Germany security reports

B

Bezirksverband Pfalz

bv-pfalz.de

54

Bezirksverband Pfalz is a regional governmental organization in Germany focused on political administration, culture, education, health, and environmental protection within the Pfalz region. The website serves as an official portal providing information about its services, events, and regional initiatives. The organization maintains a moderate-sized digital presence with clear navigation and professional content tailored to residents and stakeholders in the region. Technically, the website is built on WordPress with several plugins including WooCommerce and The Events Calendar, supported by Matomo analytics respecting user privacy through consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible platform. Overall, the site reflects a trustworthy and compliant governmental entity with room for technical modernization and enhanced security policies.

The website www.kaiserslautern.de is the official digital presence of the city of Kaiserslautern, Germany. It serves as a comprehensive portal for residents, visitors, and businesses, offering extensive information on municipal services, social programs, cultural events, tourism, education, and urban planning. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital infrastructure typical of a large municipal government entity. Technically, the site is built on the Imperia CMS platform and leverages established JavaScript libraries such as jQuery, Leaflet for mapping, FontAwesome for icons, and AOS for animations. The hosting is managed via DomainControl nameservers, a common registrar service. The website demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site employs HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed, the site shows no signs of exposed sensitive data or vulnerable libraries. Analytics are handled via Piwik (Matomo), indicating a privacy-conscious approach to user tracking. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. Overall, the website presents a trustworthy and professional government portal with solid content quality and technical implementation. Strategic recommendations include enhancing security transparency, updating legacy libraries, and publishing formal security and incident response policies to strengthen compliance and user trust.

Jugendkulturmeile Kaiserslautern is a non-profit cultural network based in Kaiserslautern, Germany, focused on providing diverse cultural and educational programs for children, youth, families, schools, and social institutions. The network comprises multiple local cultural institutions offering workshops, courses, concerts, and other creative activities to foster artistic development and cultural education. The website is built on WordPress using Elementor and hosted likely by 1&1 IONOS, featuring a modern and responsive design with good navigation and content relevance. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by adding security headers and cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and serves its community-oriented mission effectively.

M

Ministerium für Klimaschutz, Umwelt, Energie und Mobilität Rheinland-Pfalz

aktion-gruen.de

54

Aktion Grün is a government-backed environmental initiative by the Ministry for Climate Protection, Environment, Energy and Mobility of Rheinland-Pfalz, Germany. The website serves as a platform to promote biodiversity conservation, species protection projects, and public engagement across the region. It targets local citizens, municipalities, farmers, and educational institutions to participate in environmental protection efforts. The site is well-branded with official government logos and provides comprehensive information about projects, funding, and participation opportunities. Technically, the website is built on WordPress using the Yoast SEO plugin and Bootstrap framework, ensuring good SEO and mobile responsiveness. It integrates Google Maps for project visualization and uses modern web technologies. Performance is moderate with good accessibility features. However, some security best practices like security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate German government entity. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance and security transparency. The overall risk is low given the nature of the site and its government affiliation. Strategic recommendations include implementing cookie consent, adding security headers, and publishing a security.txt file to enhance trust and compliance.

E

escape GmbH

escape-germany.de

65

escape GmbH is a German software development agency with over 20 years of experience specializing in digital enterprise platforms, workflow innovation, and intelligent marketing solutions. The company targets businesses and organizations seeking tailored digital tools and services, offering end-to-end project support from consulting to maintenance. Their market position is supported by a portfolio of reputable clients including BMW, Leica, and Vodafone. Technically, the website is built on the Cellms CMS platform, leveraging jQuery and includes modern analytics tools such as Google Analytics and Matomo. Mobile optimization and SEO are well addressed, though some accessibility features could be improved. Security posture is solid with HTTPS and cookie consent mechanisms in place, but could benefit from enhanced security headers and updated libraries. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Klett Vertrieb operates as a service and distribution portal for multiple Klett publishing brands, targeting the German book retail sector. The website provides current information, catalogs, and contact points primarily for book retailers and partners. The business model centers on representing Klett Verlag im Handel and facilitating orders and deliveries through the SVK GmbH logistics partner. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response details are lacking. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism present. Overall, the site is professional and trustworthy but could improve in transparency and security communication.

E

esistfreitag

esistfreitag.de

49

esistfreitag is a German creative agency established in 2011, specializing in multidisciplinary projects and campaigns that connect brands with people. The company operates beyond traditional agency services by running a city magazine, a curated product store, and an urban space for creativity and events. Their market position is that of a small but established agency with a strong community focus and a modern approach to creative services. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and Lottie animations, hosted on rzone.de servers. The site is mobile-optimized and features video backgrounds and interactive elements, though SEO metadata is minimal. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and SEO could enhance its profile.

EintrachtTech GmbH operates as a technology service provider closely linked to the Eintracht sports club, focusing on delivering digital services and information to its members and the general public. The website serves primarily as an informational portal with links to the club's digital platform. The business appears to be a small-sized entity operating within Germany, leveraging modern web technologies such as Bootstrap and jQuery, hosted on Microsoft Azure infrastructure. From a technical perspective, the website employs a standard ASP.NET MVC framework with a responsive design that caters well to mobile users. However, the site lacks advanced SEO metadata and accessibility features, and performance is moderate. Security practices include the use of HTTPS and CSRF tokens, but there is an absence of explicit security headers and no visible vulnerability disclosure or incident response information. The security posture is moderate with no critical vulnerabilities detected in the provided data, but improvements are needed in cookie consent mechanisms and security header implementation to enhance compliance and protection. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Business credibility is supported by the presence of legal imprint and terms of service pages, though contact information is not directly available on the homepage. Overall, the website is safe for general audiences, with no adult or questionable content detected. The domain registration data aligns well with the website's business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving SEO and accessibility to strengthen the website's professionalism and compliance.

Sascha Rösner's website is a German-language personal blog focused on nature, photography, and ecological topics. The site serves a niche audience interested in environmental and wildlife content, with a small-scale business model centered on content publishing and photography. The website is built on WordPress, leveraging multiple plugins for SEO, galleries, and popups, hosted by SchlundTech in Germany. The technical infrastructure is modern and mobile-optimized, with good SEO practices and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response mechanisms. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Contact is primarily via a contact form, with no explicit emails or phone numbers published. Overall, the site is trustworthy and professional, with no signs of suspicious or adult content.

S

Stuttgarter Nachrichten

stuttgarter-nachrichten.de

71

Stuttgarter Nachrichten is a well-established regional news media company based in Germany, founded in 1946. The website serves as a digital platform delivering current news from Stuttgart, Baden-Württemberg, and worldwide. It targets a general audience interested in regional and global news, operating a business model based on digital subscriptions and advertising revenue. The site maintains a consistent brand presence and publishes ethical guidelines, reinforcing its trustworthiness in the media sector. Technically, the website employs a modern JavaScript stack including Google Tag Manager, Cxense, and Piano paywall integration, ensuring a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, privacy consent mechanisms, and no detected vulnerabilities, although some security headers could be improved. Overall, the site is professional, compliant with GDPR, and trustworthy, with no signs of blocking or malicious activity.

P

Pinball Garage

pinball-garage.com

63

Pinball Garage is a specialized retailer and authorized dealer of new and used pinball machines, offering a broad selection from leading manufacturers such as Stern Pinball, Spooky Pinball, and others. The company operates both an online shop and a physical showroom in Suhl, Germany, targeting pinball enthusiasts and collectors. Their business model combines direct sales, pre-orders, and additional services like powder coating and installations, positioning them as a niche player in the pinball retail market. Technically, the website is built on the ePages e-commerce platform, utilizing modern web technologies including JavaScript, lazy loading, and responsive design. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. The hosting and domain registration are consistent with the business location and type. From a security perspective, the site uses HTTPS and secure forms, but lacks some advanced security headers and explicit security policies. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a professional and trustworthy front for the business, with clear contact information and a comprehensive product offering. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and enabling DNSSEC to further improve trust and security posture.

Royale500 is an online gaming platform targeting German-speaking users, offering casino-style games under a license indicated as 'DL'. The website is currently under maintenance, displaying multilingual messages to users. The technical infrastructure leverages modern JavaScript modules and the Vue.js framework, hosted behind Cloudflare DNS services, indicating a moderate level of digital maturity. However, the site lacks visible analytics, tracking, or advanced SEO features, and mobile optimization is basic. Security posture is limited with no visible security headers or SSL configuration details, and no published security or incident response policies. Privacy compliance is minimal, with no privacy or terms of service pages found, though a cookie consent mechanism is present. Overall, the site presents a low trust profile due to limited business information and contact details. Strategic improvements in security, privacy transparency, and business credibility are recommended to enhance user trust and compliance.

B

Bildungswerk der Erzdiözese Freiburg

bildungszentrum-digital.de

10

The Digitales Bildungszentrum website serves as a digital platform for the Bildungswerk der Erzdiözese Freiburg, focusing on adult education through online workshops and media literacy programs. It targets adults, church employees, seniors, and families, providing educational content and interactive learning opportunities. The platform consolidates regional educational offerings into a centralized online presence, enhancing accessibility and engagement. Technically, the website employs a modern frontend stack including jQuery, Bootstrap-like components, FontAwesome, and is powered by the Edith CMS backend. It uses Matomo for analytics with respect to user cookie preferences, indicating a moderate level of digital maturity. The site is mobile-optimized and structured for good SEO and accessibility, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and respects user tracking preferences, but lacks visible security headers and explicit privacy or cookie policies. No vulnerability disclosures or incident response contacts are published, which could be improved to enhance trust and compliance. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy compliance and security documentation to align with best practices and regulatory requirements.

L

Lab Concept GmbH

lab-concept.eu

61

Lab Concept GmbH is a small business specializing in laboratory planning services primarily targeting clients in Bavaria, Germany. The company operates a website built on the Wix platform, which provides basic information about their services in German. The site is functional and moderately optimized for mobile devices but lacks comprehensive business and compliance information such as privacy policies and contact details. Technically, the website uses Wix's Thunderbolt framework and includes standard polyfills and error monitoring via Sentry, indicating a moderate level of digital maturity. Security posture is average with no visible security headers or advanced protections, and no WHOIS registrant data is available due to privacy protection by EURid. Overall, the site is accessible and safe but would benefit from enhanced transparency and compliance documentation.

B

Bundesamt für Seeschifffahrt und Hydrographie (BSH)

bsh.de

63

The Bundesamt für Seeschifffahrt und Hydrographie (BSH) is a German federal maritime authority responsible for shipping, hydrography, marine environment, offshore wind energy, and climate data. It serves as a central hub combining administration and scientific research, providing extensive services and information to maritime professionals, government bodies, and the public. The website reflects a mature, well-structured digital presence with comprehensive content and clear navigation, targeting a specialized audience in maritime and environmental sectors. Technically, the site is built on the Government Site Builder CMS, hosted on German government infrastructure with secure HTTPS and moderate performance. Accessibility and SEO are well addressed, though some modern security headers are not explicitly visible. The site lacks a visible cookie consent mechanism, which is a minor compliance gap given the GDPR environment. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement in transparency and security culture. Overall, the domain registration and hosting align with official government standards, reinforcing trustworthiness. The site is free from advertising, tracking, or adult content, ensuring a safe and professional user experience. Strategic recommendations include implementing a cookie consent banner, publishing security policies, and enhancing visible security headers to further strengthen compliance and trust.

P

Prologis

prologisgermany.de

66

Prologis Germany operates as a leading provider of logistics real estate and supply chain logistics solutions, targeting businesses requiring scalable and innovative logistics infrastructure. The website reflects a mature enterprise-level digital presence built on Drupal 10, integrating advanced analytics and marketing tools such as Google Tag Manager, Hotjar, and Cookiebot for GDPR-compliant user tracking and consent management. The site demonstrates good mobile optimization and SEO practices, with consistent branding and professional content tailored to a business audience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not prominently disclosed. Overall, the website is trustworthy and well-structured, supporting Prologis' market position as an industry leader in logistics real estate.

The website www.mycnhstore.com serves as the official German e-commerce platform for CNH Industrial brands such as Case IH, Case CE, and New Holland AG. It targets customers in Germany and the broader EU region, offering brand selection and online purchasing of industrial and agricultural machinery and parts. The site demonstrates consistent branding aligned with CNH Industrial's global presence and provides a professional user experience with responsive design and clear navigation. From a technical perspective, the website employs a modern technology stack including SAP Commerce (Hybris), Google Tag Manager, Microsoft Clarity, Bing Ads, Marketo, and WalkMe. The site is well-optimized for mobile devices and incorporates multiple tracking and marketing tools, indicating a mature digital marketing strategy. Performance is moderate, with good SEO and accessibility features. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. The site includes GDPR-compliant privacy and cookie policies with consent mechanisms. However, no explicit security policy or incident response contact information is publicly available, which could be improved. The WHOIS data for the domain is missing, which reduces trustworthiness and raises questions about domain registration legitimacy. Despite this, the website content and technical setup strongly suggest it is a legitimate business platform. Overall, the site scores well in content quality, technical implementation, security, and privacy compliance, but business credibility is slightly impacted by the lack of WHOIS transparency and direct contact information.

S

Stadt Burglengenfeld

burglengenfeld.de

59

The website www.burglengenfeld.de serves as the official municipal portal for the city of Burglengenfeld in Germany. It provides residents and visitors with comprehensive information about the city, local government services, tourism, cultural events, and administrative resources. The site is well-structured, primarily targeting local citizens and tourists, and operates under a government business model. The content is presented in German and is professionally maintained with consistent branding and clear navigation.

The website www.ehe-wir-heiraten.de is a German non-profit initiative by the Arbeitsgemeinschaft für katholische Familienbildung e.V., affiliated with the Catholic Church. It offers a free wedding preparation app targeting couples planning to marry within the next year. The app provides weekly inspirational content, practical checklists, and information about regional events related to weddings and marriage. The website is well-structured, professionally designed, and provides clear contact information and privacy compliance mechanisms, including a cookie consent banner.

E

Startseite – Einfach Kirchlich Heiraten

einfach-kirchlich-heiraten.de

10

Einfach Kirchlich Heiraten is a German-language online platform dedicated to facilitating the planning of church weddings, primarily serving the Baden region within the Archdiocese of Freiburg. The website offers users the ability to browse available churches and priests, submit requests for preferred venues and dates, and access informational content including explanatory videos and testimonials from couples. The platform positions itself as a niche service provider focused on simplifying the traditionally complex process of arranging a church wedding. From a technical perspective, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics. It is hosted on servers associated with kasserver.com, a recognized hosting provider. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. No content management system or advanced frameworks were detected in the provided HTML. Security-wise, the site enforces HTTPS with a valid SSL certificate, ensuring encrypted communications. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. There is no visible cookie consent mechanism, which is a compliance gap under EU regulations. Additionally, no explicit security policies, incident response contacts, or vulnerability disclosure information are published, limiting transparency in security governance. Overall, the website presents a professional and trustworthy front for its target audience of couples planning church weddings. The absence of contact emails or phone numbers on the homepage and footer is a minor usability limitation. The site is free from adult or explicit content and does not employ tracking or advertising technologies, supporting user privacy. Strategic improvements in security headers, privacy compliance, and contact transparency would strengthen the platform's security posture and user trust.

The website online-ringvorlesung.de serves as an academic platform hosting a nationwide online lecture series organized by BAG WiWA, focusing on the societal role and impact of sciences. It targets academics, students, and individuals interested in interdisciplinary discussions on science and society. The platform operates on WordPress, leveraging Cloudflare for DNS and CDN services, and employs common plugins for SEO and cookie consent, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, but lacks direct contact information and detailed security or incident response policies.

The website 'Bürgerwissenschaften und Forschendes' serves as a regional platform affiliated with the Zentrum für Allgemeine Wissenschaftliche Weiterbildung (ZAWiW) at Universität Ulm. It promotes citizen science and research-based learning by facilitating community engagement in scientific projects and organizing educational events. The target audience includes citizens, researchers, and educators interested in collaborative scientific activities. The business model is non-profit and educational, focusing on community involvement and knowledge dissemination. Technically, the site is built on WordPress 6.8.3 with common plugins such as The Events Calendar and Cookie Notice. It uses Cloudflare for DNS and likely CDN services, and Matomo for privacy-conscious analytics. The site is moderately performant, mobile-optimized, and has good SEO practices. Accessibility is basic but present. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's educational purpose and shows no suspicious registrations. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its educational mission with a solid technical foundation but could improve security posture by adding security headers and incident response information.

The Medienanstalt Berlin-Brandenburg (mabb) operates as the joint media regulatory authority for the German states of Berlin and Brandenburg. The organization focuses on ensuring media diversity, supporting local journalism, combating disinformation, and enhancing media literacy across all generations. Their services include media oversight, sustainable media funding, and public engagement through educational initiatives. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and a reputable CMS (Contao). It is hosted behind Cloudflare, ensuring reliable DNS and security infrastructure. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism implemented. Contact information is transparent, including physical address, phone numbers, and email, complemented by active social media channels on Facebook, LinkedIn, and Vimeo. Security posture is strong with HTTPS enforced, CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government-related media authority.

S

Sächsische Landesmedienanstalt (SLM)

slm-online.de

47

The Sächsische Landesmedienanstalt (SLM) operates as the official regulatory authority for private broadcasting and new media in the German state of Saxony. The website serves as a comprehensive information portal for media professionals, broadcasters, journalists, and the general public interested in media regulation, licensing, funding, and media competence initiatives. The organization provides key services including licensing of private radio and TV broadcasters, media funding programs, educational projects, and public transparency. The site is well-structured, professionally designed, and accessible, reflecting its government affiliation and target audience.

N

NLM – Portal Medienkompetenz Niedersachsen

medienkompetenz-niedersachsen.de

49

The website www.medienkompetenz-niedersachsen.de serves as an official educational portal focused on media literacy and competence in the German state of Niedersachsen. It aggregates and networks various regional media education offerings and institutions, targeting a broad audience including educators, parents, and learners. The site is built on TYPO3 CMS and hosted by VisionConnect GmbH, reflecting a modern and stable technical infrastructure. The content is well-structured, professionally presented, and optimized for mobile devices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious patterns were detected, and the WHOIS data is consistent and transparent, supporting the site's legitimacy. Overall, the website demonstrates a solid digital presence with good content quality and privacy compliance. Strategic improvements in security policy transparency and technical security headers would further strengthen its posture. The absence of terms of service and vulnerability disclosure policies suggests areas for future enhancement to meet best practices comprehensively.

M

Medienpädagogischer Atlas Niedersachsen

medienpaedagogischeratlas-niedersachsen.de

10

The Medienpädagogischer Atlas Niedersachsen website serves as an authoritative regional platform providing comprehensive information and search capabilities for media education institutions and initiatives in the German state of Niedersachsen. Supported by official bodies such as the Niedersächsische Landesmedienanstalt (NLM) and the Niedersächsisches Ministerium für Soziales, the site offers thematic, local, and full-text search functionalities, along with news and event updates relevant to media pedagogy. The business model focuses on information dissemination and community support within the media education sector, targeting educators, institutions, and the general public interested in media literacy and education.

M

Media Night Hannover

medianighthannover.de

46

Media Night Hannover is a regional event focused on the media industry, showcasing highlights from the 2025 event including film, photos, and press coverage. The website serves as a platform to promote the event, its partners, and sponsors, primarily targeting media professionals and event attendees in Germany. The site is built on WordPress with modern plugins and technologies, including a GDPR-compliant cookie consent mechanism. The technical infrastructure is solid with HTTPS enabled and a moderate performance profile. Security posture is adequate but could be improved by adding security headers and formal security policies. Privacy compliance is good with clear cookie and privacy policies, though contact information and incident response details are lacking. Overall, the website is professional, trustworthy, and well-branded, reflecting a legitimate media event with strong partner support.

B

Bayernwerk-Shop

bayernwerk-shop.de

10

Bayernwerk-Shop is an online e-commerce platform specializing in energy-related products and services, including house introduction, electrical installation, e-mobility solutions, digital services, and solar products. The website targets residential and commercial customers primarily in Germany, positioning itself as a regional energy service provider with a comprehensive online sales channel. The platform is built on the Shopware e-commerce system and hosted on Hetzner infrastructure, leveraging modern web technologies and tracking tools such as Google Tag Manager and Microsoft Clarity, with privacy-conscious consent defaults. From a security perspective, the website enforces HTTPS and employs consent management to restrict analytics and advertising tracking by default. However, it lacks explicit privacy and cookie policy pages, and no security headers were detected in the provided content, indicating areas for improvement in compliance and security hardening. The site demonstrates good design quality, clear navigation, and professional branding, contributing to a trustworthy user experience. Overall, Bayernwerk-Shop exhibits a solid technical foundation and business credibility within the energy sector, though it should enhance its privacy disclosures and security headers to align with best practices and regulatory requirements. No signs of malicious activity or content safety concerns were identified, making it a safe and reliable platform for its target audience.

Bayernwerk Netz GmbH is a regional energy network operator based in Bavaria, Germany, providing comprehensive electricity and gas network services. The company operates as part of the larger E.ON group, offering services such as network connections, energy feed-in, customer support, and network usage contracts. The website reflects a mature digital presence with clear navigation, professional design, and integration with related E.ON portals. Technically, the site uses modern frameworks including React and Adobe Helix, with Cloudflare DNS and CDN services ensuring reliable hosting and performance. Security posture is strong with HTTPS, consent management, and script integrity checks, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, Bayernwerk Netz presents a trustworthy and professional online presence suitable for its regional energy market role.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ)

bmbfsfj.de

11

The Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ) is a German federal government ministry focused on education, family, seniors, women, and youth policies. The website serves as an official information portal providing policy updates, publications, and public service tools targeted at a broad audience including families, seniors, and youth. It holds a strong market position as a government entity and offers comprehensive content with consistent branding and high trust indicators. Technically, the website employs a modern tech stack including Matomo for privacy-conscious analytics, custom JavaScript and CSS, and a proprietary or custom CMS. The site is hosted with DNS managed by the German Research Network, indicating a secure and reliable infrastructure. Performance and mobile optimization are good, with strong accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While some advanced security headers are missing, no vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear policies and data retention rules. Contact information is available, enhancing business credibility. Overall, the website is professional, secure, and trustworthy, with no signs of blocking or WAF interference. It is safe for general audiences and aligns well with government standards. Strategic recommendations include enhancing security headers and publishing a vulnerability disclosure policy to further strengthen security posture.

G

Gemini | Demokratiestärker*innen

demokratiestaerkerinnen.de

10

The website demokratiestaerkerinnen.de represents GEMINI, a significant network within the German political youth education sector, affiliated with the Bundesausschuss Politische Bildung (bap e.V.). It serves as a platform for over 1,750 institutions focused on political education, democracy promotion, and youth participation. The site provides comprehensive information about the organization's mission, members, and activities, targeting educators, youth organizations, and stakeholders in political education. Technically, the site is built on Joomla CMS with UIkit framework and uses Matomo analytics, reflecting a modern and privacy-conscious infrastructure. Security posture is adequate with HTTPS and CSRF protections, but lacks some security headers and formal security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in its niche, though improvements in privacy disclosures and security headers are recommended.

D

Deutscher Bundesjugendring

dbjr.de

10

The Deutscher Bundesjugendring (DBJR) is a well-established non-profit umbrella organization representing youth associations in Germany. It focuses on youth political engagement, advocacy, and organizing events and publications to support youth participation in democratic processes. The website reflects a mature digital presence with a clear structure, professional design, and active social media integration. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the site is trustworthy and aligns well with the organization's mission and public identity.

B

Bundesarbeitsgemeinschaft Offene Kinder- und Jugendarbeit e. V.

offene-jugendarbeit.net

10

The Bundesarbeitsgemeinschaft Offene Kinder- und Jugendarbeit e. V. (BAG OKJA) is a well-established German non-profit association representing over 1000 providers and 5000 facilities in the field of open child and youth work. The website serves as an information and coordination portal offering news, publications, event details, and member services. It is positioned as a national umbrella organization with a strong presence in the youth work sector. The site uses Joomla CMS with a modern UIkit framework, ensuring responsive design and a good user experience.

A

Arbeitskreis deutscher Bildungsstätten e.V.

adb.de

37

The Arbeitskreis deutscher Bildungsstätten e.V. (AdB) is a German non-profit association specializing in political education for youth and adults. It operates nationally and internationally, providing networking, publications, events, and advocacy services. The website reflects a professional and consistent brand presence targeting educators, members, and stakeholders in political education. Technically, the site is built on Drupal 10 with modern frontend technologies, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

A

Arbeitsgemeinschaft für Kinder- und Jugendhilfe - AGJ

agj.de

53

Arbeitsgemeinschaft für Kinder- und Jugendhilfe - AGJ is a German non-profit organization dedicated to child and youth welfare, youth policy, and social pedagogy. The website serves as a comprehensive resource for professionals, policymakers, and stakeholders in the child and youth welfare sector, offering news, projects, publications, and event information. The organization maintains a strong presence in Germany and Europe, collaborating with various partners and hosting multiple projects. Technically, the website is built on TYPO3 CMS with modern frontend libraries, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy, though cookie consent mechanisms are minimal. Overall, the site is professional, trustworthy, and well-maintained, supporting the organization's mission effectively.

I

Institut für Pastorale Bildung der Erzdiözese Freiburg KdöR

theologischer-kurs.de

44

Theologischer Kurs Freiburg is an educational initiative operated by the Institut für Pastorale Bildung der Erzdiözese Freiburg, offering a specialized theological course for adults and church volunteers. The course has a strong market position as the only diocesan theological course in Germany with a 50-year history, providing foundational theological knowledge and pathways to academic qualifications such as a Bachelor in Practical Theology. The website reflects a professional and consistent brand image aligned with its religious and educational mission. Technically, the website is built on the W-Commerce CMS platform, leveraging modern JavaScript libraries like jQuery and AblePlayer, and employs Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and performs moderately well. Hosting and DNS are managed by W-Commerce GmbH, consistent with the website's author metadata. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and restricts third-party content until user consent is given, demonstrating good privacy compliance. However, explicit security policies and incident response contacts are not found, representing areas for improvement. Overall, the website is trustworthy, safe, and well-suited for its target audience. Strategic recommendations include adding a security.txt file, incident response information, and enhancing security headers to further strengthen the security posture.

G

Geistliches Zentrum St. Peter

geistliches-zentrum.org

49

Geistliches Zentrum St. Peter is a German non-profit spiritual center offering a variety of programs including spiritual retreats, exercises, contemplations, training, and monastery tours. The website targets individuals interested in spiritual growth and religious education, positioning itself as a regional center for contemplative and educational services. Technically, the site is built on Edith CMS, uses jQuery and Bootstrap frameworks, and integrates Matomo for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is professional and trustworthy for its intended audience but could improve in privacy compliance and security best practices.

B

Bildungswerk der Erzdiözese Freiburg

bwerk.de

43

Bildungswerk der Erzdiözese Freiburg is a state-recognized institution specializing in Catholic adult education within the Erzdiözese Freiburg region in Germany. The organization provides open adult education services, including workshops, seminars, and community engagement programs, primarily targeting adults and volunteers in the Catholic community. The website reflects a professional and consistent brand presence with clear navigation and relevant content in German. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and employs HTTPS with good security headers, although some improvements in privacy compliance and security disclosures are recommended. Overall, the website is trustworthy and well-positioned in its niche educational sector.

I

Institut für Religionspädagogik der Erzdiözese Freiburg

irp-freiburg.de

43

The Institut für Religionspädagogik der Erzdiözese Freiburg operates as a regional educational and consulting center supporting Catholic religious education across various school types and kindergartens within the Erzdiözese Freiburg region in Germany. The website serves as an information hub offering educational materials, news, and training opportunities tailored to educators and institutions involved in religious pedagogy. The business model focuses on educational support and resource provision, positioning itself as a trusted regional institute affiliated with the Erzdiözese Freiburg. Technically, the website is built on the Edith CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Matomo analytics for user tracking. The site is mobile-optimized with good SEO practices and accessibility basics in place. Hosting and domain management appear professional, with consistent use of web commerce services for site management. From a security perspective, the site employs HTTPS with a good SSL configuration and respects user tracking preferences by disabling analytics if the user denies consent. However, there are gaps in privacy compliance, notably the absence of explicit privacy and cookie policies, and no visible incident response or vulnerability disclosure information. Security headers are minimal, and accessibility could be improved. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

F

Fachstelle Geistliche Begleitung

geistliche-begleitung-ebfr.de

44

The website geistliche-begleitung-ebfr.de serves as the official online presence of the Diocesan Office for Spiritual Guidance within the Archdiocese of Freiburg, Germany. It provides comprehensive information about spiritual accompaniment services, including FAQs, step-by-step guidance, and a directory of spiritual guides categorized by region. The target audience is primarily German-speaking individuals seeking spiritual guidance within the Roman Catholic tradition. The business operates as a non-profit religious service affiliated with the Archdiocese, positioning itself as a niche provider in the regional religious sector. Technically, the website is built on the Edith CMS platform and hosted on infrastructure associated with w-commerce.de. It employs modern web technologies including jQuery, Bootstrap, and AOS for animations, with Matomo analytics integrated for user tracking while disabling cookies to respect privacy. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but could be enhanced. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not implement a cookie consent mechanism, which is important for GDPR compliance. No explicit security or incident response policies are published. The WHOIS data indicates a consistent domain registration aligned with the hosting provider, supporting legitimacy. Overall, the website is professional, trustworthy, and well-structured, serving its informational and community role effectively. Strategic improvements in privacy compliance, security headers, and transparency policies would enhance its security posture and regulatory adherence.

E

Erzdiözese Freiburg KdöR, Referat Pastoralpsychologie im Institut für Pastorale Bildung

pastoralpsychologie-freiburg.de

10

The website pastoralpsychologie-freiburg.de represents the Referat Pastoralpsychologie, a department within the Institut für Pastorale Bildung affiliated with the Erzdiözese Freiburg. It offers educational and counseling services focused on pastoral psychology and seelsorgliche Kommunikation (pastoral care communication). The target audience includes both full-time and volunteer church workers seeking training and supervision in pastoral counseling. The site positions itself as a niche educational provider within the religious and non-profit sector in Germany. Technically, the website is built on the Edith CMS platform, utilizing modern JavaScript libraries such as jQuery and Bootstrap components for responsive design. It employs Matomo analytics, reflecting a privacy-conscious approach to user tracking. The site is hosted professionally with HTTPS enforced, ensuring secure data transmission. However, some modern security headers are missing, and no cookie consent mechanism is implemented, which could be improved for compliance. From a security perspective, the site shows good practices such as email obfuscation and HTTPS usage. There is no evidence of exposed vulnerabilities or sensitive data leakage. The absence of an incident response page or vulnerability disclosure policy is a gap. The WHOIS data indicates a legitimate domain with consistent hosting but lacks detailed registrant information, which slightly reduces trust but is not uncommon for small non-profit entities. Overall, the website is professional, trustworthy, and serves its educational mission well. Strategic improvements in privacy compliance and security headers would enhance its posture and user trust.

B

Beratungsdienst Familie & Betrieb der KLB Freiburg

familie-und-betrieb.de

44

Beratungsdienst Familie & Betrieb der KLB Freiburg is a non-profit agricultural family advisory service affiliated with the Catholic Land Movement in the Freiburg Archdiocese. It provides confidential, cost-free counseling to agricultural families facing challenges such as succession, family conflicts, financial difficulties, and health issues. The website offers detailed information about its services, partners, publications, and contact options, primarily targeting German-speaking agricultural communities in Germany, Austria, and Switzerland. Technically, the site is built on Edith CMS, uses jQuery and Bootstrap frameworks, and integrates Matomo analytics with privacy-conscious settings. Security posture is good with HTTPS and some security headers, though improvements like cookie consent and security.txt are recommended. The domain registration and hosting align well with the business profile, indicating legitimacy and consistency.

D

Deutscher Caritasverband e. V.

caritas.de

10

Deutscher Caritasverband e. V. operates the website caritas.de as a leading non-profit social welfare organization in Germany. The website serves as a comprehensive platform offering social counseling, advice, campaigns, job listings, and informational resources targeting the general public and vulnerable groups. The organization maintains a strong market position as the Catholic Church's welfare association in Germany, providing extensive social services and support. Technically, the website employs a mature tech stack including AngularJS, jQuery, and Matomo analytics, hosted on a CMS platform likely CariNet. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and professional design. Security posture is good with HTTPS and consent management in place, though some security headers and explicit policies are missing. Overall, the domain and WHOIS data align well with the organization's identity, indicating legitimacy and trustworthiness.

R

Referat Ehe-Familie-Diversität im Erzbistum Freiburg

eintagfueruns.de

46

The website 'Heiraten in der Erzdiözese Freiburg' serves as an official informational platform managed by the Referat Ehe-Familie-Diversität within the Archdiocese of Freiburg. It provides comprehensive resources, event listings, and guidance for couples preparing for a church wedding, focusing on the Catholic and ecumenical communities in Germany. The site is well-positioned as a niche regional service provider with a clear target audience and a consistent brand identity aligned with the Archdiocese's mission. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and the Edith CMS platform, hosted likely by w-commerce.de. It integrates Matomo analytics with privacy-conscious configurations, though it lacks a cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and privacy compliance are recommended. From a security perspective, the site uses HTTPS with a solid SSL configuration and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's purpose and hosting, indicating a legitimate and trustworthy domain. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture.

C

Cargo Trans Logistik AG

cargo-trans-logistik.de

48

Cargo Trans Logistik AG is a medium-sized German logistics company specializing in piece goods logistics across Germany and Europe. The company operates a strong network of over 200 system partners and offers a variety of logistics products including standard, express, XXL, fixed-date delivery, and partial loads. Their business model focuses on partnership and operational efficiency supported by an in-house IT service provider, SoftWard, enhancing their digital capabilities. The website reflects a professional and modern digital presence with clear business information and contact channels. Technically, the site is built on WordPress with SEO and cookie consent plugins, optimized for performance and mobile use. Security posture is good with HTTPS enforced and CAPTCHA on forms, though security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-positioned in the transportation sector.

K

Kommission für Forschungsinformationen in Deutschland (KFiD)

kfid-online.de

50

The Kommission für Forschungsinformationen in Deutschland (KFiD) is a small, non-profit commission dedicated to promoting the KDSF-Standard for harmonizing research information exchange within the German scientific community. The website provides detailed information about the commission's goals, members, events, and services such as the FIS-Landkarte. The target audience includes scientific institutions and data stakeholders in Germany. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr, hosted by Variomedia. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced, but lacks security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and content-rich, supporting the commission's mission effectively.

S

Shift Agency GmbH

shift.agency

70

Shift Agency GmbH is a German-based digital marketing and branding agency specializing in AI-driven solutions and digital transformation. Positioned as a human-first agency, it emphasizes creative excellence, technology, and sustainability, including a climate-neutral certification. The company serves a broad business audience seeking to leverage digital marketing and branding to enhance customer engagement and business growth. Their portfolio includes notable clients such as Hyundai, Lufthansa, and Deutsche Bank, reflecting a strong market presence. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript frameworks and marketing tools like Mautic and Matomo for analytics and marketing automation. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a clear cookie consent mechanism ensuring GDPR compliance. The technical infrastructure supports a professional digital presence with moderate performance and good security practices. From a security perspective, the site enforces HTTPS and employs cookie consent management but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is typical for agencies, and does not raise immediate concerns. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the website demonstrating professionalism, compliance, and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen security and trust.

P

PONS Langenscheidt GmbH

langenscheidt.com

33

Langenscheidt Shop is an established German language learning e-commerce platform operated by PONS Langenscheidt GmbH. The website offers a variety of language learning products including books, apps, and courses targeting general consumers interested in foreign languages and German as a foreign language. The site is professionally designed with good navigation and mobile optimization, reflecting a medium-sized business focused on education and retail sectors. Technically, the site uses modern tracking and marketing technologies such as Google Tag Manager, Google Analytics, Facebook Pixel, and OneTrust for cookie consent, indicating a mature digital marketing infrastructure. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and detailed WHOIS domain registration data, which slightly reduces trustworthiness. Overall, the website is safe, compliant with basic privacy standards, and trustworthy for general audiences.

F

Startseite | Find das Bild

find-das-bild.de

42

Find-das-bild.de is a German child-friendly image search engine designed to provide children with free and safe photos for use. The website is powered by TYPO3 CMS and targets an educational niche audience, focusing on providing accessible visual content for children. The platform maintains a clean and professional design with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web standards but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but could be improved by adding security policies and incident response contacts. Overall, the site is safe, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy and security features.

L

LearningApps.org

learningapps.org

52

LearningApps.org is an established educational platform founded in 2010, offering interactive and multimedia learning blocks aimed at educators and students. The platform operates primarily as a free service supported by donations, focusing on providing customizable educational apps and collections to enhance learning experiences. The website is professionally designed with consistent branding and clear navigation, targeting a global audience with multilingual support. Technically, the site uses a custom CMS with a technology stack including jQuery, Bootstrap, Font Awesome, and Matomo analytics, hosted by netcup GmbH. While the performance and mobile optimization are moderate, the site maintains a good level of accessibility and SEO basics. Security-wise, the site enforces HTTPS and uses secure login iframes but lacks DNSSEC and modern security headers, and it uses an outdated jQuery version, which could pose risks. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is trustworthy and safe for general audiences, with room for improvement in security and privacy practices.