Germany security reports

D

Dialog Medien Verwaltungsgesellschaft mbH

dialog-medien.org

46

Dialog Medien Verwaltungsgesellschaft mbH is a medium-sized media company affiliated with the Bistum Münster, focusing on church-related media, publishing, travel, and communication services. Their offerings include a media agency (kampanile), a travel organizer (Emmaus Reisen), an online magazine and newspaper (Kirche+Leben), a specialized publisher (dialogverlag), and a book shipping service (dialogversand). The website is built on TYPO3 CMS, reflecting a mature technical infrastructure with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is clearly provided, enhancing business credibility.

N

NewDefinition GmbH

nd-politik.de

52

NewDefinition GmbH operates ND-Politik, a specialized politics management system tailored for politicians and political parties primarily in Germany. The platform offers a comprehensive suite of tools including website content management, online communication via newsletters, member and supporter community features, event and ticket management, CRM, and campaign management. The company targets political organizations from local to federal levels, with a SaaS subscription business model that includes hosting, maintenance, and support. The website demonstrates a consistent brand presence and strong trust signals through references and ISO-certified hosting. Technically, the platform is web-based with a proprietary CMS, leveraging standard web technologies (HTML, CSS, JavaScript). The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Hosting is performed on ISO-certified German servers with secure data storage and daily backups. While HTTPS is implemented with strong SSL encryption, the site lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. From a security perspective, ND-Politik shows a mature posture with GDPR and BDSG compliance, secure data handling, and ISO-certified hosting. However, incident response and vulnerability disclosure policies are not publicly documented, and no security.txt file is present. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security headers and privacy consent mechanisms. The overall risk assessment is low, with the platform well-suited for its political clientele. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing incident response policies to further strengthen compliance and trust.

R

RWE

rwe.com

69

RWE is a major global energy company with a strong focus on renewable energy and sustainability. With over 125 years of history, it has transformed into a leading supplier of clean, safe, and affordable electricity. The company operates a diversified portfolio including renewable energies such as solar, wind (onshore and offshore), hydrogen, battery storage, and bioenergy, alongside conventional energy sources. RWE also invests in energy transition projects and provides related services including energy trading and procurement portals. The website reflects a mature corporate presence with comprehensive information for investors, partners, and job seekers. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and structured navigation. The CMS appears to be Progress Sitefinity, supporting a robust content management environment. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure policies are not publicly visible, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and well-maintained, supporting RWE's market position as a leading energy supplier. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's credibility given the corporate branding and content quality.

D

Digitalwerk

digital-werk.org

53

Digitalwerk is a regional initiative based in Brandenburg, Germany, focused on supporting the digital transformation of small and medium-sized enterprises (SMEs). The organization offers free workshops, events, and experience stations to help businesses in the crafts and mid-sized sectors adopt digital technologies. The website is professionally designed using WordPress and the Divi theme, incorporating modern SEO and event management plugins. The technical infrastructure is solid, with HTTPS enabled and reputable hosting and domain registration through IONOS SE. However, the absence of DNSSEC and missing privacy and cookie policies indicate areas for improvement in security and compliance. Tracking is minimal and primarily conducted via etracker, with no aggressive user profiling detected. Overall, the site presents a trustworthy and professional image aligned with its business mission.

V

Volkswagen Belegschaftsstiftung

volkswagen-belegschaftsstiftung.de

55

Volkswagen Belegschaftsstiftung is a non-profit foundation established in 2011 by Volkswagen AG to support disadvantaged children, youth, and young adults around the global Volkswagen locations through sustainable aid projects. The website serves as an informational and navigational platform presenting the foundation's goals, projects, and a dedicated Förderportal for funding applications. Technically, the site is built on TYPO3 CMS with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and published incident response policies. The domain registration data aligns well with the foundation's identity, indicating a trustworthy and legitimate online presence.

W

Wittener Transport Kontor – Heinrich Stratmann GmbH

logistikeria.de

55

Wittener Transport Kontor – Heinrich Stratmann GmbH (WTK Stratmann) is a well-established, family-run logistics and special transport company based in Germany with a history dating back to 1953. The company operates multiple locations across Germany and has subsidiaries and joint ventures in the Czech Republic and Poland, offering comprehensive transport, warehousing, and distribution services. Their business model focuses on specialized transport solutions with a strong emphasis on safety, quality, and sustainability, supported by multiple certifications including ISO 9001, SQAS, HACCP, GMP+B4, and ISO 14001. The website reflects a professional and consistent brand image targeting business clients requiring specialized logistics services.

H

Hastra-Service GmbH

hastra-service.de

56

Hastra-Service GmbH is a medium-sized, owner-managed construction and service company based in Halle (Saale), Germany, specializing in asphalt and road construction, traffic safety, and winter services. With approximately 100 employees, the company serves regional clients in Halle and Magdeburg, offering a broad range of services including Tief-, Kanal- und Rohrleitungsbau and specialized Gussasphalt applications. The company holds multiple certifications such as ISO 9001 and AVPQ, underscoring its commitment to quality and professionalism. The website reflects a solid market position with clear service offerings and ongoing recruitment efforts. Technically, the website is built on WordPress 6.8.3 using the OnePress theme, leveraging modern libraries like jQuery and Bootstrap. The site is mobile-optimized with good design quality and navigation clarity, although some accessibility features could be improved. Performance is moderate, and SEO is basic but functional. No advanced analytics or tracking tools are detected, indicating a minimal user tracking approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen trust and readiness. Overall, Hastra-Service GmbH presents a trustworthy and professional online presence consistent with its business operations. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and regulatory adherence.

R

Rheingas Halle-Saalegas GmbH

gasmann.de

59

Rheingas Halle-Saalegas GmbH, operating under the brand 'Der Gasmann', is a regional energy supplier specializing in liquefied gas and gas bottles serving Mitteldeutschland, Germany. The company offers a range of services including sales, rental, and maintenance of gas tanks and bottles, targeting residential and commercial customers in the region. Their market position is that of a trusted local energy provider with a focus on sustainable and modern energy solutions. The website is built on TYPO3 CMS, integrates Google services for analytics and maps, and demonstrates a moderate to good level of digital maturity with responsive design and clear navigation. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the website reflects a professional and trustworthy business presence with good customer engagement features.

N

Nice Ltd.

incontact.com

72

NiCE is a leading enterprise technology company specializing in AI-driven customer service automation solutions. Their offerings focus on enhancing customer experience and operational efficiency for businesses globally. The company demonstrates a strong market position with comprehensive services tailored for enterprise clients. The website reflects a mature digital infrastructure leveraging modern web technologies such as Next.js, React, and advanced marketing and analytics tools including Marketo and Google Tag Manager. Security posture is robust with HTTPS enforcement, multiple security headers, and adherence to recognized standards like ISO 27001 and SOC 2. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, NiCE presents a professional, secure, and trustworthy online presence suitable for its enterprise audience.

B

buff.rocks GmbH

weihnachtsmarkt-magdeburg.de

45

The website www.weihnachtsmarkt-magdeburg.de serves as the official online presence for the Magdeburger Weihnachtsmarkt, a prominent seasonal Christmas market event in Magdeburg, Germany. It provides visitors with detailed information about the event dates, attractions, and highlights such as the Riesenrad and the Magdeburger Lichterwelt. The site targets a broad audience including families and tourists interested in cultural and festive experiences. The business model centers on event promotion and tourism enhancement within the hospitality sector. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and Matomo for analytics, with GDPR-compliant cookie consent implemented via Klaro. The site is mobile-optimized and well-structured, offering a good user experience with clear navigation and relevant content.

L

Lutherstadt Wittenberg Marketing GmbH

wittenberg-marketing.de

49

Lutherstadt Wittenberg Marketing GmbH operates as a regional city marketing organization promoting the cultural, tourism, and business opportunities of Lutherstadt Wittenberg, Germany. The website serves as an information hub for visitors, businesses, and event organizers, highlighting the city's historical significance and current economic vitality. The company positions itself as a key facilitator for tourism, cultural events, and congresses in the region. Technically, the website is built on Craft CMS with modern web technologies including ES modules and CSS3. It employs Matomo analytics with a GDPR-compliant cookie consent mechanism, ensuring privacy-conscious data collection. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, CSRF protection, and no visible vulnerabilities or sensitive data exposure. However, security headers could be improved and formal security policies or incident response information are not publicly available. The WHOIS data aligns with the website content, indicating a legitimate and consistent registration. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's mission effectively. Strategic improvements in security transparency and terms of service publication could further enhance trust and compliance.

L

Luthers Hochzeit

lutherhochzeit.de

48

Luthers Hochzeit is a cultural event website dedicated to promoting a historic city festival in Lutherstadt Wittenberg, Germany. The festival celebrates the medieval heritage and the Reformation anniversary, targeting tourists and history enthusiasts. The website is well-branded and consistent with its regional cultural focus, providing relevant event information and engaging visitors with multimedia content. Technically, the site is built on Craft CMS and uses modern JavaScript libraries such as Splide.js for sliders, with Matomo analytics for visitor tracking. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Security-wise, the website enforces HTTPS, uses security headers, and implements CSRF protection in forms. Cookie consent is properly managed, reflecting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, which could be improved to enhance trust and compliance. Overall, the website is professional, secure, and trustworthy for its purpose, with a moderate to good digital maturity level.

L

Lutherstadt Wittenberg: Urlaub zwischen Kultur und Natur

lutherstadt-wittenberg.de

45

The website lutherstadt-wittenberg.de serves as the official regional tourism portal for Lutherstadt Wittenberg, Germany, promoting cultural and natural attractions with a focus on family-friendly tourism. It provides information on events, accommodations, sightseeing, and local services, positioning itself as a key resource for visitors to the region. The site targets a general audience interested in cultural heritage and nature tourism. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and includes multimedia content such as videos and images. The site is mobile-optimized and offers multilingual support including German and English. Security posture is moderate; HTTPS is implied but no explicit security headers or incident response contacts are visible. Privacy and cookie policies are not found in the provided content, indicating a compliance gap. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.

S

Stadt Wittenberg

wittenberg.de

9

The website www.wittenberg.de serves as the official digital presence of the city of Lutherstadt Wittenberg, Germany. It provides comprehensive information about city life, administration, culture, tourism, and public services. The site targets residents, tourists, and local businesses, offering structured navigation and links to partner organizations. The business model is that of a government municipal portal, focusing on information dissemination and citizen engagement. The website is well-branded and consistent with its municipal identity. Technically, the site uses a proprietary CMS (NOLIS) with standard web technologies such as HTML5, CSS, and JavaScript. It is mobile-optimized and accessible, with moderate performance. SEO practices are good, with proper meta tags and structured navigation. However, no advanced frameworks or analytics services were detected. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data is minimal but consistent with the municipal nature of the domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance documentation, security headers, and incident response transparency to improve its security posture and user trust.

O

otris systems GmbH

bytemine.net

10

The otris systems GmbH is a German-based certified cloud service provider specializing in tailored IT infrastructure solutions including Platform as a Service (PaaS) for SaaS, hosting, virtualization, and Proxmox-related products and services. Established in 2008, the company targets software manufacturers and businesses requiring reliable cloud and on-premises IT infrastructure. Their market position is that of a trusted regional provider with over a decade of experience and recognized ISO 27001 certification. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital presence. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices. Analytics are implemented via WP Statistics, though no cookie consent mechanism is present. Security posture is strong with HTTPS, no exposed sensitive data, and ISO 27001 certification displayed. However, the absence of a cookie consent banner and explicit terms of service page are areas for improvement. WHOIS data is privacy-protected, which is common and justified for this business type, but limits external verification. Overall, the website and business present a professional and trustworthy image with solid technical and security foundations. Strategic improvements in privacy compliance and transparency would further enhance trust and regulatory adherence.

Z

Zeller + Gmelin

zeller-gmelin.de

48

Zeller+Gmelin is a well-established German family-owned manufacturing company specializing in high-quality lubricants, printing inks, and process chemicals. Founded in 1866, it holds a strong market position as a leader in industrial lubricants and related chemical products, emphasizing sustainability and innovation. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, it is built on WordPress with modern JavaScript frameworks and SEO tools, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates high professionalism and trustworthiness, supporting the company's credibility and business operations.

I

ifii Institut für Innovations- und Informationsmanagement GmbH

ifii.eu

57

The ifii Institut für Innovations- und Informationsmanagement GmbH is an academic-affiliated institute linked to the Technische Hochschule Brandenburg, specializing in innovation and information management. The organization supports companies and public administration in designing future-proof business models, processes, and technologies, with a focus on targeted innovations. Their key services include innovation development, digital transformation consulting, and AI training with certification. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and frameworks, hosted by IONOS SE, and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by adding explicit security headers and incident response information. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy and serves a specialized educational and consulting market segment.

M

Mittelstand-Digital Zentrum Berlin

digitalzentrum-berlin.de

48

Mittelstand-Digital Zentrum Berlin is a regional digitalization support center focused on assisting small and medium-sized enterprises (SMEs) in Berlin with their digital transformation efforts. The website offers information about events, workshops, digitalization offers, and informational materials, targeting the Mittelstand segment. The business model is based on providing free, neutral, and accessible support to SMEs, positioning itself as a trusted regional resource. Technically, the website is built on WordPress using Elementor as the page builder, enhanced with plugins such as Yoast SEO for search engine optimization, Events Calendar Pro for event management, and Borlabs Cookie for cookie consent management. The site is served over HTTPS with a good SSL configuration and moderate performance. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site employs HTTPS and a security plugin but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Recommendations include publishing comprehensive privacy and terms of service policies, enhancing security headers, and formalizing incident response and security policies to improve compliance and security posture.

K

Kindermissionswerk Die Sternsinger e.V.

sternsinger.de

54

Kindermissionswerk Die Sternsinger e.V. operates a professional and well-established German non-profit website dedicated to supporting children worldwide through fundraising, educational materials, and awareness campaigns. The organization holds recognized certifications such as the DZI Spendensiegel, enhancing its credibility and trustworthiness. The website targets a broad audience including donors, schools, and children, providing clear donation pathways and educational content. Technically, the site is built on TYPO3 CMS with modern web technologies, good SEO, and mobile optimization, though some security header enhancements could be made. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response contacts. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the site presents a trustworthy and professional digital presence for a charitable organization.

M

missio Aachen

missio-hilft.de

49

missio Aachen is a well-established international Catholic non-profit organization focused on humanitarian aid and church development projects primarily in Africa, Asia, and Oceania. The organization holds a strong market position in Germany as one of the largest Catholic aid agencies, supported by transparent operations and recognized certifications such as the DZI-Spendensiegel. Their website reflects a professional and trustworthy image, offering multiple donation channels and detailed project information to engage donors and partners. Technically, the website is built on the TYPO3 CMS platform, leveraging modern tools like Google Tag Manager and Usercentrics for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by a reputable German provider (NetCologne). Performance is moderate with good technical implementation. Security posture is solid with HTTPS enforced, consent mechanisms for cookies, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, and a security.txt file is absent, representing areas for improvement. Overall, the website and domain registration data indicate a legitimate, trustworthy organization with a high level of professionalism and compliance. The risk level is low, but strategic enhancements in security transparency and vulnerability disclosure would further strengthen their posture.

E

Einhard-Verlag GmbH

kirchenzeitung-aachen.de

60

KirchenZeitung Aachen is a regional church newspaper serving the Diocese of Aachen, Germany. It provides weekly news and information about church activities, events, and community stories. The website is professionally designed, mobile-optimized, and integrates modern consent management and privacy-respecting analytics tools. It is affiliated with the Einhard-Verlag GmbH and the Diocese of Aachen, reflecting a strong organizational backing and trustworthiness. The content is primarily in German and targets the Catholic community and interested general public in the region. Technically, the site uses OpenCms as its CMS, Piwik PRO for analytics, and Usercentrics for cookie consent, indicating a mature digital infrastructure.

K

Katholische Kirche

akademie-bistum-aachen.de

57

The Bischöfliche Akademie des Bistums Aachen is a well-established educational and cultural institution affiliated with the Catholic Church in Germany. It offers a broad range of workshops, seminars, and events focused on politics, society, theology, ethics, culture, and digital topics, targeting a diverse audience interested in societal discourse and faith-based dialogue. The institution also provides facilities for conferences and guest accommodations, supporting its educational mission. Technically, the website is built on the Alkacon Mercury CMS platform, employs modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks publicly available security policies or incident response contacts, which could be improved. Overall, the domain registration and hosting align with the institution's identity, indicating legitimacy and trustworthiness.

D

Deutsches Studentenwerk

studentenwerke.de

64

The Deutsches Studentenwerk (DSW) website serves as the central portal for student services in Germany, offering comprehensive information on financing, housing, counseling, and cultural activities for students. The site targets students, educational institutions, and stakeholders within the German higher education system. The organization operates as a large non-profit entity with a strong market position in the education sector. Technically, the website is built on TYPO3 CMS with modern front-end technologies and is hosted behind Cloudflare for performance and security. Privacy compliance is demonstrated through the use of Cookiebot for cookie consent and Matomo for analytics, reflecting a privacy-conscious approach. However, explicit privacy policies and terms of service are not clearly found in the provided content, which could be improved. Security posture is good with HTTPS enforced, but additional security headers and a published security policy would enhance trust. Overall, the website is professional, accessible, and trustworthy, with moderate tracking and good user experience.

W

Westsächsische Hochschule Zwickau

fh-zwickau.de

68

Westsächsische Hochschule Zwickau is a regional German university of applied sciences offering a broad range of technical, economic, and life quality related academic programs. The institution targets students, prospective students, alumni, and international participants, providing comprehensive study options including bachelor, master, dual study programs, and extensive research activities. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern JavaScript libraries and analytics tools such as Matomo. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. WHOIS data aligns well with the institution's identity, reinforcing legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

U

Utopia

utopia-lueneburg.de

41

Utopia is a social and sustainable startup incubator and co-working center based in Lüneburg, Germany. It offers a variety of services including co-working spaces, startup incubation, maker spaces, event rooms, and community events. The organization targets freelancers, entrepreneurs, and startups seeking a collaborative and inspiring environment. The website reflects a well-established local business with a strong partner and sponsor network, emphasizing community and sustainability. Technically, the site is built on WordPress with common plugins for SEO and contact forms, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-positioned in its niche.

E

e.novum GmbH

enovum-lueneburg.de

50

e.novum GmbH operates a startup and innovation center located in Lüneburg, Germany, closely affiliated with the Leuphana Universität. The company provides affordable office spaces, conference rooms, and supportive services tailored to startups and young companies. It fosters a collaborative environment with a strong regional network including local economic development organizations and foundations. The website is professionally designed, SEO optimized, and includes structured data to enhance search visibility. Technically, it is built on WordPress with Elementor and integrates Usercentrics for consent management, indicating a moderate level of digital maturity. Security posture is good with HTTPS and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy or terms of service found, but a cookie consent mechanism is present. Overall, the website and domain registration data indicate a legitimate and trustworthy business with a clear market position in real estate and startup support.

S

Sparkasse Lüneburg

sparkasse-lueneburg.de

70

Sparkasse Lüneburg is a regional financial institution based in Germany, providing a broad range of banking and financial services to private and corporate customers. The website serves as a comprehensive online banking portal offering services such as account management, loans, credit cards, investments, insurance, and real estate services. The bank positions itself as a trusted local partner with a strong emphasis on customer service and accessibility. The site is well-structured to cater to different customer segments with clear navigation and dedicated sections for private and business clients. Technically, the website is built on a modern CMS platform, likely Adobe Experience Manager, and employs standard web technologies including JavaScript and CSS. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure forms, and has a cookie consent banner indicating awareness of privacy regulations. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is professional, trustworthy, and compliant with relevant privacy laws. It effectively supports the bank's business model and customer engagement strategies. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

V

Verein Lüneburger Kaufleute e. V.

verein-lueneburger-kaufleute.de

54

Verein Lüneburger Kaufleute e. V. is a historic business association based in Lüneburg, Germany, with a legacy spanning nearly 600 years. The organization focuses on fostering economic exchange, networking, and community engagement among local entrepreneurs and merchants. Their key offerings include exclusive events such as the Handelsball and Herrenessen, regular networking evenings, and political representation for their members. The website reflects a well-established regional presence with a professional and consistent brand image targeting business professionals in the region. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site is hosted on Webflow's CDN infrastructure, ensuring moderate performance and good mobile optimization. Accessibility features are basic but present, and SEO practices are adequately implemented with proper metadata and structured content. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA to protect forms from abuse. A cookie consent mechanism compliant with GDPR is implemented, providing users control over data processing. However, the site lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a trustworthy and professional digital presence for the Verein Lüneburger Kaufleute e. V., with strong content quality and compliance posture. Strategic recommendations include enhancing security headers, publishing incident response information, and providing direct contact details for security matters to further strengthen trust and resilience.

V

Verein Technologie-Centren Niedersachsen e.V.

vtn.de

55

The Verein Technologie-Centren Niedersachsen e.V. (VTN) is a well-established non-profit association founded in 1997, dedicated to networking and supporting technology centers across Niedersachsen, Germany. The organization acts as a regional economic promoter by managing projects and initiatives on behalf of the state, fostering innovation and startup growth. The website reflects this mission with clear, professional content targeting technology centers, startups, and regional stakeholders. Technically, the website is built on the limz CMS platform, utilizing jQuery and custom frameworks. While the technology stack is somewhat dated, the site is functional, mobile-optimized, and SEO-friendly. Security is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and the jQuery version is outdated. The security posture is moderate; no critical vulnerabilities or exposed sensitive data were found, but improvements are recommended in updating libraries and enhancing HTTP security headers. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy and explicit cookie consent mechanisms. Overall, the website is trustworthy, professional, and aligned with the organization's mission. The domain registration data is consistent and legitimate, supporting the site's credibility. Strategic recommendations include modernizing the tech stack, improving security headers, and adding explicit security and incident response policies to enhance trust and compliance.

NEWIN is a non-profit network association representing economic development agencies across Lower Saxony, Germany. The organization facilitates communication, coordination, and knowledge exchange among regional economic promoters and collaborates closely with state ministries and funding bodies. The website is professionally designed using TYPO3 CMS and provides comprehensive information about events, workshops, and organizational structure. Technically, the site uses modern web technologies and offers good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website content and external links indicate a legitimate and established organization. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

B

BANSON e.V.

banson.de

58

BANSON e.V. is a well-established non-profit business angel network based in Germany, focused on connecting startups with investors primarily in Northern Germany. The organization facilitates matching events, networking opportunities, and supports the startup ecosystem with over 21 years of experience. Their website is professionally designed using WordPress and Elementor, featuring structured data for SEO and a clear presentation of their services and events. Technically, the site uses modern technologies and is hosted behind Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is moderate, with cookie consent implemented but no explicit privacy policy found. Overall, BANSON presents a credible and trustworthy digital presence aligned with their business goals.

FaMi-Siegel is a regional initiative based in Germany focused on awarding and promoting family-friendly companies and institutions in the Nordostniedersachsen region. The website provides information about the FaMi-Siegel award, including current awardees, application procedures, and press releases. The business model centers on fostering family-friendly workplace practices through recognition and networking. The site targets local businesses and public institutions aiming to improve work-life balance for employees. Technically, the website is built on Joomla CMS, utilizing Bootstrap for responsive design and FontAwesome for icons. Hosting is provided by Cloudpit, a German hosting provider, ensuring regional alignment. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a valid SSL configuration and includes CSRF tokens in scripts, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is minimal, and no incident response or security policy pages are available. Overall, the website presents a trustworthy and professional image appropriate for its regional and non-commercial focus. Recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing security and incident response policies to improve trust and compliance.

feffa e.V. is a German non-profit organization focused on women's career development, education, and family-friendly workplace initiatives. The website serves as a coordination platform for regional offices in Lüneburg, Uelzen, and Harburg, offering events, workshops, and networking opportunities. The organization targets women seeking professional growth and re-entry into the workforce. The site content is well-structured, professionally presented in German, and includes comprehensive contact information and event calendars. The business model centers on non-profit community support and education.

A

Ausbildungsverbund Lüneburg e.V.

xn--al-yka.de

43

Ausbildungsverbund Lüneburg e.V. is a regional non-profit organization dedicated to coordinating apprenticeship training for young people in the Lüneburg area of Germany. The organization collaborates with numerous partner companies to offer up to 30 apprenticeship positions annually, providing services such as candidate pre-selection, apprentice support, and coordination with vocational schools and chambers. Their website reflects a professional and consistent brand image, targeting both prospective apprentices and companies seeking to train new talent. Technically, the website employs modern web technologies including JavaScript libraries like Swiper.js and integrates Google Analytics and Tag Manager for tracking, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, though there is room for improvement in implementing security headers and publishing explicit security policies. Overall, the website is accessible, well-structured, and trustworthy, supporting the organization's mission effectively.

S

SIHOT Hotel Management Software

sihot.com

66

SIHOT Hotel Management Software is an established provider of hotel management software solutions, founded in 2002 and targeting the hospitality industry. The company offers tailored software to cover all hotel processes, positioning itself as a specialized and experienced player in the hotel management software market. The website reflects a professional and consistent brand image with a focus on business clients in the hospitality sector. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern CMS infrastructure with good SEO practices. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data supports legitimacy and trustworthiness, with a domain age consistent with the business history. Strategic improvements in privacy compliance and security best practices would enhance the company's digital trust and regulatory adherence.

The Deutscher Bibliotheksverband e.V. is a prominent non-profit association representing over 2,000 members and more than 9,000 libraries across Germany. The organization focuses on strengthening libraries to ensure free access to media and information for all citizens. Their website reflects a mature digital presence with comprehensive content, including news, events, thematic areas, and educational offerings. Technically, the site employs modern web technologies such as React, Drupal CMS, Matomo analytics, and Google reCAPTCHA for security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

L

Landkreis Wesermarsch

landkreis-wesermarsch.de

49

Landkreis Wesermarsch operates as a regional government authority in Germany, providing a broad range of public services including administration, health, education, social welfare, environment, and cultural affairs. The website serves residents and visitors with comprehensive information and service portals, reflecting a well-established public sector entity. The site is positioned as an official government resource with a clear focus on accessibility and citizen engagement. Technically, the website is built on WordPress using the Avada theme and integrates several plugins for SEO, analytics (Matomo), cookie consent (Complianz), and content protection (Passster). The infrastructure supports modern web standards with responsive design and accessibility features, although hosting details are not explicitly disclosed. Performance is moderate with good SEO and accessibility optimizations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, some improvements are recommended such as implementing a Content-Security-Policy header, publishing a security.txt file, and providing incident response contact details. No critical vulnerabilities or exposures were detected in the visible content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively supports the government’s mission to provide transparent and accessible services to its constituency.

N

NewDefinition GmbH

newdefinition.de

48

NewDefinition GmbH is a specialized software solutions provider focusing on niche markets of Alumni Management and Politics Management. Their flagship products, ND Alumni and ND Politik, offer comprehensive management systems tailored for alumni organizations and political entities respectively. The company positions itself as a leading solution provider in the German-speaking market, emphasizing complete software solutions combined with consulting and support services. The website content is professionally crafted in German, targeting B2B clients in education, politics, and related sectors. Technically, the website uses standard web technologies with custom CMS elements, is mobile-optimized, and performs moderately well. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a trustworthy and professional business with room for improvement in security transparency and privacy practices.

B

b.i.g. bechtold ingenieurgesellschaft mbH

vwi.de

58

The website represents the engineering bureau VWI, now part of the big. bechtold-gruppe since July 2021. It specializes in electrical engineering and building technology services, targeting business clients primarily in Germany. The site positions itself as a subsidiary within a larger engineering group, providing consultancy and technical services. The content is professional, primarily in German, and includes clear contact information and links to the parent company and related associations. Technically, the site uses a modern but basic tech stack including jQuery, Mapbox, and Snowplow analytics, hosted on 1&1 IONOS infrastructure. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR, though it could improve in terms of security best practices and transparency.

Dialogverlag is a specialized German publishing company focusing on religious and regional topics, serving audiences interested in Christianity and local culture in regions such as Münsterland and Niederrhein. The company operates a dedicated book ordering service (dialogversand.de) enhancing its direct-to-consumer sales channel. The website is built on TYPO3 CMS, featuring a professional design with clear navigation and relevant content, supporting a good user experience. Technical infrastructure is standard for a small publishing house, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS in use but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

E

Emmaus Reisen

emmaus-reisen.de

47

Emmaus Reisen is a specialized travel agency based in Germany focusing on group, cultural, and pilgrim travel experiences. The company leverages extensive expertise and established contacts in various cities and countries to offer curated travel packages. Their market position is that of a niche provider catering to pilgrims and culture enthusiasts, with a business model centered on organizing and managing group tours including bus, flight, and river cruise options. The website content is professionally presented in German and targets a mature audience interested in spiritual and cultural journeys. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern analytics tools such as Google Analytics via Google Tag Manager and Piwik (Matomo). The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security hardening, particularly by adding security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks visible security headers and does not provide public incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Contact information is clearly displayed, enhancing business credibility. Overall, the website presents a trustworthy and professional image with a solid foundation but could benefit from enhanced security practices and improved privacy compliance to better align with GDPR and modern security standards.

K

Kampanile

kampanile.de

41

Kampanile is a small creative communication agency based in Münster, Germany, specializing in strategy, corporate design, editorial design, web design, and audio-visual services. The agency targets clients who value sustainability, authenticity, and social engagement, with a strong focus on churches, associations, and educational institutions. Their website is built on TYPO3 CMS and uses Matomo for analytics, reflecting a moderate level of digital maturity and privacy awareness. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is adequate with HTTPS assumed, but lacks advanced security headers and cookie consent mechanisms. No forms are present on the main page, reducing attack vectors. WHOIS data is minimal but consistent with the business location and hosting provider. Overall, the website is trustworthy and professionally maintained, though improvements in privacy compliance and security best practices are recommended.

D

Dialog Medien Verwaltungsgesellschaft mbH

dialog-medien.de

45

Dialog Medien Verwaltungsgesellschaft mbH operates as a media and publishing company affiliated with the Bistum Münster and related ecclesiastical institutions. The company provides a range of services including media agency solutions, travel arrangements focused on pilgrimage and cultural trips, an online magazine and newspaper focused on church life, a specialized publishing house, and a book shipping service. Their market position is niche and regionally focused, targeting church organizations, educational institutions, and Christian communities. The website is built on TYPO3 CMS, reflecting a mature technical infrastructure with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals.

D

DKM Darlehnskasse Münster eG

dkm-stellenmarkt.de

50

DKM Stellenmarkt operates as a specialized online job board serving the Catholic Church and Caritas organizations in Germany. It offers a comprehensive platform for job seekers and employers within this niche, featuring over 1500 active job listings, candidate profile management, and employer registration. The platform integrates with major external job boards such as indeed.de and the German Federal Employment Agency, enhancing its market reach and visibility. The website is professionally designed with consistent branding aligned to its parent organization, DKM Darlehnskasse Münster eG, and targets a specific audience of church and charitable sector professionals in Germany. Technically, the website is built on Joomla CMS with UIkit framework and uses modern web technologies including jQuery and Google reCAPTCHA v2 for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and spam protection on forms, but lacks some advanced security headers and publicly disclosed security policies. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a trustworthy and professional digital presence with clear business credibility and a focused service offering. Security practices are adequate but could be enhanced with additional headers and incident response transparency. The domain registration data aligns well with the website content and hosting, indicating legitimacy and consistency. There are no indications of malicious or suspicious activity, and content safety is rated as safe for general audiences.

S

Stadtwerke Böhmetal

swbt.de

65

Stadtwerke Böhmetal is a regional utility company based in Germany, providing essential energy services including electricity, gas, and water supply to residential and commercial customers in the Böhmetal region. The company positions itself as a reliable local energy provider with a focus on customer service and regional presence. Their website is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices and clear navigation. Security measures include HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the website reflects a professional and trustworthy business with moderate technical maturity and compliance with privacy regulations.

O

otris software AG

otris.de

68

otris software AG is a German-based technology company specializing in digital solutions for legal, compliance, and data protection management. With over 25 years of experience, the company offers modular software suites that enable enterprises to manage contracts, compliance workflows, risk, and data governance efficiently and securely. Their solutions are available as SaaS hosted in Germany or on-premises, integrating seamlessly with existing IT infrastructures. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting medium to large enterprises. Technically, the site is built on WordPress with modern performance and privacy tools such as WP Rocket and Borlabs Cookie for GDPR compliance. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, otris software AG presents a trustworthy and professional digital footprint aligned with its business objectives.

S

Schuberth

schuberth.com

58

Schuberth is a well-established manufacturer specializing in high-quality helmets for motorsports, industrial safety, and military applications. The company targets consumers and professionals requiring protective headgear, operating primarily in the manufacturing sector with a medium-sized business footprint based in Germany. The website uses modern web technologies including Nuxt.js and integrates marketing and bot protection tools such as Google reCAPTCHA and Facebook Pixel. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain is long-standing and registered with a reputable hosting provider, indicating legitimacy. Overall, the website is professional but could improve in privacy compliance and security best practices.

S

STACKIT

stackit.cloud

67

STACKIT is a German cloud service provider offering enterprise-grade cloud infrastructure, colocation, and managed solutions with a strong emphasis on data sovereignty and GDPR compliance. The company positions itself as a trusted partner for businesses seeking EU-secure cloud services. The website demonstrates a mature digital presence built on WordPress, integrating modern SEO and privacy tools such as Rank Math and OneTrust. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a professional and trustworthy cloud service provider with a clear focus on compliance and customer trust.

D

Die Klett Gruppe

klett-gruppe.de

60

Die Klett Gruppe is a leading European educational company operating with over 90 subsidiaries across 24 countries. The company focuses on publishing educational media, adult and continuing education, and managing kindergartens and schools. Their website reflects a professional and consistent brand image, targeting educational institutions and partners. Technically, the site is built on TYPO3 CMS and uses modern JavaScript libraries such as jQuery, lodash, and FullPage.js, providing a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism with Matomo analytics, but lacks explicit security policies and advanced security headers. Overall, the website is trustworthy and well-maintained, though improvements in security transparency and incident response readiness are recommended.

M

MWAY DIGITAL GmbH

mway.io

75

MWAY DIGITAL GmbH is a German-based technology company specializing in innovative software solutions for enterprises and educational institutions. Their offerings include mobile solutions, enterprise applications, device management, and building automation. The company positions itself as a digital pioneer with a strong focus on modern, intuitive software and partnership-driven business. The website reflects a professional and consistent brand image, targeting business and education sectors with clear messaging and client references from reputable companies.