Germany security reports

B

Barf Box

barf-box.de

67

Barf-Box.de is a German e-commerce website specializing in premium raw dog food products, including BARF Komplettmenüs, snacks, and training treats. The site targets dog owners seeking natural and high-quality nutrition options for their pets. The business operates primarily online, leveraging WooCommerce on WordPress with Elementor for site design and user experience. The company emphasizes express shipping and sustainable packaging, positioning itself as a niche leader in the German premium pet food market. Technically, the website uses a modern WordPress stack with WooCommerce and Elementor, integrated with Google Tag Manager and Borlabs Cookie for consent management and tracking. The site is mobile-optimized and employs structured data (JSON-LD) for SEO enhancement. Performance is moderate, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is partially addressed via cookie consent, but no privacy policy or terms of service pages were found in the provided content. Overall, Barf-Box.de presents a professional and trustworthy e-commerce platform with solid technical foundations and good business credibility. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance its security posture and compliance standing.

F

frihed. GmbH

frihednordicwear.com

60

frihed. GmbH operates an e-commerce platform specializing in sauna and wellness products, including sauna hats, bio sauna infusions, oils, and thermal salts. The company targets consumers interested in sauna culture and wellness, primarily in Germany and surrounding regions. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Klarna for payments and Trusted Shops for customer trust. The business maintains a niche market position with a focus on sustainable materials and Nordic design aesthetics. Technical infrastructure is solid, hosted via Alfahosting with a well-implemented HTTPS configuration and multiple marketing and analytics tools integrated for customer engagement and performance monitoring. Security posture is good with standard security headers and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional and trustworthy front for a small-sized retail business in the wellness sector.

O

ORGANIC POLYMER

organicpolymer.de

56

ORGANIC POLYMER is a German-based manufacturer and developer specializing in sustainable polyurethane and epoxy resin floor coatings. The company positions itself as a niche player focusing on environmentally friendly, bio-based, and low-emission products targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear navigation and relevant content about their products and certifications. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Complianz for GDPR compliance, and uses Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and well-maintained, suitable for its business scope.

W

WG Match

wg-match.de

40

Livo is a German household management application developed by WG Match, targeting various household types including WGs, families, couples, and singles. The app offers integrated features such as task management, finance tracking with fair cost splitting, shared calendars, shopping lists, and recipe management. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and integrates modern analytics and marketing tools like Google Analytics, Google Tag Manager, and TikTok Pixel. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website and business appear legitimate and focused on providing a niche digital solution for household organization.

L

Locawo

locawo.com

59

Locawo is a German-based e-commerce business specializing in low-carb food products such as pasta, pizza, and bread. Founded in 2021, it targets health-conscious consumers seeking low-carbohydrate alternatives with a focus on taste and fiber content. The website presents a professional and consistent brand image with good design and user experience, optimized for mobile users. Technically, the site leverages modern JavaScript libraries including jQuery, Bootstrap, and Slick Slider, and is built on the JTL Shop platform hosted by IONOS SE. Tracking and marketing tools such as Google Tag Manager and Facebook Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and visible security headers, which are recommended for enhancement. Privacy compliance is weak due to missing privacy and cookie policies, and no GDPR compliance indicators are found. Overall, the site is functional and credible but would benefit from improved privacy and security practices.

Jens Kunstein Engineering & Consulting is a small German-based engineering and consulting firm specializing in construction project management and related services. The company offers a range of services including project leadership, cost estimation, contract and claim management, and expert reporting primarily targeted at small and medium-sized construction and handcraft businesses. The website is simple and professional, providing clear information about services and contact details but lacks advanced features such as forms or social media integration. Technically, the website uses a basic but modern tech stack including Bootstrap and jQuery, hosted on a German hosting provider's infrastructure. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No CMS or analytics tools are detected, indicating a static or manually maintained site. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. There are no privacy or cookie policies, which raises compliance concerns under GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

S

St. Browns GmbH

st-browns.de

62

St. Browns GmbH operates an e-commerce platform specializing in curated, stylish gift box sets targeting customers in Germany. The website presents a professional and consistent brand image with a focus on sustainable and personalized gift packaging. The business model is retail-focused, leveraging Shopify as its platform to deliver a seamless shopping experience. The company integrates multiple marketing and analytics tools such as Facebook Pixel, Klaviyo, Trustpilot, and Lucky Orange to optimize customer engagement and conversion. Technically, the website is built on Shopify with modern JavaScript modules and CDN hosting, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. The site uses HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site follows best practices including HTTPS enforcement, use of hCaptcha for form protection, and no visible exposure of sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website is secure, compliant, and trustworthy, with a moderate to high security posture. The overall risk is low with no critical vulnerabilities detected. Strategic recommendations include publishing a dedicated security policy, providing incident response contact information, and adding a vulnerability disclosure or security.txt file to enhance transparency and trust.

M

Movato

movato.de

55

Movato is a German-based technology company specializing in innovative software solutions for the mobility sector. Their offerings include intelligent in-car applications compatible with platforms such as CarPlay, Android Auto, and Android Automotive, scalable cloud environments for processing large mobility datasets, and location intelligence services leveraging Open Street Maps data. The company targets businesses and developers in the automotive and mobility industries, positioning itself as an innovative provider of connected driving experiences and data-driven mobility insights. Technically, the website is built on the Webflow CMS platform, hosted with Cloudflare for DNS and security, and employs modern web technologies including jQuery and Cloudflare's Turnstile CAPTCHA for form protection. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is strong with HTTPS enforced and CAPTCHA on forms, but could be improved by adding explicit security headers and cookie consent mechanisms. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is consistent with legitimate business use, showing no privacy protection or suspicious patterns. Overall, the site is professional, trustworthy, and compliant with GDPR through a comprehensive privacy policy. The overall risk assessment is low, with recommendations focusing on improving privacy compliance with cookie consent, enhancing security headers, and providing clearer direct contact information. These steps will strengthen the security posture and user trust, supporting Movato's position as a credible technology provider in the mobility sector.

W

WLH Wirtschaftsförderung im Landkreis Harburg GmbH

wlh.eu

47

WLH Wirtschaftsförderung im Landkreis Harburg GmbH operates as a regional economic development agency focused on supporting small and medium enterprises (KMU), start-ups, and companies seeking commercial real estate in the Hamburg region. The organization provides consulting services for business location, founding support, innovation promotion, networking, and event organization. Positioned as a competence center and partner for municipalities in Landkreis Harburg, WLH aims to strengthen the local economy and business environment. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including Yoast SEO, UIkit framework, and Borlabs Cookie for consent management. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices. Analytics are implemented with Google Analytics but are consent-based, respecting user privacy. Security posture is solid with HTTPS enforced and spam protection on forms, though no explicit security policy or incident response information is published. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence that effectively supports WLH's mission. Strategic improvements could include publishing a formal security policy and enhancing security headers to further strengthen the security posture.

T

THE FIZZ

the-fizz.com

59

THE FIZZ operates as a specialized real estate business focusing on student apartments across Germany, Austria, Czech Republic, and the Netherlands. The company offers fully furnished apartments with community spaces and house management services, targeting students seeking convenient and community-oriented housing solutions. The website is professionally designed, mobile-optimized, and provides online booking capabilities, positioning THE FIZZ as a competitive player in the European student housing market. Technically, the website is built on WordPress with modern performance and cookie management plugins, ensuring good user experience and compliance with privacy regulations. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of security headers and a published security policy are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency, slightly impacting business credibility. Overall, THE FIZZ presents a trustworthy and professional online presence with room for enhanced security and transparency.

S

Schachbundesliga | Schachbundesliga

schachbundesliga.de

45

The Schachbundesliga website serves as the official platform for the German Chess Bundesliga, providing comprehensive information including news, match results, team profiles, and live updates. It targets chess enthusiasts and participants primarily within Germany. The site is built on Drupal 9, leveraging modern web technologies such as Font Awesome and Slick Carousel for enhanced user experience. Hosting is managed via Goldvision, indicating a professional infrastructure. Security posture is moderate, with HTTPS likely enabled but lacking explicit security headers and policies. Privacy compliance is minimal due to absence of privacy and cookie policies. Overall, the site is functional, content-rich, and safe for general audiences but would benefit from enhanced security and compliance measures.

D

Deutsche Bischofskonferenz

dbk.de

53

The Deutsche Bischofskonferenz (DBK) website serves as the official online presence of the German Bishops' Conference, providing authoritative information, news, and resources related to the Catholic Church in Germany. It targets German-speaking Catholics, church officials, and the general public interested in religious affairs. The site offers thematic content, service tools such as parish searches and address directories, and maintains a strong social media presence. The business model is non-profit and government-related, focusing on information dissemination and coordination among Catholic dioceses. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including jQuery, Bootstrap, and Owl Carousel. It is hosted on domaincontrol.com nameservers, indicating professional hosting arrangements. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy compliance is robust, featuring a Usercentrics consent management platform and a comprehensive privacy policy in German. From a security perspective, the site enforces HTTPS and uses modern libraries, but lacks explicit security headers such as CSP and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted. Overall, the security posture is good but could be improved with additional headers and formal vulnerability disclosure mechanisms. The website is safe for general audiences, containing no adult or explicit content. The domain registration data aligns well with the organization's identity, showing no suspicious patterns. The site is trustworthy, professionally maintained, and compliant with relevant regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date software components.

F

FSV Zwickau

fsv-zwickau.de

48

FSV Zwickau operates a professional and comprehensive website serving as the official digital presence of the German football club. The site provides extensive information on team rosters, match results, ticketing, merchandise, and fan engagement, positioning itself as a key resource for supporters and stakeholders. The business model revolves around sports entertainment, sponsorships, and community engagement, targeting football fans and local audiences. Technically, the website is built on WordPress with a modern tech stack including Divi theme, jQuery, and various plugins enhancing user experience and content management. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent mechanisms in place, but the absence of some security headers suggests room for enhancement. Privacy compliance is strong, with clear policies and GDPR adherence. Overall, the site reflects a trustworthy and professional organization with a medium-sized operational scale.

M

MLP Finanzberatung SE

mlp.de

67

MLP Finanzberatung SE is a well-established financial advisory company based in Germany, offering a wide range of services including wealth management, retirement planning, insurance, financing, and investment products. The website targets diverse customer segments such as private customers, medical professionals, legal and tax advisors, and senior citizens. The company operates under the parent company MLP SE and maintains a professional online presence with consistent branding and comprehensive service information. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and structured for good user experience, although some accessibility features appear basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website enforces HTTPS and uses a recognized consent management platform, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial due to the absence of a clearly accessible privacy policy and terms of service. Contact information for security incidents or data protection officers is not published. Overall, the website presents a low risk profile with a good business credibility score but would benefit from enhanced transparency in privacy and security documentation. Strategic improvements in publishing privacy policies, terms of service, and security incident contacts would strengthen compliance and trust.

N

N+P Informationssysteme GmbH

nupis.de

63

N+P Informationssysteme GmbH is a well-established German family-owned company specializing in digital transformation solutions for medium-sized enterprises in the industrial and construction sectors. Their offerings include software solutions, IT infrastructure services, consulting, implementation, and support, positioning them as a comprehensive digitalization partner. The company has a strong market presence with over 2,000 customers and more than 200 employees, emphasizing stability and continuous growth since 1990. Technically, the website is built on TYPO3 CMS with modern integrations such as HubSpot forms, Usercentrics consent management, and multiple analytics and tracking tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or suspicious content.

H

Hochschulverein Mentor e. V.

mentor-zwickau.de

40

Hochschulverein Mentor e. V. is a non-profit association supporting the Westsächsische Hochschule Zwickau (WHZ) by fostering student engagement, organizing alumni networks, and providing preparatory courses and scholarships. The website is professionally designed with clear navigation and relevant content targeting students, staff, and supporters of the WHZ. Technically, the site uses legacy JavaScript libraries like jQuery 1.8.3 and FancyBox, hosted on kasserver.com, with basic mobile optimization and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and modern JS libraries. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a trustworthy and regionally focused educational non-profit entity.

A

ATG Entertainment GmbH

atgtickets.de

68

ATG Entertainment GmbH operates a professional ticketing platform focused on musicals, concerts, and theater shows primarily in Germany. The company positions itself as a leading provider of live entertainment tickets, offering a wide range of shows and exclusive deals. The website is well-designed, mobile-optimized, and uses modern web technologies including Next.js and Vercel hosting, ensuring fast performance and good user experience. Security posture is solid with HTTPS and Cloudflare DNS, though some security headers and policies could be improved. Privacy compliance is supported by a Usercentrics cookie consent mechanism, but lacks explicit privacy and terms of service pages. Contact information is clearly provided, enhancing business credibility.

4830.org e.V. is a small non-profit organization dedicated to advancing infrastructure for citizen networks, particularly focusing on promoting and operating local Freifunk community networks in the Gütersloh district of Germany. The website serves as an informational platform describing the association's mission and activities, targeting community members and network enthusiasts. The business model is community-driven and non-commercial, emphasizing open and free network infrastructures. Technically, the website is built on WordPress with modern plugins such as Yoast SEO for search engine optimization and Burst Statistics for minimal analytics. The site uses modern web fonts and implements structured data (JSON-LD) and Open Graph metadata to enhance content discoverability. Performance and mobile optimization are moderate to good, though accessibility features are basic. The site enforces HTTPS, ensuring secure communication. From a security perspective, the site lacks several best practices such as security headers and explicit privacy or cookie policies. No contact information or incident response channels are provided, limiting transparency and user trust. The WHOIS data is unavailable due to a malformed response, which reduces domain legitimacy confidence. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and serves its community purpose but would benefit from improved privacy compliance, enhanced security headers, and transparent contact and incident response information to strengthen trust and security posture.

C

Commons Zentrum Lüneburg

commonszentrum.de

46

Commons Zentrum Lüneburg is a community-driven non-profit organization focused on creating a shared space for collaborative activities and societal change in Lüneburg, Germany. The website presents a clear mission centered on inclusivity, ecological responsibility, and commons-based resource sharing. It offers various services including workshops, events, and a self-help bicycle repair team, targeting local residents interested in sustainable and communal living. The organization is relatively new, founded around 2023, and maintains an active event calendar and social media presence.

L

Lünepedia

luenepedia.de

47

Lünepedia is a community-driven city wiki focused on aggregating and sharing local knowledge about Lüneburg and its surroundings. Originating from a student project in 2020, it serves residents and community members by providing a collaborative platform for information sharing, event listings, and local initiatives. The website is built on the MediaWiki platform, enhanced with map integration using Leaflet, and presents content primarily in German. It maintains a good level of digital maturity with responsive design, clear navigation, and basic accessibility features. Privacy compliance is addressed with a cookie consent banner and a privacy policy, reflecting GDPR adherence. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security policies and incident response contacts are absent.

W

WerkStadt Lüneburg e.V.

werkstadt-lueneburg.de

56

WerkStadt Lüneburg e.V. is a non-profit community workshop based in Germany, offering an open space for creative handcraft, repair, and learning activities. The organization targets a broad audience including children, youth, schools, companies, and the general public. Their services include access to tools and machines, workshops, courses, and space rental. The website is built on Squarespace, hosted via Netcup, and integrates Google Maps and social media platforms for outreach. The site is well-designed, mobile-optimized, and uses HTTPS with HSTS for secure communications. However, it lacks visible privacy and cookie policies, which is a compliance gap. Contact information is primarily via contact pages without explicit emails or phone numbers. Overall, the website presents a trustworthy and professional image suitable for its community-oriented mission.

E

EEX Group

eex-transparency.com

68

The EEX Transparency Platform is a professional and comprehensive online portal operated by the EEX Group, providing inside information and transparency services for European energy markets including power, natural gas, emissions, and hydrogen sectors. The platform targets market participants, regulatory bodies, and the general public interested in energy market data. The website demonstrates a mature digital infrastructure using TYPO3 CMS and modern JavaScript libraries such as Highcharts for interactive data visualization. It features GDPR-compliant privacy and cookie policies with user consent mechanisms, reflecting a strong commitment to privacy and regulatory compliance. Security posture is solid with HTTPS enforcement and basic security headers, though there is room for improvement in advanced security headers and accessibility. The absence of WHOIS data suggests privacy protection or recent domain registration, but the website's branding and content align with the reputable EEX Group, supporting legitimacy. Overall, the platform is a trustworthy and valuable resource for energy market transparency.

O

onesto Tigers Bayreuth Eishockey GmbH

onestotigers.de

62

onesto Tigers Bayreuth Eishockey GmbH operates a professional ice hockey team based in Bayreuth, Germany, competing in the Oberliga. The website serves as a comprehensive platform for fans and stakeholders, offering team information, ticket sales including season passes, news updates, and sponsorship opportunities. The organization maintains a strong regional presence with active engagement through multiple social media channels and partnerships with ticketing and streaming services. Technically, the website is built on WordPress with Elementor and WooCommerce, indicating a mature digital infrastructure suitable for e-commerce and content management. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting adherence to GDPR requirements. Overall, the website and business present a trustworthy and professional image with clear contact and legal information.

W

Wildstyle Network

wildstyle-network.com

68

Wildstyle Network is a well-established digital agency based in Germany, with over 20 years of experience supporting global clients in digital transformation through innovative communication and technology solutions. The website reflects a professional and consistent brand image, targeting businesses seeking advanced digital services. Technically, the site is built on Drupal 9, leveraging modern web technologies and integrating consent management and analytics tools such as Cookiebot and Piwik/Matomo, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements like enabling DNSSEC and adding a security.txt file could enhance trust further. Overall, the site is compliant with GDPR and provides a good user experience with clear navigation and mobile optimization.

S

Stadtgeschichtliches Museum Leipzig

mxm-leipzig.de

40

The website mxm-leipzig.de represents a cultural and educational project by the Stadtgeschichtliches Museum Leipzig, offering an innovative augmented reality experience within the historic Alten Rathaus. It targets museum visitors and culture enthusiasts, providing digital storytelling that enhances the traditional exhibition. The project is well-positioned locally with strong institutional partnerships and funding support. Technically, the site is built on WordPress with modern JavaScript libraries and includes 3D AR content, delivering a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite Matomo analytics usage. Overall, the site is professional, trustworthy, and content-rich, supporting its non-profit cultural mission.

K

Kreativwirtschaft Sachsen-Anhalt e.V.

kwsa.de

41

Kreativwirtschaft Sachsen-Anhalt e.V. (KWSA) is a regional industry association representing cultural and creative professionals and companies in the German state of Sachsen-Anhalt. The organization focuses on supporting creative entrepreneurs through networking, knowledge transfer, events, and workshops, positioning itself as a key regional player in the creative economy. The website reflects this mission with clear information about services, events, and membership opportunities. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is adequate with a privacy policy and cookie information present, but no active consent mechanism is detected. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

S

Stadtwerke Lutherstadt Wittenberg GmbH

stadtwerke-wittenberg.de

60

Stadtwerke Lutherstadt Wittenberg GmbH is a regional utility provider serving the Wittenberg area in Germany, offering electricity, natural gas, heat, water, and telecommunications services to over 50,000 residents. The company operates a professional and content-rich website built on TYPO3 CMS, demonstrating a mature digital presence with good mobile optimization and accessibility features. Their online customer portal and clear contact channels enhance customer engagement and service delivery. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and certifications such as ISO and TSM, although explicit security policies and incident response information are not publicly disclosed. Overall, the website reflects a trustworthy and professional utility provider with a solid regional market position.

The Senioren und Pflegezentrum “Am Lerchenberg” gemeinnützige GmbH is a municipally owned non-profit senior care provider based in Lutherstadt Wittenberg, Germany. Established in 1984, it offers a comprehensive range of services including stationary and ambulatory nursing care, day care, senior housing, house emergency call systems, mobile meal services, and catering. The organization serves elderly citizens and their families, positioning itself as a trusted local care center with strong community ties and municipal backing. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and Modernizr 2.5.3, with no explicit modern CMS detected. Hosting is managed via DomainControl nameservers. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries with known vulnerabilities. There is no cookie consent mechanism or explicit security policy documentation. Contact information is clearly presented, but incident response and vulnerability disclosure details are absent. Overall, the security posture is moderate but could be improved significantly. The website content is safe for general audiences, focusing on senior care without any adult or explicit content. The domain registration data is consistent with the business claims, though limited WHOIS details are available. Strategic recommendations include upgrading legacy scripts, implementing security headers, adding privacy and cookie compliance features, and establishing formal security policies to enhance trust and compliance.

W

Wittenberger Wohnungsbaugesellschaft mbH

wiwog.de

58

Wittenberger Wohnungsbaugesellschaft mbH (WIWOG) is the largest municipal housing provider in Wittenberg, Germany, offering a broad portfolio of rental apartments across various sizes and locations. The company targets local residents and tenants seeking affordable and managed housing solutions. Their business model focuses on municipal real estate management and tenant services, positioning them as a key player in the regional housing market. The website reflects a professional and consistent brand image with clear navigation and relevant content for their audience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Elementor, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism compliant with GDPR. The technical infrastructure is moderate in performance and leverages common web technologies and frameworks like Bootstrap and jQuery. From a security perspective, the site enforces HTTPS and employs a robust cookie consent system via Borlabs Cookie plugin, providing granular user controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed, and no public security or incident response policies are published, indicating room for improvement in transparency and defense-in-depth. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained. The risk profile is low, with recommendations to enhance security headers and publish security policies to further strengthen their security posture and stakeholder trust.

W

WBG Wittenberg

wbg.de

43

WBG Wittenberg operates as a regional real estate company specializing in housing and property management services in Wittenberg, Germany. The website is built on WordPress and integrates modern consent management tools such as Usercentrics, indicating a commitment to privacy compliance. The technical infrastructure includes standard web technologies and Google Maps integration for location services. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but lacks explicit security policies and vulnerability disclosures. Overall, the website presents a professional image with good content quality and user experience, though it would benefit from enhanced transparency in privacy and security documentation.

E

eulenblick Kommunikation und Werbung

agentur-eulenblick.de

45

eulenblick Kommunikation und Werbung is a small, full-service advertising and communication agency based in Münster, Germany. The company offers a broad range of services including communication, marketing, website development, and flyer design, targeting both business enterprises and non-profit organizations. The website reflects a professional local agency with a clear focus on effective communication and advertising tailored to its clients' needs. Technically, the website is built on TYPO3 CMS and incorporates modern JavaScript libraries and frameworks, ensuring a good user experience with mobile optimization and moderate performance. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent mechanism, demonstrating good privacy compliance. However, it lacks explicit security headers and a formal security policy or incident response contact. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, with no signs of blocking or suspicious activity.

E

evian

evian.com

66

Evian is a premium natural mineral water brand with a rich heritage of over 230 years, sourcing water from the French Alps. The website targets German consumers with detailed product information, sustainability initiatives, and brand storytelling. Technically, the site is built on TYPO3 CMS with modern web technologies and includes standard security features such as HTTPS and reCAPTCHA. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. However, the absence of WHOIS data for the domain is unusual and warrants further investigation. Overall, the site demonstrates a strong brand presence and good digital maturity with room for improvement in security transparency and incident response disclosures.

A

Alpro

alpro.com

65

Alpro is a prominent European brand specializing in plant-based food and beverage products, targeting health-conscious and environmentally aware consumers. The company operates under the parent company Danone and maintains a strong market position in the dairy alternative sector. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, ensuring fast performance and good SEO. Security measures including HTTPS and security headers are properly implemented, though the absence of a dedicated security policy and incident response page suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the brand's established reputation. Strategic recommendations include enhancing transparency around security policies and verifying domain registration details to strengthen trust.

A

Axians IKVS GmbH

axians-ikvs.de

64

Axians IKVS GmbH is a German-based company specializing in providing digital financial management solutions and consulting services to public sector entities such as municipalities, municipal utilities, and state administrations. With approximately 600 customers across 15 federal states, including major cities like Hamburg and smaller municipalities, the company offers a suite of services including interactive financial control, automated reporting, key performance indicators, cloud services, and digital transformation support. The company operates under the parent group Axians and VINCI Energies, indicating strong backing and market presence. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO for optimization, Events Manager for event handling, and responsive design elements ensuring good mobile usability. The site employs HTTPS with strong SSL configuration and uses cookie consent mechanisms to comply with GDPR. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The absence of a vulnerability disclosure policy and incident response contact points suggests room for improvement in transparency and readiness. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website and business present a professional and trustworthy digital presence with solid technical implementation and compliance posture. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

Qbus Werbeagentur GmbH operates in the advertising and agency sector, with a domain registered since 2017 in Germany. The website qbus.io serves primarily as a minimal placeholder or redirect page linking to the main business site at qbus.de. The site lacks substantive content, contact information, and standard compliance policies such as privacy or cookie policies. Technically, the site is basic with no detected CMS or advanced frameworks, and no security headers or DNSSEC enabled, indicating room for improvement in security posture. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website's digital maturity is low, with minimal user engagement features and limited SEO or accessibility optimizations.

V

Verlag Herder GmbH

herder.de

62

Verlag Herder GmbH operates the website herder.de, a German publishing platform specializing in books, magazines, and educational content primarily focused on theology, pedagogy, religion, and related cultural topics. The company maintains a medium-sized presence in the media industry with a clear market position as an established publisher offering both physical and digital products. The website targets a broad audience including educators, religious communities, and general readers interested in these themes. Technically, the site is built on a custom ASP.NET WebForms platform, integrating modern web technologies such as lazy loading and cookie consent management via Usercentrics. The infrastructure supports a moderate performance level with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure login forms, though there is room for improvement in implementing security headers and publishing formal security policies. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

V

Verlagsgruppe Patmos

patmos.de

66

Verlagsgruppe Patmos operates an online bookstore specializing in psychology, biographies, religion, and spirituality literature, targeting German-speaking audiences. The website is built on Magento 2, leveraging modern JavaScript frameworks and third-party tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and cookie consent management. The technical infrastructure is solid with HTTPS enforced and a mature e-commerce platform. Security posture is good, though the absence of explicit security headers and published privacy or terms policies suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with cookie consent regulations, but would benefit from enhanced transparency and security documentation.

S

SCM Hänssler

scm-haenssler.de

67

SCM Hänssler operates as a Christian-focused e-commerce retailer specializing in books, music, and related products. The website serves a German-speaking audience with a broad catalog of Christian literature and media, positioning itself as a trusted provider within this niche. The business model centers on online retail with a strong emphasis on customer service and compliance with European data protection regulations. Technically, the site is built on the Magento platform, leveraging modern web technologies and analytics tools such as Google Analytics and Matomo. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Cicero Design GmbH

cicerodesign.de

57

Cicero Design GmbH is a small, professional creative agency based in Lutherstadt Wittenberg, Germany, specializing in corporate design, brand development, and web design with their proprietary CMS called CIDEMOS. The company offers a full range of marketing services including print production and advertising technology, targeting businesses and brands across Germany. Their website demonstrates a strong market position with clear service offerings and a consistent brand image. Technically, the site is built on a custom CMS platform with modern web technologies, responsive design, and integration of Google Analytics and Google Maps, all managed with user privacy in mind through a cookie consent mechanism. Security posture is good with HTTPS and CSRF protections, though some security headers and explicit policies are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

I

incognito digitale lösungen

incognito.ms

55

Incognito digitale lösungen is a small German technology service provider specializing in digital solutions including conception, UI/UX design, programming, and hosting since 2006. The website is professionally designed using modern web technologies such as Nuxt.js and TailwindCSS, providing a good user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy despite the active and professional web presence. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal privacy or cookie policies. The site uses Matomo analytics, indicating moderate user tracking but lacks clear privacy compliance indicators. Overall, the business appears credible but would benefit from improved transparency and security practices.

LitVideo, operated by qub media GmbH, provides a specialized online platform for distributing book trailers to online shops and websites, targeting publishers, authors, bloggers, and online retailers. The website serves as a niche marketing tool provider within the German media sector, focusing on enhancing product visibility through video content. The business model centers on B2B services facilitating video marketing content placement, with a consistent brand presence and basic but relevant content quality. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.x, alongside Google Analytics for visitor tracking. While the site is accessible and functional, it shows signs of technical debt such as the use of an outdated jQuery version and lacks advanced SEO, accessibility, and mobile optimization features. The hosting provider is not explicitly identified, and no CMS is detected. From a security perspective, the site uses HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. The outdated jQuery version poses a potential vulnerability risk. No incident response or security policy information is provided, limiting transparency in security management. Overall, the website is moderately secure and professionally credible but would benefit from technical modernization and enhanced privacy compliance measures. Strategic improvements in security headers, updated libraries, and cookie consent implementation are recommended to strengthen trust and regulatory adherence.

U

Umbreit Content

umbreitcontent.de

46

Umbreit Content appears to be a German-based content platform or service requiring user authentication, as evidenced by the login page. The website is built on Drupal 10 CMS with the Gin theme, indicating a modern and maintainable technical infrastructure. The site is mobile optimized and uses standard web technologies such as jQuery and FontAwesome. However, the public-facing content is minimal, focusing solely on user login without additional business or contact information. Security posture is moderate with secure form inputs but lacks visible security headers and public security policies. No privacy or cookie policies are present, which may impact compliance. Overall, the site is functional and safe but lacks transparency and comprehensive user-facing information.

SoftLevel Communication GmbH operates buchhandelsweb 2.0, a specialized web shop platform designed for independent bookstores in Germany. The platform integrates extensive book catalogs and offers a 24/7 online presence tailored to regional book retailers, emphasizing personalized customer service. The company has evolved from a family-run book trade business into a software provider with a niche focus on the book retail sector. Technically, the website uses a modern but straightforward tech stack including Bootstrap and jQuery, ensuring mobile responsiveness and a professional user experience. Security posture is adequate with HTTPS usage but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

Beltz Verlagsgruppe is a well-established German publishing group specializing in children's books, youth literature, pedagogy, psychology, and social work publications. The company targets educators, parents, professionals, and young readers, offering a broad range of books, journals, and educational materials. Their market position is solid within the German education and publishing sector, supported by multiple imprints and partner publishers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS with modern web technologies, providing a responsive and moderately performant user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong with GDPR-aligned policies and contact information clearly provided. Overall, the site is trustworthy, safe, and professionally maintained, with moderate use of tracking technologies balanced by consent mechanisms.

L

LIMZ Solutions GmbH

limz.de

56

LIMZ Solutions GmbH is a German-based digital agency founded in 2015, specializing in communication and digital transformation services. The company leverages over 10 years of agency experience to deliver effective communication and digital solutions tailored for business success. Positioned as a professional and established player in the technology sector, LIMZ targets businesses seeking comprehensive digital and communication services. The website reflects a mature digital infrastructure with a custom CMS platform, modular design, and good mobile optimization. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policy and incident response contacts. The use of an outdated jQuery version suggests a need for modernization to mitigate potential vulnerabilities. Overall, LIMZ presents a trustworthy and professional online presence with strong business credibility and compliance with GDPR.

L

LIMZ Solutions GmbH

limz.com

55

LIMZ Solutions GmbH is a German-based digital agency founded in 2015, specializing in communication and digital solutions for business clients. The company positions itself as an experienced provider with over 10 years in the agency business, offering effective communication and digital services to support client success. Their market presence is medium-sized with a focus on technology-driven solutions. Technically, the website is built on a custom LIMZ CMS platform, leveraging jQuery and Google Analytics, hosted on German servers via Goneo. The site is well-structured, mobile-optimized, and uses modern web practices including structured data for SEO and accessibility. Security-wise, the site enforces HTTPS and cookie consent with opt-in, but lacks explicit security policies and some HTTP security headers. Overall, the security posture is good but could be improved by updating libraries and adding security headers. The website is professional, trustworthy, and compliant with GDPR, making it suitable for business clients seeking digital agency services.

S

Stiftung Lesen

stiftunglesen.de

64

Stiftung Lesen is a prominent German non-profit foundation dedicated to promoting reading competence among children and youth. The website showcases a comprehensive range of projects, campaigns, and educational offers targeting families, educators, and social institutions. It holds a strong market position as a leading literacy promoter in Germany, collaborating with ministries, scientific bodies, and other foundations. The site content is rich, professionally designed, and well-structured, reflecting the foundation's mission and values clearly.

B

buff.rocks GmbH

buff.rocks

54

buff.rocks GmbH is a German advertising and digital agency based in Magdeburg, specializing in creative strategy, design, TYPO3 CMS web projects, campaigns, content marketing, hosting, and digital transformation services. The company positions itself as a regional expert with over 20 years of TYPO3 experience and is part of the +Pluswerk network, enhancing its market credibility. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions, targeting businesses and organizations seeking digital agency services. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Splide.js for carousels and Matomo for analytics, with a cookie consent mechanism in place. The site demonstrates good SEO and accessibility practices, with structured data markup enhancing search engine understanding. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. The WHOIS data is incomplete and malformed, limiting domain registration transparency and trust verification. Despite this, the website content, customer testimonials, and external trust signals such as ProvenExpert reviews and industry memberships support the legitimacy of the business. No adult or questionable content is present, making the site safe for general audiences. Overall, buff.rocks GmbH presents a credible, professional digital agency with a strong regional presence and modern technical infrastructure. Improvements in domain registration transparency and explicit security documentation would further enhance trust and compliance.

T

termin-direkt

termin-direkt.de

59

termin-direkt.de operates as a German-based SaaS platform specializing in online appointment booking and calendar management tailored for various industries including fitness, healthcare, coaching, beauty, education, and veterinary services. The platform offers automated reminders, multi-employee scheduling, and customizable booking interfaces, positioning itself as a mature and trusted solution with a significant monthly appointment volume and a broad customer base. The website is professionally designed, content-rich, and provides clear navigation and multi-language support, enhancing user experience and accessibility. Technically, the website leverages modern JavaScript libraries such as Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and is hosted on Amazon AWS infrastructure. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS, complies with GDPR, and implements a cookie consent mechanism, though it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious content were detected. Overall, termin-direkt.de presents a low-risk profile with strong business credibility and privacy compliance. The absence of a formal security policy and vulnerability disclosure channel represents an area for improvement. The domain WHOIS data aligns well with the website's claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and security posture.

M

meettle GmbH

miracode.io

45

MIRAcode, operated by meetle GmbH, is a specialized technology service provider focusing on consulting and production of interactive applications, leveraging gamification and modern digital technologies such as AR, VR, and game engines like Unreal and Unity. The company targets businesses and organizations seeking innovative digital solutions to enhance engagement and learning experiences. The website demonstrates a professional and consistent brand presence with a clear portfolio of projects and services, indicating a niche market position in gaming technology solutions. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies and frameworks. The infrastructure appears stable with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO features. The hosting provider is not explicitly stated but DNS records indicate Microsoft Online services. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and security headers, which are recommended to enhance protection. No explicit privacy, cookie, or security policies are published, and no incident response or vulnerability disclosure information is available, indicating gaps in compliance and transparency. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and clearer contact and policy information to improve user trust and regulatory adherence.