Germany security reports

O

onesto GmbH

onesto.de

54

onesto GmbH operates a specialized Order Management System and Internet Booking Engine designed for corporate travel management. Their platform connects organizations with travel agencies and service providers such as airlines, rail, hotels, and car rentals, offering real-time, worldwide booking capabilities. The company emphasizes secure, certified data protection and PCI DSS compliance, positioning itself as a trusted provider in the transportation sector. Their product suite includes flight, rail, car, hotel bookings, and a mobile app for travel management, targeting corporate clients and business travelers primarily in Germany. Technically, the website is built on WordPress with common libraries like jQuery and Slick Carousel, hosted by Schlund Technologies. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. Security certifications such as ISO 27001 and PCI DSS are prominently displayed, indicating a mature security posture. However, the absence of explicit security headers and cookie consent mechanisms suggests areas for enhancement. The security posture is solid with HTTPS enforced and certified frameworks in place, but lacks published incident response or vulnerability disclosure policies. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analysis. Contact information is complete and transparent, supporting business credibility. Overall, onesto GmbH presents a professional, secure, and trustworthy online presence suitable for its B2B business travel management market. Strategic improvements in privacy compliance and security transparency would further strengthen their position and reduce risk.

H

H₂ercules Initiative

h2ercules.com

73

The H₂ercules initiative website represents a collaborative project focused on developing a hydrogen infrastructure network in Germany, involving major energy companies such as RWE and Open Grid Europe. The site provides detailed information about hydrogen production, import options, transport, storage, and consumption, targeting industrial stakeholders and policymakers. The digital infrastructure is built on Sitecore CMS with modern frontend technologies and includes GDPR-compliant privacy and cookie management. Security posture is good with HTTPS and consent management, though explicit security policies and incident response information are absent. The missing WHOIS data for the domain is a notable concern for domain legitimacy verification, but the professional content and partner associations support trustworthiness. Overall, the website is well-designed, informative, and serves as a credible platform for the hydrogen initiative.

RWE AG operates a comprehensive transparency platform providing detailed real-time data on electricity generation from its power plants across multiple countries, primarily Germany, the Netherlands, the UK, and the USA. The website serves as a free resource for the public and market participants, showcasing RWE's commitment to transparency and compliance with European energy market regulations. The platform uses modern web technologies including Angular and integrates consent management tools to ensure GDPR compliance. While the site is professionally designed and content-rich, the absence of WHOIS registration data for the domain raises questions about domain legitimacy, although the content and branding strongly align with RWE AG's corporate identity. Security posture is generally strong with HTTPS and consent mechanisms, but could be improved with explicit security headers and incident response information. Overall, the site is a valuable resource with moderate risk due to domain registration opacity.

The RWE Foundation website represents a corporate social responsibility initiative by RWE AG, a major energy company based in Germany. The foundation focuses on sustainable social change through funding charitable projects, supporting education, and providing humanitarian aid. The website is professionally designed, multilingual (German and English), and provides clear navigation to key sections such as funding principles, projects, application forms, and contact information. The presence of an annual report and CEO statement adds to the trustworthiness and transparency of the foundation. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Usercentrics for cookie consent management and Etracker for analytics, demonstrating compliance with GDPR and privacy best practices. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual but the website's professional presentation and corporate backing mitigate concerns. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security headers, publish a security policy and incident response contacts, and consider adding a vulnerability disclosure or security.txt file to improve trust and security culture.

B

Bundesministerium für Arbeit und Soziales (BMAS)

esf.de

62

The website www.esf.de is the official portal for the European Social Fund (ESF) in Germany, operated by the Bundesministerium für Arbeit und Soziales (BMAS). It serves as a comprehensive information and service platform providing details on funding programs, social integration, employment initiatives, and related EU projects. The site targets a broad audience including employees, unemployed persons, educational institutions, entrepreneurs, families, and other social groups. It is positioned as a key government resource for promoting employment and social cohesion through EU funding mechanisms. Technically, the site is built on the Government Site Builder CMS and employs modern web technologies such as jQuery, Bootstrap, RequireJS, and integrates a consent management platform (Consentmanager.net) for GDPR compliance. Analytics are handled via Etracker, with scripts loaded asynchronously to optimize performance. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and uses a consent management platform to handle privacy and cookie policies. While explicit security headers are not visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with a legitimate government domain, showing consistent registration and authoritative name servers. Overall, the website demonstrates a high level of professionalism, compliance, and trustworthiness, making it a reliable source for information on the European Social Fund in Germany.

The Commerzbank-Stiftung is a reputable non-profit foundation affiliated with Commerzbank AG, focusing on funding projects in culture, social affairs, and science to foster a sustainable and inclusive society in Germany. The website reflects a professional and consistent brand image, providing detailed information about funding opportunities, awards, and current news. The foundation targets non-profit organizations and project initiators seeking financial support and recognition. Technically, the site is built on TYPO3 CMS with modern SEO and user experience features, including responsive design and multimedia content. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates high trustworthiness and business credibility.

S

Social Impact

socialimpact.eu

44

Social Impact is a German-based agency specializing in social innovation projects aimed at addressing societal challenges for a just and sustainable future. The website positions itself as a niche player in the non-profit sector, offering consultancy and project development services focused on social impact. The digital infrastructure is built on TYPO3 CMS, enhanced with modern tracking and consent management tools such as Google Analytics, Google Tag Manager, and Usercentrics for GDPR compliance. The website demonstrates good SEO practices and mobile optimization, though lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but could be improved by adding security headers and publishing formal security policies. Overall, the site is professional and trustworthy with moderate tracking and no suspicious content detected.

N

NBank

nbank.de

67

NBank is the official investment and development bank of the German state of Niedersachsen, providing a broad range of funding programs, consulting, and support services to individuals, companies, municipalities, and institutions within the region. The website reflects a strong government affiliation with clear communication of its mission to foster growth and quality of life in Niedersachsen. The digital infrastructure is modern and well-implemented, featuring responsive design, accessibility considerations, and integration with consent management and analytics tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. Overall, the website presents a trustworthy and professional front for a large government entity.

H

Holii - Holistic Impact Incubator

holii.de

39

Holii - Holistic Impact Incubator is a small educational incubator project affiliated with Leuphana University in Germany, focused on supporting impact-driven startups and founders through a structured program involving design thinking, impact measurement, and financing. The website presents a professional and consistent brand image with clear descriptions of services and partnerships with multiple universities and research institutions. Technically, the site is built on WordPress using Elementor and related plugins, optimized for performance and SEO, and is mobile responsive. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, but could improve transparency and security practices.

C

Contact & Cooperation Lüneburg e.V.

contact-cooperation.de

48

Contact & Cooperation Lüneburg e.V. is a well-established student consultancy affiliated with Leuphana University in Germany. The organization bridges academic knowledge with practical business consulting, serving a diverse client base from startups to global enterprises. Their business model is non-profit and focuses on providing students with real-world consulting experience while delivering value to partner companies. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting students and businesses alike. Technically, the website is built on WordPress using the Avada theme framework, incorporating modern libraries such as jQuery and FontAwesome. It integrates social media feeds and GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. Hosting appears to be managed by kasserver.com, with proper SSL and security headers in place, contributing to a secure browsing experience. From a security perspective, the site enforces HTTPS, employs security headers, and uses anti-spam measures like honeypot plugins. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and readiness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a trustworthy business presence. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and continuous monitoring of third-party plugins to maintain security posture.

P

Playful Business

moonshot.game

48

Moonshot is a specialized innovation game designed to facilitate creative processes within companies and startups by making innovation playful and engaging. The business operates primarily in Germany and targets corporate clients, trainers, and individuals interested in enhancing creativity and innovation culture. Their offerings include workshops, an academy for training game masters, and a lab for customization, supported by a professional website with strong branding and client trust signals. Technically, the website employs modern JavaScript libraries such as jQuery and particles.js, integrates Mailerlite for marketing forms, and uses Goatcounter for privacy-friendly analytics. The site is mobile-optimized, well-structured, and SEO-friendly. Security posture is good with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear policies, though a cookie consent mechanism is missing. Overall, the website and business present a trustworthy, professional image with no signs of malicious activity or content safety concerns.

F

FabLab Lüneburg e.V.

fablab-lueneburg.org

51

FabLab Lüneburg e.V. is a non-profit community maker and hack space established in 2015 in Lüneburg, Germany. It provides an open MakerSpace equipped with tools such as 3D printers and laser cutters, and a HackSpace focused on Free and Open Source Software (FOSS). The organization operates primarily on donations and memberships, fostering a collaborative environment for technology enthusiasts and hobbyists. The website is well-structured, content-rich, and targets local community members interested in technology and DIY projects. Technically, the website is built on WordPress 6.8.3 with common plugins like Jetpack and All-in-One Event Calendar. It uses modern web technologies including jQuery and Google Fonts, and implements HTTPS with good SSL configuration. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with EU regulations. Analytics are minimal and privacy-conscious, using Jetpack Stats. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. No suspicious or malicious indicators were found. Overall, the site demonstrates a good security posture for its type and size. The overall risk is low, with recommendations to enhance HTTP security headers and publish incident response information. The site is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its community audience.

R

Redeleit und Junker

redeleitundjunker.de

51

Redeleit und Junker is a German design and branding agency specializing in transforming ideas into remarkable brands through services such as branding, web design, print, packaging, photography, and online marketing. The company targets businesses seeking professional creative services and maintains a consistent brand presence online. The website is built on WordPress and integrates modern marketing and analytics tools including Google Tag Manager, Hotjar, and Cookiebot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the website is professional, compliant with GDPR, and trustworthy, with room for improvement in accessibility and explicit security disclosures.

S

Startup Port

startupport.de

37

Startup Port is a regional startup support organization focused on qualifying, networking, and promoting technology and knowledge-based startups in the Hamburg metropolitan region and neighboring German states. It aggregates support offerings from ten universities and research institutions, targeting students, researchers, graduates, and startups. The website is built on WordPress with Elementor and uses privacy-conscious Matomo analytics. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. The domain registration is consistent with the business purpose, though WHOIS details are minimal. Overall, the site presents a professional, trustworthy, and well-structured platform for startup support.

E

Elevator - Startups Lüneburg

startups-lueneburg.de

48

Elevator - Startups Lüneburg is a regional accelerator program based in Lüneburg, Niedersachsen, Germany, focused on supporting startups primarily in the IT and media sectors. Founded in 2017 and operated by Wirtschaftsförderung Lüneburg, it offers coaching, office space, and networking opportunities to startups in early growth phases. The program is free to join and equity-free, positioning itself as a key enabler in the regional startup ecosystem. The website is professionally designed using WordPress and Elementor, with a modern tech stack and multiple Jet plugins enhancing functionality. Consent management is implemented via Usercentrics, reflecting GDPR awareness. However, the absence of a published privacy policy and terms of service represents a compliance gap. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security policies and security headers. Overall, the site is trustworthy and well-positioned but could improve transparency and compliance documentation.

C

Cobot

cobot.me

73

Cobot is a well-established technology company founded in 2010, specializing in coworking space management software. Their platform offers a comprehensive suite of tools including mobile apps, booking systems, invoicing, access control, analytics, and member management. Serving over 90 countries, Cobot positions itself as an intuitive and scalable solution for coworking operators. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site leverages modern web technologies and frameworks, including Ruby on Rails and Google Tag Manager, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, CSRF protections, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure pages are absent. WHOIS data is unavailable due to query failure or privacy protection, but the website's consistency and trust signals support legitimacy. Overall, Cobot presents a credible and professional SaaS business with a solid market position in the coworking software industry.

Luna Giro is a regional online platform affiliated with Sparkasse Lüneburg, offering a suite of financial and lifestyle services including banking account models, cashback programs, travel booking, and ticketing services. The website targets consumers in the Lüneburg region, providing localized benefits and incentives. Technically, the site employs modern web technologies such as the Ionic framework, Font Awesome icons, and integrates Google Tag Manager and Usercentrics for analytics and consent management. The hosting includes Amazon S3 for static assets, indicating a hybrid hosting approach. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and detailed security policies are absent. Contact information is clearly presented, and the site maintains a professional design with good mobile optimization. Overall, the website is trustworthy and well-positioned within its regional banking and service niche.

W

Westsächsische Hochschule Zwickau

whz.de

68

The Westsächsische Hochschule Zwickau is a regional university of applied sciences in Germany offering a broad range of study programs in technology, economics, and quality of life disciplines. The website serves students, prospective students, alumni, and international visitors with detailed information about study offerings, research, and campus life. The institution positions itself as a practical and accessible higher education provider with a strong regional and international profile. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper, and integrates Matomo for analytics. The site demonstrates good mobile optimization, accessibility features including visual aids, and a comprehensive navigation structure. Hosting appears to be managed by academic or regional providers, consistent with the institution's profile. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly detailed, and security headers are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively. Strategic improvements in security transparency and header implementation could further enhance its posture.

W

Westsächsische Hochschule Zwickau

techniknacht-zwickau.de

63

The website www.techniknacht-zwickau.de serves as an informational platform for the 'Lange Nacht der Technik' event organized by the Westsächsische Hochschule Zwickau. It targets technology enthusiasts, students, and the general public interested in science and technology events. The site provides event details, images, and partner information, positioning itself as a regional educational event organizer with strong academic and community ties. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper.js, and Magnific Popup for interactive content. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the institution, indicating high legitimacy. Overall, the website presents a low-risk profile with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture and trustworthiness.

WireHeadZ is an eSports association linked to the Westsächsische Hochschule Zwickau, focusing on integrating gaming, academic research, corporate cooperation, and community building. The organization targets students, eSports enthusiasts, and companies interested in innovative event management and talent networking. The website reflects a professional and modern digital presence, leveraging Next.js and Prismic CMS, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is trustworthy and well-positioned within its niche, supported by multiple corporate partners and sponsors.

W

WHZ Racing Team

whz-racingteam.de

56

The WHZ Racing Team website represents a student-led Formula Student racing team affiliated with the Westsächsische Hochschule Zwickau in Germany. The team focuses on designing, building, and competing with innovative racing vehicles in international Formula Student competitions. The site targets students, motorsport enthusiasts, and potential sponsors, providing detailed information about the team, vehicles, events, and contact points. The business model is non-commercial, centered on education, technical development, and motorsport passion. Technically, the website is built on TYPO3 CMS with standard web technologies including jQuery and Magnific Popup. It uses HTTPS and integrates Piwik analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, accessibility and SEO optimizations are basic, and some modern security headers are missing. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the university infrastructure, supporting legitimacy. Overall, the website is trustworthy and professional but could improve privacy compliance and security posture by adding cookie consent, security headers, and clear privacy/security policies.

E

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn

europe-direct.de

43

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn operates as a regional EU information and cultural engagement center serving the Bavarian-Bohemian border region. It provides citizens, students, and local communities with educational events, workshops, and cross-border cooperation initiatives to promote understanding of the European Union and its policies. The organization is part of the EUREGIO network and collaborates with universities, government bodies, and cultural institutions. The website is built on TYPO3 CMS and uses standard web technologies including jQuery and Bootstrap. It features event announcements, educational content, and contact information prominently, targeting a general audience interested in EU affairs.

P

Pfarrbriefservice.de

pfarrbriefservice.de

47

Pfarrbriefservice.de is a specialized website serving the German-speaking church community by providing resources for church newsletters and public relations. The site offers images, texts, advice, and a newsletter subscription service, positioning itself as a trusted non-profit resource in this niche. The business operates with clear contact information and maintains a consistent brand presence, targeting church public relations professionals and volunteers. Technically, the website is built on Drupal 10, leveraging modern libraries such as Matomo for privacy-conscious analytics and Bootstrap for responsive design. Hosting is provided by webhosting-franken.de, and the site demonstrates good mobile optimization and basic accessibility features. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and disables cookies in Matomo to enhance privacy. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is absent. Overall, the website is trustworthy, professionally maintained, and well-aligned with its mission. It poses low risk but could benefit from enhanced security practices and transparency regarding incident response and terms of service.

B

Butzon & Bercker GmbH

dbk-shop.de

49

The website www.dbk-shop.de serves as the official online shop for the Deutsche Bischofskonferenz, the assembly of Catholic bishops in Germany. It primarily offers publications related to the Catholic Church, including official documents, pastoral letters, and scholarly works. The business operates in a niche non-profit sector focused on religious and ecclesiastical literature, targeting a general audience interested in Catholic Church materials. The site is professionally designed with clear navigation and consistent branding, reflecting its authoritative position in this domain. Technically, the website is built on the xt:Commerce platform version 6.6.11, utilizing modern web technologies such as jQuery, Bootstrap, OwlCarousel, and others to provide a responsive and accessible user experience. The site includes accessibility features and a cookie consent mechanism, indicating attention to user privacy and compliance. Performance is moderate with good mobile optimization. From a security perspective, the site enforces HTTPS and uses secure forms for user login and shopping cart operations. However, no explicit security headers were detected in the provided data, and there is no visible security or incident response policy. No vulnerabilities or suspicious activities were identified. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. Overall, the website presents a low-risk profile with a solid business credibility and good technical implementation. Strategic improvements could include enhancing security headers and publishing an incident response policy to further strengthen trust and security posture.

C

ClipMyHorse.TV

clipmyhorse.tv

66

ClipMyHorse.TV is a leading European online streaming platform specializing in live broadcasts of equestrian sports and breeding events. The website targets horse sport enthusiasts and breeders, offering live event coverage and video-on-demand services. The platform holds a strong market position in its niche, supported by professional branding and consistent content quality. Technically, the site employs modern analytics and marketing technologies including Google Analytics 4, Customer.io, Segment, and Cookiebot for consent management, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced and bot detection cookies in use, though explicit security headers could be better documented. Privacy compliance is robust with a comprehensive GDPR-compliant privacy policy and granular cookie consent mechanisms. However, WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but is common for media platforms. Overall, the site is professional, secure, and trustworthy with good user experience and SEO.

R

Romero & Sons- The best rum from Ecuador

romerosons.com

58

Romero & Sons is a small business specializing in the production and sale of premium rum from Ecuador, targeting mature consumers interested in high-quality spirits. The website is professionally designed using the Wix platform, featuring structured data that provides basic contact information including a German phone number and postal address. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Technically, the site uses modern web technologies and is mobile-optimized, but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled, but missing important security headers and policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the business appears legitimate but would benefit from improved transparency and compliance documentation.

I

ITS mobility GmbH

its-mobility.de

48

ITS mobility GmbH operates as one of the largest competence clusters for intelligent mobility in Germany, headquartered at the Forschungsflughafen in Braunschweig. The organization serves a broad audience including businesses, scientific institutions, associations, and municipalities, with over 200 members collaborating to advance intelligent mobility solutions. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern plugins such as Elementor and All in One SEO to optimize content delivery and search engine visibility. Social media integration includes Instagram, YouTube, and LinkedIn, enhancing outreach and engagement. From a technical perspective, the website employs a contemporary technology stack with WordPress 6.8.3, Astra theme, and various plugins for SEO and user experience enhancements. The site is mobile-optimized and demonstrates moderate performance. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and explicit security policies suggests room for improvement. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Security-wise, the site lacks explicit privacy and cookie policies, as well as incident response or vulnerability disclosure mechanisms, which are critical for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, and the WHOIS data, while minimal, does not raise immediate concerns but lacks detailed registrant information. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response and vulnerability disclosure information, and improving contact information visibility to bolster user trust and regulatory compliance.

ITS Germany e.V. is a well-established German industry association focused on intelligent transportation systems (ITS). Founded in 2007, it represents the interests of the German ITS industry, facilitating collaboration between industry players, policymakers, and administration. The organization is active in national and international committees and organizes key events such as the Deutscher Tunnelkongress and C-ITS Kongress. The website reflects a professional and consistent brand image targeting industry professionals and stakeholders in the transportation sector. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and Turbolinks, likely powered by a Ruby on Rails backend with a custom CMS. The site is mobile-optimized with good navigation and moderate performance. Hosting is provided by Vautron Rechenzentrum AG, a reputable registrar and hosting provider. No blocking or WAF mechanisms were detected, and the domain registration is consistent and long-standing. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not explicitly provided), but lacks visible security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is publicly available. The site does not expose sensitive data and does not use tracking or advertising scripts, indicating a privacy-conscious approach. GDPR compliance is partially demonstrated by a privacy policy page, but cookie consent is missing. Overall, the website is trustworthy and professional with a solid business credibility score. Security posture is moderate with room for improvement in headers and incident response transparency. Privacy compliance could be enhanced by implementing cookie consent. The site content is safe for general audiences and focused on industry advocacy and information.

N

Nds. Busines-Map-API - Nds. Business Map

nds-business-map.de

7

The website 'Nds. Busines-Map-API - Nds. Business Map' presents itself as a platform focused on innovations in technology, economy, and science within the Niedersachsen (Lower Saxony) region of Germany. The content is minimal but professional, with metadata indicating a focus on regional innovation. The site is powered by TYPO3 CMS and uses compressed CSS and JavaScript assets, indicating a modern but basic technical infrastructure. No advanced analytics or marketing tools are detected, and no contact or legal policy pages are present on the homepage. Security posture is moderate with HTTPS enabled but lacking visible security headers and privacy compliance documentation. The WHOIS data is limited but does not raise immediate concerns, though registrant details are minimal. Overall, the site is functional but lacks comprehensive business and compliance information, which impacts trust and privacy scores.

T

TGO Besitz GmbH & Co. KG

tgo-online.de

57

TGO Besitz GmbH & Co. KG operates a technology and startup center in Oldenburg, Germany, providing office spaces, coworking, seminars, and networking opportunities tailored for startups and technology companies. The website reflects a solid regional market position as a hub for innovation and business development. Technically, the site uses the Limz CMS framework with jQuery and integrates Google Analytics with a GDPR-compliant cookie consent mechanism. The site is well-structured, mobile-optimized, and professionally designed, supporting a positive user experience. Security posture is good with HTTPS enforced and privacy policies in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, business-focused, and safe for general audiences.

B

Bistum Aachen

gottesdienste-im-bistum-aachen.de

57

The website 'Gottesdienste im Bistum Aachen' serves as an official platform for the Diocese of Aachen, Germany, providing comprehensive information about church services within the diocese. It offers users the ability to search for services by location and date, focusing on the upcoming two weeks, and includes additional information about parishes and church buildings. The site is clearly targeted at residents and visitors interested in religious services in the region, positioning itself as a trusted community resource within the non-profit religious sector. Technically, the website is built on the OpenCms content management system and employs modern JavaScript libraries such as Slick Slider for UI elements and Matomo for privacy-conscious analytics. The site is hosted on domains associated with the Diocese of Aachen, ensuring alignment between hosting and organizational identity. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent banner. However, it lacks explicit security headers and does not provide visible security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing consistent registration and no privacy protection, which is appropriate for this type of organization. Overall, the website demonstrates a solid security posture and good privacy compliance, with a trustworthy and professional presentation. Strategic improvements could include adding security headers, publishing a security policy, and providing incident response contacts to enhance transparency and security readiness.

E

einhard verlagsbuchhandlung gmbh

domshop-aachen.de

50

DomShop Aachen, operated by einhard verlagsbuchhandlung gmbh, is a specialized retail bookstore and gift shop located in Aachen, Germany. It focuses on religious literature, religious art, and related gift items, serving both local residents and visitors interested in faith-based products. The company has a longstanding presence of nearly 30 years, positioning itself as a trusted local business with a niche market. The website supports online shopping and provides rich content including book recommendations and thematic product lists. Technically, the site is built on Drupal 10 with modern frontend libraries, offering good mobile optimization and accessibility features. Security posture is adequate with HTTPS usage and spam protection on forms, though explicit security headers and policies are not evident. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

E

einhard verlag gmbh

einhardverlag.de

46

Einhard Verlag GmbH is a small regional publishing company based in Aachen, Germany, specializing in religious and cultural publications including a church newspaper (KirchenZeitung), book publishing, and retail through a partner DomShop. The website is built on Drupal 10 and uses modern web technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and cookie consent mechanisms. The WHOIS data is limited but does not raise significant concerns. Overall, the site is professional and trustworthy within its niche.

P

Pax-Bank für Kirche und Caritas eG

pax-bank.de

63

Pax-Bank für Kirche und Caritas eG is a specialized financial institution serving church and charitable organizations primarily in Germany. The website reflects a professional banking service provider with a clear niche market focus. The digital infrastructure is built on modern web technologies such as Angular and Material Design, with integration of analytics tools like eTracker. The website is mobile optimized and presents a good user experience with consistent branding. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit privacy documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Kindermissionswerk "Die Sternsinger" is a well-established German non-profit organization dedicated to supporting children worldwide through development aid and advocacy. The website serves as an information and donation platform targeting donors, volunteers, and partners interested in child welfare. It maintains a professional and consistent brand presence with multilingual support and clear navigation. The organization operates primarily in the non-profit sector with a large operational size in Germany.

M

MEIN EINE WELT JAHR

mein-eine-welt-jahr.de

54

The Sternsinger-Freiwilligendienst website represents a medium-sized non-profit organization based in Germany, focused on providing international voluntary service opportunities for youth and adults aged 18-28. The organization partners with over 100 global entities to facilitate a Freiwilliges Internationales Jahr (FIJ), offering educational seminars, crisis support, and personalized placement services. The website is professionally designed using WordPress with the Avada theme, featuring comprehensive content, SEO optimization, and a clear navigation structure. Cookie consent is implemented via Borlabs Cookie, and multiple analytics and tracking tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel are in use. However, explicit privacy and terms of service policies are not found, which is a compliance gap. The WHOIS data is minimal but consistent with the website's non-profit nature, and no blocking or WAF mechanisms are detected, allowing full content access.

E

endboss

stadtlabor-wittenberg.de

44

Stadtlabor Wittenberg is a community-focused non-profit initiative aimed at fostering participatory urban development and cultural engagement in the Lutherstadt Wittenberg area. The project provides a physical space for collaboration, events, and workshops, managed by the interdisciplinary studio endboss. The website effectively communicates its mission, event calendar, and contact information, targeting local residents and community members interested in shaping their city's future. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some security headers and formal privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

L

Landkreis Wittenberg

landkreis-wittenberg.de

57

Landkreis Wittenberg operates a regional government website providing citizens and businesses with access to public administration information, online services, and local news. The site is well-structured, uses modern WordPress technologies including Elementor and Yoast SEO, and integrates a service portal for digital applications. The technical infrastructure is solid, hosted on Schlund Technologies with HTTPS and cookie consent mechanisms in place. Security posture is good with no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is moderate due to lack of explicit privacy and terms pages in the provided content. Overall, the website is trustworthy, professional, and serves its public sector role effectively.

B

Begegnungszentrum Wittenberg West e.V.

nachbarschaftstreff.net

49

The website represents the Begegnungszentrum Wittenberg West e.V., a small non-profit organization operating the Nachbarschaftstreff in Wittenberg West, Germany. The organization focuses on fostering community engagement, social support, and intergenerational cooperation through various events and volunteer projects. The website provides comprehensive contact information, event details, and encourages community participation. Technically, the site is built on the CIDEMOS CMS platform, uses modern web technologies including SVG graphics and a Swiper.js slider, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place. Security-wise, HTTPS is enabled, but there is a lack of security headers and no published incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and contact details appear authentic and consistent with a local community organization. Overall, the site is functional, informative, and serves its target audience effectively, but could improve security posture and domain transparency.

L

Leben in Wittenberg

leben-in-wittenberg.de

46

Leben in Wittenberg is a professionally maintained city marketing website promoting the Lutherstadt Wittenberg region as a vibrant place to live, work, and visit. It targets residents, students, and prospective movers with comprehensive information on housing, culture, events, and local businesses. The site leverages modern web technologies including Craft CMS, Splide.js, and Alpine.js, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though explicit security policies are not published. Overall, the website demonstrates strong business credibility and compliance with GDPR, supported by clear contact information and partner endorsements.

Dialogversand.de is an established German e-commerce platform specializing in the sale of books, particularly those published by the in-house dialogverlag as well as other publishers. The website targets German-speaking customers interested in religious, regional, and thematic literature. The business operates as a small-sized retailer with a focused niche market. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and a professional theme to deliver a good user experience. The site is mobile-optimized and includes SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The WHOIS data aligns well with the business, indicating a legitimate and consistent domain registration. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Kirchliche Zusatzversorgungskasse des VDD (KZVK Köln)

kzvk.de

54

The Kirchliche Zusatzversorgungskasse des VDD (KZVK Köln) operates as a national partner providing supplementary pension services for church-related employers and insured persons in Germany. The website clearly targets employers, insured individuals, and pensioners, offering detailed information on pension schemes, customer portals, seminars, and support services. The organization positions itself as a trusted, established entity within the government/non-profit sector, focusing on pension and social security benefits. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, supported by Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and anti-CSRF measures, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website reflects a mature digital presence suitable for a medium-sized government/non-profit pension fund.

D

DKM Darlehnskasse Münster eG

dkm.de

68

DKM Darlehnskasse Münster eG is a cooperative financial institution specializing in providing loan and banking services primarily to church organizations and Caritas partners in Germany. The website reflects a professional and consistent brand presence, targeting a niche audience within the non-profit and religious sectors. The business model centers on financial partnership and support for these organizations, positioning itself as a trusted regional financial partner. Technically, the website employs modern JavaScript frameworks, notably Angular, and integrates advanced analytics and monitoring tools such as Adobe Launch and Dynatrace Ruxit. The presence of a cookie consent mechanism via OneTrust indicates awareness of privacy compliance requirements, although explicit privacy and terms of service documents are not found in the provided content. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made. From a security perspective, the website enforces HTTPS and uses security best practices like cookie consent and monitoring. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy, terms, and security policies to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms documents, adding incident response contacts, and enhancing accessibility and security disclosures.

L

Lyra Network

lyra.com

61

Lyra Network is a technology-driven payment service provider specializing in online and POS payment solutions. The company develops its own payment technologies, offering a comprehensive platform called Lyra Collect that enables businesses to manage payments efficiently and reduce administrative overhead. The website targets online merchants, marketplaces, and enterprises seeking flexible and secure payment options. Lyra positions itself as an innovative player with international reach and a strong partner ecosystem. Technically, the website is built on WordPress with modern JavaScript frameworks and SEO optimizations, providing a good user experience and mobile responsiveness. Security-wise, the site enforces HTTPS, holds PCI DSS certification, and implements anti-fraud tools, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS registration data suggests domain privacy protection, which is reasonable given the business type but slightly impacts trust. Overall, Lyra Network presents a professional and trustworthy online presence with room for improvement in privacy transparency and security disclosures.

S

Socomec Gruppe

socomec.de

56

Socomec Gruppe is a German-based manufacturer specializing in electrical installation goods with a focus on energy efficiency in low-voltage networks. The company offers a broad range of products including switching and protection solutions, UPS systems, energy measurement, management, and analysis tools. The website reflects a well-established business with a professional digital presence targeting industrial and commercial customers in the energy sector. Technically, the site is built on Drupal CMS, uses modern libraries like Font Awesome 6, and integrates analytics and marketing tools such as Piwik PRO and Abtasty. While the site is secure with HTTPS and deferred script loading, it lacks explicit privacy and cookie policies, as well as clear security and incident response documentation. Contact is primarily via forms rather than direct email or phone numbers. WHOIS data indicates a consistent and legitimate domain registration aligned with the business's German market focus. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

Nutricia is a well-established leader in the medical enteral nutrition sector, operating under the Danone umbrella. The website targets patients, healthcare professionals, and midwives primarily in the German-speaking DACH region. It offers a comprehensive portfolio of specialized nutrition products and services, including personalized nutrition teams and risk assessment tools. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and privacy tools, and is hosted on a reliable cloud platform. Security posture is solid with HTTPS and privacy consent mechanisms, though improvements in security headers and explicit security policies are recommended. Overall, the site demonstrates strong business credibility and digital maturity with good content quality and user experience.

D

Danone

danone.de

77

Danone.de is the German-language corporate website for Danone, a large multinational enterprise specializing in food and beverage products including dairy, plant-based foods, mineral water, and medical nutrition. The site emphasizes sustainability, health, and corporate responsibility, reflecting Danone's global mission. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it leverages Adobe Experience Manager CMS, uses modern tracking and analytics tools, and is hosted on a professional DNS provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not publicly visible. No critical vulnerabilities or privacy issues were detected. Overall, the site is trustworthy and well-aligned with Danone's corporate identity.

V

VWI Verband Deutscher Wirtschaftsingenieure e.V.

vwi.org

48

The VWI Verband Deutscher Wirtschaftsingenieure e.V. is a well-established professional association representing Wirtschaftsingenieure (industrial engineers) in the German-speaking region. With over 6,000 members, 20 regional groups, and 40 university groups, the association focuses on personal networking, quality education, and political advocacy for its members. The website serves as an information hub for members and interested parties, presenting a professional and consistent brand image. Technically, the website is built on WordPress, utilizing popular plugins such as LayerSlider and WPBakery Page Builder. It employs Matomo for analytics and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent with granular user controls. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the association's history, enhancing trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers, explicit privacy and security policies, and clearer contact information would further strengthen its posture.

B

big. bechtold-gruppe

big-gruppe.com

63

big. bechtold-gruppe is a well-established German family-owned service provider specializing in integrated facility, engineering, and security services. Founded in 1981 and employing over 3,000 people, the company offers a broad portfolio including engineering services, facility management, security services, and smart services. Their market position is strong within Germany, targeting businesses and organizations requiring comprehensive building-related services. The website reflects a professional and consistent brand image with clear navigation and detailed service descriptions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and privacy-conscious analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. This discrepancy between the professional website and missing domain registration data suggests a need for further verification. Overall, the site presents a low risk but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include implementing comprehensive security headers, publishing a security policy and incident response contacts, and verifying domain registration details to enhance trust.

D

Dialog Medien Verwaltungsgesellschaft mbH

dialog-medien.eu

45

Dialog Medien Verwaltungsgesellschaft mbH is a medium-sized company affiliated with the Bistum Münster, specializing in church-related media services including publishing, media agency work, travel organization, and book shipping. The company targets religious institutions, schools, and community organizations with a niche focus on Christian and regional content. The website is built on TYPO3 CMS, reflecting a mature technical infrastructure with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, with clear contact information and relevant partner links.