities. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, Stiftung Tragwerk's website is trustworthy and professional but would benefit from technical and security improvements to strengthen its posture and compliance.

T

Trägerverein Freies Kinderhaus e.V.

seegrasspinnerei.de

9

The Alte Seegrasspinnerei website represents a small non-profit organization, Trägerverein Freies Kinderhaus e.V., focused on child and youth community services in Nürtingen, Germany. The organization offers free children's house services, event hosting, workshops, and fundraising initiatives. Their market position is local and community-oriented, targeting families, donors, and supporters of youth welfare. The website content is primarily in German and provides clear contact information and donation links integrated with recognized platforms such as betterplace.org and wirwunder.de. Technically, the website is built on WordPress with common plugins for event management and galleries. The infrastructure includes jQuery and FontAwesome, hosted with DNS services from DomainControl (GoDaddy). The site is moderately performant and mobile-optimized, with basic accessibility and SEO features. No advanced security headers were detected, but HTTPS is enforced, and no sensitive data exposure was found. From a security perspective, the site shows a moderate security posture with room for improvement in implementing security headers and visible security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No incident response or vulnerability disclosure information is available. The domain WHOIS data is minimal but consistent with a legitimate small non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences, with recommendations to enhance security headers, privacy compliance, and incident response transparency to improve trust and resilience.

NT-net is a regional internet and telephony service provider operated by Stadtwerke Nürtingen GmbH, serving primarily the Nürtingen area in Germany. The company offers highspeed internet packages with various bandwidth options and telephone flat rates, emphasizing local customer support and transparency. The website is professionally designed, mobile-optimized, and provides comprehensive product information, discounts, and customer support details. The business model focuses on regional utility and telecommunications services with preferential treatment in fiber optic rollout, positioning NT-net as a trusted local provider. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript and CSS technologies. It integrates cookie consent management, analytics tools like Google Analytics and Matomo, and provides secure mail server configuration details. The site demonstrates good SEO, accessibility, and performance characteristics, with no blocking or WAF challenges detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is unavailable due to privacy or technical reasons, but the website's consistent business information and local contact details support its legitimacy. Overall, NT-net's website presents a trustworthy and professional digital presence suitable for its regional telecommunications business. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance its security posture and customer trust.

D

Digitale Werke GmbH

digitale-werke.de

10

Digitale Werke GmbH is a well-established IT service provider based in the Munich and Ottobrunn region, with over 25 years of experience supporting businesses in IT infrastructure, managed services, and digital transformation. Their offerings include managed IT services, network administration, IT security, cloud services, and software development, targeting primarily medium-sized enterprises in Germany. The company demonstrates a solid market position with a professional online presence and clear communication channels. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses security measures like HTTPS and hCaptcha to protect user interactions. The site is well-optimized for SEO and mobile devices, though some improvements in accessibility and security headers could enhance the overall technical posture. From a security perspective, the site follows good practices with encrypted connections and form protection but lacks publicly available security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, indicating a mature security posture suitable for their business scale. Overall, the website and business present a trustworthy and professional image with minor areas for enhancement in security transparency and technical hardening. The risk level is low, and the company appears credible and compliant with GDPR requirements.

Katholische Erwachsenenbildung MittenInFranken e. V. is a small regional non-profit organization dedicated to adult education and community engagement in the Ansbach-Neustadt/Aisch region of Germany. The website provides information about events, courses, seminars, and organizational details, targeting adults interested in Catholic adult education. The organization maintains a professional online presence with clear navigation, event listings, and downloadable program brochures. Contact information and privacy policies are clearly presented, supporting transparency and trust. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and JW Player, hosted on servers associated with internet1.de. It employs Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. The site is mobile-optimized and implements a detailed cookie consent mechanism, reflecting good digital maturity. From a security perspective, the website enforces HTTPS and uses cookie consent to comply with GDPR. However, it lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal and domain status is unusual, but the website content and contact details support legitimacy. Overall, the website is well-structured, secure, and compliant with privacy regulations, suitable for its non-profit educational mission. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen its security posture.

V

Verband der W. K. St. V. Unitas e.V.

unitas.org

10

The website www.unitas.org represents the Verband der Wissenschaftlichen Katholischen Studentenvereine Unitas e.V., the oldest Catholic student and academic association in Germany, founded in 1855. It serves as a community platform for Catholic students and alumni across 29 university locations, offering social, educational, and religious activities. The organization uniquely includes both male and female student associations and emphasizes lifelong connections and social responsibility through various projects and events. The site content is primarily in German and targets Catholic students and academics in Germany.

S

Schönstatt-Institut Marienbrüder e.V.

smj-deutschland.de

10

The website www.smj-deutschland.de represents the Schönstatt Mannes Jugend, a German non-profit youth religious organization. It serves as an official information portal about the organization's work, principles, and diocesan branches. The site targets members and interested individuals within Germany, providing community, spiritual education, and event information. The business model is typical for a small non-profit focused on youth and religious community building. Technically, the site is built on the Jimdo Creator CMS platform, hosted by Jimdo, and uses standard web technologies including jQuery and Facebook SDK for social integration. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

Q

Quickborn AK

quickborn-ak.de

10

Quickborn AK is a German non-profit organization dedicated to cultural and educational activities, primarily organizing events such as the Silvestertagung and Augustwoche that focus on social, political, and spiritual themes. The website serves as an information hub for these events and the organization's history and mission. The target audience includes community members interested in cultural dialogue and education. Technically, the website is built on WordPress using a modern theme and plugins, hosted on a reputable German hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, suitable for its non-profit educational purpose.

Pfadfinderinnenschaft St. Georg (PSG) is a well-established German non-profit organization dedicated to empowering girls and young women through scouting activities. Founded in 1947, PSG is affiliated with the global WAGGGS network and serves approximately 9,000 members nationwide. The organization offers membership services, educational programs, international partnerships, and publishes a dedicated magazine. The website reflects a professional and consistent brand image with clear navigation and content relevant to its audience. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as Bootstrap and jQuery. It features responsive design and accessibility tools, including a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization, and the site employs HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through a detailed privacy policy and cookie banner. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, PSG's website presents a trustworthy and professional digital presence suitable for its non-profit mission. Strategic improvements in security headers and enhanced transparency around security policies could further strengthen its posture.

K

Kolpingjugend – Kolpingwerk Deutschland

kolpingjugend.de

10

Kolpingjugend Deutschland is a well-established non-profit Catholic youth organization focused on engaging children, youth, and young adults in social projects, volunteer work, and community activities. The organization is democratically structured and rooted in the values of Adolph Kolping, with a strong presence in Germany and links to national and international Kolping organizations. The website serves as an information and engagement platform for members and interested parties, providing news, events, and resources. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Bootstrap. It is hosted on dot-server.de and includes standard web technologies for responsive design and user interaction. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature approach to data protection and user privacy. From a security perspective, the site uses HTTPS and includes scripts to allow users to opt out of Google Analytics tracking. However, explicit HTTP security headers are not evident in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data, indicating a reasonable security posture for a non-profit organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. It provides clear contact information via email and maintains transparency through privacy and imprint pages. Strategic improvements could focus on enhancing security headers, publishing incident response information, and expanding contact options.

K

Katholische junge Gemeinde

kjg.de

10

Katholische junge Gemeinde (KjG) is a well-established Catholic youth organization in Germany, focusing on youth engagement, social projects, and community activities. The organization maintains a professional and content-rich website that serves as a hub for information, events, and resources for its members and the public. The site targets youth and young adults interested in Catholic community involvement and social advocacy. KjG operates as a non-profit entity with a medium organizational size and a strong presence in Germany, supported by regional branches and partnerships with other youth and social organizations.

J

Jugendverbände der Gemeinschaft Christlichen Lebens

j-gcl.org

10

The website j-gcl.org represents the Jugendverbände der Gemeinschaft Christlichen Lebens (J-GCL), a non-profit Catholic youth organization in Germany. It serves as an informational and engagement platform for youth members, focusing on faith, community, and social responsibility. The organization has a long-standing presence since 2001, reflected in the domain age and content maturity. The site offers resources, regional group information, and opportunities for involvement, targeting students and young adults within the Catholic community in Germany. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO and Gutenberg block extensions, ensuring good SEO and content management capabilities. The site is mobile-optimized and provides a user-friendly navigation experience. Hosting and domain registration are managed by reputable providers, with HTTPS enabled and basic security practices in place. However, DNSSEC is not enabled, and additional security headers could enhance the security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the HTML content. Privacy compliance is addressed with a privacy and cookie policy, including consent mechanisms, aligning with GDPR requirements. Contact information is primarily via contact forms, with no direct emails or phone numbers exposed in the HTML. Overall, the website demonstrates a solid digital presence for a small non-profit organization, with good content quality, technical implementation, and business credibility. Security practices are adequate but could be improved with DNSSEC and enhanced HTTP headers. The site is safe for general audiences and maintains a trustworthy and professional image.

I

Internationaler Bauorden

bauorden.de

10

Internationaler Bauorden is a small non-profit organization based in Germany that facilitates volunteer and cultural exchange programs. Their website is built on WordPress and uses common plugins such as Events Manager and Real Cookie Banner to manage events and ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website presents a trustworthy and professional image suitable for its target audience of volunteers and socially engaged individuals.

D

DJK-Sportverband e.V.

djk.de

57

DJK-Sportverband e.V. is a well-established non-profit sports federation in Germany, founded in 1920, that promotes sports activities underpinned by Christian and inclusive values. The organization targets sports clubs, athletes of all ages and abilities, and community members interested in ethical and inclusive sportsmanship. Their key services include diverse sports offerings, inclusion initiatives, prevention of sexualized violence, and organizing major sports events such as the Bundessportfest. The website reflects a strong community focus and a commitment to social responsibility.

C

Christliche Arbeiterjugend Deutschland

caj.de

52

Christliche Arbeiterjugend Deutschland (CAJ) is a well-established non-profit Christian youth organization in Germany, focusing on social justice, education, and community engagement. The website serves as an information hub for news, events, and organizational activities, targeting young people interested in Christian worker youth movements. The organization has a strong national presence with international connections, founded in 1947, and the international CAJ dates back to 1925. The website content is professionally presented in German, with consistent branding and active social media channels.

B

Bund der St. Sebastianus Schützenjugend

bdsj.de

59

Bund der St. Sebastianus Schützenjugend (BdSJ) is a large non-profit youth organization in Germany with approximately 30,000 members. The organization focuses on social, sporting, and religious youth work, emphasizing cultural and political education within the framework of the Schützenjugend tradition. The website serves as an information hub for the federal association, providing news, project details, and resources for members and interested parties. The organization is well-established, founded in 1961, and maintains a strong presence through its six diocesan associations and over 1,200 brotherhoods. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. Accessibility features are implemented via the EyeAble plugin, and the site is mobile-optimized with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy or incident response information and does not publish a security.txt file. Contact information is clearly presented, including email, phone, physical address, and a contact form with privacy consent. Social media sharing is integrated but no direct official social media profiles are linked. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its members. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen the security posture.

The website agvnet.de represents the Arbeitsgemeinschaft katholischer Studentenverbände (AGV) e.V., a small non-profit organization uniting Catholic student corporations in Germany. The site provides information about the association's activities, including dialogue seminars with politicians and church representatives, targeting Catholic students and affiliated groups. The organization maintains a niche position within the German Catholic student community, focusing on advocacy and event organization. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by webgo.de. The site is moderately performant, mobile-optimized, and SEO-friendly, with a clean and professional design. Privacy and cookie policies are implemented with GDPR compliance, though no explicit terms of service or security policies are present. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response information. No vulnerabilities or suspicious elements were detected. The WHOIS data is minimal but consistent with the organization's profile and domain age. Overall, the website presents a trustworthy and professional front for a small non-profit organization, with room for improvement in security headers and explicit policy disclosures to enhance compliance and trustworthiness.

A

Aktion West-Ost e.V.

aktion-west-ost.de

43

Aktion West-Ost e.V. is a small non-profit umbrella organization representing four Catholic youth associations within the BDKJ framework. The organization focuses on international youth work and political education aimed at fostering encounters and exchanges between Central and Eastern Europe. Their mission centers on overcoming East-West boundaries through personal contacts and shared experiences. The website reflects this mission with content in German and English, highlighting projects, publications, and social media engagement. Technically, the website is built on the ProcessWire CMS and leverages a modern JavaScript and CSS stack including jQuery, SlickNav, Slippry, and others to provide a responsive and user-friendly experience. Hosting is managed via kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. No incident response or vulnerability disclosure information is published. No sensitive data exposure or vulnerable libraries were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. However, improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

Z

Zusage

zusage.global

45

Zusage is a German-language platform dedicated to strengthening civil society, likely operating as a non-profit or advocacy organization. The website is built on WordPress and incorporates modern consent management and analytics tools such as Usercentrics and Matomo, indicating a moderate level of digital maturity. The site is accessible without any WAF or blocking mechanisms, and the content is safe for general audiences with no adult or questionable material detected. However, the absence of publicly available WHOIS data and privacy policy reduces transparency and trustworthiness to some extent. Security posture is moderate, with no detected security headers and unknown SSL configuration, suggesting room for improvement in technical security measures.