Germany security reports

B

Bundesministerium für Bildung und Forschung (BMBF)

fona.de

50

The website www.fona.de serves as the official platform for the German Federal Ministry of Education and Research (BMBF) focused on sustainability research (FONA). It provides comprehensive information on sustainability topics, current news, events, and research coordination. The platform targets researchers, policymakers, and the general public interested in sustainable development. The site is well-branded with consistent government logos and maintains a professional and trustworthy appearance. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Cookiebot for consent management and Matomo for analytics. Hosting is managed via net-server.de, and the site uses HTTPS with good SSL configuration. Accessibility and SEO optimizations are well implemented, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with GDPR. However, explicit security headers like Content-Security-Policy and incident response contacts are not evident, representing areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration aligns with the official government entity, supporting high legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and excellent content quality. Strategic recommendations include publishing a formal security policy, incident response contacts, and enhancing security headers to further strengthen trust and compliance.

H

Heinrichs Messtechnik GmbH

heinrichs.eu

51

Heinrichs Messtechnik GmbH is a well-established German company specializing in process instrumentation with over 100 years of experience. Their product portfolio includes various types of flow meters such as Coriolis, Variable Area, Magnetic Inductive, Flap, and Vortex Flow meters, targeting industrial and energy sectors. The company maintains a professional online presence with a WordPress-based website using the Avada theme, integrating modern analytics and cookie consent tools. Technically, the website is well-structured, mobile-optimized, and performs moderately well, though some improvements in accessibility and security headers are recommended. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but explicit security policies and incident response contacts are missing. Overall, the website reflects a credible and trustworthy business with room for enhanced privacy compliance and security transparency.

N

NavVis GmbH

navvis.com

71

NavVis GmbH is a technology company specializing in advanced reality capture and digital twin solutions, serving industries such as surveying, construction, manufacturing, and process plants. The company offers a combination of hardware products like the NavVis MLX and VLX series, alongside software platforms such as NavVis IVION, enabling clients to capture, process, and access spatial data efficiently. NavVis positions itself as an innovative leader in handheld and wearable laser scanning technology with a strong B2B focus. Technically, the website is built on the HubSpot CMS platform, integrating modern analytics and marketing tools including Google Tag Manager, Matomo, Hotjar, and Usercentrics for privacy compliance. The site is well-optimized for SEO, mobile responsiveness, and accessibility, featuring structured data and comprehensive cookie consent mechanisms. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes standard security headers. Forms are protected with reCAPTCHA, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of explicit incident response contacts and vulnerability disclosure policies represents an area for improvement. Overall, the website demonstrates a high level of professionalism, technical maturity, and privacy compliance, though the lack of WHOIS transparency slightly impacts trustworthiness. Strategic recommendations include publishing terms of service, incident response information, and vulnerability disclosure details to enhance security posture and user trust.

H

Hengstler GmbH

hengstler.com

65

Hengstler GmbH is a German technology and manufacturing company specializing in encoders, counters, relays, and thermal printers tailored to industrial applications. The company positions itself as an experienced technology partner offering customized solutions with a focus on quality and sustainability. Their market presence is supported by certifications such as ISO 9001 and ATEX, indicating compliance with international quality and safety standards. The website targets industrial customers and technology partners, emphasizing reliability and innovation. Technically, the website is built on modern frameworks including Next.js and React, hosted on Vercel, and integrates analytics and search tools like Google Tag Manager and Algolia. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanisms. From a security perspective, the site enforces HTTPS, implements standard security headers, and avoids exposing sensitive data. However, no explicit security policy or incident response information is published, which could be improved. The absence of WHOIS data for the domain is a concern but does not detract significantly from the overall trustworthiness given the professional site content and clear contact information. Overall, Hengstler GmbH's website reflects a solid business and technical foundation with good security and privacy practices. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

E

Erzbistum Freiburg

fortbildung-ebfr.de

43

The website www.fortbildung-ebfr.de serves as the official platform for pastoral education and training within the Archdiocese of Freiburg, Germany. It offers a range of educational services including workshops, coaching, supervision, and online learning targeted at clergy, pastoral workers, educators, and volunteers. The site reflects a well-structured and consistent brand aligned with its non-profit religious mission. Technically, the site is built on Edith CMS, leveraging common web technologies such as jQuery, Bootstrap, and Matomo analytics. Hosting and DNS infrastructure are consistent with the content provider, indicating a stable technical foundation. Security posture is adequate with HTTPS enabled and some privacy-aware analytics configurations; however, the absence of explicit privacy and cookie policies and missing security headers represent compliance and security gaps. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Stiftungen der Erzdiözese Freiburg

katholische-stiftungen-freiburg.de

41

The website 'Stiftungen der Erzdiözese Freiburg' represents a regional non-profit foundation network dedicated to supporting church-related and social projects in the Freiburg area of Germany. It offers services including funding projects, managing donations, and maintaining church properties. The site is well-positioned within its niche, targeting donors, church members, and community stakeholders with a transparent and trustworthy approach. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance, hosted on kasserver.com. The security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, accessible, and compliant with GDPR, reflecting a mature digital presence for a non-profit entity.

D

Diözesanstelle Berufe der Kirche

berufe-der-kirche-freiburg.de

44

The website 'Diözesanstelle Berufe der Kirche' serves as an informational and advisory platform focused on church-related professions and vocational guidance within the Archdiocese of Freiburg, Germany. It targets individuals interested in pursuing careers in the church, offering coaching, orientation, and event information. The site is positioned as a regional non-profit service with strong ties to the church community and affiliated organizations. Technically, the site is built on Edith CMS, uses modern JavaScript libraries like jQuery and FontAwesome, and integrates Matomo analytics with respect for user privacy preferences. The hosting and domain registration are consistent with the organization's identity, indicating legitimacy and trustworthiness. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit cookie consent mechanisms are recommended. Overall, the site presents professional content with clear navigation and a consistent brand image, supporting its mission effectively.

W

Web Commerce GmbH

konradsblatt-online.de

47

Konradsblatt is a regional weekly newspaper serving the Catholic community of the Freiburg Archdiocese in Germany. It offers news, commentary, and religious content through its website, e-paper subscriptions, and an online shop. The website is professionally designed with clear navigation and targets readers interested in church-related news and events. The business operates in the media and non-profit sectors, leveraging digital platforms to extend its reach. Technically, the website uses Edith CMS as its content management system, with frontend technologies including jQuery, Bootstrap, and FontAwesome. It employs Matomo analytics with cookie disabling features to track user interactions while respecting privacy preferences. The site is hosted with UI-DNS name servers and uses HTTPS, ensuring secure communications. Mobile optimization and SEO practices are well implemented, though accessibility could be improved. From a security perspective, the website enforces HTTPS and uses some security headers but lacks comprehensive security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy or cookie policy pages found, though a cookie consent mechanism is present. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic improvements in privacy disclosures, security headers, and incident response transparency would enhance its security posture and compliance standing.

J

Josefs-Gesellschaft gAG

jg-gruppe.de

60

Josefs-Gesellschaft gAG is a large, established German non-profit organization operating in the healthcare and social services sector. The company provides a broad range of services including rehabilitation for people with disabilities, elderly care, and healthcare services through hospitals and medical centers. The website reflects a professional and comprehensive digital presence with a strong focus on accessibility and user experience. Technically, the site is built on ASP.NET with modern JavaScript libraries and uses eTracker for analytics, implementing cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit incident response information are missing. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

A

Albertinen Krankenhaus

albertinen.de

61

Albertinen Krankenhaus is the largest non-profit hospital in Hamburg, Germany, offering a wide range of specialized medical and nursing services. It operates under the parent organization Immanuel Albertinen Diakonie and maintains multiple specialized centers such as heart and vascular, tumor, and geriatric medicine centers. The website is professionally designed using TYPO3 CMS, providing comprehensive information for patients, healthcare professionals, and referring doctors. The hospital emphasizes medical expertise and patient care quality, supported by testimonials and certifications. Technically, the site is well-structured, mobile-optimized, and accessible, though some modern security headers and privacy compliance features are missing. Contact information is clearly presented, including phone and physical address, with a functional search form.

E

Evangelisches Amalie Sieveking Krankenhaus

amalie.de

60

Evangelisches Amalie Sieveking Krankenhaus is a regional hospital located in Hamburg-Volksdorf, Germany, providing a wide range of inpatient and outpatient medical services including orthopedics, endocrine surgery, cardiology, and birth assistance. The hospital operates under the parent organization Immanuel Albertinen Diakonie and maintains a strong focus on quality management, patient safety, and ethical standards. The website is professionally designed using TYPO3 CMS, offering comprehensive information for patients, medical professionals, and prospective employees. Technical infrastructure is modern with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms for third-party content, though some security headers and incident response details could be improved. Overall, the hospital demonstrates high business credibility and trustworthiness with clear contact information and extensive partnerships.

S

Scholz Promotion Service GmbH

scholzpromotion.de

49

Scholz Promotion Service GmbH is a medium-sized German company specializing in sustainable and creative promotional products and full-service fulfillment solutions. The company holds ISO certification and EcoVadis Gold status, positioning itself as a quality and sustainability-focused supplier in the retail promotional products sector. Their services include sourcing, logistics, custom shop systems, and product design, targeting business clients seeking innovative marketing merchandise. Technically, the website is built on TYPO3 CMS with modern frontend frameworks and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a strong business credibility profile.

S

Setra Buses

setra-bus.com

61

Setra Buses operates a professional and comprehensive website showcasing their premium bus and coach models, sales services, and after-sales support. The company targets transport operators and fleet managers with a strong emphasis on quality and design. The website is built on a modern technical stack with Adobe Experience Manager CMS, uses Matomo analytics, and implements Usercentrics for GDPR-compliant consent management. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data for the domain is a notable concern, potentially indicating a new registration or privacy protection, which slightly reduces trustworthiness. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

D

Daimler Buses GmbH

bus-store.com

67

BusStore, operated by Daimler Buses GmbH, is a leading European platform specializing in the sale and purchase of pre-owned buses and coaches. The company leverages its affiliation with Daimler Truck AG and renowned brands like Mercedes-Benz and Setra to offer a broad and reliable range of vehicles. Their business model includes vehicle sales, trade-ins, financing, leasing, and comprehensive after-sales services through the OMNIplus network, positioning them as a market leader in the transportation sector across Europe. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript and consent management tools like Usercentrics. The site is well-structured, mobile-optimized, and provides a rich user experience with multilingual support and detailed location and contact information. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses nonce tokens for form security. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. However, there is no explicit public security policy or incident response contact, and WHOIS data is unavailable, which slightly impacts trust. Overall, the website presents a professional, trustworthy, and secure platform for its business operations. The main risk lies in the lack of WHOIS transparency, which should be addressed to enhance domain legitimacy. Strategic recommendations include publishing a security policy, incident response details, and a vulnerability disclosure program to further strengthen security posture and trust.

D

Daimler Buses GmbH

omniplus.com

75

OMNIplus, operated by Daimler Buses GmbH, is a leading service provider specializing in bus and coach maintenance, repair, and digital services across Europe. The website showcases a comprehensive portfolio including service contracts, 24-hour mobility services, workshop expertise, spare parts, and innovative digital solutions branded as OMNIplus ON. The company targets bus operators and fleet managers, positioning itself as a trusted enterprise-level partner in the transportation sector. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating Matomo analytics with user consent management via Usercentrics. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and rich content. However, some security best practices such as explicit security headers and vulnerability disclosure mechanisms are absent. From a security perspective, the site enforces HTTPS and employs consent mechanisms for privacy compliance, reflecting a mature privacy posture. The absence of WHOIS domain registration data is a notable anomaly that warrants further investigation, though the website content and business information strongly indicate legitimacy under Daimler Buses GmbH. Overall, the website presents a low risk profile with strong business credibility and privacy compliance, but improvements in security headers and domain registration transparency are recommended to enhance trust and security posture.

D

Daimler Truck AG

daimlertruck.com

72

Daimler Truck AG is a leading global manufacturer of commercial vehicles, operating over 40 production sites worldwide with a workforce exceeding 100,000 employees. The company offers a broad portfolio including light, medium, and heavy-duty trucks, buses, coaches, and tailored financial services. Their market position is strong as one of the largest commercial vehicle manufacturers globally, supported by a network of subsidiaries and brands such as Freightliner, Mercedes-Benz Trucks, and FUSO. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive corporate information. Technically, the site is built on TYPO3 CMS, integrates modern consent management via Usercentrics, and uses Matomo for analytics, indicating a focus on privacy and compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a public security policy are absent. WHOIS data is unavailable, which slightly impacts transparency but the website's content and branding strongly support legitimacy. Overall, the site is well-structured, GDPR compliant, and professionally maintained.

M

Messe München GmbH

productronica.com

65

productronica.com is the official website for the world-leading trade fair for electronics development and manufacturing, organized by Messe München GmbH. The site provides comprehensive information about the event, including exhibitor directories, program highlights, and visitor services. It targets industry professionals and companies involved in electronics manufacturing technologies. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern JavaScript modules, cloud hosting, and a consent management platform to ensure compliance and performance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is robust, with clear privacy and cookie policies and a user consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness, supporting the event's global reputation.

K

KUKA

kuka.com

77

KUKA is a globally recognized enterprise specializing in intelligent robotics, plant, and systems engineering, driving digitization in the manufacturing industry. The company offers a broad portfolio including robot systems, autonomous mobile robotics, production machines, and comprehensive services such as technical support, training, and cybersecurity. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting industrial clients and system integrators worldwide. Technically, the site employs modern JavaScript libraries, cookie consent mechanisms, and Google Tag Manager for analytics, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS enforcement and secure forms, though explicit security headers and vulnerability disclosure mechanisms could be enhanced. WHOIS data is unavailable, which slightly reduces transparency but does not detract from the overall legitimacy given the professional corporate content and branding. Overall, KUKA's website demonstrates a high level of digital maturity and business credibility, suitable for its enterprise-scale operations in manufacturing automation.

T

Truck1 Sp.z.o.o.

alle-lkw.de

45

Truck1 Sp.z.o.o. operates Alle-Lkw.de, a well-established online marketplace specializing in used trucks and commercial vehicles in Germany. Founded in 2003, the platform offers a comprehensive catalog of over 350,000 listings including trucks, trailers, motorhomes, and other commercial vehicles. The business targets both individual buyers and dealers, providing services such as vehicle listings, dealer registration, advertising, and leasing options. The website is part of a broader Truck1 brand ecosystem with multiple regional domains, indicating a strong market presence in Europe and beyond. Technically, the website employs a modern infrastructure with extensive use of third-party analytics and marketing tools including Google Tag Manager, Facebook Pixel, TikTok Analytics, and Criteo for retargeting. The site is hosted on Google Cloud DNS with HTTPS enforced, ensuring secure communications. The design is responsive and optimized for mobile devices, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site demonstrates good practices such as HTTPS usage and security headers, but lacks publicly available privacy and cookie policies, security policies, and vulnerability disclosure information. The extensive use of third-party scripts increases the attack surface and requires ongoing monitoring. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture. Overall, Alle-Lkw.de is a credible and professional platform with a solid business model and technical foundation. To enhance trust and compliance, it is recommended to publish comprehensive privacy and cookie policies, implement a security policy page, and consider a vulnerability disclosure program. These steps will improve privacy compliance and security transparency, supporting long-term business growth and user confidence.

Scholz Promotion operates a retail business focused on promotional products, as indicated by the domain and contact email. The current website is inactive, displaying a simple notice that the shop is not active and providing a customer service email and a link to the main company website. The technical infrastructure is minimal, relying on basic HTML and CSS with Google Fonts, and no advanced frameworks or CMS detected. The domain is registered in Germany with a reputable registrar and shows no privacy protection, aligning with the business location and language. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No analytics or tracking technologies are present, indicating minimal digital maturity. Overall, the website is low in content quality and professionalism, reflecting its inactive status.

H

HERMLE AG

myhermle.de

52

HERMLE AG operates a professional customer portal at myhermle.de, providing registered customers with access to service requests and machine information. The portal supports user registration and login, targeting a B2B manufacturing audience primarily in Germany. The website demonstrates a consistent brand presence and offers essential business services digitally. Technically, the site uses modern frontend technologies such as Bootstrap 5, jQuery, and DataTables, ensuring a responsive and user-friendly experience. However, some areas such as accessibility and SEO could be improved. Security posture is adequate with HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is partially met with a clear privacy policy and terms of service, but no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, with room for enhancements in security and privacy transparency.

I

Immanuel Albertinen Diakonie

immanuel.de

58

Immanuel Albertinen Diakonie is a large non-profit organization operating in the healthcare and social services sectors primarily in Hamburg, Berlin-Brandenburg, and Südthüringen regions of Germany. The website presents a comprehensive overview of their services including hospitals, specialized medical centers, rehabilitation, nursing care, hospices, addiction and disability assistance, psychosocial counseling, educational institutions, and child day care centers. Their market position is strong regionally with multiple subsidiaries and partner institutions. The website is built on TYPO3 CMS and demonstrates good technical maturity with modern design, mobile optimization, and accessibility features. However, it lacks visible privacy and cookie policies, and no explicit security headers were detected, which are areas for improvement. Contact information is clearly provided, and the site links extensively to related domains within their organizational ecosystem.

E

Elisabeth-Klinik gGmbH

elisabeth-klinik.de

64

Elisabeth-Klinik gGmbH is a well-established medical institution in Germany specializing in orthopaedic and rheumatologic care. It operates under the church-sponsored Josefs-Gesellschaft Köln and serves a broad patient base with modern facilities and experienced staff. The website reflects a professional healthcare provider with comprehensive service offerings and a strong market position in its sector. Technically, the site is built on ASP.NET Web Forms with a CMS named TWT Publisher, hosted on Deutsche Telekom infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and some security headers, but lacks explicit security policies and cookie consent mechanisms. Analytics are performed via etracker, indicating moderate user tracking with GDPR compliance. Overall, the site is trustworthy and professional, though improvements in privacy and security transparency are recommended.

H

HELIOS Software GmbH

helios.de

52

HELIOS Software GmbH is a specialized technology company offering network software solutions including file servers, print servers, workflow automation, and cloud-based products. Their market position is that of an established provider with decades of experience, targeting enterprise and professional users requiring reliable cross-platform file and print services. The website presents a professional image with detailed product information and support resources, although some modern web practices like cookie consent and security policies are missing. Technically, the website uses legacy JavaScript libraries such as jQuery 1.9.1 and plugins like carouFredSel and prettyPhoto. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. No CMS or hosting provider details are explicitly identified. External links are primarily to trusted domains such as app stores and Google. From a security perspective, the site lacks visible security headers and published security or incident response policies. The use of outdated JavaScript libraries may pose vulnerabilities. No sensitive data is exposed in the HTML, and no tracking or analytics scripts were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance to better align with modern standards and regulations.

5

50Hertz

mccs-gridcontrol.com

60

50Hertz, under the Elia Group umbrella, operates the MCCS website to promote its Modular Control Centre System, a cutting-edge grid control platform designed to facilitate the integration of 100% renewable energy by 2032. The company positions itself as a leader in energy transition technology, offering modular, scalable software solutions for TSOs and energy system operators. The website content is professionally crafted, targeting industry professionals and partners, and emphasizes collaboration and innovation in energy system operations. Technically, the website is built on a modern Sitecore CMS platform with Bootstrap 4 and includes advanced features such as video backgrounds and modular navigation. It employs standard analytics tools like Google Analytics and Matomo Tag Manager, with a clear cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security policy and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, but the domain and website content align with a legitimate, established energy sector business. Overall, the website presents a strong business and technical profile with good security hygiene, though improvements in transparency around security policies and incident response would enhance trust and compliance.

E

Erzdiözese Freiburg

ebfr.de

44

The Erzdiözese Freiburg website serves as the official digital presence of one of Germany's largest Catholic archdioceses, providing extensive information on faith, pastoral care, education, social services, and community engagement. The site targets a broad audience including parishioners, families, youth, and church staff within the Freiburg region. It offers structured navigation and a variety of resources reflecting its role as a major religious institution. Technically, the website is built on Edith CMS, leveraging modern JavaScript libraries like jQuery and AblePlayer, and uses Matomo for analytics with privacy-conscious configurations. Hosting and content delivery are managed via w-commerce.de and related domains. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, but could improve transparency and security practices.

K

KOBOLD Messring GmbH

kobold.com

51

KOBOLD Messring GmbH is a German-based manufacturer specializing in industrial measuring and control equipment focused on flow, pressure, level, and temperature measurement. The company holds a strong international market position as a leading instrumentation engineering enterprise, offering a broad portfolio of products and automation solutions tailored for diverse industrial sectors. Their website reflects a professional and comprehensive digital presence with multi-language support and detailed product showcases. Technically, the website is built on MATRIX-CMS with jQuery and integrates Matomo analytics and Google Tag Manager, both managed with user consent to ensure privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. From a security standpoint, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious scripts were detected. The absence of WHOIS data for the domain is a concern but does not detract significantly from the overall legitimacy given the professional content and valid contact information. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

S

Spreadshop

spreadshop.de

60

Spreadshop is a German-based e-commerce platform specializing in print-on-demand merchandising solutions tailored for creators, companies, and institutions. It offers a free online shop setup with integrated design, printing, and fulfillment services, positioning itself as a risk-free and flexible partner in the creator economy. The platform supports over 350 customizable products and integrates with popular social media and e-commerce platforms to enhance reach and sales. Technically, the website leverages modern web technologies including React and Next.js, hosted on a CDN infrastructure ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and structured content. Security is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly detailed. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through detailed privacy and cookie policies with active consent mechanisms, reflecting GDPR adherence. Business credibility is high, supported by certifications such as amfori and OEKO-TEX, and a consistent, professional brand presence across multiple social media channels. Overall, Spreadshop presents a trustworthy, professional, and technically mature platform with a strong market position in the print-on-demand e-commerce sector. Strategic improvements could include publishing dedicated security and incident response policies to further enhance transparency and trust.

D

Deutscher Mobilitätspreis

mobilitaetspreis.de

47

The Deutscher Mobilitätspreis website serves as a platform for a German mobility award initiative, focusing on promoting innovation and sustainable transportation solutions. The site targets professionals and organizations in the transportation sector, offering information about awards and mobility projects. The website is built on WordPress, utilizing popular plugins for SEO and multilingual support, hosted on kasserver.com. The technical infrastructure is modern but lacks visible advanced security headers and privacy compliance features. Security posture is moderate with room for improvement in policy transparency and technical safeguards. Overall, the site is professional and safe for general audiences but would benefit from enhanced privacy and security measures to improve trust and compliance.

G

Gesellschaft für Informatik e.V.

ocdcpro.de

55

OCDCpro is an educational and innovation-focused project operated by the Gesellschaft für Informatik e.V., aiming to promote European sovereignty in semiconductor technology through an open-source chip design competition for students and young talents. The project leverages open-source toolchains to foster learning and collaboration among students and educators in relevant technical fields, with industry partnerships enabling practical chip fabrication opportunities. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy linked to the parent organization's domain. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and credible educational initiative with a moderate to high level of technical maturity.

G

Gesellschaft für Informatik e.V.

ki-hub-kunststoffverpackungen.de

54

The KI-Hub Kunststoffverpackungen website represents a government-funded initiative by the Gesellschaft für Informatik e.V., focusing on leveraging Artificial Intelligence to enhance sustainability and circular economy practices in plastic packaging. The initiative comprises two innovation labs working collaboratively to optimize the lifecycle of plastic packaging from design to recycling. The website is professionally designed, primarily in German with an English version available, and targets industry professionals, researchers, and policymakers interested in AI and sustainability. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design and Leaflet.js for interactive maps. It employs Matomo for privacy-conscious analytics and implements a cookie consent mechanism with opt-in options. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers and explicit security policies are absent. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks a published security policy and incident response contacts, which are recommended for enhanced trust and compliance. The WHOIS data is minimal but consistent with the website's institutional affiliation, indicating legitimacy. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional platform for its intended audience.

F

FutuRSI

futursi.de

51

FutuRSI is a collaborative initiative supported by six partner institutions and funded by the Klaus Tschira Foundation, aiming to conceptualize a German research software institution. The website serves as an informational and advocacy platform targeting researchers, research software engineers, and academic stakeholders in Germany. The initiative focuses on fostering a sustainable future for research software and its developers through collaboration and career advancement. Technically, the website is built using the Hugo static site generator, leveraging modern web standards including HTML5, CSS, and JavaScript, with Google Fonts integration. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No advanced CMS or dynamic backend is detected, indicating a lightweight and maintainable infrastructure. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented. The absence of contact emails or phone numbers on the homepage limits direct communication channels, relying instead on a contact form. Overall, the website presents a trustworthy and professional image with a clear educational and collaborative mission. The security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic but acceptable given the nature of the site. The risk level is low, with no indications of malicious activity or content safety concerns.

B

BYTE Challenge

byte-challenge.de

55

BYTE Challenge is a German-based digital learning platform focused on providing free, individualized, and interdisciplinary educational courses primarily targeting students, university students, trainees, and schools. The platform offers a broad range of courses covering digital skills, computer science fundamentals, orientation for post-school careers, and advanced topics such as AI and sustainability. The website is professionally designed with multilingual support (German, English, Ukrainian) and clear navigation, reflecting a strong commitment to accessibility and user experience. Technically, the website is built on WordPress with WooCommerce and several plugins enhancing functionality such as multilingual support, user management, and event calendars. The tech stack includes modern frontend libraries like Bootstrap and Swiper for responsive design and interactive elements. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and uses security-conscious plugins, but lacks some advanced security headers and a visible cookie consent mechanism, which is a compliance gap. No explicit security policy or incident response contacts are published, which could be improved to enhance trust and readiness. Overall, BYTE Challenge presents a trustworthy and professional educational service with a solid technical foundation and good privacy compliance. Strategic improvements in cookie consent and security transparency would further strengthen its security posture and regulatory adherence.

G

Gesellschaft für Informatik e.V.

common-grounds-forum.org

54

The Common Grounds Forum is a youth-focused community initiative operated by Gesellschaft für Informatik e.V., targeting young people aged 14 to 30 to engage in digital and education policy advocacy in Germany. The platform serves as a hub for developing digital policy positions and bringing youth demands to national digital summit stages. The website is professionally designed, content-rich, and clearly targeted at its audience with a strong emphasis on community events and policy demands. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates privacy-respecting analytics via Matomo. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy hosted on the parent organization's domain. Contact information is transparent, though no explicit security or incident response policies are published. Overall, the website is trustworthy, well-maintained, and aligned with its stated mission.

The Gesellschaft für Informatik e.V. (GI) operates the GI Radar newsletter, a biweekly publication focused on informatics topics, primarily targeting its members and the broader informatics community in Germany. The website serves as an archive for these newsletters dating back to 2017, providing valuable historical and topical content. The organization is a well-established non-profit entity in the technology sector with a clear mission to disseminate information and foster community engagement. Technically, the website is built on TYPO3 CMS and hosted via domaindiscount24.net nameservers. The site demonstrates moderate performance and basic mobile optimization. While the content is well-structured and professionally presented, there is room for improvement in accessibility and SEO practices. The site lacks explicit privacy and cookie policies, and no advanced security headers or incident response information are present, indicating potential areas for enhancement in security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks visible security best practices such as security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of privacy and cookie policies reduces compliance confidence, especially regarding GDPR. Overall, the website is trustworthy and professional, with strong business credibility but moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the site's security posture and user trust.

G

Gesellschaft für Informatik e.V. (GI)

informatik-monitor.de

53

The website informatik-monitor.de is an educational platform operated by Gesellschaft für Informatik e.V., focusing on the state of computer science education in Germany. It provides detailed reports, comparative data across federal states, and forecasts related to informatics teaching in secondary schools. The site targets educators, policymakers, and researchers interested in informatics education. Technically, the site is built on TYPO3 CMS with Bootstrap, offering a responsive and accessible user experience. Security-wise, the site uses HTTPS (assumed), implements cookie consent with privacy-conscious defaults, and employs Piwik (Matomo) analytics with denied ad and analytics storage by default. However, no explicit privacy policy or terms of service were found, and security headers are not evident in the provided data. Overall, the site is professional, trustworthy, and safe for general audiences.

F

FERI

feri.de

71

FERI is a German-based financial services company specializing in multi-asset management and global investment solutions. With over 30 years of experience, it targets sophisticated private wealth and institutional investors, offering independent research and asset management services. The website reflects a professional and consistent brand image, emphasizing trust and expertise in the finance sector. Technically, the site uses modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, hosted on Colt's infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital presence aligned with its business model and regulatory compliance requirements.

K

Klosterportal | Originale Produkte und Dienstleistungen aus Klöstern

klosterportal.org

53

The website www.klosterportal.org is an e-commerce platform specializing in original products and services from monasteries, targeting a general audience interested in such niche products. The site is built on WordPress using the Divi theme and incorporates plugins such as GeoDirectory and CleanTalk for anti-spam protection. The technical infrastructure is moderately mature, with standard web technologies and a responsive design, but lacks advanced security headers and explicit privacy compliance documentation. Security posture is adequate with HTTPS enabled and anti-spam measures, but could be improved by implementing security headers and formal privacy and cookie policies. Overall, the site presents a professional and trustworthy front but lacks some compliance and security best practices.

The website www.ordensjahr.de represents a non-profit initiative by German religious orders offering a voluntary year of community living, prayer, work, and learning. It targets individuals at various life stages seeking spiritual and personal growth through immersion in religious community life. The site is built on TYPO3 CMS, indicating a mature technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-branded, though improvements in security and privacy transparency are recommended.

A

Angelika Kamlage

angelika-kamlage.de

44

Angelika Kamlage operates a professional website focused on photography, coaching, workshops, and spiritual process facilitation, targeting individuals and teams interested in these services. The business model combines service offerings with product sales via an integrated WooCommerce shop. The website is well-structured, SEO optimized, and presents a consistent brand image with a clear German language focus. Technically, the site is built on WordPress with modern plugins and libraries, hosted on webgo.de, and includes tracking via Google Analytics and Facebook SDK. Security posture is good with HTTPS and secure forms, but lacks some security headers and explicit incident response policies. Privacy compliance is adequate with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained.

W

WE DO communication GmbH GWA

we-do.com

48

WE DO communication GmbH GWA is a medium-sized communication agency based in Berlin, Germany, specializing in integrated campaigns that combine creative content, PR, interactive media, and event management. The company targets businesses and organizations seeking sustainable and engaging communication strategies. Their website reflects a professional and consistent brand image with a clear presentation of services and client references. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies such as JavaScript and SVG for interactive elements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS but lacks visible security headers and explicit incident response or security policies, which are areas for improvement. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the professional web presence and contact transparency mitigate risk. Overall, the website scores well in content quality and business credibility but should enhance security and privacy compliance measures.

D

Dunkelziffer e.V.

dunkelziffer.de

50

Dunkelziffer e.V. is a well-established non-profit organization based in Hamburg, Germany, dedicated to supporting children and adolescents who have experienced sexual abuse. The organization offers a wide range of services including telephone and online counseling, therapy, prevention programs in schools and kindergartens, and professional training seminars. Supported by public figures and a charity webshop, Dunkelziffer maintains a strong market position within its sector. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, making it a reliable resource for its target audience. No adult or explicit content is present, ensuring content safety for general audiences.

V

VisionConnect GmbH

juuuport.de

56

JUUUPORT is a German nationwide online counseling platform dedicated to supporting young people facing problems on the internet, including cyberbullying, sextortion, and other online risks. The platform is operated by VisionConnect GmbH and offers confidential, free assistance through trained youth scouts. The website is professionally designed with a strong emphasis on accessibility and privacy, featuring multilingual support and tools for users with disabilities. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-focused analytics, and integrates Cookiebot for comprehensive cookie consent management. Security posture is good with HTTPS enforced and privacy best practices observed, though explicit security policies and incident response contacts are not published. Overall, the platform demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR, making it a reliable resource for its target audience.

M

Medienanstalt Rheinland-Pfalz

klicksafe.de

53

klicksafe.de is a German EU-funded initiative dedicated to promoting online safety and digital competence among children, youth, parents, and educators. It operates under the Medienanstalt Rheinland-Pfalz and is part of the Safer Internet Centres network across Europe. The website offers comprehensive educational materials, awareness campaigns, and events to support safe and critical internet use. The initiative enjoys a strong market position as a trusted source for internet safety education in Germany, supported by EU funding and partnerships. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and Swiper.js for responsive and interactive content delivery. It employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not publish a security policy or incident response information. There is no cookie consent mechanism detected, which is a minor compliance gap given GDPR requirements. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The website content is safe for general audiences, focusing on educational and awareness topics without any adult or explicit material. Social media presence is active across major platforms, enhancing outreach and engagement. WHOIS data aligns with the website's claims, showing consistency and legitimacy. No suspicious or malicious indicators were found. Strategic recommendations include implementing a cookie consent banner, publishing a security policy and incident response contacts, adding security headers, and considering a vulnerability disclosure policy to enhance trust and compliance.

I

i-fabrik GmbH

ifabrik.de

58

i-fabrik GmbH is a well-established digital agency based in Leipzig, Germany, specializing in the conception, design, and development of websites, intranets, and digital platforms primarily using TYPO3 CMS. With over 25 years of experience, the company serves a diverse clientele including educational institutions, healthcare providers, energy companies, and public sector organizations. Their offerings include custom web development, PR software, intranet solutions, and seminar management software, positioning them as a comprehensive digital partner for businesses seeking tailored digital transformation solutions. The website reflects a strong market position with professional branding and a clear focus on quality and customer collaboration. Technically, the website is built on TYPO3 CMS with modern web technologies such as FontAwesome Pro and Swiper.js for UI components. The site is well-optimized for mobile devices, SEO-friendly, and integrates Google reCAPTCHA for form security. Hosting appears stable with nameservers indicating a reputable provider. The site employs a comprehensive cookie consent mechanism aligned with GDPR requirements, enhancing privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and integrates security best practices like CAPTCHA and cookie consent. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is solid but could be improved with additional transparency and headers. The overall risk assessment is low, with the website demonstrating professionalism, compliance, and technical maturity. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and implementing additional security headers to further strengthen the security posture and user trust.

H

Hildegard 2029

hildegard2029.de

45

Hildegard 2029 is a cultural and historical website commemorating the 850th anniversary of Saint Hildegard. The site provides information and resources related to this event, targeting a general audience interested in cultural heritage. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. It is hosted on a provider consistent with the domain's nameservers, indicating a legitimate setup. The site includes GDPR-compliant cookie consent mechanisms but lacks explicit terms of service or detailed security policies. Contact is primarily via a web form, with no direct email or phone contacts visible. Security posture is solid with HTTPS and security headers in place, though there is room for improvement in incident response and vulnerability disclosure. Overall, the website is professional, accessible, and safe for general audiences.

W

Web Commerce GmbH

kath-musterhausen.de

47

The website www.kath-musterhausen.de represents SESAM, a web platform service designed for church institutions within the Erzdiözese Freiburg. It is developed and hosted by Web Commerce GmbH, providing a comprehensive web-building toolkit including event management, news, forms, newsletters, and room and duty scheduling. The site targets church organizations seeking a versatile and supported online presence. Technically, the site uses Edith CMS, jQuery, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security headers, though cookie consent mechanisms and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its niche audience.

H

Haake digital

w-commerce.de

52

Haake digital is a small digital agency based in Germany specializing in web solutions including website development and digital marketing services. The company targets businesses seeking to enhance their online presence and digital transformation. The website is built on WordPress using modern technologies such as Elementor and WP Rocket, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No contact information or incident response details are present, which limits trust and compliance indicators. Overall, the domain appears legitimate but privacy-protected WHOIS data limits full verification. Strategic improvements in privacy compliance and security practices are recommended.

The website 'Wissen hilft schützen' is a German government-affiliated non-profit platform dedicated to providing information and educational materials aimed at protecting children and adolescents from sexualized violence in digital environments. It targets educators, social workers, and parents, offering resources, training opportunities, and help services. The site is well-branded and professionally designed, with a clear focus on its mission and audience. Technically, it is built on WordPress using common libraries and plugins, with moderate performance and good mobile optimization. Security-wise, HTTPS is used, but there is a lack of security headers and explicit privacy or cookie policies, which are areas for improvement. The site uses Piwik for analytics, indicating moderate user tracking. Overall, the domain and website content align with a legitimate and trustworthy entity, though some compliance and security best practices could be enhanced.

W

Was ist los mit Jaron?

was-ist-los-mit-jaron.de

50

The website 'Was ist los mit Jaron?' offers a free, interactive digital training course aimed at school staff in Germany to prevent sexual abuse of children. It positions itself as a niche educational provider using a serious game approach to increase awareness and provide practical guidance. The site is well-branded, consistent, and provides recognized participation certificates. Technically, it is built on WordPress with a modern theme and plugins, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy, professional, and focused on its educational mission.