Security Directory

A

ADticket

adticket.de

0

ADticket operates as a German online ticket sales platform specializing in concerts, festivals, comedy, sports, and classical events. The website presents a professional and user-friendly interface with a broad event catalog targeting general audiences interested in entertainment. The technical infrastructure leverages modern JavaScript frameworks including React and Swiper.js, hosted on Amazon AWS, and integrates a consent management platform (Usercentrics) for GDPR compliance. Security posture is solid with HTTPS enforced and basic security best practices implemented, though some security headers and explicit privacy policies are missing. Overall, the site is trustworthy and functional but could improve transparency and compliance documentation.

A

Alfred Wegener Museum Zechlinerhütte

alfred-wegener-museum.de

0

The Alfred Wegener Museum website serves as an educational and cultural platform dedicated to the life and scientific achievements of Alfred Wegener, focusing on meteorology, geophysics, and polar research. The museum targets a general audience including science enthusiasts, students, and researchers, providing exhibits and educational content related to climate change and natural sciences. The website is built on TYPO3 CMS and uses standard web technologies such as jQuery and Lightbox, reflecting a moderate level of digital maturity. The site is accessible, with a cookie consent mechanism and a privacy policy linked externally, but lacks explicit contact information and security policies publicly available. Security posture is adequate with HTTPS implied, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and professionally presented, though there is room for enhancement in mobile optimization and accessibility.

A

abcpremium GmbH

sapmerchandise.com

0

SAP Merchandise operates an e-commerce platform specializing in branded merchandise for SAP customers and employees, primarily serving the Europe, Middle East, Africa, and North America regions. The business model focuses on B2C retail with dedicated stores for general customers and SAP employees, supporting multiple languages. The company, abcpremium GmbH, founded in 2010, positions itself as a niche retailer within the SAP ecosystem, emphasizing climate neutrality and corporate branding. Technically, the website is built on Magento 2 with a modern tech stack including jQuery, RequireJS, and Amasty extensions. The site is hosted behind Cloudflare DNS and uses HTTPS with a clientTransferProhibited domain status, indicating a moderate level of domain security. Performance and mobile optimization are good, though accessibility and SEO optimizations are basic. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No published security policy or incident response contacts were found, which could be improved to strengthen trust and readiness. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers, DNSSEC, and transparency around security policies would enhance its security posture and business credibility.

Ostprignitz-Ruppiner Personennahverkehrsgesellschaft mbH operates as a regional public transportation company in Germany, providing bus services, ticketing options, and mobility support primarily for residents and commuters within the Ostprignitz-Ruppin region. The website offers comprehensive timetable information, ticket purchase options, and details about special services such as Rufbus, bus rental, and advertising. The company targets local users seeking reliable and accessible public transport solutions. Technically, the website is built on a modern stack including Bootstrap 4.3.1, jQuery, Font Awesome, and Moment.js, ensuring responsive design and usability across devices. Forms on the site submit data securely to trusted external domains, indicating integration with regional transport information systems. While performance is moderate, the site is well-structured and navigable, with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced protection and transparency. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is implemented. Overall, the site demonstrates a solid security posture but could improve in compliance and security best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response contacts, and auditing third-party libraries regularly. These steps will enhance trust, compliance, and security resilience for the company and its users.

Staufen AG is a leading international consulting firm specializing in operational excellence and lean management, serving primarily manufacturing and industrial sectors. The company is positioned as a top-tier consultancy with a broad portfolio of services including supply chain management, digital transformation, and leadership development. It is a subsidiary of Accenture, enhancing its market credibility and reach. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content tailored to its target audience of industrial clients and executives. Technically, the website is built on WordPress with modern SEO and multilingual plugins, ensuring good performance, accessibility, and mobile optimization. Security best practices such as HTTPS, security headers, and cookie consent mechanisms are implemented, though there is room for improvement in publishing explicit security policies and incident response information. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent. The WHOIS data is privacy protected, which is justified given the business type and regional privacy laws. Overall, the site demonstrates high professionalism and trustworthiness, supporting the company's market position. Strategically, the company should consider publishing a dedicated security policy and vulnerability disclosure to enhance transparency and trust. Additionally, providing clear incident response contacts would improve readiness and compliance visibility.

W

WirtschaftsWoche

wiwo.de

0

WirtschaftsWoche is a well-established German business news media outlet providing economic and financial news and analysis. The website is built using modern Angular framework and served via Cloudflare, indicating a contemporary technical infrastructure. However, the provided HTML content lacks visible privacy, cookie, or terms of service policies, and no contact information or forms are present, which limits user engagement and compliance transparency. Security posture appears minimal with no explicit security headers or incident response information detected. Overall, the site is accessible and professional but would benefit from enhanced privacy compliance and security practices.

H

Handelsblatt

handelsblatt.com

0

Handelsblatt is a leading German financial and economic news media outlet providing comprehensive news coverage on finance, business, politics, and technology. The website positions itself as the number one financial and economic newspaper in Germany, targeting a general audience interested in substantive economic news and analysis. The business model is primarily news publishing with subscription elements, serving a large audience in the media sector. Technically, the website employs modern web technologies including Angular framework and optimized web fonts, ensuring good mobile responsiveness, accessibility, and SEO optimization. The site is served over HTTPS, indicating a secure connection, though explicit security headers are not detected in the provided data. Privacy and cookie policies were not found in the analyzed HTML snippet, which may impact compliance and user trust. The WHOIS data for the domain is unavailable or not found, which is unusual for a major media site but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, the website demonstrates a good security posture with room for improvement in privacy compliance and security header implementation.

L

L-Bank

l-bank.de

0

L-Bank is the official state bank of Baden-Württemberg, Germany, providing a range of financial services including funding programs for businesses, housing, families, and municipalities. It holds a leading position as a regional development bank, supporting economic growth and social welfare in the region. The website reflects a mature digital presence with modern technologies such as Vue.js and Hippo CMS, ensuring good performance and accessibility. Security measures are robust, with HTTPS and multiple security headers implemented, although explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates strong compliance with GDPR and accessibility standards, reinforcing trustworthiness and professionalism.

K

Keiper & Co. KG

keiper-co.de

0

Keiper & Co. KG is a well-established German professional services firm specializing in auditing, tax consulting, and business advisory services since 1934. The company operates multiple offices across Germany, providing tailored solutions to medium-sized enterprises, entrepreneurs, freelancers, private individuals, foundations, and associations. Their website reflects a mature digital presence with comprehensive service descriptions, certifications, and a clear focus on client engagement. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO and user experience. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong professional image with high trustworthiness and compliance with GDPR.

S

Sparkasse Rhein Neckar Nord

sparkasse-rhein-neckar-nord.de

0

Sparkasse Rhein Neckar Nord is a regional financial institution in Germany offering a comprehensive range of banking and financial services to private and corporate customers. Their website provides secure online banking, credit products, investment options, insurance, and real estate services, positioning them as a trusted local bank with digital capabilities. The site is well-structured, professionally designed, and targets a broad audience including retail clients and businesses. Technically, the website uses modern web technologies including JavaScript, React components, and is likely powered by Adobe Experience Manager CMS. It is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced, session management, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns with the website content, confirming legitimacy. The site maintains a moderate level of user tracking primarily through Google Analytics and marketing pixels, with GDPR-compliant privacy and cookie policies. The website is safe for general audiences with no adult or questionable content.

V

Volksbank Heidelberg-Neckartal eG

heidelberger-volksbank.de

0

Volksbank Heidelberg-Neckartal eG is a regional cooperative bank in Germany providing a wide range of financial services including retail banking, corporate banking, investment products, and insurance solutions. The bank positions itself as a community-focused institution emphasizing local presence and personalized service. Their website reflects a mature digital infrastructure with modern web technologies such as Angular and advanced monitoring tools like Dynatrace. The site is well-structured, mobile-optimized, and provides comprehensive information about products and services, targeting both private and business customers. Security posture is strong with HTTPS enforcement and security best practices, although explicit security headers could be more visible. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

B

Baden-Württembergische Bank

bw-bank.de

0

Baden-Württembergische Bank (BW-Bank) is a well-established regional bank in Germany offering a broad range of financial services including personal banking, wealth management, loans, insurance, and digital banking solutions. The website demonstrates a strong market position with a focus on both private and business customers, supported by comprehensive online services and local expertise. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and hosted via Telekom Domains, ensuring reliable performance and good mobile optimization. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and session management, although explicit security headers and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a financial institution.

S

SZA Schilling, Zutt & Anschütz Rechtsanwaltsgesellschaft mbH

sza.de

0

SZA Schilling, Zutt & Anschütz is a reputable German law firm specializing in economic and corporate law, including M&A, capital markets, litigation, compliance, and other legal fields. The firm serves national and international corporate clients and is recognized by prestigious legal directories such as Chambers Global and Legal500. The website reflects a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some enhancements in HTTP security headers and explicit security policies could improve resilience. Overall, the site demonstrates strong business credibility, privacy compliance, and user experience, making it a trustworthy digital asset for the firm.

B

BioRN - Life Science Cluster Rhine-Neckar

biorn.org

0

BioRN - Life Science Cluster Rhine-Neckar is a well-established innovation cluster based in the Rhine-Neckar region of Germany, focusing on biotech and life sciences. The organization fosters collaboration between academia, industry, and public stakeholders to promote health innovations and support startups. The website reflects a mature digital presence with rich content, event information, and member services, targeting life science professionals and investors. Technically, the site is built on WordPress with modern plugins for SEO and cookie management, hosted by a reputable German registrar. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the domain registration and website content align well, indicating a legitimate and credible business presence.

H

Heidelberg Startup Partners e.V.

heidelberg-startup-partners.de

0

Heidelberg Startup Partners e.V. is a regional innovation ecosystem enabler focused on supporting technology and science-driven startups in Heidelberg, Germany. The organization collaborates with leading research institutes and offers services including accelerator programs, mentoring, venture capital access, and office/lab space. Their website reflects a professional and consistent brand image targeting entrepreneurs and investors in life sciences, industrial technology, and machine learning sectors. Technically, the website uses Bootstrap and related technologies, is mobile optimized, and has moderate performance. However, it lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security best practices. No contact emails or phone numbers are directly visible, relying on a contact form instead. The domain WHOIS data is limited but shows no privacy protection and uses reputable DNS providers, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve in security and privacy compliance.

E

Innovative Matratzen & Schlafprodukte | Emma Matratzen

emma-matratze.de

0

Emma Matratzen operates an e-commerce website focused on innovative mattresses and sleep products targeting the German market. The website uses modern web technologies including Vue.js and Nuxt.js frameworks, supported by a headless CMS (Contentstack) and Cloudflare for DNS and CDN services. The digital infrastructure indicates a moderate level of technical maturity with good mobile optimization and basic SEO features. However, the site lacks visible privacy and cookie policies, contact information, and explicit security policies, which are critical for compliance and user trust. Security posture is weak due to absence of security headers and incident response information. Overall, the site is accessible and safe for general audiences but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

N

NXTGN

gruendermotor.io

0

NXTGN is a regional innovation platform based in Baden-Württemberg, Germany, focused on fostering startups, science, and industry collaboration. Founded in 2023, it operates as a startup factory, offering services such as deep tech incubation, acceleration, innovation and transformation consulting, and ecosystem connectivity. The platform targets entrepreneurial talents, startups seeking growth and funding, established companies looking for innovation, and ecosystem hubs. Technically, the website is built on WordPress with a modern tech stack including Gutenberg blocks, event management, and accessibility tools, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with cookie consent mechanisms but lacking explicit privacy and terms policies. Overall, the site is professional, trustworthy, and well-positioned in its niche.

A

ABOUT YOU

aboutyou.de

0

ABOUT YOU is a large European online fashion retailer offering products from over 3000 top brands. The website targets a general audience interested in fashion and operates as an e-commerce platform. The technical infrastructure leverages modern JavaScript frameworks, Cloudflare for DNS and likely CDN services, and integrates Usercentrics for consent management and Datadog for logging and monitoring, indicating a mature digital presence. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are not evident in the provided content. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though improvements in transparency around privacy policies and security disclosures are recommended.

V

VR Bank Rhein-Neckar

vrbank.de

0

VR Bank Rhein-Neckar operates as a regional cooperative bank in Germany, providing retail banking and financial services to its customers. The website reflects a professional and consistent brand presence targeting general banking customers in the Rhein-Neckar region. The business model focuses on cooperative banking services with a medium-sized market presence. Technically, the website employs modern JavaScript frameworks such as Angular Material, integrates Adobe Launch for marketing and tracking, and uses OneTrust for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and includes monitoring scripts but lacks visible security headers and published security policies, suggesting room for improvement in security transparency and compliance documentation. Overall, the website is safe, trustworthy, and professionally designed but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

P

PERI Deutschland

peri.de

0

PERI Deutschland is a well-established company specializing in formwork, scaffolding, wood-based materials, and related construction services. The company targets construction firms, scaffolding companies, and craft businesses, offering both sales and rental solutions complemented by digital tools and training programs. The website reflects a strong market position with comprehensive service offerings and a professional online presence. Technically, the site employs modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, hosted on a reputable provider. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

E

ENVIRIA Energy Holding GmbH

enviria.energy

0

ENVIRIA Energy Holding GmbH is a German-based company specializing in providing comprehensive photovoltaic solar solutions for commercial and industrial clients. Their services encompass the entire solar value chain from financing, planning, installation, to operation and maintenance. The company has established a strong market position with over 500 projects and 100+ MWp installed capacity, supported by multiple industry awards and certifications. The website is professionally designed, mobile-optimized, and rich in relevant content targeting businesses seeking sustainable energy solutions. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, with Storyblok CMS for content management. It employs best practices in web performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy and cookie policies are not found, which is a compliance gap. Overall, the security posture is robust with good implementation of security best practices, but the absence of published privacy and incident response policies slightly reduces compliance confidence. The domain WHOIS data is privacy protected, which is justified for this business type, though it limits transparency. No WAF or blocking mechanisms were detected, allowing full content access. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, adding incident response and vulnerability disclosure information, and maintaining transparency to enhance trust and compliance.

The website kpmg.de currently returns a 502 Bad Gateway error served by Microsoft Azure Application Gateway, indicating backend service issues or blocking. Due to this, no actual website content, metadata, or interactive elements are accessible for analysis. KPMG is a well-known global professional services firm operating in the finance sector, with a strong enterprise presence in Germany. The domain WHOIS data is consistent and legitimate, showing proper domain status and authoritative name servers. However, the lack of accessible content prevents evaluation of the website's technical maturity, security posture, and compliance with privacy regulations. The hosting on Microsoft Azure suggests enterprise-grade infrastructure, but the current unavailability is a critical operational issue.

N

NXTGN

join-nxtgn.com

0

NXTGN is a regional innovation platform based in Baden-Württemberg, Germany, focused on connecting startups, academia, and industry to foster deep tech innovation and ecosystem collaboration. Founded in 2023, it operates as a startup factory with services including incubation, acceleration, innovation and transformation consulting, and ecosystem connectivity. The platform targets entrepreneurial talents, startups seeking growth and funding, established companies looking for innovation, and ecosystem hubs. Technically, the website is built on WordPress with a modern tech stack including Gutenberg blocks, Gravity Forms, and SEO tools, delivering a professional and mobile-optimized user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is credible and professionally presented, but could improve transparency and security practices.

H

High-Tech Gründerfonds (HTGF)

htgf.de

0

High-Tech Gründerfonds (HTGF) is a prominent German pre-seed and seed investor focused on technology startups. The company supports tech founders with early-stage investments, leveraging a strong network in industry and academia, and deep technical expertise. Their mission is to strengthen Germany's technological backbone and foster international market leaders. The website reflects a mature digital presence built on WordPress, optimized for SEO and mobile devices, with professional design and clear navigation. However, explicit privacy and terms of service pages are not found, and contact information is limited on the public site. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and detailed security policies. WHOIS data is minimal, lacking registrant details, which slightly reduces trustworthiness but does not contradict the professional business presentation.

K

Kurt Tucholsky Literaturmuseum

tucholsky-museum.de

0

The Kurt Tucholsky Literaturmuseum website represents a small, non-profit cultural institution dedicated to preserving and promoting the legacy of Kurt Tucholsky. The museum offers exhibitions, events, and educational projects, positioning itself as a recognized cultural memory site in Germany. The website is built on TYPO3 CMS, uses modern web technologies, and provides a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and cookie consent mechanisms. Contact information is clearly presented, and the museum maintains an active social media presence. Overall, the site is trustworthy and professionally maintained, reflecting the museum's cultural mission.

S

Stiftung Preußische Schlösser und Gärten Berlin-Brandenburg (SPSG)

spsg.de

0

The Stiftung Preußische Schlösser und Gärten Berlin-Brandenburg (SPSG) operates as a government-affiliated non-profit foundation managing over 30 museum palaces and park sites in the Berlin-Brandenburg region, including notable landmarks such as Schloss Sanssouci and Schloss Charlottenburg. The website serves as an official portal providing comprehensive information about cultural heritage sites, exhibitions, events, educational programs, and visitor services. It targets a broad audience including tourists, families, schools, and cultural enthusiasts. The business model focuses on cultural preservation, public engagement, and educational outreach, supported by government funding and partnerships. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as Leaflet for mapping and Swiper for interactive carousels. It employs Matomo analytics configured for privacy-conscious, cookie-less tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, reflecting a mature digital infrastructure. Performance is moderate with a professional and consistent design. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the official nature of the site, with no privacy protection or suspicious patterns. Overall, the website presents a high level of professionalism, trustworthiness, and compliance with privacy standards. Strategic improvements could include publishing detailed security policies and incident response information to enhance transparency and trust further.

N

NEB - Die Niederbarnimer Eisenbahn

neb.de

0

NEB - Die Niederbarnimer Eisenbahn operates as a regional railway service provider in the Brandenburg and Berlin area, offering passenger transport, ticketing, and travel information services. The website is well-structured, professionally designed, and targets regional commuters and travelers. It provides detailed information about train lines, tickets, excursions, and service updates. The digital infrastructure is based on TYPO3 CMS, enhanced with modern web technologies and accessibility features, ensuring a good user experience across devices. The website employs Cookiebot for cookie consent management and integrates Google Analytics for traffic analysis, reflecting a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, although some security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations, though explicit privacy policy and terms of service pages were not detected in the provided content.

M

Musikkultur Rheinsberg gGmbH

osterfestspiele-schloss-rheinsberg.de

0

Osterfestspiele Schloss Rheinsberg is a well-established cultural festival and music education organization based in Germany, operating under the parent company Musikkultur Rheinsberg gGmbH. The website showcases a professional and consistent brand presence, offering detailed information about festival programs, visitor info, and related cultural divisions. The technical infrastructure is modern, leveraging WordPress CMS with popular JavaScript libraries and plugins, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a trustworthy and credible cultural institution with clear contact information and active social media engagement.

M

Musikkultur Rheinsberg gGmbH

kammeroper-schloss-rheinsberg.de

0

Kammeroper Schloss Rheinsberg is a well-established international festival and music education organization based in Germany, focusing on young opera singers. It offers a rich program of operas, concerts, and an international singing competition, attracting a culturally engaged audience. The organization operates as a non-profit and maintains a professional online presence with detailed event and visitor information. Technically, the website is built on WordPress with modern libraries and plugins, providing good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and security policy pages. Overall, the site is trustworthy and professionally managed, serving its cultural mission effectively.

M

Musikkultur Rheinsberg gGmbH

musikakademie-rheinsberg.de

0

Musikakademie Rheinsberg is a well-established cultural and educational institution based in Brandenburg, Germany, focused on music education, music theater, and amateur music. The organization offers a wide range of courses, workshops, and event hosting services targeting musicians, educators, and music enthusiasts. The website reflects a medium-sized non-profit entity with a clear mission to serve musicians of all generations and promote cultural engagement through music. The business model is centered on educational and cultural services with a strong regional presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap Grid, and various plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The use of structured data enhances search engine visibility. However, hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the content. Overall, the security posture is good but could be enhanced with additional policies and technical controls. The overall risk assessment is low with no signs of malicious activity or unsafe content. Strategic recommendations include publishing security and privacy policies, implementing security headers, and establishing incident response contacts to improve trust and compliance. The website is professional, trustworthy, and suitable for its target audience.

A

abcPremium GmbH

shop-mbs.de

0

The website shop-mbs.de is an e-commerce platform operated by abcPremium GmbH, based in Heidelberg, Germany. It offers a range of products primarily targeting German-speaking customers. The site is built on the Magento platform, utilizing various extensions such as Amasty modules and Stripe payment integration, indicating a moderately mature technical infrastructure. The presence of Cookiebot for cookie consent demonstrates attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage, but lacks visible security headers and incident response information. Overall, the site is functional and professional but could improve transparency and compliance documentation.

T

Technische Universität Braunschweig

tu-bs.de

0

Technische Universität Braunschweig is a well-established German technical university offering a wide range of educational and research services primarily in engineering and natural sciences. The website serves students, researchers, and academic staff with comprehensive information about study programs, research projects, and international cooperation. The university maintains a professional online presence with consistent branding and a clear navigation structure. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal vulnerability disclosure mechanisms. Privacy compliance is limited due to absence of explicit privacy and cookie policies in the accessible content. Overall, the site is trustworthy and professionally maintained but could improve transparency and security practices.

The HFD EdTech-Kompass website serves as a specialized platform showcasing educational technology products from various companies, primarily targeting educational institutions and stakeholders in Germany. It provides categorized listings for different education sectors such as school education, vocational training, higher education, and lifelong learning. The platform encourages EdTech companies to participate and offers contact channels for feedback and inquiries. Technically, the site is built on WordPress 6.8.3, employs modern JavaScript libraries like jQuery 3.7.1, and integrates a robust cookie consent mechanism via Borlabs Cookie, ensuring GDPR compliance. Hosting is managed through netcup, a reputable provider, and the site uses HTTPS with a good SSL configuration. Security posture is solid with no evident vulnerabilities or exposed sensitive data, although some security headers could be enhanced. Analytics are implemented using Google Analytics and Matomo, with transparent cookie management. Overall, the website is professional, well-structured, and trustworthy, with a clear focus on the EdTech sector in Germany.

Hochschulforum Digitalisierung is a well-established German non-profit initiative focused on supporting and shaping the digital transformation of higher education institutions. It operates as a think-and-do tank, providing networking, consulting, innovation, qualification, and publishing services to universities and related stakeholders. The organization is affiliated with reputable entities such as the Stifterverband, CHE, and HRK, reinforcing its credibility and market position within the education sector in Germany. The website content is rich, professionally designed, and regularly updated with news, events, and publications relevant to its target audience of higher education professionals and students. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery Page Builder, and multilingual support via WPML. It demonstrates good performance, mobile optimization, and SEO best practices. Cookie consent is managed via Borlabs Cookie, indicating attention to privacy compliance, although explicit privacy and terms of service documents are not detected. Security posture is solid with HTTPS enforced and some security plugins in use, but lacks published security policies or vulnerability disclosure information. Overall, the security posture is good but could be improved by adding explicit privacy, security, and incident response policies. No critical vulnerabilities or suspicious content were detected. The domain registration data is consistent with the website's claims, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include publishing comprehensive privacy and terms of service policies, establishing a security incident response framework, and enhancing security headers to further strengthen the security posture and trustworthiness of the website.

M

markt.de GmbH & Co. KG

markt.de

0

Markt.de GmbH & Co. KG operates a well-established online classified ads platform targeting private and commercial users in Germany. Founded in 2005 and headquartered in Munich, the company offers a broad range of classified categories including vehicles, real estate, jobs, services, pets, and electronics. The platform supports free and paid listings, serving as a marketplace for millions of users. Markt.de maintains a consistent brand presence with comprehensive privacy and terms policies, and active social media engagement. The website is optimized as a Progressive Web App (PWA) with modern frontend technologies such as Kotlin/JS and RequireJS, ensuring good mobile responsiveness and accessibility.

T

Tenhil GmbH & Co. KG

tenhil.de

0

Tenhil GmbH & Co. KG is a well-established German HR technology company specializing in recruiting solutions. The company operates multiple well-known online job portals and career fairs, leveraging advanced AI technology recognized by the German Federal Ministry of Research. Their business model focuses on connecting candidates with suitable employers through a broad network of online platforms and SaaS solutions. The company holds a strong market position with over 30 years of expertise and multiple subsidiary brands. Technically, the website is built on WordPress with Elementor, uses Cloudflare for DNS and CDN, and integrates modern SEO and analytics tools. Security posture is good with HTTPS and consent management in place, though explicit security headers and incident response policies are absent. Overall, the website is professional, GDPR compliant, and trustworthy, with no signs of blocking or suspicious activity.

Karrieretag is a German regional job fair organizer operating in multiple cities across Germany, targeting professionals, students, and career changers. The website is built on WordPress using modern themes and plugins, with a focus on SEO and user experience. The technical infrastructure includes popular event and job management plugins, and the site is mobile optimized with consent management for GDPR compliance. Security posture is good with HTTPS and some security best practices, though explicit security headers and policies could be improved. The lack of WHOIS data limits domain trust verification but the professional presentation and social media presence support legitimacy. Overall, the site is a credible platform for career events in Germany.

I

Idaris

idaris.de

0

Idaris is a German technology company specializing in job board software solutions, enabling clients to operate regional job portals with modular products, white-label portals, and online marketing services. With over 25 years of market presence, Idaris holds a strong position as a leading provider in the recruitment technology sector in Germany. Their website reflects a professional and modern digital presence built on WordPress with Elementor and Yoast SEO, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile users, providing a good user experience and clear navigation. Security-wise, the website enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and published security policies, which could be improved. Privacy compliance is partially addressed through a consent management platform, though no explicit privacy or terms of service pages were found in the provided content. Overall, the website is trustworthy, business-focused, and safe for general audiences.

L

LocalPerformance

localperformance.com

0

LocalPerformance is a German-based full-service performance marketing agency specializing in digital marketing solutions such as performance marketing, data analytics, social media marketing, SEO strategy, and strategic consulting. The company targets a broad range of clients including SMEs, large enterprises, startups, educational institutions, and media houses. Their market position is that of a professional and sustainable digital marketing partner focused on measurable results. Technically, the website is built on WordPress using the Avada theme, integrating Google Tag Manager and Google Analytics with a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. No hosting provider details were identified. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and a public vulnerability disclosure policy. No critical vulnerabilities were detected in the content. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which impacts domain trustworthiness. Overall, the website presents a professional and trustworthy front for its business, but domain registration transparency and enhanced security headers would improve its security posture and credibility.

I

IT Jobs & Stellenangebote - IT-Jobs.de

it-jobs.de

0

IT-Jobs.de is a German-focused IT job listing and matching platform targeting IT professionals seeking employment opportunities. The website offers a matching machine to help users find suitable IT jobs and facilitates applications to current job offers. The platform positions itself as a niche player in the German IT job market, providing specialized services for IT professionals. Technically, the website employs AngularJS for frontend rendering, uses Cloudflare for DNS and hosting, and integrates Google Tag Manager and Consent Manager for tracking and GDPR compliance. The site is moderately optimized for performance and mobile devices, with good SEO practices. Security-wise, HTTPS is enforced, and consent management is implemented, but there is a lack of published privacy policies, terms of service, and explicit contact information for security incidents. The WHOIS data shows consistent domain registration with Cloudflare nameservers, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

kalaydo.de is a well-established German job portal offering a broad spectrum of job listings across multiple sectors, targeting job seekers ranging from students to experienced professionals. The platform provides user-friendly search features, email alerts, and localized job offers, positioning itself as a reliable resource in the German employment market. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Azure CDN with Cloudflare DNS, ensuring good performance and scalability. Security measures including HTTPS, security headers, and consent management are properly implemented, reflecting a mature security posture. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, kalaydo.de presents a professional, trustworthy, and user-centric service with moderate tracking and marketing integrations managed under GDPR compliance.

J

jobblitz

jobblitz.de

0

Jobblitz.de is a German online job portal offering a wide range of job listings targeting professionals, helpers, career starters, and career changers. The platform provides specialized job categories such as Greenjobs and Quereinsteiger, along with employer services and job alert features. The website is well-branded and consistent, with a clear focus on the German job market. Technically, the site uses modern web technologies including JavaScript, CSS, Google Tag Manager, and a consent management platform to ensure GDPR compliance. Hosting is managed via Amazon AWS DNS services, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are missing. No vulnerabilities or exposed sensitive data were detected. Overall, the site is safe, professional, and trustworthy with good privacy compliance and user experience.

R

Regio-Jobanzeiger GmbH & Co. KG

regio-jobanzeiger.de

0

Regio-Jobanzeiger GmbH & Co. KG operates Germany's largest network of regional online job markets, providing employers with efficient access to local applicants. The website is professionally designed using WordPress and Elementor, optimized for SEO with Yoast, and includes modern tracking and consent management tools. The company demonstrates strong compliance with GDPR through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and consent management, though explicit security headers could be improved. Overall, the site reflects a mature digital presence with good user experience and trust indicators such as certifications and client testimonials.

Y

Yourfirm GmbH & Co. KG

yourfirm.de

0

Yourfirm GmbH & Co. KG operates a leading German online job board specializing in employment opportunities within the Mittelstand sector. The platform targets skilled professionals and medium-sized companies, offering job listings, employer services, and career advice. With over one million monthly job seekers and strong user recommendations, Yourfirm holds a prominent market position in its niche. Technically, the website leverages modern frameworks such as React and Next.js, hosted behind Cloudflare DNS, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, comprehensive security headers, and GDPR-compliant consent management. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site demonstrates a mature digital presence with strong branding and trust signals, supporting its credibility and user engagement.

S

stellenanzeigen.de GmbH & Co. KG

stellenanzeigen.de

0

stellenanzeigen.de GmbH & Co. KG operates a leading German job board platform established in 1995, offering a wide range of job listings, career advice, salary comparison tools, and employer profiles. The website targets job seekers and employers primarily in Germany, positioning itself as a trusted and award-winning recruitment service provider. The platform's business model centers on online job advertisements and value-added career services. Technically, the site leverages modern web technologies including React and Next.js, hosted on Azure with Cloudflare DNS, ensuring fast performance and mobile optimization. Security is robust with HTTPS and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, with extensive social media engagement and recognized industry certifications.

S

Stadt St. Ingbert

st-ingbert.de

0

The website www.st-ingbert.de serves as the official digital presence of the city of St. Ingbert, Germany. It provides residents, visitors, and businesses with access to municipal services, news, event information, and contact details. The site is well-structured, featuring a comprehensive navigation menu covering city administration, culture, tourism, economy, and social services. The digital maturity is evident through the use of WordPress CMS, modern JavaScript libraries like Swiper.js, and cookie consent management via Borlabs Cookie plugin. SEO and accessibility are well addressed with proper metadata and responsive design. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is moderate, with cookie consent implemented but no explicit privacy or terms of service pages detected in the analyzed content. Overall, the site reflects a professional municipal government portal with high trustworthiness and good user experience.

S

Saarpfalz-Kreis

saarpfalz-kreis.de

0

The Saarpfalz-Kreis website serves as the official digital portal for the regional government district in Germany, providing residents and visitors with access to a wide range of public services, news, events, and administrative information. The site targets local citizens and stakeholders, offering key services such as vehicle registration, consultation centers, career opportunities, and public announcements. The business model is that of a governmental public service provider with a medium-sized operational scope within the German government sector. Technically, the website is built on the ionas4 CMS platform, leveraging modern JavaScript frameworks and libraries including SystemJS and jQuery. It employs Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate loading speed and comprehensive metadata including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and integrates Matomo analytics with privacy considerations. While security headers and best practices are generally observed, explicit security policies and vulnerability disclosure mechanisms are absent, representing areas for improvement. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the site's governmental nature. Overall, the website presents a professional, trustworthy, and user-friendly interface with strong privacy compliance and a solid security posture. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing security headers to further strengthen the site's defense and transparency.

R

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau

rptu.de

0

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau (RPTU) is a leading technical university in Germany's Rheinland-Pfalz region, offering over 160 study programs across engineering, natural sciences, social sciences, and teacher education. The university emphasizes research excellence, innovation transfer, and international collaboration. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, responsive design, and comprehensive content tailored to diverse audiences including prospective students, researchers, and partners. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain and website present a trustworthy and professional academic institution.

A

ASW gGmbH

asw-ggmbh.de

0

ASW gGmbH is a well-established educational institution in Saarland, Germany, specializing in dual study programs and continuing education with accredited bachelor degrees. The institution emphasizes practical and scientific education, small group teaching, and personal contact, supported by modern facilities. The website reflects a professional and trustworthy presence with clear contact information and accreditation badges. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. Overall, the site is low risk and credible, serving students and professionals seeking dual study and advanced training.

The Deutsch-Französisches Hochschulinstitut (DFHI) is a well-established educational cooperation between the Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) and the Université de Lorraine (UL), offering bilingual German-French degree programs primarily in management, engineering, and informatics. Founded in 1978, it serves approximately 450 students and has a strong alumni network exceeding 3400 graduates. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting prospective students, current students, alumni, and partner organizations. Technically, the website is built on WordPress with modern plugins for SEO, cookie consent, and responsive design. It uses HTTPS with good SSL configuration and includes structured data for enhanced search engine visibility. The site demonstrates good mobile optimization and accessibility features, although some additional security headers could improve its security posture. From a security perspective, the site employs HTTPS and cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected as per EURid policy, which is typical for .eu domains, and does not raise suspicion. The domain's legitimacy is supported by consistent branding, partner links, and professional content. Overall, the DFHI website presents a trustworthy, professional, and secure platform for its educational mission. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and potentially publishing a dedicated security policy or incident response information to further strengthen trust and compliance.