Skip to main content

Security report for focus-ebike.de

Transportation · Germany

High risk. 16 critical or high findings in GDPR compliance, Security headers and 3 other checks.

Security score

48/100

Risk levelHigh

The website focus-mobility.de serves as an expert platform dedicated to sustainable mobility, primarily focusing on E-Bikes and related electric mobility solutions. It offers comprehensive news, expert reports, and product testing to inform and guide consumers interested in the evolving transportation landscape. The site targets environmentally conscious individuals and mobility enthusiasts in Germany, positioning itself as a trusted source for mobility-related content and product evaluations. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates multiple third-party services including Google Tag Manager and INFOnline Measurement Manager for analytics and consent management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, reflecting a good baseline security posture. GDPR compliance is actively managed through consent mechanisms, although explicit privacy policies and security incident response information are not evident in the provided content. No critical vulnerabilities or WAF protections were detected, indicating open and accessible content. Overall, the website presents a professional and trustworthy front for its business domain, with solid technical implementation and moderate privacy compliance. Strategic improvements in explicit privacy documentation, security headers, and incident response transparency would further enhance its security and compliance stature.

Scanned

NIS2 and GDPR posture

NIS2 posture
2/ 100 · Critical
GDPR posture
45/ 100 · High
Checks completed
7of 7

Indicative only: based on publicly visible signals, not a certification or legal assessment. NIS2 signals relate to Article 21 of Directive (EU) 2022/2555; GDPR signals to Articles 7, 12, 13 and 32 of Regulation (EU) 2016/679 and Article 5(3) of the ePrivacy Directive.

Priority findings

16 findings rated critical or high. Fix these first.

  1. GDPR compliance

    These are the privacy signals visitors and data protection authorities look for under GDPR.

    • Critical

      EU business without adequate privacy measures

      EU businesses are subject to strict GDPR requirements

      What to do: Implement comprehensive GDPR compliance including privacy policy, cookie consent, and data protection measures

    • High

      No Cookie Policy found

      GDPR requires clear information about cookie usage

      What to do: Add a dedicated cookie policy explaining cookie usage and purposes

  2. Security headers

    Security headers are instructions your web server sends to every visitor’s browser. Missing ones leave visitors more exposed to attacks such as clickjacking and injected scripts.

    • High

      Missing Strict-Transport-Security header

      Forces HTTPS connections

      What to do: Add "Strict-Transport-Security: max-age=31536000; includeSubDomains; preload"

      • CWE-319
      • OWASP A04:2025
      • ASVS V3.4.1
    • High

      Missing X-Frame-Options header

      Prevents clickjacking attacks

      What to do: Add "X-Frame-Options: DENY" or "X-Frame-Options: SAMEORIGIN"

    • High

      Missing Content-Security-Policy header

      Controls resources the browser is allowed to load

      What to do: Implement a Content-Security-Policy appropriate for your application

      • ASVS V3.4.3
      • OWASP Secure Headers: OWASP Secure Headers Project recommends Content-Security-Policy: default-src 'self'; form-action 'self'; base-uri 'self'; object-src 'none';…

Need hands-on remediation? Email guard@offseq.com

Keep watching focus-ebike.de

This scan found 38 issues across 7 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Risk score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly. Cancel anytime. The full timeline opens with your unlock code.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Payments by EveryPay; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

Focus Mobility operates in the transportation sector with a niche in sustainable and electric mobility solutions, particularly E-Bikes. The business model revolves around content publishing, product testing, and expert reviews, catering to a growing market of environmentally conscious consumers and mobility enthusiasts. The company leverages partnerships with product manufacturers and integrates advertising networks to monetize its platform. Market positioning is that of a specialized expert source, with a medium-sized operation likely focused on the German market. Growth indicators include frequent content updates and a broad catalog of product tests. The partnership ecosystem includes analytics and advertising service providers, but no direct business partner domains were identified in the content.

Security posture

The website demonstrates a mature security posture with mandatory HTTPS, a Content Security Policy header, and GDPR-compliant consent management. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for comprehensive security governance. No exposed sensitive data or vulnerable libraries were detected in the analyzed content. The use of third-party analytics and advertising scripts introduces moderate tracking, but consent mechanisms mitigate privacy risks. Overall, the site is secure for typical user interactions but could benefit from enhanced transparency and additional security headers.

Recommendations

  1. Publish a clear and accessible privacy policy page detailing data processing and user rights.
  2. Implement additional security headers such as X-Frame-Options, X-XSS-Protection, and Strict-Transport-Security.
  3. Provide a security policy and incident response contact information to improve trust and compliance.
  4. Consider adding a vulnerability disclosure policy or security.txt file to facilitate responsible reporting.
  5. Enhance accessibility features to improve usability for all users, including those with disabilities.
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Description
Ratgeber & News rund ums E-Bike und nachhaltige Mobilität mit Tests & Expertenberichte. Informiert über Verkehrswende und nachhaltige Mobilität.
Key services
E-Bike tests and reviews, News and expert reports on sustainable mobility, Product recommendations
Content quality
good
Branding
consistent

Technology

Stack
JavaScript, Vue.js (implied by vue-slider classes), Google Tag Manager, INFOnline Measurement Manager, AWS DNS hosting
Frameworks
Vue.js
Performance
moderate
Mobile
good
Accessibility
basic
SEO
good

Security

Observed score
80/100
Good practices seen
  • HTTPS enforced
  • Content Security Policy header present
  • Consent management for GDPR compliance

Analytics and tracking

Services
INFOnline Measurement Manager, Google Tag Manager
Tracking level
moderate
Privacy compliance
good

Advertising

Ad networks
bf-ad.net
Tracking pixels
INFOnline Measurement Manager, bf-tools.net
Marketing tools
INFOnline Measurement Manager, bf-tools.net
Transparency
basic

Site quality

Design
good
User experience
good
Content relevance
good
Navigation
good
Professionalism
good
Trustworthiness
high

Key observations

  1. Website is professionally designed and content-rich focused on E-Bike and sustainable mobility.
  2. Strong use of consent management and GDPR compliance mechanisms.
  3. No explicit contact information or privacy policy page found in the provided content.
  4. Use of multiple external tracking and advertising scripts.
  5. No security.txt or vulnerability disclosure policy detected.
  6. No signs of WAF or content blocking.
  7. WHOIS data consistent with hosting and domain usage.
Technical notes

Notes

The website uses a modern JavaScript framework (likely Vue.js) with deferred loading of scripts and CSS for performance optimization. Hosting on AWS provides a robust infrastructure. The site includes advanced consent management scripts and integrates multiple analytics and advertising services. Performance is moderate with good mobile optimization and SEO practices. However, no explicit CMS was detected, suggesting a custom or proprietary platform. Technical debt appears low, but opportunities exist to improve accessibility and security header implementation to reduce risk and improve compliance.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures.

Retrieved 2026-10-24

Reviews of this site

Share your experience with focus-ebike.de. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

Loading reviews…

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.