Germany security reports

W

Wernesgrüner Brauerei GmbH

wernesgruener.de

52

Wernesgrüner Brauerei GmbH operates a professional website showcasing its range of beer products including Pils Legende, Helles, Alkoholfrei, and Naturradler varieties. The company positions itself as a traditional German brewery with a focus on quality and regional heritage. The website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Slick Carousel, providing a good user experience and mobile optimization. Compliance with privacy regulations is well integrated through Carlsberg Group's compliance pack, including cookie consent and GDPR-aligned privacy policies. Security measures include an age verification gateway for alcohol-related content, but explicit security headers and incident response policies are not publicly visible, indicating room for improvement in security transparency. Overall, the website is trustworthy, professionally maintained, and suitable for mature audiences interested in beer products.

S

Schwäneshop - der offizielle Fanshop des FSV Zwickau

schwaeneshop.de

62

Schwäneshop.de is the official online fan merchandise store for the German football club FSV Zwickau. The website offers a range of club-related products targeting fans and supporters, operating on the Shopify e-commerce platform. The site is well-branded, with clear affiliation to the club, and provides a user-friendly shopping experience in German. Technically, the website leverages modern e-commerce technologies including Shopify's infrastructure, Google Maps API, and various third-party apps to enhance functionality and user engagement. Security-wise, the site enforces HTTPS, uses standard security headers, and integrates error monitoring via Rollbar, though explicit security policies and incident response contacts are not published. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the website presents a professional and trustworthy online retail presence with moderate to good technical and security maturity.

B

Bonifatius Verlag

bonifatius-verlag.de

60

Bonifatius Verlag is a German publishing company specializing in socially relevant, spiritual, and biographical literature. Their website offers an e-commerce platform for book sales, targeting readers interested in life guidance, social sciences, and spirituality. The company positions itself as a niche publisher with a focus on positive and warm-hearted content. Technically, the website is built on WordPress with WooCommerce and German Market plugins, providing a solid e-commerce infrastructure. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, the site uses HTTPS and some security best practices but lacks comprehensive security headers and visible security policies. Privacy compliance is minimal with no explicit privacy or cookie policies found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

D

Der Dom

derdom.de

71

Der Dom is a German-language regional religious news magazine operated under the Bonifatius GmbH publishing group. It provides independent, high-quality journalism focused on the Erzbistum Paderborn community, offering subscription-based print and digital content, newsletters, and event information. The website demonstrates a mature digital infrastructure built on WordPress with modern SEO and accessibility features. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

B

Bonifatius Druckerei

bonifatius-druckerei.de

51

Bonifatius Druckerei is a sustainable printing and media house based in Paderborn, Germany, operating as a business unit of Bonifatius GmbH. The company offers a broad range of printing services including digital printing, offset printing, media design, finishing, and logistics, with a strong emphasis on environmental responsibility and quality. Their market position is that of a regional medium-sized enterprise serving business clients with professional and sustainable print solutions. Technically, the website is built on WordPress with modern plugins and accessibility features, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and cookie consent mechanisms are missing. Overall, the site is professional and trustworthy, but could improve privacy compliance and security best practices.

W

WITRA Service GmbH

witra-wittenberg.de

62

WITRA Service GmbH is a regional property service provider based in Lutherstadt Wittenberg, Germany, specializing in house maintenance, cleaning, green area care, and emergency services. As a wholly owned subsidiary of WIWOG mbH, it leverages strong local partnerships to deliver comprehensive property-related services primarily to residential property owners and housing companies. The website is professionally designed, mobile-optimized, and provides clear contact channels including phone, email, and a contact form. The technical infrastructure is based on the CIDEMOS CMS platform, with modern web technologies and a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate with HTTPS and CSRF protections, though additional security headers could enhance protection. Overall, the site reflects a trustworthy and credible business presence with no signs of malicious activity or content blocking.

G

Gesellschaft für Wohneigentum mbH Wittenberg

wigewe.de

62

Gesellschaft für Wohneigentum mbH Wittenberg (WIGEWE) is a municipally owned medium-sized real estate service provider founded in 1993, specializing in property management, rental, sales, and accounting services primarily in Lutherstadt Wittenberg and surrounding regions. The company manages a significant portfolio including residential, commercial, and special properties, and offers additional services such as measurement and remote reading of consumption data. The website reflects a professional and trustworthy presence with clear contact channels and comprehensive service descriptions. Technically, the site is built on the CIDEMOS CMS platform, employs modern web standards, and integrates third-party services like Google Maps and YouTube. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and consent dialogs. Overall, the site demonstrates good digital maturity and business credibility.

E

Entwässerungsbetrieb Lutherstadt Wittenberg

abwasser-wittenberg.de

58

The Entwässerungsbetrieb Lutherstadt Wittenberg is a municipal utility specializing in wastewater management and treatment services for the Lutherstadt Wittenberg region in Germany. The website serves as an informational portal providing details on wastewater treatment plants, sewer networks, disposal services, environmental protection, and customer service. It is part of the Stadtwerke Lutherstadt Wittenberg group, indicating a stable local market position with a medium-sized operational scale. The company emphasizes environmental responsibility and community service. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates accessibility tools like eyeAble. The site is mobile-optimized, well-structured, and includes SEO best practices. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, though it lacks explicit security headers and published incident response policies. Overall, the website demonstrates a good security posture with room for improvement in formal security documentation and header implementation. The domain WHOIS data is minimal but consistent with the business profile, and no suspicious indicators are present. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts to maintain security and compliance.

B

Bäder und Freizeit GmbH Lutherstadt Wittenberg

baden-in-wittenberg.de

58

Bäder und Freizeit GmbH Lutherstadt Wittenberg operates public swimming pools, sauna, and outdoor leisure facilities serving the Lutherstadt Wittenberg community in Germany. The company is part of the Stadtwerke Lutherstadt Wittenberg group, which includes several subsidiaries in utilities and municipal services. Their website provides detailed information on opening hours, pricing, and services, targeting local residents and visitors interested in recreational water activities. Technically, the website is built on the TYPO3 CMS platform, enhanced with accessibility tools such as eyeAble and modern JavaScript libraries like Swiper.js and jQuery. The site is mobile-optimized, accessible, and uses HTTPS with a cookie consent mechanism that complies with GDPR requirements. Performance is moderate with good SEO and navigation clarity. From a security perspective, the site enforces HTTPS and uses secure cookie settings. However, it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business's local and municipal nature, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by publishing formal security policies and enhancing security headers. The risk profile is low, with recommendations focusing on strengthening security transparency and incident readiness.

K

Kommunalservice GmbH Lutherstadt Wittenberg

kommunalservice-wittenberg.de

58

Kommunalservice GmbH Lutherstadt Wittenberg operates as a municipal service provider for the city of Lutherstadt Wittenberg, Germany. The company offers a range of services including street cleaning, winter maintenance, green care, and mobility solutions such as e-mobility and fleet management. The website reflects a well-structured municipal service entity with clear ties to the Stadtwerke group, indicating a stable local market position and trusted service delivery. The target audience primarily consists of local residents and municipal clients seeking public service solutions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. Accessibility is enhanced through the integration of the eyeAble plugin, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. No critical vulnerabilities or exposed sensitive data were found, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its municipal function effectively. Strategic improvements in security transparency and incident response readiness would further enhance its risk profile and stakeholder confidence.

W

wittenberg-net GmbH

wittenberg-net.de

57

wittenberg-net GmbH is a regional telecommunications company operating in Germany, focusing on providing high-speed internet and telephony services primarily through fiber optic technology. As part of the Stadtwerke Gruppe, it serves local communities with broadband expansion and reliable connectivity solutions. The website reflects a professional and consistent brand image, targeting residents and businesses in the served regions. Technically, the site is built on TYPO3 CMS with Bootstrap framework, indicating a modern and maintainable infrastructure. Accessibility and mobile optimization are well addressed, with external scripts enhancing user experience and analytics. Security posture is moderate; HTTPS is used, and cookie consent mechanisms are implemented, but explicit privacy policies and security headers are lacking. WHOIS data is limited due to DENIC privacy policies but shows no suspicious indicators, supporting the legitimacy of the domain. Overall, the site is trustworthy and functional but could improve in transparency and security best practices.

Triagonale is a small, professional design studio based in Germany specializing in product and communication design. Their services include product design, editorial design, web design, and spatial design, targeting businesses and organizations seeking tailored design solutions. The website is well-structured, visually appealing, and demonstrates a strong commitment to GDPR compliance with comprehensive privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and email obfuscation, though additional security headers and explicit security policies could enhance protection. Overall, the site reflects a trustworthy and professional business presence with room for technical and security improvements.

S

SD Software-Design GmbH

easyverein.com

67

easyVerein is a cloud-based software solution developed by SD Software-Design GmbH, founded in 2016, targeting clubs, associations, and organizations primarily in Germany. The platform offers comprehensive modules including member management, accounting, event scheduling, inventory, and integrated communication tools such as chat and mobile apps. The company positions itself as a market leader with high user satisfaction and recognized awards. Technically, the website employs modern frameworks like Bootstrap and jQuery, is mobile-optimized, and uses Matomo for analytics, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and provides cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response contacts. Overall, the domain registration and hosting are consistent and trustworthy, supporting the legitimacy of the business.

N

netzGiraffe

netz-giraffe.de

38

netzGiraffe is a German-based digital agency specializing in web development, e-commerce solutions, and online strategy consulting. The company leverages popular CMS platforms such as WordPress, Drupal, and TYPO3, alongside e-commerce systems like Prestashop, Woocommerce, and Shopware. They also develop custom portals using the Symfony framework. The website presents a professional image with clear service offerings and client references, targeting businesses seeking comprehensive online presence and digital solutions. Technically, the site is built on WordPress with modern libraries including jQuery and Bootstrap, and employs SEO best practices via Yoast SEO. Hosting is provided by a German hosting provider, consistent with the company's regional focus. Security posture is solid with HTTPS enabled and spam protection plugins in use, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is well-structured, performant, and trustworthy, reflecting a mature small business digital presence.

Konzertbüro Leipzig, operating under the agency name SADLERMUSIC since 2002, is a small German event management company specializing in organizing live concerts across various genres. The company offers comprehensive services including event planning, PR, technical and gastronomic support, and ticketing. The website is built on WordPress with a focus on event calendar management and SEO optimization, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy policies. Overall, the website is professional and functional but could improve in privacy compliance and contact transparency to enhance trust and security.

V

VR Bits GmbH

vrbits.de

44

VR Bits GmbH is a specialized development studio based in Germany, focusing on Virtual Reality, Augmented Reality, and gaming technologies to support digital transformation. Established in 2010, the company positions itself as a pioneer in the German VR scene, offering tailored interactive 3D solutions such as virtual handbooks, showrooms, and trade fair appearances. Their business model is project-based, serving corporate clients seeking innovative digital experiences. The website reflects a professional and consistent brand image with a clear presentation of services and team members. Technically, the site is built on WordPress with modern plugins for caching, lazy loading, and form handling, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and CAPTCHA-protected contact forms, though lacking explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but terms of service and incident response information are absent. Overall, the site is trustworthy and well-maintained, suitable for its target audience of businesses undergoing digital transformation.

S

Studio Kai Bergmann

kai-bergmann.com

62

Studio Kai Bergmann is a small photography business based in Leipzig, Germany, specializing in editorial, corporate, and portrait photography services primarily targeting companies, brands, and agencies in central Germany. The website serves as a professional portfolio showcasing their work and provides clear contact options including email and phone. The business appears well-positioned regionally with a focused service offering and a consistent brand presentation. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as JavaScript and CSS. It is mobile-optimized and includes basic SEO and accessibility features. Performance is moderate, typical for a Squarespace hosted site. The technical infrastructure is stable but could benefit from enhanced security configurations such as DNSSEC and additional HTTP security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and several recommended security headers, which could improve its resilience against certain attacks. Privacy compliance is addressed with a cookie consent banner and a privacy policy in German, indicating GDPR awareness. No incident response or vulnerability disclosure information is present. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security hardening and adding terms of service or security policies would enhance trust and protection.

O

OVRLAB GmbH

ovrlab.de

44

OVRLAB GmbH is a pioneering joint-venture network of XR experts in Germany, specializing in software development, hardware provisioning, and consulting services focused on virtual and mixed reality technologies. The company targets B2B clients seeking innovative XR solutions and digital transformation support. Their market position is strong within the German XR scene, supported by partnerships with regional technology firms. Technically, the website is built on WordPress using WPBakery and Yoast SEO, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

D

Daniel Remler - Videographer | Producer | Cutter

danielremler.com

50

Daniel Remler operates a professional videography and video production service with a strong focus on generative AI content. The website showcases a portfolio of work, emphasizing over 20 years of experience and expertise in both traditional video production and AI-driven content creation. The business targets clients seeking high-quality visual storytelling and AI prompt expertise, positioning itself as a niche expert in the media sector within Germany. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor, Bootstrap, and Google services integration, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, user-friendly, and compliant with privacy regulations, but the lack of WHOIS domain registration data introduces a moderate trust concern.

S

Schaubühne Lindenfels Leipzig

schaubuehne.com

47

Schaubühne Lindenfels Leipzig is a cultural venue in Germany offering theater, cinema, concerts, and festival hosting services. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with clear navigation and mobile optimization. The site integrates Matomo analytics and a cookie consent mechanism, indicating some privacy awareness. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. The domain WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site is safe and trustworthy for general audiences but would benefit from improved transparency and security disclosures.

S

Stadtgeschichtliches Museum Leipzig

stadtgeschichtliches-museum-leipzig.de

44

The Stadtgeschichtliches Museum Leipzig operates as a public cultural institution focused on preserving and presenting the history and culture of Leipzig through multiple museum houses and exhibitions. The website serves as an information portal for visitors, educators, and researchers, offering details on exhibitions, events, educational programs, and access to collections. The museum holds a solid regional position with a clear target audience including the general public and educational sectors. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and hosted via Ordergate. The site demonstrates good mobile optimization, clear navigation, and solid SEO practices, though performance is moderate. The absence of advanced analytics or tracking tools suggests a privacy-conscious approach. From a security perspective, the site enforces HTTPS but lacks several security headers and does not publicly disclose security policies or incident response procedures. No cookie consent mechanism was detected, which may be a compliance gap under GDPR. No vulnerabilities or exposed sensitive data were found, indicating a generally secure posture but with room for improvement. Overall, the website is professional, trustworthy, and serves its informational purpose well. Strategic enhancements in privacy compliance, security headers, and incident response transparency would strengthen its security posture and user trust.

S

Seven2one

seven2one.de

58

Seven2one is a specialized technology partner and full-service software provider focused on the energy sector in Germany and the DACH region. With over 20 years of experience, they offer cloud-native platform technology (Questra®) and comprehensive consulting, development, and support services to energy companies. Their market position is strong with over 120 customers and 50 productive systems. Technically, the website is built on modern Webflow CMS with integrations like Google Analytics and Cloudflare security features, demonstrating digital maturity and good performance. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms policies are missing, representing compliance gaps. Overall, the website is professional and trustworthy, but could improve transparency and GDPR compliance by publishing dedicated policy pages and contact details.

EEX Group is a leading global provider of market platforms for energy and commodity products, including power, natural gas, environmentals, freight, metals, and agriculturals. The company operates a network of over 950 trading participants across 25 locations worldwide and is part of the Deutsche Börse Group. Their services encompass exchange trading, clearing, registry, risk management, market data, and transparency services, positioning them as a key player in the energy and commodity markets. The website reflects a mature digital presence built on TYPO3 CMS, leveraging modern JavaScript libraries and interactive maps to enhance user experience. Privacy and cookie policies are well implemented with consent mechanisms, and the site maintains a professional design with clear navigation and mobile optimization. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the overall business credibility is supported by consistent branding, detailed corporate information, and multiple subsidiary references. Recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust and compliance.

L

Lebendiges Lüneburg

lebendiges-lueneburg.de

54

Lebendiges Lüneburg is a German non-profit community platform dedicated to fostering social and ecological engagement within the Lüneburg region. The website aggregates local events, supports initiative networking, and promotes collaboration through integration with partner platforms such as WECHANGE and Lünepedia. The platform targets local citizens and community groups aiming to drive societal change through collective action. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and user experience enhancements. The infrastructure supports mobile responsiveness and accessibility, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in HTTP security headers and explicit security policies. Overall, the site is trustworthy, well-maintained, and compliant with relevant privacy regulations, making it a reliable resource for its community audience.

N

N+P Informationssysteme GmbH

spartacus-fm.de

60

N+P Informationssysteme GmbH operates the SPARTACUS Facility Management software platform, a comprehensive CAFM solution designed to optimize facility management processes such as maintenance, space management, energy controlling, and cost tracking. Established in 1996, the company holds a solid market position with over 200 customers and a strong presence in Germany. The website reflects a professional and consistent brand image, targeting facility management professionals and organizations seeking integrated software solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot, Google Analytics, and Usercentrics for consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence aligned with business goals and compliance requirements.

N

N+P Informationssysteme GmbH

nuptools.de

58

N+P Informationssysteme GmbH operates the NuPTools website offering proprietary productivity software components designed to enhance IT core systems in manufacturing and construction industries. With over 30 years of experience, the company provides tailored IT solutions including automation tools for Autodesk Inventor, Vault, APplus, and PRO.FILE, supporting digital transformation initiatives such as Industry 4.0 and BIM. The website is built on TYPO3 CMS and integrates modern marketing and analytics technologies including HubSpot, Google Analytics, and Usercentrics for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site presents a professional, trustworthy digital presence aligned with the company's business focus and market position.

M

MLP SE

mlp-se.de

66

MLP SE operates as a financial services group in Germany, providing consulting and financial solutions to private customers, companies, and institutional investors. The website serves multiple audiences including press, investors, and career applicants, reflecting a mature and established market position. The company emphasizes transparency through detailed investor relations, corporate governance disclosures, and a corporate university for training and certification. Technically, the website uses modern tools such as Google Tag Manager and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

M

MLP Finanzberatung SE

mlp-financify.de

67

MLP financify is a specialized financial advisory platform targeting students, medical students, and private customers in Germany. It offers a broad range of financial services including retirement planning, insurance, financing, asset management, and digital banking solutions. The company leverages a large network of over 2,000 advisors across 90 locations, positioning itself as a trusted partner in personal finance. The website is professionally designed with comprehensive content and clear navigation, supporting an excellent user experience. Technically, the site uses modern web technologies including Google Tag Manager and Usercentrics for consent management, and likely runs on the FirstSpirit CMS platform. Security posture is strong with HTTPS enforced and privacy compliance well implemented, though some security headers could be explicitly confirmed. No critical vulnerabilities or blocking mechanisms were detected. Overall, the domain and WHOIS data align well with the MLP brand, supporting legitimacy and trustworthiness.

A

AHLMANN-ZERSSEN GMBH

ahlmann-zerssen.com

67

AHLMANN-ZERSSEN GMBH is a well-established maritime shipping and logistics service provider based in Germany, with a domain age dating back to 2008 supporting its claim of decades of experience. The company offers a comprehensive range of services including chartering, shipowners services, port agency, transshipment and warehousing, customs services, and heavy load/project logistics. Their market position is that of a trusted maritime service provider with multiple certifications such as ISO 9001, GMP+, and AEO, which enhance their credibility and trustworthiness in the transportation sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery and Font Awesome. It is hosted via Cloudflare, ensuring good SSL configuration and domain security, although DNSSEC is not enabled. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Privacy compliance is well addressed with a cookie consent mechanism and a GDPR-compliant privacy policy. From a security perspective, the site benefits from HTTPS and Cloudflare protection but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and security maturity. Overall, the website presents a professional and trustworthy digital presence with solid business credibility and compliance. The main risks relate to enhancing security best practices and publishing more comprehensive security and incident response information to align with industry standards and regulatory expectations.

I

Internetseelsorge

internetseelsorge.de

42

Internetseelsorge.de is a German non-profit organization providing free Christian pastoral care and spiritual guidance through mail and chat services. The website targets individuals facing life crises, spiritual questions, or feelings of loneliness, offering confidential and anonymous support. The organization collaborates with recognized Catholic partners, enhancing its credibility and reach within the German-speaking community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo analytics to respect user privacy. Hosting is provided by kasserver.com, a known hosting provider. Security posture is solid with HTTPS enforced, though improvements in security headers and cookie consent mechanisms are recommended. The website is well-structured, mobile-optimized, and provides clear navigation and service descriptions, supporting a positive user experience. No adult or explicit content is present, making it safe for general audiences.

Z

Zentrum für Berufungspastoral

berufung.org

46

Zentrum für Berufungspastoral is a German non-profit organization dedicated to vocation pastoral care within the Catholic Church. The website provides resources, events, and contact information for diocesan vocation pastoral offices primarily targeting young people and church members in Germany and neighboring countries. The organization has an established presence since 2000, reflected by the domain age and consistent content. Technically, the site runs on TYPO3 CMS version 4.7 with common JavaScript libraries and Google Analytics for tracking, though the CMS version is outdated and may pose security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and DNSSEC. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is professional, trustworthy, and safe for general audiences.

U

Unabhängiger Beauftragter der Bundesregierung für Fragen des sexuellen Kindesmissbrauchs

kein-raum-fuer-missbrauch.de

62

The website 'Kein Raum für Missbrauch' is an official German governmental initiative dedicated to preventing sexual abuse of children and youth. It provides educational resources, support for institutions to develop protection concepts, and links to specialized help portals. The initiative targets educators, caregivers, and organizations working with children. The site is well-branded, consistent, and professionally presented, reflecting its authoritative position in the child protection sector. Technically, the website is built on TYPO3 CMS, uses JavaScript, and integrates Matomo analytics hosted locally in Germany with strong privacy controls including IP anonymization and user consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting appears to be managed by a reputable German provider. From a security perspective, the site enforces HTTPS, uses a cookie consent banner, and respects privacy regulations. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with GDPR-aligned policies and transparent data collection. Overall, the website presents a low-risk profile with a strong focus on privacy and user trust. Strategic improvements could include adding security headers, publishing a security policy, and providing direct contact information for incident response to enhance transparency and resilience.

W

Web Commerce GmbH

digitalpastoral.de

45

Digitalpastoral.de is a German-language digital platform focused on providing resources, networking, and content for Catholic church communities and pastoral workers. The platform serves as a marketplace and knowledge hub for digital church practice, offering articles, event listings, and community engagement tools. It is developed and maintained by Web Commerce GmbH, with affiliations to multiple (Erz-)Bistümer, indicating a trusted position within the church digital ecosystem. The website targets church professionals and digital faith communities, positioning itself as a niche but important resource in the religious digital media space. Technically, the site is built on Edith CMS and leverages modern web technologies including jQuery, Bootstrap, and FontAwesome. It integrates Matomo analytics with privacy-conscious tracking controls and uses HTTPS to secure communications. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and professional design. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. The lack of a published security policy or incident response contacts is a gap in transparency and readiness. Privacy compliance is partial, with a privacy policy present but no cookie consent banner detected. Overall, the domain and hosting infrastructure appear legitimate and consistent with the business claims, with no signs of suspicious WHOIS data or blocking by WAFs. The overall risk assessment is moderate with recommendations to implement explicit cookie consent, add security headers, and publish security and incident response policies to strengthen trust and compliance. The platform is well-positioned as a specialized digital resource for church communities but should address these gaps to maintain and improve its credibility and security posture.

B

Bonifatius GmbH

bonifatius.de

56

Bonifatius GmbH is a well-established media and printing company based in Paderborn, Germany, with a history dating back to 1869. The company operates multiple business fields including printing services, publishing, and retail bookstores, serving a broad audience from individual book buyers to business clients seeking sustainable and high-quality media solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive content about the company's offerings and values, particularly emphasizing sustainability and innovation. Technically, the website is built on WordPress with modern frontend technologies such as Tailwind CSS and Tiny Slider, ensuring good mobile optimization and accessibility. The site uses HTTPS with no visible security vulnerabilities or exposed sensitive data. However, there is room for improvement in security headers and explicit incident response policies. Privacy compliance is addressed with a comprehensive privacy policy, though a cookie consent mechanism is absent. The security posture is solid with HTTPS and secure form handling, but lacks advanced security headers and vulnerability disclosure mechanisms. The domain WHOIS data is partially consistent with the business claims, showing no suspicious patterns. Overall, the website presents a trustworthy and professional digital presence for Bonifatius GmbH. Strategic recommendations include enhancing security headers, implementing cookie consent, adding a vulnerability disclosure policy, and improving incident response transparency to strengthen compliance and trust.

B

Bistum Mainz

bistum-mainz.de

62

Bistum Mainz is a large, established Catholic diocese in Germany providing religious, social, educational, and community services. The website serves as a comprehensive portal for information, news, and engagement with the Catholic community and the general public. It maintains a consistent brand presence and offers rich content tailored to its audience. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for privacy-conscious analytics, and incorporates accessibility features, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its users.

E

EUREGIO Bayerischer Wald - Böhmerwald - Unterer Inn

euregio.bayern

57

EUREGIO Bayerischer Wald - Böhmerwald - Unterer Inn is a regional cooperation organization focused on fostering cross-border collaboration between Germany, Czech Republic, and Austria. The website serves as an informational and project facilitation platform, targeting regional stakeholders and the general public interested in EU-funded projects and regional development. The organization positions itself as a key facilitator for cross-border initiatives in the tri-border area, emphasizing education, cultural exchange, and regional growth. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, jQuery, and Leaflet.js for interactive maps. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. The presence of cookie consent and privacy policy indicates awareness of GDPR compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers and explicit incident response contacts. The WHOIS data is unavailable, which slightly impacts trust but the professional presentation and contact details mitigate concerns. No vulnerabilities or malicious content were detected. Overall, the website is a credible, well-maintained regional government/non-profit portal with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers and WHOIS transparency could enhance trust and security posture.

A

August Horch Museum Zwickau gGmbH

horch-museum.de

48

The August Horch Museum in Zwickau is a cultural institution specializing in automotive history and technology, offering extensive exhibitions and multimedia experiences. The museum targets automotive enthusiasts, tourists, and culture seekers, positioning itself as a regional leader in automotive heritage. The website supports multiple languages and provides virtual tours and an online shop, reflecting a moderate digital maturity. Technically, the site uses established JavaScript libraries and Google services, hosted on a reliable German hosting provider. Security posture is solid with HTTPS and cookie consent management, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie management and clear policies. Overall, the site is professional, trustworthy, and user-friendly, with room for enhanced security policies and incident response transparency.

O

Open Grid Europe GmbH

oge.net

78

Open Grid Europe GmbH operates as a leading gas transmission system operator in Germany, focusing on natural gas, biogas, hydrogen, and CO2 infrastructure. The company provides a broad range of services including transportation, technical services, and market information to shippers, network operators, and connection customers. Their website reflects a strong commitment to sustainability and climate protection, with detailed reporting and active communication channels. Technically, the site is built on Neos CMS with modern libraries such as jQuery and Bootstrap, offering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

D

Deutsche Bahn Stiftung gGmbH

deutschebahnstiftung.de

66

Deutsche Bahn Stiftung is a German non-profit foundation established in 2013 by Deutsche Bahn AG, focusing on education, integration, and volunteering to strengthen social cohesion. The website reflects a professional and consistent brand presence, offering detailed information about its mission, projects, and the DB Museum. Technically, the site uses CoreMedia CMS, integrates privacy-conscious tools like Usercentrics CMP and Matomo analytics, and enforces strong security practices including HTTPS and security headers. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR, serving a broad audience including volunteers, educational institutions, and the general public.

B

Bundesweiter Vorlesetag

vorlesetag.de

57

The Bundesweite Vorlesetag website represents a well-established non-profit initiative focused on promoting literacy and the joy of reading among children and adults in Germany. Founded in 2004 by prominent partners including DIE ZEIT, Stiftung Lesen, and Deutsche Bahn Stiftung, it holds a leading position in the national literacy promotion landscape. The website offers comprehensive resources, event registration, and digital storytelling content, supported by a consistent and professional brand presence. Technically, the site is built on TYPO3 CMS with modern integrations such as Vue.js, Matomo analytics, and social media embeds, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security-wise, the site employs HTTPS and a robust cookie consent mechanism, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a high level of trustworthiness and compliance with GDPR, making it a reliable platform for its audience.

G

GemeindebriefDruckerei

gemeindebriefhelfer.de

46

GemeindebriefDruckerei operates a specialized blog and resource platform focused on assisting church communities and newsletter designers in creating effective and visually appealing church newsletters. The website offers a variety of blog articles, downloadable templates, image archives, and tools, complemented by an associated shop for fan articles and other related products. The target audience is niche, primarily German-speaking church groups and individuals involved in newsletter production. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies and plugins to provide a functional and moderately optimized user experience. Security posture is adequate with HTTPS enforced and some best practices observed, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The domain registration data is consistent and indicates a legitimate and established service. Overall, the site is professional, content-rich, and trustworthy within its niche, though it would benefit from enhanced privacy compliance and security hardening.

A

Adalbert Stifter Verein e. V.

stifterverein.de

52

The Adalbert Stifter Verein is a German non-profit cultural institute dedicated to promoting the cultural heritage and history of the Bohemian countries. The organization offers a range of services including exhibitions, events, publications, scholarships, and a library. Their target audience includes cultural enthusiasts, historians, researchers, and the general public interested in Bohemian culture. The website is professionally designed with consistent branding and clear navigation, reflecting a well-established cultural institution. Technically, the website is built on WordPress and uses modern JavaScript libraries such as GSAP for animations. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, and no major technical issues were detected. The site uses HTTPS with excellent SSL configuration, but lacks some security headers and cookie consent mechanisms. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and a vulnerability disclosure mechanism. Privacy compliance is basic with a privacy policy present but no cookie consent banner. Overall, the website is trustworthy and professional, with a strong cultural focus and good business credibility. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and user trust.

H

Hochschule Landshut

haw-landshut.de

63

Hochschule Landshut is a German university of applied sciences offering a broad range of degree programs, continuing education, and research services with a strong emphasis on practical relevance. The website reflects a well-established educational institution with a clear market position in the regional higher education sector. The digital infrastructure is built on TYPO3 CMS with integrated Matomo analytics, providing a modern and accessible user experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and serves its target audience effectively.

B

Bistum Essen

bistum-essen.de

43

Bistum Essen is a well-established Catholic diocese serving over 2.5 million people in the Ruhrgebiet and Sauerland regions of Germany. The website reflects a comprehensive religious and social service organization with a strong community focus, offering pastoral care, social help, education, and cultural events. The institution is positioned as a key religious entity in its region, with a large workforce and multiple parishes. Technically, the website is built on TYPO3 CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and GDPR compliant with a clear cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain and website content align with a legitimate and trustworthy religious organization.

G

GemeindebriefDruckerei

gemeindebriefdruckerei.de

67

GemeindebriefDruckerei is a specialized printing service focused on church newsletters and community publications in Germany. The company offers printing, layout materials, consulting, and an online shop tailored to religious communities and local municipalities. The website is built on TYPO3 CMS with modern frontend technologies, providing a professional and user-friendly experience. Contact information and customer testimonials enhance trust and credibility. Security posture is adequate with HTTPS and secure forms, but lacks explicit security policies and cookie consent mechanisms. Overall, the site is well-positioned in its niche with a solid digital presence.

G

German Coworking Federation e.V. Bundesverband Coworking Deuschland

coworking-germany.org

48

The German Coworking Federation e.V. is a non-profit national federation representing coworking spaces, users, researchers, and interested parties in Germany since 2015. The organization focuses on community building, education, event organization, and advocacy within the coworking sector. Their website reflects a professional and consistent brand presence with clear navigation and relevant content for their target audience. Technically, the site is built on WordPress using the Divi theme and integrates modern technologies such as Bootstrap 5, Matomo analytics, and Brevo for marketing automation. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and policies are not published. The absence of WHOIS data due to privacy protection is common for such entities but slightly reduces transparency. Overall, the site is trustworthy and well-maintained but could improve privacy compliance and security disclosures.

C

Creacando

creacando.de

62

Creacando is a German-based e-commerce business specializing in DIY creative kits, offering customers curated boxes with materials and instructions for various crafts such as pottery, candles, and soaps. The company targets a general audience interested in creative hobbies and positions itself as a niche provider with a focus on quality materials and ease of use. The website is built on the Shopify platform, leveraging modern web technologies and integrations with popular marketing and analytics tools like Google Analytics, Facebook Pixel, Hotjar, and Klaviyo. The technical infrastructure is robust, with Cloudflare CDN and Shopify hosting ensuring good performance and security. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting GDPR adherence. However, explicit terms of service and security policies are not found, and direct contact information is limited, which could impact user trust and legal clarity. Overall, the site demonstrates a good balance of business professionalism, technical maturity, and privacy awareness, with room for improvement in transparency and accessibility.

4

4toStay GmbH

chronuu.de

53

Chronuu is a German-based digital platform specializing in estate and legacy management, operated by 4toStay GmbH. The company offers a secure, user-friendly service that enables individuals to manage their digital and material estate, document their life story, and provide access to heirs in a compliant and encrypted environment. The platform is positioned as a niche provider in the German market, leveraging modern web technologies and mobile app availability to reach its target audience. Technically, the website is built on WordPress with a robust tech stack including Bootstrap, Slider Revolution, and Matomo analytics, hosted behind Cloudflare DNS services. Security posture is strong with HTTPS enforced, data stored in Germany, and no provider access to user data, complemented by GDPR-compliant privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected, and the site demonstrates good design, navigation, and content quality. Overall, Chronuu presents a trustworthy and professional digital service with room for improvement in security headers and incident response transparency.

S

Stopcrime GmbH

stopcrime.info

52

Stopcrime GmbH operates a specialized platform aimed at preventing banking fraud and money laundering by providing an international, independent infrastructure for financial institutions to share alerts about suspicious accounts and transactions. The website is professionally designed, primarily in German, and targets financial service providers and banks. The business model revolves around a membership network that enables participants to report suspicious accounts and check transactions in real-time via API, enhancing fraud detection and coordination among banks. Technically, the website is built on WordPress using the Elementor page builder, with additional plugins such as TranslatePress for multilingual support and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the site enforces HTTPS and uses consent management but lacks visible advanced security headers and explicit incident response contact information. Overall, the security posture is solid but could be enhanced by implementing additional security headers and publishing clear security policies. The WHOIS data is privacy protected, which is reasonable given the nature of the business. No suspicious patterns were detected. The site does not expose sensitive data or contain vulnerabilities visible from the front-end. Privacy compliance is good with clear policies and consent mechanisms. Strategic recommendations include improving security header implementation, publishing incident response contacts, enhancing SEO and accessibility, and providing clearer contact information to boost business credibility and trust.

M

MYCOVER® - PROTECTION AT ITS FINEST

mycover-protection.com

64

MYCOVER® is a specialized e-commerce retailer focused on premium motorcycle covers and theft protection accessories, targeting motorcycle owners primarily in Germany. The website presents a professional and well-structured online shop with comprehensive product offerings, including outdoor and indoor covers, chopper and roller specific covers, and various theft protection devices. The business emphasizes quality and customer service, supported by detailed size recommendations and advisory content. Technically, the site is built on WordPress with WooCommerce, enhanced by multilingual support and cookie consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though lacking explicit security policy and incident response information. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which impacts overall trust. Strategic recommendations include verifying domain registration, publishing security policies, and enhancing contact transparency to improve business credibility and security compliance.