Security Directory

A

Abalos Therapeutics GmbH

abalos-tx.com

0

Abalos Therapeutics GmbH is a small, innovative biotechnology company based in Germany focused on developing novel immuno-oncology therapies using a proprietary arenavirus-based platform. Their lead candidate ABX-001 aims to trigger precise innate and adaptive immune responses within tumors to treat cancer effectively. The company targets healthcare professionals, investors, and partners with a professional and content-rich website that highlights their scientific foundation, therapeutic approach, and team. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and GDPR adherence. Overall, the website reflects a credible and trustworthy biotech firm with clear business messaging and investor relations.

N

Numaferm

numaferm.com

0

Numaferm is a German biotechnology company specializing in the discovery, optimization, and production of peptides, pepteins, and proteins for life sciences and related industries. The company leverages proprietary technologies such as Numascreen™ and Numatech™ to deliver innovative, cost-effective, and sustainable bioprocess solutions from lead discovery to commercial manufacturing. Their market position is strengthened by partnerships with academic institutions and industry leaders, and they maintain ISO 9001:2015 certification to ensure quality standards. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and performs moderately well, with clear navigation and professional design. Hosting is provided by IONOS SE, a reputable provider. However, DNSSEC is not enabled, and some security headers are missing, indicating room for improvement in security hardening. Security posture is generally good with HTTPS enforced and no exposed sensitive data detected. The site implements a cookie consent mechanism but lacks explicit privacy and terms of service pages, as well as a published security policy or incident response contacts. WHOIS data shows privacy protection but aligns with the company's German location and business age, supporting legitimacy. Overall, Numaferm presents a professional and trustworthy online presence suitable for its biotech B2B audience. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and trust further.

T

TMF – Technologie- und Methodenplattform für die vernetzte medizinische Forschung e.V.

tmf-ev.de

0

TMF e.V. is a German non-profit organization dedicated to advancing medical research by developing concepts, infrastructures, and methods. The website reflects a professional and well-structured digital presence, targeting medical researchers, healthcare professionals, and policy makers. It offers comprehensive information about their working groups, products, events, and publications, supporting their mission to facilitate connected medical research. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and implements a robust cookie consent mechanism. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security policies and incident response contacts are not published. Overall, TMF e.V. presents a trustworthy and credible online presence consistent with its role in the healthcare research sector.

R

Reutlingen University

reutlingen-university.de

0

Reutlingen University is a well-established public higher education institution in Germany, focused on providing diverse, practice-oriented, and international academic programs. The university positions itself as an innovation driver shaping sustainable futures regionally and globally. The website reflects a professional and consistent brand image, targeting students, researchers, and industry partners. Technically, the site is built on TYPO3 CMS, leveraging privacy-conscious Matomo analytics and Cookiebot for GDPR compliance, hosted on BelWü infrastructure. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not publicly detailed. Overall, the domain registration and website content align well, indicating high legitimacy and trustworthiness.

R

RWU Hochschule Ravensburg-Weingarten University of Applied Sciences

rwu.de

0

RWU Hochschule Ravensburg-Weingarten University of Applied Sciences is a medium-sized educational institution in Germany offering over 30 Bachelor and Master programs in technology, economics, and social sciences. The website reflects a well-established academic institution with a strong regional and international presence, focusing on practical and applied sciences education. The digital infrastructure is built on Drupal 10 with modern web standards, responsive design, and privacy-conscious analytics (Matomo configured to disable cookies and respect Do Not Track). Security posture is solid with HTTPS and some security headers, though lacking explicit security policies and cookie consent mechanisms. The site is professional, trustworthy, and well-structured, targeting prospective and current students, international students, and industry partners.

H

Hochschule Heilbronn

hs-heilbronn.de

0

Hochschule Heilbronn (HHN) is a prominent public university of applied sciences located in Germany, specializing in technology, business, and computer science education and research. It is recognized as the largest university of applied sciences in southwestern Germany, offering a broad range of bachelor and master degree programs, fostering practical learning and international cooperation. The institution maintains a strong digital presence with active social media channels and a modern, well-structured website built on the Scrivito CMS platform, hosted via academic DNS infrastructure. The website demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious elements were detected in the content or WHOIS data, which aligns well with the institution's identity and legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving its academic audience effectively.

H

Hochschule Aalen

hs-aalen.de

0

Hochschule Aalen is a German higher education institution offering a broad range of study programs across engineering, business, health sciences, informatics, and design. The website reflects a well-established academic entity with a strong regional and international presence, providing education, research, and continuing education services. The institution targets students, researchers, and professionals seeking academic advancement and career development. Technically, the website employs modern web technologies including Cookiebot for consent management and Matomo for analytics, hosted likely on academic or regional infrastructure. The site is well-structured, mobile-optimized, and provides comprehensive content and navigation for its audience. Security posture is solid with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the domain registration and DNS setup align with the institution's identity, supporting legitimacy and trust. No critical vulnerabilities or suspicious elements were detected.

H

Hochschule Esslingen

hs-esslingen.de

0

Hochschule Esslingen is a leading German university of applied sciences specializing in academic education and applied research in technology, economics, and social sciences. It serves approximately 6,400 students across numerous Bachelor and Master programs, emphasizing practical learning and strong industry connections. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, comprehensive content, and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is robust, with clear GDPR-aligned policies and cookie management. Overall, the site projects high professionalism and trustworthiness suitable for an academic institution.

I

Indo-German Center For Higher Education

igche.org

0

The Indo-German Center For Higher Education (IGCHE) operates as a consortium of German universities offering bilingual engineering bachelor programmes that integrate Indian and German academic experiences. The website presents a professional and focused educational initiative targeting students interested in Indo-German cultural and academic exchange. The business model centers on facilitating student mobility and language training to enhance employability in both countries. Technically, the website is built on RapidWeaver CMS with Bootstrap framework and uses Matomo for privacy-conscious analytics. Hosting is provided by Vautron Rechenzentrum AG, a reputable registrar and hosting provider. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration aligns well with the business timeline, supporting legitimacy.

Bionik Mannheim is an educational and innovation-focused initiative originating from the academic activities of Prof. Dr. Peter M. Kunz at Hochschule Mannheim. The organization promotes learning from nature, particularly targeting young people and developers in the Mannheim metropolitan region. Their key offerings include biennial bionics congresses, educational projects, and networking for bio-inspired innovations. The website is professionally designed using WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site presents a trustworthy and credible digital presence for a small-sized educational entity in Germany.

Berlin Hyp is a leading European commercial real estate financier operating as part of the LBBW universal bank group. The company specializes in large-volume real estate financing for professional investors and housing companies, emphasizing sustainability, ESG principles, and digital innovation to streamline customer processes. The website reflects a mature and professional business with a clear market position and strong branding consistency. Technically, the site is built on the Contao CMS platform, uses modern JavaScript libraries like Swiper.js, and integrates Matomo analytics with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and session management in place, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

D

DATEV eG

datev.de

0

DATEV eG operates a professional website focused on providing software, services, and knowledge primarily for tax consulting, auditing, legal advice, companies, and the public sector in Germany. The company positions itself as a leading provider in these sectors, offering tailored solutions and support. The website demonstrates a mature digital presence with modern JavaScript libraries, a clear navigation structure, and a cookie consent mechanism compliant with GDPR standards. However, explicit privacy policy and terms of service documents were not detected in the provided content, which could be improved for transparency and compliance. Security posture is solid with HTTPS and cookie consent but lacks visible advanced security headers or published security policies. The domain WHOIS data is minimal but consistent with the brand, indicating legitimacy. Overall, the website is professional, trustworthy, and well-structured, serving a large enterprise audience in the finance and public sectors.

E

eichels: Event GmbH, Hannover

urbanrun-hannover.de

0

Urbanrun Hannover is a locally focused event organized by eichels: Event GmbH, Hannover, specializing in urban trail running events with a strong social and charitable component. The website highlights the partnership with Handicap Kickers Hannover e.V., an inclusive football club, emphasizing community engagement and social responsibility. The business operates primarily in the non-profit sector, targeting sports enthusiasts and community members interested in inclusive and charitable sporting events. Technically, the website is built on TYPO3 CMS with a modern but stable technology stack including Bootstrap and jQuery, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and spam-protected email scripts, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but missing cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though improvements in privacy and security transparency are recommended.

P

Plan International Deutschland e.V.

plan.de

0

Plan International Deutschland e.V. is a well-established non-profit child rights organization operating globally with a focus on improving the lives of children, especially girls, through sponsorship and humanitarian aid. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to donors and supporters. Technically, the site uses TYPO3 CMS with modern JavaScript frameworks and includes privacy and cookie consent mechanisms, indicating compliance with GDPR and user privacy standards. Security posture is strong with HTTPS and secure forms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, supporting legitimacy and trustworthiness.

I

itdesign Nikolauslauf Tübingen

einzigartige21.de

0

The website shop.einzigartige21.de serves as the official e-commerce platform for the itdesign-Nikolauslauf Tübingen, a local running event in Germany. It primarily offers running shirts and related merchandise for participants and supporters of the event. The business operates as a small-scale niche e-commerce retailer with a focused target audience of runners and local community members. The website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Real Cookie Banner Pro for SEO and privacy compliance. Hosting is provided by kasserver.com, and the site uses Matomo for analytics, indicating a preference for privacy-conscious tracking. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates good technical maturity and business credibility for its scope.

B

Bundesministerium für Umwelt, Klimaschutz, Naturschutz und nukleare Sicherheit

bmuv.de

0

The Bundesministerium für Umwelt, Klimaschutz, Naturschutz und nukleare Sicherheit (BMUKN) is the official German federal government ministry responsible for environment, climate protection, nature conservation, and nuclear safety. The website serves as a comprehensive information portal providing policy updates, public funding programs, event announcements, and opportunities for public participation. It targets citizens, environmental professionals, and policymakers. The ministry holds a strong market position as a key governmental authority in Germany with a large organizational size and a focus on sustainability and environmental governance. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including HTML5, CSS, and JavaScript. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security-wise, the site enforces HTTPS and follows several best practices, though it lacks some advanced security headers and explicit security policy disclosures. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. The site maintains a professional and trustworthy appearance with consistent branding and official social media channels. The risk assessment is low, with recommendations to enhance security headers, publish a vulnerability disclosure policy, and provide incident response contact information to further strengthen trust and security culture.

N

NABU (Naturschutzbund Deutschland)

nabu-wissen.de

0

NABU-Wissen is a German non-profit e-learning platform operated by NABU (Naturschutzbund Deutschland), focusing on environmental education and nature conservation. The platform offers free and member-exclusive courses to engage nature enthusiasts and NABU members in climate and habitat protection. The website is professionally designed, mobile-optimized, and uses modern technologies such as Nuxt.js and Tailwind CSS. It integrates Matomo analytics for privacy-conscious user tracking. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response policies. Contact information and legal disclosures are clearly provided, enhancing trustworthiness.

N

NABU|naturgucker geG

artenwissen.online

0

NABU|naturgucker-Akademie is a German non-profit educational platform dedicated to nature observation and biodiversity learning. It offers free courses, online lectures, and a web-app to support nature enthusiasts in identifying and understanding species and habitats. The platform is affiliated with NABU, a well-known German nature conservation organization, enhancing its credibility and trustworthiness. The website is primarily in German and targets nature observers and learners interested in environmental topics. Technically, the site is built on the ILIAS Learning Management System, using modern web technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and SAML authentication integration, though some security headers and explicit policies are missing. Privacy compliance is mostly addressed with a privacy policy and cookie policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

NATURGUCKER is a specialized German magazine dedicated to bird and nature observation, offering bi-monthly printed issues and an online portal for nature enthusiasts to share sightings and photos. The website serves as a digital extension of the magazine, targeting hobbyists and amateur ornithologists with rich photographic content and practical tips. The business operates in the media sector with a niche focus on nature and wildlife, maintaining partnerships with related nature and birding organizations. Technically, the website is built on an outdated TYPO3 CMS version 4.5 with legacy JavaScript libraries, which may pose security risks and limit modern functionality. The site shows moderate performance and basic mobile optimization but lacks modern security headers and visible privacy or cookie policies, indicating gaps in compliance and security posture. Overall, the site is accessible, professionally branded, and content-rich but requires modernization and enhanced privacy/security measures to improve trust and compliance.

N

NABU | naturgucker

nabu-naturgucker-reisen.de

0

NABU | naturgucker operates as a non-profit organization offering guided nature travel experiences primarily within Europe. Their mission focuses on fostering enthusiasm for nature observation and contributing to biodiversity conservation. The website presents a professional and consistent brand image, supported by structured data and SEO best practices. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and explicit policies could enhance protection. No contact emails or phone numbers were found on the analyzed page, which may impact user trust and support accessibility. Overall, the site is trustworthy, safe, and well-positioned within its niche.

C

Charité – Universitätsmedizin Berlin

nklm.de

0

The website nklm.de hosts the LOOOP platform, an educational resource focused on medical learning objectives and outcomes, primarily serving medical students and educators in Germany. It is affiliated with Charité – Universitätsmedizin Berlin and related medical faculties, positioning itself as a niche educational platform within the German medical academic community. The platform offers access to learning content and plans to enable interactive features such as content discussion and evaluation through user login. Technically, the site employs modern JavaScript libraries including Dojo Toolkit, jQuery, SweetAlert2, and D3.js, and is built on the Zend Framework, indicating a moderate level of digital maturity. The site is optimized for Firefox and includes CAPTCHA protection on login forms to mitigate automated abuse. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is supported by clear privacy and cookie policy links, though a cookie consent mechanism is not implemented. Overall, the site is professional, trustworthy, and safe for general audiences, with a strong focus on education and healthcare sectors.

M

Medizinischer Fakultätentag (MFT)

omft.de

0

The website www.omft.de represents the Ordentlicher Medizinischer Fakultätentag (oMFT), a longstanding forum and event organizer for university medicine in Germany. It serves as a networking and discussion platform for medical faculties, healthcare policymakers, researchers, and students. The organization is part of the Deutsche Hochschulmedizin e.V., emphasizing its role in the healthcare and academic sectors. The site content is professional, well-structured, and targeted at a specialized audience in the medical education and research community. Technically, the website is built on WordPress and uses common JavaScript libraries such as jQuery, Modernizr, Swiper, and Fancybox to enhance user experience. The site is mobile-optimized and loads with moderate performance. SEO and accessibility features are basic but functional. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks visible security headers and published security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. The absence of a cookie consent mechanism may pose GDPR compliance risks. Overall, the website is credible and trustworthy, with clear contact information and consistent branding. Strategic improvements in security headers, privacy compliance, and incident response transparency are recommended to strengthen the security posture and regulatory adherence.

L

Landesbank Baden-Württemberg

lbbw.de

0

Landesbank Baden-Württemberg (LBBW) is a large German regional bank with a strong presence in corporate, institutional, and public sector banking. The website reflects a mature financial services provider offering a broad range of services including financing, cash management, advisory, asset management, and corporate finance. The content is well-structured, professionally presented, and targets corporate clients and institutional customers primarily in Germany and internationally. The site emphasizes sustainability and innovation, indicating a forward-looking business model. Technically, the website uses modern JavaScript libraries, lazy loading, and analytics tools such as Matomo, hosted on Telekom Domains infrastructure. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, the domain registration data aligns with the website content, supporting legitimacy and trustworthiness.

L

LBS - Die Bausparkasse der Sparkassen

lbs.de

0

LBS - Die Bausparkasse der Sparkassen is a well-established financial institution in Germany specializing in building savings contracts, financing, modernization loans, and real estate services. The company is affiliated with the Sparkassen group, positioning it strongly in the German finance and real estate market. Their website offers comprehensive information and tools for customers, including calculators and online contract access, targeting private individuals seeking secure and reliable home financing solutions. Technically, the website is built on modern frameworks such as Next.js and Material-UI, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy or incident response page is not found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and user-friendly digital presence.

B

BW-Bank

meinextend.de

0

The website meinextend.de is a customer service and benefits portal for BW-Bank's extend program, offering travel, ticketing, cashback, and insurance services to its customers. It is positioned as a regional banking service platform with a focus on customer loyalty and value-added services. The site is professionally designed with consistent branding and provides clear navigation and relevant content targeted at German-speaking BW-Bank customers. Technically, the site uses a modern tech stack including jQuery, PrimeNG, and Google Tag Manager, built on an ASP.NET framework with onpublix CMS. The site is mobile optimized and includes accessibility features, though some areas could be improved. Security posture is good with HTTPS enforced, secure login forms, and cookie consent mechanisms, but lacks explicit security policy pages and some HTTP security headers. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. WHOIS data is minimal but consistent with the business branding. Overall, the site is trustworthy and professionally maintained.

L

LOBECO

lobeco.de

0

LOBECO is a well-established digital marketing and communication agency headquartered in Germany with over 130 employees and multiple international offices including Munich, Shanghai, Zurich, and Berlin. The company focuses on leveraging technological and societal changes to optimize client competitiveness through services such as consulting, content creation, performance marketing, sports marketing, digital innovation, and data analytics. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted on servers associated with kasserver.com. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and published policies. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

Staufen AG is an international consulting firm specializing in operational excellence and lean management, serving primarily manufacturing and industrial sectors. The company is positioned as a top-tier consultancy with a broad portfolio of services including supply chain management, digital transformation, and leadership development. The website reflects a mature digital presence with multilingual support and professional branding, consistent with its market position. Technically, the site is built on WordPress with modern SEO and privacy compliance tools such as OneTrust, ensuring good performance and accessibility. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the domain appears legitimate and professionally managed, with privacy-protected WHOIS data typical for consulting firms. Strategic recommendations include publishing a dedicated security policy and incident response contacts to enhance trust and compliance.

Staufen AG is a well-established international consulting firm specializing in operational excellence and lean management. The company is positioned as a top-tier consulting provider with a strong focus on improving business results across various sectors, particularly manufacturing. The website reflects a professional and modern digital presence, leveraging WordPress with advanced SEO and multilingual capabilities. The technical infrastructure is robust, featuring secure HTTPS connections, cookie consent mechanisms, and compliance with GDPR. Security posture is strong with appropriate headers and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness, supported by its affiliation with Accenture and ISO certifications.

Staufen AG is a prominent international consulting firm specializing in operational excellence and lean management, serving primarily manufacturing and industrial sectors. The company is positioned as a top-tier consultancy with a comprehensive portfolio of services including supply chain management, performance improvement, digital transformation, and leadership development. It operates globally with multiple regional subsidiaries and is part of the Accenture group, enhancing its market credibility and reach. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual capabilities. It employs standard web technologies including jQuery and integrates a cookie consent mechanism via OneTrust, indicating compliance with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, though hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, implements key security headers, and uses cookie consent banners to comply with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were detected. Overall, the website and business demonstrate a high level of professionalism, security posture, and compliance, with recommendations to enhance transparency around security policies and incident response to further strengthen trust and resilience.

Accenture Deutschland is a leading management consulting, technology services, and outsourcing company serving business and government clients in Germany. The website reflects a mature digital presence with comprehensive service offerings including cloud, cybersecurity, AI, digital engineering, and sustainability. The company positions itself as a high-performance partner for enterprises and public sector organizations. Technically, the site leverages Adobe Experience Manager and integrates advanced marketing and analytics tools from Adobe and OneTrust, indicating a high level of digital maturity and compliance with GDPR. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not prominently published. Overall, the site is professional, trustworthy, and well-optimized for user experience and accessibility.

E

edv plan GmbH

basisportal.de

0

edv plan GmbH is a small regional IT service provider and web agency based in Germany, specializing in web development, programming, IT support, and consulting services. Their website presents a professional image with clear descriptions of their services and a portfolio of projects, targeting businesses and public administration in the Ostprignitz-Ruppin region. The company emphasizes clear communication and local presence. Technically, the website is built on WordPress using the Divi theme and includes modern JavaScript libraries such as jQuery. Cookie management is handled via the Borlabs Cookie plugin, indicating attention to privacy compliance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and published incident response policies. Overall, the website is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence for a small business.

Hochschule Mannheim Transfer gGmbH (HMT MRN) is a small educational and research transfer company founded in 2012, acting as a bridge between science and industry. It facilitates projects ranging from consulting to long-term development collaborations, primarily serving companies and research partners in the Mannheim region. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, providing good mobile optimization and SEO features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and focused on promoting research and innovation services.

D

Deutsches Hochschulkonsortium für Internationale Kooperationen

dhik.org

0

The Deutsches Hochschulkonsortium für Internationale Kooperationen (DHIK) operates as a consortium of 37 German universities facilitating international academic cooperation, primarily focusing on student exchange and double degree programs with partner institutions in China, Mexico, India, and South Africa. The website is professionally designed, content-rich, and targets students and academic institutions interested in international study opportunities. Technically, the site is built on WordPress with common plugins and uses Piwik for analytics, showing a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit incident response or vulnerability disclosure policies are found. Overall, the website is trustworthy and aligns well with its educational mission.

H

Hochschulföderation SüdWest

hfsw.de

0

Hochschulföderation SüdWest (HfSW) is a collaborative federation of eight universities of applied sciences in Baden-Württemberg, Germany. It focuses on enhancing applied teaching and research quality through joint projects and degree programs in cutting-edge fields such as Electromobility, Autonomous Driving, Hydrogen and Fuel Cell Technology, and Artificial Intelligence. The federation positions itself as one of the largest university federations in Germany, targeting students and academic professionals. Technically, the website is built on Angular 14, hosted on DigitalOcean, and uses Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, supporting the federation's educational mission.

V

Verein der Freunde der Hochschule Mannheim e.V. (VdF)

malumni.de

0

The website malumni.de serves as the online presence for the Verein der Freunde der Hochschule Mannheim e.V. (VdF), a non-profit alumni network supporting Hochschule Mannheim. It focuses on connecting alumni, current students, staff, and regional companies through career events, mentoring programs, and networking opportunities. The site is professionally designed with consistent branding and provides relevant content primarily in German. Technically, it is built on WordPress with modern plugins and libraries, hosted on netcup infrastructure, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the site is trustworthy, safe, and well-suited for its educational and networking purpose.

H

Hevert-Arzneimittel

hevert.com

0

Hevert-Arzneimittel is a well-established German manufacturer specializing in homeopathic, herbal, and micronutrient pharmaceutical products with over 65 years of experience. The company holds a strong market position as one of the leading producers in its sector, targeting a general audience interested in natural and naturopathic medicines. The website reflects a professional digital presence with good SEO practices, structured data, and active social media engagement. Technically, the site is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and WP Rocket for performance optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates a mature digital infrastructure supporting the company's business objectives.

Hashimoto vitalis is a German-based small healthcare e-commerce business specializing in dietary supplements aimed at supporting thyroid function, particularly for individuals affected by Hashimoto thyroiditis. The company operates primarily through its website and partners with Löwen Apotheke24 for online pharmacy sales. The website provides educational content, product information, and a streamlined purchasing experience. Technically, the site is built on WordPress with WooCommerce and WPBakery, leveraging modern web technologies and SEO best practices. It includes GDPR-compliant cookie consent mechanisms and uses Google Analytics for traffic analysis. Security posture is solid with HTTPS and secure forms, though it lacks explicit security policies and some HTTP security headers. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

M

Mein Schüssler Salz

meinschuesslersalz.de

0

Mein Schüssler Salz is a small German healthcare e-commerce business specializing in personalized Schüssler salt powder mixtures tailored to individual customer needs. The company leverages an online questionnaire to analyze customer requirements and offers customized mineral salt blends produced in pharmacy quality within Germany. The website is built on WordPress with a modern tech stack including WPBakery Page Builder, Contact Form 7, and cookie compliance plugins, reflecting a moderate to good level of digital maturity. The site is well-structured, mobile-optimized, and provides clear navigation and product information, targeting consumers interested in personalized wellness supplements. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, it lacks advanced security headers and explicit security or incident response policies, which could be improved to enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is consistent with the website's business claims, supporting legitimacy. Overall, the site maintains a good balance between usability, compliance, and security for a small healthcare provider. Strategically, the business benefits from a partnership with a pharmacy shop for product mixing and ordering, expanding its service capabilities. The absence of direct contact emails or phone numbers suggests a focus on online interaction via forms. The website's content is safe for general audiences, with no adult or questionable material. The site could improve by adding terms of service, security policies, and more explicit contact information to boost trust and compliance further.

B

Belvita GmbH

bel-vita.com

0

Belvita GmbH is a small healthcare-focused marketing agency based in Germany, founded in 2023. The company specializes in health care marketing services including brand licensing, personal service, consulting, digitalization, and product development. Their market position is that of a niche player with over 20 years of industry expertise, targeting healthcare companies and professionals seeking specialized marketing and product solutions. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging common web technologies such as jQuery, Bootstrap, and Font Awesome. Hosting and domain registration are managed by IONOS SE, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and DNSSEC. Security-wise, the site shows no signs of malicious activity or exposed sensitive data. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy in German. Business credibility is supported by transparent contact details and professional content. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security hardening and transparency would further enhance trust and resilience.

P

Praxis Sandra Hoff

praxis-sandra-hoff.de

0

Praxis Sandra Hoff is a small healthcare provider based in Baden-Baden, Germany, specializing in natural medicine, aesthetics, and vitality treatments. The website presents a professional image with clear descriptions of services such as gentle vein therapy, mesotherapy, and micro-immunotherapy. The business targets patients seeking minimally invasive and natural health and beauty solutions. The site is well-structured, mobile-optimized, and uses modern SEO practices to reach its audience effectively. Technically, the website runs on WordPress with several plugins for appointment booking and visual content management, supported by Google Analytics for visitor insights. Security measures include HTTPS encryption and spam protection, though the WordPress version and plugins are outdated, posing potential risks. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, aligning with GDPR requirements. Overall, the website is trustworthy and functional but would benefit from technical updates and enhanced security headers.

A

art Kapella Schkeuditz

artkapella.de

0

The website artkapella.de represents a small local cultural venue in Germany focused on visual arts and music events such as exhibitions, vernissages, finissages, and choral concerts. The business model revolves around hosting and promoting cultural events to a general audience interested in arts and music. The site is built on WordPress with a modern tech stack including Yoast SEO and React libraries, indicating a moderate level of digital maturity. The website is well-structured with good SEO metadata and mobile optimization, but lacks explicit privacy, cookie, and security policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the site is safe, professional, and trustworthy for its intended audience but would benefit from enhanced privacy compliance and security transparency.

V

Villa Musenkuss e.V.

villa-musenkuss.de

0

Villa Musenkuss e.V. is a small non-profit socio-cultural center based in Schkeuditz, Germany, offering a variety of artistic and educational courses and projects for all age groups. The organization focuses on musical early education, instrumental lessons, theater, dance, choir activities, and community projects, positioning itself as a key cultural hub in the region. The website is built on WordPress with a modern theme and plugins, providing a good user experience with clear navigation and mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers could be enhanced. Contact information is complete and transparent, supporting business credibility. Overall, the site is trustworthy, professional, and serves its community-oriented mission effectively.

N

NOLIS GmbH

nol-is.de

0

NOLIS GmbH is a well-established German company specializing in digital transformation solutions for public sector entities, particularly municipalities. With over 25 years of experience and more than 400 municipal clients, NOLIS offers a comprehensive E-Government software suite, including a proprietary CMS, online citizen services, childcare placement software, recruiting tools, and GIS-based cartography solutions. Their business model focuses on providing integrated software and consulting services to streamline administrative processes and enhance citizen engagement. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and accessibility considerations. The proprietary CMS and integration of various specialized platforms indicate a robust technical ecosystem. The site is fast-loading, well-structured, and optimized for SEO and mobile devices. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit published security policies, incident response contacts, and security.txt files, which are recommended for enhanced transparency and vulnerability management. No critical vulnerabilities or suspicious elements were detected. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic recommendations include formalizing security policies, enhancing HTTP security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

X

XO Life GmbH

medikura.com

0

XO Life GmbH operates a sophisticated digital health platform called brite™, designed to connect pharmaceutical and medical product manufacturers with patients and healthcare experts. The platform offers a unique One-Stop-Shop solution for digital product and therapy support, content publishing, real world data insights, and pharmacovigilance services. Positioned as an innovative leader in healthcare technology, XO Life targets pharma companies and patients seeking enhanced treatment support. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the website is built on Webflow CMS and integrates modern analytics tools such as Google Tag Manager and Microsoft Clarity. It demonstrates fast performance, excellent mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is notably incomplete or unavailable, which raises some concerns about domain registration transparency. However, the website's extensive partner network, certifications, and professional content strongly support its legitimacy. Overall, XO Life presents a credible and trustworthy digital health business with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

P

PicDrop GmbH

picdrop.com

0

PicDrop GmbH operates a professional photo sharing platform designed primarily for photographers and teams, offering services such as photo sharing, proofing, collaboration, and digital asset management. The platform is well-established with a significant user base and extensive content delivery, positioning itself as a trusted solution in the photography technology market. The website demonstrates a high level of digital maturity, utilizing WordPress with Elementor, modern SEO practices, and responsive design to provide an excellent user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The lack of publicly available WHOIS data introduces some transparency concerns but does not detract significantly from the overall legitimacy given the professional presentation and business information. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

F

FLYERALARM Digital

flyeralarm.digital

0

FLYERALARM Digital is a German-based digital marketing platform specializing in online advertising across over 20 platforms including Facebook, Instagram, Google, and TikTok. The company targets businesses and agencies seeking comprehensive digital marketing solutions, including content creation for various digital channels. The website demonstrates a strong market position as a trusted marketing partner with consistent branding and professional presentation. Technically, the site is built on WordPress with WooCommerce, leveraging modern technologies such as Google Tag Manager and Iubenda for cookie consent, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the website is professional, secure, and trustworthy, though it lacks explicit contact information and a dedicated security policy or incident response page. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance further.

D

divibib GmbH

onleihe.com

0

divibib GmbH operates a professional digital platform focused on simplifying library lending services, notably through its Onleihe solution which supports e-books, e-audio, e-paper, and e-learning for libraries. The company positions itself as a leading provider in the digital library lending market in Germany, targeting libraries and their users with a suite of apps and services. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting trust and user engagement. Technically, the website employs modern web technologies including Matomo analytics for privacy-conscious tracking, Font Awesome for icons, and a CMS platform (PIM.RED) for content management. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, HTTPS is enforced and cookie consent is implemented, but the site lacks visible security headers and published security policies, which are recommended for enhanced protection. Overall, the security posture is solid but could be strengthened by adding explicit security policies, incident response contacts, and improved header configurations. The absence of privacy and terms of service pages is a compliance gap that should be addressed. The domain registration data aligns well with the website content, indicating legitimacy and trustworthiness. No adult or questionable content is present, making the site safe for general audiences.

Q

Qbet

qbets.de

0

Qbet is a German-focused online gambling platform offering casino games, live casino, and sports betting services. The website promotes a unique real-time cashback system without wagering requirements, targeting adult users interested in online gambling in Germany. The platform features a professional design with consistent branding and a good user experience, optimized for mobile devices. Technically, the site uses modern web technologies, including Cloudflare DNS and CDN services, custom fonts, and structured data for SEO. Security posture is moderate, with HTTPS implied and Cloudflare protection, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is supported by professional content and consistent domain usage, though contact information is missing. Overall, the site is functional and trustworthy for its niche but requires improvements in privacy and security transparency.

A

Araxio Development N.V.

gransino-casino.de

0

Gransino Casino is a newly established online gambling platform founded in 2024, targeting primarily the German market. Operated by Araxio Development N.V. and licensed in Curaçao, it offers a broad range of casino games including slots, live dealer games, and sports betting. The platform emphasizes attractive bonuses, secure payment methods, and a user-friendly mobile experience. Its market position is that of an emerging competitor with a focus on quality gaming and customer engagement through social media and positive user reviews. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and leverages Cloudflare for DNS and CDN services, enhancing security and performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could benefit from additional security headers and a visible cookie consent mechanism to improve privacy compliance. Overall, the security maturity is moderate with no critical vulnerabilities detected. The site maintains GDPR compliance through its privacy policy and offers multiple contact channels, though direct phone support is absent. The domain registration aligns with the business timeline and ownership claims, supporting legitimacy. Strategic improvements in security headers and privacy transparency would enhance trust and compliance. The risk profile is moderate, typical for online gambling platforms, with recommendations focusing on strengthening security policies, enhancing privacy mechanisms, and maintaining transparent communication with users to foster trust and regulatory adherence.

N

Nationale Dekade gegen Krebs

dekade-gegen-krebs.de

0

The website 'Die Nationale Dekade gegen Krebs' is a German government-backed initiative led by the Bundesministerium für Bildung und Forschung (BMBF) to advance cancer research and support affected individuals. It serves as a comprehensive platform providing information on research projects, patient involvement, partner organizations, and relevant events. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it uses the Government Site Builder CMS, modern JavaScript libraries like Slick Slider and MediaElement.js, and is hosted by ITZBund, ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism that complies with GDPR, although some security headers could be improved. The site uses Matomo analytics with anonymized data collection and explicit user consent, reflecting good privacy practices. No contact emails or phone numbers are explicitly listed, and no terms of service page is found. Overall, the website is trustworthy, secure, and well-aligned with its mission as a national cancer research initiative.