Security Directory

Cegeka is a well-established European IT services company with over 30 years of experience, offering a broad portfolio of IT solutions including cloud transformation, cybersecurity, software development, and managed services. The website is professionally designed, content-rich, and targets enterprise clients across multiple industries such as finance, manufacturing, telecommunications, and energy. Technically, the site is built on HubSpot CMS using modern web technologies like Lit and Splide.js, but suffers from critical security issues due to an invalid or missing SSL certificate and lack of TLS protocol support. Security headers are present but insufficient to compensate for the lack of HTTPS. Privacy policies and cookie statements are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the site demonstrates strong business credibility and marketing maturity but requires urgent security improvements to protect user data and trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website renatesanz.com serves as an online portfolio for the artist Renate Sanz, showcasing various artworks including paintings and sculptures. The site targets art enthusiasts and potential gallery visitors, providing exhibition information and artist biography. The business model is focused on personal branding and promotion of artistic work within a niche market. The website is primarily in German with options for English and Spanish, indicating a European and international audience. Technically, the site is built on Drupal 7, an outdated CMS version, and uses jQuery and Google Analytics for tracking. The hosting provider is kasserver.com. Performance is slow with basic mobile optimization and accessibility features. Security posture is weak due to lack of HTTPS, visible deprecated PHP warnings, and minimal security headers. No privacy or cookie policies are present, indicating poor GDPR compliance. Contact information is not explicitly provided on the site. Overall, the site shows basic professionalism but requires significant improvements in security, privacy compliance, and technical modernization.

S

seele

seele.com

0

Seele is a globally recognized technology leader specializing in façade construction and building envelopes, serving architects, developers, and construction companies with innovative glass façade solutions. The company operates with over 1,000 employees worldwide and maintains a strong market position in the manufacturing and real estate sectors. The website reflects a professional and consistent brand image with comprehensive business information and a clear focus on façade technologies and projects. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics, indicating a moderate level of digital maturity. However, the absence of HTTPS and modern security protocols represents a significant security risk. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

G

Gigaset AG

gigaset.com

0

Gigaset AG is a well-established German company specializing in the manufacture and sale of telecommunication devices including phones, smartphones, and enterprise communication solutions. The company holds a strong market position in Europe as a leader in quality telephony products, emphasizing German manufacturing. Their website reflects a professional business model targeting both consumer and business customers with a comprehensive product portfolio and support services. Technically, the site is built on a Magento eCommerce platform with modern JavaScript libraries and integrates multiple marketing and analytics tools, demonstrating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. The site implements good privacy and cookie policies with a consent management platform, aligning with GDPR requirements. Overall, the business credibility and content quality are good, but the security posture requires urgent improvement to protect user data and maintain trust.

I

it-novum GmbH

it-novum.com

0

it-novum GmbH is a leading IT consulting and implementation company specializing in Business Open Source and digital transformation within the DACH region. As a subsidiary of Allgeier SE, it has nearly 20 years of experience serving medium-sized businesses, large enterprises, and the public sector. The company offers key services including Big Data Analytics & IoT, IT Service Management, and Enterprise Information Management. The website reflects a professional and consistent brand image with comprehensive content and clear navigation tailored to its target audience. Technically, the website is built on WordPress using Elementor and Astra theme, incorporating modern web technologies and plugins such as Borlabs Cookie for consent management and WP Rocket for performance optimization. While mobile optimization and SEO practices are good, the website currently suffers from an invalid SSL certificate and lacks support for modern TLS protocols, which is a critical security concern. Security posture is moderate with some security headers present and no known vulnerabilities detected, but the invalid SSL certificate significantly reduces trust and security scores. Privacy compliance is strong, with clear privacy and cookie policies and active consent mechanisms. Business credibility is high, supported by detailed contact information, social media presence, and structured data. Overall, the website is professional and trustworthy but requires urgent remediation of SSL issues to improve security and user trust. Strategic recommendations include fixing SSL, enhancing security headers, and maintaining up-to-date software to ensure robust protection and compliance.

Bilfinger SE is an established international industrial services provider specializing in maintenance, expansion, and operation of industrial plants primarily in the energy, chemicals, pharma, and oil & gas sectors. The company operates across Europe, North America, and the Middle East, offering a comprehensive service portfolio including consulting, engineering, manufacturing, assembly, maintenance, and digital applications. The website reflects a mature digital presence built on TYPO3 CMS with a professional design and multilingual support targeting industrial clients globally. Technically, the site uses Apache and PHP 7.4 with various JavaScript libraries and integrates Matomo for analytics and Consentmanager.net for cookie consent management. Security posture is moderate; while security headers and a content security policy are present, the SSL/TLS configuration is currently invalid or missing, which is a critical issue. No WAF or blocking mechanisms are detected, and the site is fully accessible. The domain registration data is consistent with the business claims, showing a long-established domain without privacy protection, supporting legitimacy. Overall, the site is professional and trustworthy but requires urgent SSL/TLS remediation to improve security and user trust.

K

Kreutzpointner

kreutzpointner.de

0

Kreutzpointner is a well-established family-owned company specializing in electrical and information technology solutions, with over 100 years of experience and operations in Germany, Austria, and Romania. The company offers a comprehensive portfolio including electrical installations, renewable energy, software solutions, and full-service offerings such as consulting, engineering, execution, and maintenance. Their market position is strong with multiple subsidiaries and a broad service spectrum targeting industrial, commercial, and public sectors. Technically, the website is built on WordPress with modern plugins and frameworks, providing good SEO and user experience. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by certifications and detailed company information.

Schwarz & Schmidhofer Industrieanlagenbau GmbH is a medium-sized German company specializing in industrial plant construction, including piping, steel construction, and industrial assembly, with over 35 years of experience. The company serves leading clients in the chemical, petrochemical, energy, and environmental technology sectors, positioning itself as a reliable and professional partner offering precise and modern technical solutions. The website is built on WordPress with the Divi theme and supports multilingual content via Weglot, indicating a moderate level of digital maturity. However, the absence of HTTPS and a valid SSL certificate represents a significant security vulnerability, exposing users to potential data interception and undermining trust. The site lacks cookie consent mechanisms and explicit contact details, which impacts privacy compliance and user accessibility. Overall, while the business content and presentation are professional and relevant, the technical and security posture requires urgent improvement to meet modern standards and regulatory requirements.

I

iodata GmbH

iodata.de

0

iodata GmbH is a medium-sized German technology company specializing in data analytics, business intelligence, and data integration solutions primarily using Qlik and Talend technologies. Established in 2007, the company positions itself as a leading provider and certified Qlik Elite Channel Partner, offering a comprehensive range of services including consulting, managed services, BI training, and advanced data integration platforms. The website reflects a professional and consistent brand image targeting business clients seeking advanced data-driven decision-making tools. Technically, the site leverages modern web technologies and HubSpot CMS, with integrations for cookie consent and analytics. However, a critical security gap exists due to the absence of a valid SSL certificate, exposing users to risks and undermining trust. Security headers are partially implemented, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is content-rich and credible but requires urgent security improvements to align with best practices.

M

MARTIN NEUHAUS

martinneuhaus.de

0

The website martinneuhaus.de serves as a personal portfolio and professional presentation platform for Martin Neuhaus, an actor based in Schwerin, Germany. The site primarily targets German-speaking audiences interested in theater and acting, offering access to showreels and professional contact via email and social media. The business model is focused on personal branding and professional networking within the media industry. The website is small scale and individual in nature, with consistent branding and basic content quality. Technically, the site is built on WordPress 6.8.1 using the Mesmerize Pro theme and several common plugins such as Contact Form 7 and CoBlocks. It is hosted likely on GoDaddy infrastructure, inferred from DNS and mail server data. The site suffers from slow performance with a load time exceeding 20 seconds, but it is mobile optimized and has good SEO metadata implemented. Accessibility is basic but present. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. No security headers or advanced TLS protocols are enabled, and no incident response or vulnerability disclosure policies are found. Privacy compliance is minimal with no privacy or cookie policies detected. The domain registration is consistent and legitimate, with no privacy protection or suspicious red flags, but domain protection locks are not enabled. Overall, the site presents moderate business credibility but poor security and privacy posture. Strategic improvements should focus on enabling HTTPS, implementing security headers, adding privacy and cookie policies, and improving site performance to enhance trust and compliance.

4

42virtual Business Services GmbH

42virtual.com

0

42virtual Business Services GmbH is a small German IT consulting and project management firm specializing in pragmatic and tailored solutions for public sector, banking, insurance, and service industries. Their website presents a professional image with clear business focus and German language content targeting relevant sectors. Technically, the site is built on Webflow CMS and uses jQuery, but suffers from slow load times and lacks modern security configurations. Critically, the absence of a valid SSL certificate and HTTPS support exposes the site to security risks and undermines user trust. Privacy compliance is minimal, with no cookie consent or GDPR indicators detected. Overall, the business appears legitimate and consistent with WHOIS data, but the security posture requires urgent improvement to protect visitors and comply with regulations.

software4production GmbH is a specialized provider of innovative factory software solutions focused on Industry 4.0 and automation for medium-sized manufacturing enterprises. Their offerings include advanced manufacturing execution systems (MES), production planning and scheduling (PPS), and modules for data acquisition and intralogistics, all built on a robust Java/Jakarta IT architecture. The company holds a strong market position, evidenced by multiple industry awards and a comprehensive portfolio of services including consulting, training, and support. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted on infrastructure associated with udag.de. While the site demonstrates good design and navigation, it lacks a valid SSL certificate and proper HTTPS implementation, which is a significant security concern. Performance metrics are not available, indicating potential areas for improvement in loading speed and optimization. From a security perspective, the absence of HTTPS and modern TLS protocols, along with missing advanced security features like OCSP stapling and session resumption, lowers the site's security posture. However, the presence of some security headers and a comprehensive privacy policy indicates a baseline commitment to security and compliance. Overall, the website is professional and trustworthy in content and business representation but requires urgent security enhancements to protect user data and improve trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and implementing cookie consent mechanisms to enhance privacy compliance.

Grammatix is a small-scale cultural and artistic photography website based in Germany, focusing on exhibitions, projects, and published books related to regions such as Nepal, Tibet, and Kashmir. The site is built on WordPress and uses common plugins like Yoast SEO and Flash Album Gallery to manage content and galleries. While the website offers good content quality and navigation, it lacks modern security measures such as HTTPS, exposing visitors to potential risks. Privacy compliance is minimal, with no visible privacy or cookie policies, and contact information is limited to a contact form without explicit emails or phone numbers. The domain registration is consistent and transparent, but the absence of domain protection locks is a minor security concern. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

S

Scheer IMC

im-c.com

0

Scheer IMC is a well-established enterprise learning company specializing in scalable LMS solutions, automated eLearning content creation, and custom learning experiences. The company serves large global brands and has a strong market position supported by extensive client references and industry awards. Technically, the website is built on WordPress and uses modern JavaScript libraries and Cloudflare CDN for hosting and performance. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines trust and exposes users to risks. Privacy compliance is well addressed with Cookiebot and a comprehensive privacy policy. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.

A

Agentur XY GmbH

xy.de

0

Agentur XY GmbH is a creative agency and production house based in Berlin, Germany, founded in 2018. The company specializes in delivering bold advertising campaigns and production services for global brands, including notable clients such as Netflix, Stepstone, and Playmobil. The website reflects a professional and consistent brand image with rich multimedia content and active social media presence. Technically, the site is built on WordPress with modern libraries and SEO optimizations, but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are partially implemented, but the absence of TLS protocols and domain security features like DNSSEC and DMARC reduce the overall security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

S

Strom und Gas für Düsseldorf und NRW | Stadtwerke Düsseldorf

swd-ag.de

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

C

Consileon Business Consultancy GmbH

consileon.de

0

Consileon Business Consultancy GmbH is a well-established management and IT consulting firm based in Karlsruhe, Germany, founded in 2001. The company serves a broad range of industries including banking, automotive, healthcare, insurance, and the public sector. It is recognized as a leading consultancy in Germany, evidenced by multiple prestigious awards such as 'Beste Berater' and 'Beste IT-Dienstleister'. Their service portfolio includes business transformation, AI consulting, sustainability, IT transformation, software development, and cybersecurity assessments. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. However, the technical infrastructure shows critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility is high, but the lack of HTTPS is a significant risk that should be urgently addressed.

SIGEL is a medium-sized manufacturing company specializing in innovative office equipment and smart procurement solutions tailored for modern, agile work environments. The company positions itself as a trusted partner for businesses seeking high-quality office products, supported by multiple international design awards and ISO certification. The website is professionally designed using Drupal 11, with strong SEO, accessibility, and multi-language support, reflecting a mature digital presence. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture. While security headers and cookie consent mechanisms are well implemented, the lack of incident response and vulnerability disclosure policies indicates room for improvement in security governance. Overall, the website is trustworthy and professional but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

J

Jungheinrich AG

jungheinrich.com

0

Jungheinrich AG is a globally leading company in the intralogistics sector, headquartered in Hamburg, Germany. The company specializes in manufacturing industrial trucks, warehouse and material flow technology, and providing logistics services. The website reflects a mature enterprise with a strong market position and comprehensive service offerings targeting businesses requiring intralogistics solutions. Technically, the website employs modern web technologies including Vue.js, CoreMedia CMS, and integrates multiple marketing and analytics tools such as Google Tag Manager, Marketo, and Cookiebot. However, a critical security issue is present due to an invalid SSL certificate and lack of enabled TLS protocols, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professionally designed, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

S

Sanitär-Heinze GmbH & Co. KG

sanitaer-heinze.com

0

Sanitär-Heinze GmbH & Co. KG operates as a specialized wholesale and service provider in the sanitary, heating, ventilation, and renewable energy sectors primarily serving professional customers in Germany. The company offers a broad portfolio including bathroom products, heating systems, ventilation solutions, and 3D bathroom planning services. Their market position is that of an established regional player with a consistent brand presence and multiple product lines. Technically, the website is built on the Pimcore CMS platform, leveraging modern JavaScript libraries and Google analytics tools, with a professional design and good navigation. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that significantly impacts the security posture. Cookie consent is implemented properly, and privacy policies are comprehensive and GDPR compliant. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

Selbst-Bestimmt.net is a small German-based organization specializing in personal development seminars and workshops, including Heldenreise®, Family Circles, and Gestalt therapy. The website presents a clear business model focused on organizing and delivering these seminars, targeting individuals interested in self-development. Technically, the site runs on WordPress with common plugins such as Yoast SEO and Contact Form 7, hosted on a provider associated with kasserver.com. However, the site lacks HTTPS support, which is a critical security deficiency. Security posture is weak due to the absence of SSL/TLS encryption and missing security headers. Privacy compliance is also lacking, with no visible privacy or cookie policies. Overall, the website is functional and content-rich but requires urgent improvements in security and compliance to protect users and build trust.

C

CANCOM GmbH

cancom.com

0

CANCOM GmbH is a large, established IT services provider specializing in delivering tailor-made, end-to-end IT solutions to organizations primarily in the DACH region and neighboring European countries. With over 5,600 employees and multiple localized domains, CANCOM positions itself as a leading hybrid IT service provider supporting digital transformation journeys. The website reflects a professional corporate portal with localized language and country options, targeting business clients seeking comprehensive IT services. Technically, the site is built on WordPress with modern plugins and hosted on Azure DNS infrastructure, but it suffers from critical security issues including an invalid SSL certificate and lack of modern TLS protocols, which significantly impact its security posture. While the site includes comprehensive privacy policy links and social media presence, it lacks visible contact information and cookie consent mechanisms on the main page. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

L

Leica Microsystems

leica-microsystems.com

0

Leica Microsystems is a well-established global leader in microscopy and imaging solutions, serving diverse sectors including life sciences, industrial manufacturing, medical specialties, and education. The company offers a broad portfolio of products ranging from light and confocal microscopes to software and consumables, supported by comprehensive service and application support. The website reflects a mature digital presence with rich, professional content and consistent branding, targeting scientific and industrial professionals worldwide. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the current lack of a valid SSL certificate and absence of HTTPS significantly undermines the security posture, despite the presence of several security headers and policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. WHOIS data confirms the domain's maturity and legitimacy, registered under Network Solutions without privacy protection, consistent with the company's profile. Strategic improvements in SSL/TLS configuration and enhanced security practices are recommended to elevate trust and protect user data.

V

Virtual Minds GmbH

virtualminds.de

0

Virtual Minds GmbH is a well-established European adtech company specializing in programmatic advertising solutions for publishers, broadcasters, agencies, and advertisers. As a subsidiary of ProSiebenSat.1 Media SE, it holds a strong market position offering a modular full-stack of advertising technologies including DSP, SSP, DMP, and ad serving platforms. The company emphasizes legal compliance, quality, and customer-centric agile development. Technically, the website is built on WordPress with Elementor and uses modern PHP and nginx server technologies. However, the absence of a valid SSL certificate and HTTPS is a critical security gap that undermines trust and security posture. The company maintains ISO 27001 certification and GDPR compliance, reflecting a mature security and privacy framework. Overall, the business is credible and professional but must urgently address its SSL/TLS configuration to improve security and user trust.

HypoVereinsbank by UniCredit Bank GmbH operates a professional and comprehensive banking website targeting private and corporate customers in Germany. The site offers a wide range of financial services including online banking, investment products, loans, and wealth management. It is well-positioned in the market, recognized by industry awards such as 'Bank of The Year 2024' and 'Fairste Filialbank 2024'. The website demonstrates strong branding consistency and trust indicators, with clear contact information and GDPR compliance. Technically, the site uses modern JavaScript libraries and is hosted via Akamai with Adobe Experience Manager as the CMS platform. However, performance is currently slow and SSL/TLS configuration is invalid, which poses security risks. Security headers are mostly present but the Content-Security-Policy is overly permissive. No WAF or blocking mechanisms are detected, allowing full content access. Privacy and cookie policies are implemented with consent mechanisms. Overall, the site is professional and trustworthy but requires urgent SSL fixes to improve security posture.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 17 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

H

Hochschule Neubrandenburg

hs-nb.de

0

Hochschule Neubrandenburg is a German public university of applied sciences offering a range of academic programs, research initiatives, and continuing education services primarily focused on agriculture, health, social work, and landscape sciences. The website serves students, prospective students, researchers, and regional partners with comprehensive information and resources. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. However, the absence of HTTPS/SSL is a critical security gap that undermines user trust and data protection. Security headers are well configured but cannot compensate for the lack of encryption. The site lacks cookie consent mechanisms and explicit security or incident response policies. Overall, the website is professional and content-rich but requires urgent security improvements to meet modern standards.

I

Invitario GmbH

invitario.com

0

Invitario GmbH offers a professional software solution for smart participant and invitation management tailored for various types of events including live, virtual, and hybrid formats. The company positions itself as a trusted provider with ISO 27001 certification and a strong focus on GDPR compliance, serving a broad range of industries and company sizes. Their platform supports comprehensive event marketing and management processes, integrating data analytics and personalized communication to enhance event success. Technically, the website is built on WordPress using the Divi theme and incorporates modern tools such as Lottie animations and Borlabs Cookie for consent management. However, the security posture is weakened by an invalid SSL certificate and lack of proper TLS configuration, which is a critical issue that must be addressed to ensure secure data transmission and user trust. Overall, the website demonstrates high content quality, good business credibility, and solid privacy compliance, but requires immediate improvements in SSL/TLS security to enhance its security score and user confidence.

Gerald Binder's website is a personal blog primarily targeting German-speaking audiences interested in diverse topics such as chili recipes, media theory, travel, and quotes. The site operates on a WordPress platform with a modest but consistent content update history, positioning itself as a niche media outlet rather than a commercial enterprise. Technically, the site uses an Apache server with WordPress 5.0.22 and integrates social media plugins for Facebook and Twitter. However, the absence of HTTPS and modern security configurations significantly undermines the site's security posture. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanisms or GDPR compliance indicators. Overall, the site is functional but lacks critical security and privacy features, which poses risks to user trust and data protection.

I

incadea GmbH

incadea.com

0

incadea GmbH is a well-established German company founded in 2000, specializing in innovative cloud-based software solutions for the automotive retail and wholesale sectors. The company supports over 4,000 dealerships globally, leveraging Microsoft Dynamics 365 Business Central and maintaining strong partnerships with leading OEMs and Microsoft. Their offerings include dealer management systems for passenger cars and commercial vehicles, importer management solutions, and professional services such as consultancy and training. Technically, the website is built on Umbraco CMS with modern JavaScript libraries like jQuery and Swiper.js, hosted on Azure DNS infrastructure. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance efforts. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

F

FLOCERT GmbH

flocert.net

0

FLOCERT GmbH is a globally recognized certification and social auditing body, primarily serving as the sole certifier for Fairtrade products. Established in 2003 and based in Germany, FLOCERT offers a comprehensive suite of services including Fairtrade and EDGE certification, social audits, and customized sustainability programs. Their mission centers on promoting fairness in global trade, ensuring ethical business practices, and supporting sustainable development across diverse sectors. The website reflects a mature digital presence with rich content, multi-language support, and strong branding aligned with their non-profit sector focus. Technically, the site is built on WordPress with modern SEO and marketing tools, but currently lacks a valid SSL certificate, which significantly impacts its security posture. Despite this, the site maintains good privacy compliance with clear policies and consent mechanisms. The absence of HTTPS and modern TLS protocols is a critical security gap that should be addressed promptly to protect user data and enhance trust. Overall, FLOCERT demonstrates a strong market position and credible business model, but must improve its technical security to align with best practices.

LEDVANCE GmbH operates a comprehensive corporate website focused on professional lighting, home lighting, and renewable energy solutions. The company positions itself as a leading global provider in the lighting industry, targeting both professional lighting experts and consumers. The website offers extensive product catalogs, services, and sustainability information, reflecting a mature and well-established business model. Technically, the site uses modern technologies including nginx and Pimcore CMS, with integrations such as Google Tag Manager and Usercentrics for consent management. However, the SSL/TLS configuration is currently invalid or missing, which is a critical security concern. Security headers are well implemented, but the lack of valid HTTPS reduces the overall security posture. Privacy policies and cookie consent mechanisms are present and comprehensive, indicating good compliance with GDPR. Contact information is primarily available via contact forms, with no explicit emails or phone numbers found. Overall, the website is professional and content-rich but requires urgent improvements in SSL configuration to enhance security and trust.

thyssenkrupp AG is a large multinational industrial technology group focused on engineering innovative and sustainable solutions for future challenges. The website reflects a mature digital presence with comprehensive content targeting industrial clients, investors, and job seekers. Technically, the site uses modern frameworks like Angular and is hosted on Amazon CloudFront, but lacks a valid SSL certificate and HTTPS enforcement, which is a critical security deficiency. Security headers are well implemented, but the absence of TLS protocols and session security features lowers the security posture significantly. Privacy compliance is good with a clear privacy policy and GDPR adherence, though no cookie consent mechanism was detected. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

J

JUDO.eu

judo.eu

0

JUDO.eu is a well-established German company specializing in water treatment solutions, with a history dating back to 1936. The company offers a broad range of products including protective filters, softening systems, lime protection, dosing pumps, leakage protection, wellness, heating protection, and smart home water solutions. Their market position is strong with a focus on innovation and sustainability, targeting both professional and consumer markets internationally. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for SEO, cookie management, and user interaction. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security weakness. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

objectflor Art und Design Belags GmbH is a medium-sized German company specializing in high-quality, innovative, and elastic flooring solutions, primarily vinyl and rubber floors. As a subsidiary of James Halstead plc, it serves 16 countries in Central Europe and holds a leading market position in the flooring industry. The company offers a broad product portfolio, including design floors, technical vinyl, and rubber flooring, complemented by services such as design studios, training seminars, and a partner network. The website is professionally designed, content-rich, and targets both B2B and B2C customers seeking sustainable and functional flooring solutions. Technically, the site runs on TYPO3 CMS with integrations for consent management and analytics, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and modern TLS protocols. This significantly impacts the security posture and overall trustworthiness of the site. Privacy compliance is well addressed with GDPR-consistent policies and consent mechanisms. Business credibility is strong, supported by certifications and transparent contact options. Strategic improvements in SSL deployment and security headers are essential to enhance user trust and protect data integrity.

PSI Software SE operates the website psimetals.com, providing specialized production management software solutions for the metals industry, including steel, aluminum, and copper manufacturing. Their flagship product, PSImetals, integrates SCM, APS, and MES functionalities to optimize production and logistics, with a strong emphasis on sustainability and decarbonization. The company targets industrial manufacturers seeking to improve operational efficiency and meet environmental standards. The website demonstrates a mature digital presence with comprehensive content, case studies, and customer references, reflecting a well-established market position. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as Vue.js, Axios, and Parsley.js for enhanced user experience and form validation. However, performance metrics are lacking, and the SSL/TLS configuration is critically deficient, with no valid certificate and no TLS protocols enabled, severely impacting security posture. The site includes privacy and cookie policies compliant with GDPR, and uses Google Analytics and Tag Manager for user tracking at a moderate level. Security-wise, while several security headers are implemented, the absence of a valid SSL certificate and HTTPS enforcement is a major vulnerability. DNS security features like DNSSEC and CAA are not enabled, and domain protection locks are missing, which could expose the domain to hijacking risks. No explicit incident response or security policy information is available on the site. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, enhancing DNS security, and publishing clear security and incident response policies.

P

Peek & Cloppenburg B.V. & Co. KG

peek-cloppenburg.com

0

Peek & Cloppenburg B.V. & Co. KG is a well-established European fashion retailer with a strong presence in physical stores and online platforms. The company offers a curated selection of international and exclusive brands, targeting fashion-conscious consumers across multiple countries. Their business model focuses on multi-brand retailing with a significant footprint in Europe, supported by a comprehensive loyalty program and customer service infrastructure. Technically, the website is built on modern frameworks like Next.js and Magnolia CMS, leveraging Cloudflare for hosting and CDN services. The site is well-optimized for mobile and SEO, with good accessibility features. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which critically impacts secure communications and user trust. Privacy compliance is robust, with clear policies and consent mechanisms implemented. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Scheidt & Bachmann GmbH is a globally recognized provider of innovative system solutions in the transportation and energy retail sectors. Their offerings include parking management, rail signalling, fare collection systems, and energy retail solutions, serving a broad range of mobility providers worldwide. The company positions itself as a market leader with a strong focus on integrated modular solutions and sustainability. Technically, the website is built on TYPO3 CMS with a professional design and good navigation, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, while the business credibility and content quality are strong, the security posture requires urgent improvement to protect user data and enhance trust.

H

Handwerkskammer Aachen

hwk-aachen.de

0

Handwerkskammer Aachen is a regional chamber of crafts in Germany representing approximately 17,400 member businesses. The organization provides a broad range of services including vocational training, further education, consulting, business start-up support, and expert services. The website reflects a well-established institution with a strong market position in the education and government sectors, targeting apprentices, craftsmen, business founders, and companies within the Aachen region. The content is rich, professionally presented, and highly relevant to its audience. Technically, the site is built on the ODAV CMS platform, utilizing modern JavaScript libraries and frameworks, but suffers from poor SSL/TLS implementation, lacking a valid certificate and modern encryption protocols. This significantly impacts the security posture of the website. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Contact information is complete and transparent, enhancing business credibility. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

C

Chemetall GmbH

chemetall.com

0

Chemetall GmbH is a well-established global leader in surface treatment chemical solutions, operating as a subsidiary of BASF. The company serves industrial clients across multiple sectors including aerospace, automotive, and manufacturing, providing advanced chemical technologies and laboratory services. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B industrial customers. Technically, the site uses legacy JavaScript libraries and lacks modern performance optimizations, with slow loading times and basic mobile responsiveness. Security posture is weak due to the absence of HTTPS and minimal security headers, exposing users to potential risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data confirms a mature and legitimate domain with consistent registration details. Overall, the site demonstrates solid business credibility but requires urgent improvements in security and privacy to meet modern standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 27 security findings identified across all modules.

A

Alturos

alturos.com

0

Alturos is a digital platform provider specializing in integrated solutions for the tourism and transportation sectors, including mountain railways, shipping companies, and airlines. Their flagship product, Destination OS, offers a comprehensive 360° solution for digital marketing, sales, communication, and guest entertainment. The company has a strong market presence with over 150 customers and numerous integrations with sales and marketing systems. Technically, the website is built on WordPress with modern frameworks like UIkit and uses performance optimizations such as WP Rocket. However, the absence of a valid SSL certificate and lack of HTTPS significantly weaken the security posture. While privacy and cookie policies are present and GDPR compliant, no explicit security or incident response policies are found. Overall, the site is professional and trustworthy but requires urgent security improvements.

Glashütte Original is a prestigious German luxury watch manufacturer with a rich history dating back to 1845. The company operates under the Swatch Group umbrella and offers a range of technically sophisticated and iconic watch collections targeting discerning luxury consumers globally. The website reflects a mature digital presence with multilingual support, comprehensive product and brand information, and integrated e-commerce and customer service functionalities. Technically, the site is built on WordPress with WooCommerce and leverages modern JavaScript libraries and tracking technologies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the business demonstrates strong credibility and branding but must urgently address its SSL/TLS configuration to improve security posture and user confidence.

S

SER Solutions Deutschland GmbH

ser.de

0

SER Solutions Deutschland GmbH is a well-established enterprise content management (ECM) software provider based in Germany, with over 35 years of experience. The company is recognized as a leader in the ECM market, evidenced by its inclusion in Gartner's Magic Quadrant and IDC MarketScape reports. Their core offerings include intelligent content automation, document management, process automation, and collaboration tools, targeting large enterprises and organizations undergoing digital transformation. The website reflects a mature digital presence with comprehensive content, multiple language support, and strong branding consistency. Technically, the website is built on the Contao CMS platform, hosted on Ubuntu servers with Amazon CloudFront CDN for content delivery. It employs modern marketing and analytics tools such as Google Tag Manager, Visual Website Optimizer, and Usercentrics for consent management. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which severely impacts the security posture. Security headers are properly configured, but the lack of TLS protocols and valid certificates exposes the site to risks and undermines user trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, while the business and content quality are excellent, urgent remediation of SSL/TLS issues is necessary to improve security and trustworthiness.

G

Gesundheitscampus Wesel

evkwesel.de

0

Gesundheitscampus Wesel operates a regional healthcare campus in Germany offering integrated medical, nursing, therapy, and palliative care services. The website is built on TYPO3 CMS and provides comprehensive information about its multiple healthcare divisions, targeting patients and healthcare consumers in the Wesel region. The digital infrastructure includes standard web technologies and Google Analytics for visitor tracking. However, the site lacks a valid SSL certificate, serving content over HTTP only, which is a significant security concern. The cookie consent mechanism is implemented and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is professionally designed with good navigation and content relevance but requires urgent improvements in security posture to protect user data and enhance trust.

RA Manuel Metz operates a small legal practice based in Germany, providing professional legal services with a focus on client engagement, reliability, and expertise. The website presents clear contact information and a straightforward description of services aimed at individuals seeking legal counsel. The business is positioned as a local/regional legal service provider with a simple, content-focused web presence. Technically, the website is built on a basic Apache server with static HTML and CSS, lacking modern CMS or frameworks. Performance data is minimal, indicating slow loading or unmeasured performance. The site is not optimized for mobile or accessibility beyond basic levels and lacks advanced SEO features. From a security perspective, the website does not implement HTTPS, exposing visitors to risks. There are no advanced security headers or mechanisms such as HSTS or CSP. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent or GDPR compliance indicators. No incident response or security policy information is available, indicating a low security maturity level. Overall, the website is functional but has critical security shortcomings that reduce trustworthiness and user safety. Strategic improvements in SSL implementation, security headers, and privacy compliance are recommended to enhance the site's professionalism and protect users.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

BWF Envirotec, a subsidiary of the BWF Group, is a global leader in industrial filtration solutions, specializing in manufacturing industrial filters, needle felt roll goods, and providing comprehensive services for filter houses. The company targets industrial sectors requiring air pollution control and sustainability solutions. Their website is professionally designed, content-rich, and supports multiple languages, reflecting a mature digital presence. Technically, the site runs on TYPO3 CMS with PHP backend and is hosted on Schlundtech servers. However, a critical security gap exists as the website lacks HTTPS, exposing users to potential risks. Security headers are partially implemented, and no incident response or vulnerability disclosure information is found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business demonstrates strong credibility and trust indicators but must urgently address the lack of SSL to improve security posture and user trust.