Security Directory

Q

qurix Technology GmbH

qurix.tech

0

qurix Technology GmbH is a boutique data technology consultancy based in Germany, founded in 2019. The company specializes in transforming businesses into data-inspired champions by providing independent, client-focused data solutions. Their market position is that of an independent boutique consultancy, emphasizing advocacy for clients free from technology provider influence. The website reflects a professional and consistent brand image, targeting companies seeking expert data consultancy services. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium, Google reCAPTCHA, and integrates third-party services like Calendly and ActiveCampaign for scheduling and marketing automation. Hosting is provided by Cronon GmbH, and the site employs HTTPS with good security headers, indicating a solid security posture. Analytics and marketing tools are used with appropriate consent mechanisms, reflecting good privacy compliance. Security-wise, the site enforces HTTPS, uses cookie consent banners, and includes reCAPTCHA to mitigate abuse. No critical vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, which could be improved. The absence of a published security policy or incident response contact is noted. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enabling DNSSEC, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.

P

plancraft

plancraft.de

0

Plancraft is a well-established German SaaS company providing specialized handwerkersoftware (craftsman software) designed to streamline and digitalize workflows for tradespeople and small to medium-sized craft businesses. The platform offers a comprehensive suite of tools including document creation, project and time management, mobile apps for field workers, and integration with accounting systems. With over 20,000 users and excellent customer ratings, Plancraft holds a strong market position in the German-speaking crafts sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, HubSpot forms, and cloud hosting with Google Cloud DNS. The site is well-optimized for performance, mobile responsiveness, and accessibility, featuring advanced tracking and telemetry for marketing and analytics. However, explicit privacy and terms of service pages are not clearly found, and security headers are not visibly implemented in the HTML. From a security perspective, the site uses HTTPS and domain registration data indicates a legitimate and stable business. Cookie consent is managed via a third-party service, and no critical vulnerabilities or exposed sensitive data were detected. Nonetheless, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represent areas for improvement. Overall, Plancraft presents a professional, trustworthy, and technically mature online presence with minor gaps in privacy and security documentation. Strategic enhancements in these areas would further strengthen compliance and user trust.

R

RAKETEN CREATIVE

raketen.info

0

RAKETEN CREATIVE is a small German web development company specializing in creating small to medium-sized websites, webshops, and web applications. The company emphasizes reliability, modern technology, and a customer-friendly approach, serving both direct clients and white-label customers. Their portfolio showcases diverse projects, indicating a focus on creative and professional web solutions. Technically, the website is built on WordPress with the Avada theme and uses popular plugins such as Slider Revolution and WP Rocket, indicating a mature digital infrastructure with good performance and mobile optimization. Security-wise, the site uses HTTPS and obfuscates email addresses to reduce spam, but lacks published privacy and cookie policies, and no advanced security headers were detected. The WHOIS data is malformed and unavailable, which limits domain trust verification, but the website content and contact information suggest a legitimate business. Overall, the site is professional and functional but would benefit from improved privacy compliance and security transparency.

T

Tourismuszentrale Fränkische Schweiz

fraenkische-schweiz.com

0

The website www.fraenkische-schweiz.com serves as the official tourism portal for the Fränkische Schweiz region in Bavaria, Germany. It provides comprehensive information on activities, accommodations, gastronomy, and events, targeting tourists and vacationers interested in this historic and scenic area. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on the TYPO3 CMS platform and integrates modern JavaScript libraries and Google Analytics for tracking. Security measures include HTTPS and a cookie consent mechanism, though explicit security headers and detailed security policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure full trust. Overall, the site is a reliable resource for regional tourism but would benefit from enhanced transparency in domain registration and security disclosures.

F

Das Fichtelgebirge: Fichtelgebirge

fichtelgebirge.bayern

0

The website www.fichtelgebirge.bayern serves as a regional tourism portal dedicated to the Fichtelgebirge region in Germany. It provides comprehensive information about accommodations, cultural events, outdoor activities, and regional specialties, targeting tourists and visitors interested in exploring the area. The site is multilingual, offering translations via Google Translate, enhancing accessibility for international visitors. Technically, the site is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery UI and Slick Carousel, and integrates Google Analytics for visitor tracking alongside a CookieFirst consent management system. Security-wise, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and vulnerability disclosure mechanisms. The WHOIS data is privacy protected, which is common for such regional tourism sites, and no suspicious patterns were detected. Overall, the site presents a professional and trustworthy digital presence for regional tourism promotion.

B

Bayreuth Marketing & Tourismus GmbH

bayreuth-tourismus.de

0

Bayreuth Marketing & Tourismus GmbH operates a comprehensive tourism website promoting Bayreuth, Germany, focusing on cultural attractions, events, and accommodations. The site targets tourists and visitors interested in exploring the region's heritage and leisure opportunities. It serves as a regional marketing authority with a strong digital presence and multilingual content to cater to international audiences. Technically, the website is built on WordPress with modern plugins and SEO tools, ensuring good performance, mobile optimization, and accessibility. Security measures include HTTPS, cookie consent management, and basic security headers, though there is room for improvement in advanced security policies and incident response transparency. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for visitors and stakeholders.

T

Tourismusverband Franken e.V.

frankentourismus.de

0

Tourismusverband Franken e.V. operates a comprehensive regional tourism website focused on promoting the Franconia region in Germany. The site offers extensive information on cultural, culinary, wellness, and outdoor activities, targeting tourists and visitors interested in exploring the area. The business model centers on tourism promotion and providing travel-related services including event listings and online booking options. The website is well-positioned as an official regional tourism association with a consistent brand and strong trust indicators such as verified social media presence and GDPR-compliant cookie consent. Technically, the website employs modern tracking and analytics tools including Google Analytics, Plausible, and Umami, integrated via Google Tag Manager. The site uses a custom or proprietary CMS with good mobile optimization, accessibility, and SEO practices. The presence of a strict referrer policy and HTTPS indicates a solid security foundation, although some security headers are missing. The cookie consent mechanism is robust and aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and preparedness. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the website's claims, indicating legitimacy. Overall, the website is professional, secure, and trustworthy with excellent content quality and user experience. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

O

Oberfranken Offensiv e.V.

oberfranken.de

0

Oberfranken Offensiv e.V. is a regional non-profit association dedicated to promoting the development, innovation, and cultural richness of the Oberfranken region in Germany. The website serves as an information portal highlighting regional projects, events, and campaigns to foster community engagement and regional pride. It targets residents, businesses, and institutions interested in the region's growth and quality of life. The association positions itself as a key regional player with a focus on innovation and community collaboration. Technically, the website is built on the Weblication CMS platform and uses modern web technologies including JavaScript, jQuery, and Font Awesome. It employs Piwik/Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and provides cookie consent controls but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's regional and organizational identity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance its security posture and transparency by adding formal security policies and incident response information.

U

unimess GmbH

unimess.de

0

unimess GmbH is a small, established internet and advertising agency based in Ulm, Germany, with over 25 years of experience. The company specializes in internet presence creation, web design, CMS implementation, SEO, SEA, programming, online shops, app development, cloud solutions, and business consulting. Their market position is regional with a focus on delivering tailored digital marketing and technology solutions. Technically, the website employs modern front-end frameworks such as Bootstrap and jQuery, with additional libraries for animations and user experience enhancements. The use of Matomo analytics reflects a privacy-conscious approach. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is good with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, though improvements in security transparency and compliance could enhance their posture.

T

top farmplan

topfarmplan.de

0

top farmplan is a German-based digital agriculture office platform designed specifically for farmers. It offers a comprehensive suite of tools including email, document management, field record keeping, and contact management, enabling farmers to maintain oversight of their operations anytime and anywhere. The business operates primarily on a subscription SaaS model, targeting the agriculture sector in Germany, with a medium-sized company profile and a founding date around 2017. The website reflects a professional and consistent brand image with excellent content quality and user experience.

R

rimondo

rimondo.com

0

rimondo.com is a specialized online platform dedicated to equestrian sports and horse breeding, providing users with access to show videos, results, breeding information, horse market listings, pedigrees, and statistics. The platform targets equestrian enthusiasts, breeders, and professionals primarily in Germany and Switzerland but serves a worldwide audience. The business operates under LV digital GmbH, indicating a medium-sized company with a focused niche market position. The website offers a paid Pro membership model to unlock full access to premium content and services. Technically, the site employs modern web technologies including Vue.js, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, HTTPS is enforced, CSRF tokens are present, and user consent is managed effectively, though explicit security headers and a public security policy are absent. The WHOIS data is missing, which is unusual and slightly reduces trust, but the professional presentation and clear business information mitigate concerns. Overall, rimondo.com presents a trustworthy, professional, and user-focused digital presence in the equestrian media sector.

L

LandReise.de

landreise.de

0

LandReise.de is a specialized online platform offering rural vacation accommodations primarily in German-speaking Europe. The company focuses on providing families, couples, and groups with access to unique farm stays, holiday homes, huts, and hideaways. Their market position is strong within the niche of rural hospitality, supported by a comprehensive and professionally designed website that facilitates booking and discovery of over 4,000 properties. Technically, the website employs modern web technologies including Statamic CMS, Tailwind CSS, and JavaScript modules, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the platform demonstrates a mature digital presence with clear contact channels and social media integration, but could improve privacy transparency and security documentation.

L

Landlust

landlust.de

0

Landlust is a well-established German media brand specializing in rural lifestyle content, including recipes, crafts, gardening, and nature-related topics. The website offers a rich user experience with professional design, clear navigation, and mobile optimization. It monetizes through content subscriptions, an e-commerce shop, and advertising partnerships. Technically, the site is built on modern frameworks such as Next.js and React, with integration of Usercentrics for GDPR-compliant consent management and Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant, and serves a broad audience interested in country living.

B

Bundesforum Lernort Bauernhof

forum-lernort-bauernhof.de

0

The Bundesforum Lernort Bauernhof is a German nationwide non-profit network established in 2006 that coordinates organizations, associations, ministries, and individuals dedicated to farm-based educational initiatives. The website serves as an information hub promoting the farm as an experiential learning environment, emphasizing sustainable development education for children and youth. The organization focuses on networking, material development, certification, and advocacy to integrate farm education into school curricula across Germany. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including jQuery and Font Awesome. It features a cookie consent mechanism but lacks a dedicated privacy policy page and explicit contact information. Security posture is generally good with HTTPS enabled, but security headers are not evident and no vulnerability disclosure or incident response information is provided. WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures.

I

i.m.a - information.medien.agrar e.V.

landwirtschaftmachtschule.de

0

The website 'Landwirtschaft macht Schule' is an initiative by i.m.a - information.medien.agrar e.V. aimed at integrating agriculture into school education in Germany. It connects farmers with schools to provide practical and sustainable learning experiences, promoting awareness of regional food production and agricultural practices. The platform offers resources, training, and a network for teachers, farmers, and associations, positioning itself as a niche educational non-profit with a strong focus on sustainability and hands-on learning. Technically, the website is built on the MYOB CMS platform using modern frameworks such as UIkit and jQuery. It features responsive design, good navigation, and moderate performance. The site employs HTTPS with a cookie consent mechanism, ensuring GDPR compliance. However, it lacks some advanced security headers and explicit incident response or vulnerability disclosure information. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or exposed sensitive data. The absence of tracking scripts and minimal user data collection aligns with privacy best practices. The WHOIS data is limited but consistent with the site's professional and educational nature, showing no suspicious patterns. Overall, the website is trustworthy, well-structured, and serves its educational mission effectively. Strategic improvements in security headers, accessibility, and transparency regarding security policies could further enhance its posture and user trust.

I

i.m.a - information.medien.agrar e.V.

ima-shop.de

0

The website ima-shop.de operates as an online shop for i.m.a - information.medien.agrar e.V., a non-profit organization providing educational materials related to agriculture, nature, and nutrition. The platform targets educators, farmers, and consumers, offering a range of informational media and teaching resources. The business model is focused on e-commerce distribution of educational content, positioning itself as a niche provider in the agricultural education sector within Germany. The site demonstrates consistent branding and good content quality aligned with its mission.

K

Kassenärztliche Vereinigung Hessen

kvhessen.de

0

The Kassenärztliche Vereinigung Hessen (KVH) is a public law corporation responsible for ensuring medical care for statutory health insured persons in the German state of Hessen. The website serves as an information and service portal for its members, including contracted physicians and psychotherapists, medical students, and patients. It offers comprehensive resources such as billing applications, practice management support, continuing education, and patient services. The organization holds a strong regional market position as the official healthcare authority in Hessen. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and is hosted by Anexia. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site uses Matomo for analytics with moderate user tracking and maintains GDPR compliance with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

U

Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut

unitaetsarchiv.de

0

The Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut is a specialized archival institution based in Germany, serving as the central archive for the worldwide Brüder-Unität and the European Continental Province. The website provides access to archival resources, restoration project information, public lectures, and publications. It targets researchers, historians, and community members interested in the Brüder-Unität heritage. The institution operates as a non-profit entity with a small organizational size and a focused niche in historical archival services. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized with good navigation and SEO practices, though hosting details and SSL configuration specifics are not provided. Cookie consent mechanisms are implemented, reflecting GDPR compliance. From a security perspective, the website shows basic best practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and incident response policies. No analytics or advertising scripts were detected, indicating minimal user tracking and a privacy-conscious approach. Overall, the website is professional, trustworthy, and well-suited for its archival mission. Recommendations include enhancing security headers, publishing a security policy, and clarifying SSL configurations to improve security posture and user trust.

E

Evangelische Mission in Solidarität (EMS)

ems-online.org

0

The Evangelische Mission in Solidarität (EMS) is a well-established non-profit organization based in Germany, focused on fostering global cooperation among churches and mission societies across Asia, Africa, Europe, and the Middle East. Their website reflects a mature digital presence with clear communication of their mission, partnership model, and key services including volunteer programs, educational initiatives, and fundraising. The organization maintains a medium-sized footprint with a network of 25 churches and 5 mission societies, emphasizing solidarity and sustainable development. Technically, the website is built on TYPO3 CMS, hosted by a reputable provider, and incorporates modern consent management and analytics tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and consent mechanisms, though some security headers and policies could be enhanced. Overall, the site is professional, trustworthy, and accessible, supporting the organization's credibility and outreach efforts.

E

Evangelische Brüder-Unität Herrnhuter Brüdergemeine

herrnhuter-spenden.de

0

The website www.herrnhuter-spenden.de serves as a donation portal for the Evangelische Brüder-Unität Herrnhuter Brüdergemeine, a religious non-profit organization based in Germany. It facilitates philanthropic support for various charitable projects including educational, health, environmental, and social initiatives. The site prominently features affiliated institutions such as Herrnhuter Missionshilfe and the Graf-Zinzendorf-Stiftung, positioning itself as a trusted platform for donors interested in religious and social causes. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and FontAwesome for responsive and accessible design. The site demonstrates good mobile optimization and clear navigation, with a cookie consent mechanism indicating GDPR compliance. However, no explicit security headers or incident response policies are published, suggesting room for improvement in security transparency. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. No WAF or blocking mechanisms are detected, and no vulnerabilities or tracking scripts are evident. The WHOIS data aligns well with the website's business claims, enhancing trustworthiness. Overall, the security posture is solid but could benefit from enhanced header configurations and published policies. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant presence suitable for its non-profit mission. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and enhancing accessibility features to further strengthen the platform's security and compliance posture.

I

IfT Institut für Talententwicklung GmbH

parentum.de

0

The website parentum.de is a professionally designed platform operated by IfT Institut für Talententwicklung GmbH, focusing on organizing career fairs for parents and youth in Germany. It serves as an informational and event promotion site, providing details about upcoming parentum career fairs across various German cities. The site leverages TYPO3 CMS and modern web technologies, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are well implemented with GDPR compliance, supported by Cookiebot for consent management. Security posture is adequate with HTTPS enforced, though additional security headers and incident response information could enhance trust. The domain registration and hosting details are consistent and trustworthy, with no signs of suspicious activity. Social media presence on TikTok and Instagram supports outreach and engagement. Overall, the site is a reliable educational event platform with a solid technical foundation and good privacy practices.

N

Netzwerk Digital

elkb-digital.de

0

Netzwerk Digital is a Bavarian digital transformation network focused on church and diaconal sectors, providing knowledge sharing, training, and collaboration services. The website is professionally designed, well-structured, and targets church professionals interested in digital tools and practices. Technically, it is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, hosted on infrastructure using GoDaddy name servers. Security posture is good with HTTPS and consent-based analytics, though some security headers could be improved. Overall, the site is trustworthy and compliant with privacy regulations, with clear contact points primarily via email and forms.

E

Evangelische Kirche in Deutschland (EKD)

fundus-medien.de

0

Fundus Medien is a cooperative image and media database operated by the Evangelische Kirche in Deutschland (EKD) and 15 regional churches. It provides free access to a large collection of images, graphics, and drawings for church and diaconal media and public relations work. The website targets church media professionals and volunteers, offering a user-friendly platform with registration and upload capabilities. Technically, the site is built on TYPO3 CMS, uses Cookiebot for GDPR-compliant cookie consent, and Matomo for privacy-respecting analytics. The site is well-structured, mobile-optimized, and professionally designed. Security practices include HTTPS enforcement and cookie consent blocking mechanisms, though some security headers could be improved. Overall, the site demonstrates a strong commitment to privacy and compliance, with clear contact information and trust signals from official church domains.

The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.

Vogel Software GmbH is a small, established German software company specializing in custom software development, particularly in Warenwirtschaft (inventory management) and Produktionsplanung (production planning) systems using Visual FoxPro and .NET technologies. Founded in 1989, the company offers tailored software solutions, coaching, and porting services, targeting SMEs in various sectors including trade, industry, and engineering firms. Their flagship products include vmAuftrag and the StarLib C# framework. The website reflects a professional and consistent brand image with detailed business and contact information, supporting their market credibility. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for form security. Hosting is managed via nshost2.de name servers, and the site includes analytics via Piwik. While the site is mobile-optimized and SEO-friendly, some security best practices like security headers (CSP, HSTS) are missing, and no cookie consent mechanism is implemented despite cookie usage. From a security perspective, the site uses HTTPS and protects its contact form with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture. The risk level is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to strengthen compliance and trust.

F

Frankfurt Zoological Society

fzs.org

0

Frankfurt Zoological Society is a well-established non-profit organization dedicated to wildlife and ecosystem conservation, focusing on protected areas and wilderness preservation. Founded in 1858, it operates internationally with projects in 18 countries and maintains a strong presence through partnerships and subsidiaries such as the Frankfurt Zoological Society – U.S. and Zoo Frankfurt. The organization relies on donations, sponsorships, and memberships to fund its conservation efforts and engages a broad audience including conservationists, donors, and the general public. Technically, the website is built on WordPress using modern plugins like Contact Form 7 and Relevanssi Live Search, with a moderate performance profile and good mobile optimization. The site employs HTTPS and domain management best practices but lacks DNSSEC and explicit security headers, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response information suggests room for enhancement. The domain registration is consistent with the organization's history, registered since 1997 with a reputable registrar, supporting high legitimacy. Overall, the website is professional, trustworthy, and content-rich, serving its audience effectively. Strategic improvements in security headers, cookie consent, and explicit security policies would further strengthen its security and compliance posture.

Gemeindewerke Kahl Versorgungsgesellschaft mbH is a regional utility provider based in Kahl am Main, Germany, offering electricity, gas, and water supply services. The company emphasizes sustainable energy solutions, including 100% certified hydropower electricity and climate-neutral gas options. Their market position is that of a trusted local supplier with a focus on environmental responsibility and customer service. The website targets residential and commercial customers in the region, providing online contract management, energy-saving tips, and services related to electromobility and photovoltaics. Technically, the website is built using modern web technologies including Bootstrap 5 and jQuery, hosted on rzone.de servers. It is mobile-optimized with good accessibility and SEO practices. The site includes interactive elements such as a tariff calculator form and a well-structured navigation menu. However, no CMS or advanced platform is explicitly detected. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No cookie consent mechanism was detected, which may pose GDPR compliance risks. The WHOIS data is consistent with the website content and business legitimacy, with no suspicious patterns. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.

E

EMB Energieversorgung Miltenberg-Bürgstadt GmbH & Co. KG

we-are-energy.de

0

EMB Energieversorgung Miltenberg-Bürgstadt GmbH & Co. KG is a regional energy and utility provider based in Miltenberg, Germany. The company offers a range of services including electricity, water, gas supply, parking, e-mobility, and heat supply, positioning itself as a sustainable and customer-focused provider in its local market. The website reflects a professional and comprehensive digital presence with clear business information, active social media engagement, and customer service portals.

E

EZV Energie- und Service GmbH & Co. KG Untermain

ezv-energie.de

0

EZV Energie- und Service GmbH & Co. KG Untermain is a regional energy and telecommunications provider based in Germany, specializing in supplying 100% green electricity, broadband internet, telephony, and e-mobility solutions. The company emphasizes local renewable energy generation including photovoltaic, wind, and hydropower, targeting private and business customers in the Untermain region. Their business model focuses on direct customer engagement supported by online services and regional partnerships. The website reflects a medium-sized enterprise with consistent branding and good content quality.

Elektrizitätswerk Goldbach-Hösbach GmbH & Co. KG is a regional utility and telecommunications provider serving the Goldbach and Hösbach areas in Germany. The company offers a range of services including electricity, natural gas, water supply, and telecommunications such as VDSL and Glasfaser internet. Their website reflects a medium-sized enterprise with a professional online presence, targeting both residential and business customers. The content is well-organized, informative, and tailored to the local market, emphasizing energy solutions, e-mobility, and building management services. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Blueimp Gallery, ensuring good mobile optimization and accessibility. The site uses HTTPS and implements cookie consent mechanisms in line with GDPR requirements. Google Analytics is used for visitor tracking with an opt-out option, indicating moderate user tracking. However, no CMS or hosting provider information is explicitly identified. From a security perspective, the site shows basic best practices such as HTTPS and cookie consent but lacks visible security headers, a published security policy, or incident response contacts. No vulnerability disclosure or security.txt file is present. The WHOIS data is limited but does not raise immediate concerns. Overall, the security posture is moderate with room for improvement in transparency and technical security controls. The website is safe for general audiences, with no adult or questionable content detected. The business credibility is high given the clear contact information, professional design, and consistent branding. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining up-to-date third-party libraries to strengthen the security posture and compliance.

Elektro Braun GmbH is a medium-sized German company specializing in electrical engineering products and services, targeting the electrical trade and industrial sectors. Their offerings include e-mobility, renewable energy, intelligent building technology, and related services, positioning them as a comprehensive provider in the energy and manufacturing sectors. The website reflects a professional and consistent brand image with clear navigation and good content relevance. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Modern Events Calendar Lite, hosted likely on Telekom infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. No critical vulnerabilities or security issues were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner, indicating GDPR adherence. Contact information is primarily via contact forms; no direct emails or phone numbers were found in the analyzed content. Overall, the website presents a trustworthy and professional digital presence with room for enhancement in security headers and explicit security policies. The domain WHOIS data aligns well with the website's claims, supporting legitimacy.

R

Richter+Frenzel GmbH + Co. KG

richter-frenzel.de

0

Richter+Frenzel GmbH + Co. KG operates as a large-scale wholesaler specializing in sanitary and building technology products, serving private customers, craftsmen, and object business clients primarily in Germany. The company maintains a strong market position with a clear business model focused on wholesale distribution and retail showroom services. Their website reflects a professional and consistent brand image, targeting a broad audience including private consumers and trade professionals. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Usercentrics for consent management. Hosting infrastructure appears reliable, with DNS nameservers linked to Deutsche Telekom, indicating a stable and professional hosting environment. The site is mobile-optimized and demonstrates good SEO practices with comprehensive metadata and structured data. From a security perspective, the website enforces HTTPS and integrates a GDPR-compliant cookie consent mechanism. However, it lacks explicit security headers and does not provide a public security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic enhancements in security policy transparency and header implementation would further strengthen their security posture.

D

Densys pv5

densys-pv5.de

0

Densys pv5 operates as a specialized B2B photovoltaic wholesale supplier based in Germany, focusing on solar modules, inverters, energy storage, mounting systems, and e-mobility charging solutions. The company targets solar installers and businesses, offering a broad product portfolio with manufacturer partnerships and insurance backing from Munich RE, positioning itself as a reliable player in the German solar energy market. The website is professionally designed with good navigation and mobile optimization, leveraging ASP.NET WebForms technology and integrating modern tracking and consent tools such as Google Tag Manager and CookieFirst. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit privacy and terms of service pages and missing security headers suggest areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The site is free from adult or questionable content, making it safe for general audiences.

B

Bundesverband des Schornsteinfegerhandwerks

schornsteinfeger.de

0

The Bundesverband des Schornsteinfegerhandwerks is a German national trade association representing the chimney sweep industry. The website provides comprehensive information about the trade, including services, regulations, partner organizations, and regional contact points. It targets homeowners, industry professionals, and partners with a focus on safety, environmental protection, and energy efficiency. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates Matomo analytics and YouTube video content with a cookie consent mechanism. Security posture is good with HTTPS and cookie management, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SHK Innung Aschaffenburg–Miltenberg

shk-aschaffenburg.de

0

SHK Innung Aschaffenburg–Miltenberg operates as a regional professional guild specializing in sanitary, heating, and air conditioning services within the Aschaffenburg and Miltenberg regions of Germany. The website serves as an information portal and member resource, providing industry news, contact details, and regulatory compliance information. The business model focuses on supporting local professionals and companies in the sector, positioning itself as a trusted regional association. Technically, the website is built on WordPress, utilizing common plugins such as Real Cookie Banner for privacy compliance and Bold Page Builder for content management. The site is hosted via DomainControl (GoDaddy), employs HTTPS, and demonstrates moderate performance with good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in security headers could enhance the technical posture. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response information suggests room for maturity in security governance. Overall, the site maintains a good security posture suitable for its business scope. The overall risk assessment indicates a low risk profile with strong compliance and trust indicators. Strategic recommendations include enhancing security headers, formalizing incident response procedures, and maintaining regular updates to WordPress and plugins to mitigate potential vulnerabilities.

S

Sparkasse Aschaffenburg Miltenberg

s-abmil.de

0

Sparkasse Aschaffenburg Miltenberg operates a comprehensive regional banking website offering a wide range of financial services including online banking, loans, investments, insurance, and private banking. The website targets both private and corporate customers in the Aschaffenburg and Miltenberg regions of Germany. It holds a strong market position supported by multiple awards for service quality and advisory excellence. The digital infrastructure is built on Adobe Experience Manager, indicating a mature and professional technical environment. The site is well-structured, mobile-optimized, and provides clear navigation and extensive customer support channels including phone, chat, and email forms. Security measures such as HTTPS, session timeouts, and cookie consent mechanisms are implemented, though explicit security headers could be more transparent. Privacy policies and cookie management comply with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity.

L

Landratsamt Miltenberg

landkreis-miltenberg.de

0

Landkreis Miltenberg's official website serves as a comprehensive portal for residents and stakeholders, providing current news, administrative services, and information about the local government. The site is well-structured with clear navigation and accessibility features, reflecting a mature digital presence for a public sector entity. The content focuses on public administration, social services, environmental protection, and community engagement, targeting local citizens and businesses. Technically, the site uses common web technologies such as jQuery, Revolution Slider, and accessibility plugins, hosted on professional infrastructure with secure HTTPS connections. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though formal security policies and incident response contacts are not explicitly published. Privacy compliance is strong, with GDPR-aligned cookie consent and privacy policies. Overall, the website demonstrates a high level of professionalism and trustworthiness appropriate for a government institution.

I

Indexa GmbH

pentatech.de

0

Pentatech, operated by Indexa GmbH in Germany, specializes in affordable DIY security products including wireless alarm systems, video surveillance cameras, smoke and gas detectors, and door intercoms. The company targets consumers and small businesses seeking easy-to-install security solutions. The website is built on an outdated Joomla! 1.5 CMS platform, hosted on German servers, and presents content professionally with clear navigation and product information. However, the technical infrastructure shows moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks modern security headers and updated CMS software, which could expose the site to vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or detailed data protection officer information. Contact options are limited to a web form without direct emails or phone numbers. Overall, the site is trustworthy but would benefit from technical and compliance improvements.

D

die profilschmiede GmbH & Co. KG

profilschmiede.de

0

die profilschmiede GmbH & Co. KG is a Cologne-based full-service agency specializing in web design, print production, hosting, social media, SEO, and consulting services. Established in 2000, the company targets businesses and associations seeking integrated digital and print solutions. Their market position is that of a trusted regional internet agency with over two decades of experience. Technically, the website employs a traditional tech stack including MooTools, Google Analytics, Hotjar, and eTracker, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the website is professional, trustworthy, and business-focused with no signs of suspicious activity or adult content.

H

HOME OF LOGISTICS

home-of-intralogistics.de

0

HOME OF LOGISTICS is a German-language industry portal focused on logistics, intralogistics, and autonomous transport. Operated by DVS Media, it provides news, event information, and advertising services targeted at logistics professionals and companies. The website demonstrates a solid market position as a niche media platform with consistent branding and a professional content offering. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections, though security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.

H

HOME OF STEEL

home-of-steel.de

0

HOME OF STEEL is a German-language online portal dedicated to the steel industry, providing free access to specialized information, news, product and company listings, and event details. The platform targets companies, professionals, and interested parties within the steel sector, positioning itself as a reputable media and information hub supported by DVS Media. The website demonstrates a professional design with consistent branding and a clear navigation structure, including integration with partner portals and social media presence on LinkedIn. Technically, the site uses modern web technologies including JavaScript libraries, a consent management system, and Google Analytics 4 for user tracking, ensuring GDPR compliance through explicit cookie consent mechanisms. Security-wise, the site enforces HTTPS, includes CSRF tokens, and uses a consent manager, but lacks explicit security headers and published security policies or incident response contacts. WHOIS data indicates a legitimate and consistent domain registration with no privacy protection, supporting the site's credibility. Overall, the website is well-maintained, secure, and compliant with privacy regulations, serving as a trusted resource for the steel industry.

H

HOME OF WELDING

home-of-welding.com

0

Home of Welding is a specialized media platform serving the welding and manufacturing industries, offering news, product information, and event coverage primarily targeting industry professionals in Germany and internationally. The website demonstrates a professional digital presence with a consistent brand and active social media channels. Technically, the site uses modern web technologies including JavaScript libraries and a consent management system, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, though the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is trustworthy and well-positioned in its niche, but domain registration opacity slightly reduces confidence.

Questwärts GmbH is a specialized education and training provider focusing on personal development and workforce training, particularly for the chemical industry and related sectors. Their offerings include open seminars, inhouse seminars, webinars, and business coaching aimed at HR professionals, managers, trainers, and apprentices. The company positions itself as a niche player with a strong emphasis on practical and legal aspects of workforce development. Technically, the website is built on the Contao CMS with modern frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced security headers and policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Militzer & Münch Group

mumnet.com

0

Militzer & Münch Group is a well-established global logistics and transportation company specializing in freight forwarding, warehousing, and supply chain management services. The company targets businesses requiring comprehensive logistics solutions and maintains a professional online presence with multilingual support. Their market position is that of a large, international logistics provider headquartered in Germany. The website is built on WordPress using modern page builder technologies, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and security headers implemented, but lacks dedicated security and incident response documentation. Privacy and cookie policies are present and GDPR compliant, reflecting attention to regulatory requirements. Overall, the website is professional and trustworthy, but the absence of WHOIS data raises some concerns about domain registration legitimacy.

W

Westfaelische Wilhelms-Universitaet Muenster

sciebo.de

0

The website hochschulcloud.nrw is an academic cloud storage service operated by Westfaelische Wilhelms-Universitaet Muenster, targeting universities and their staff and students in the NRW region of Germany. It offers secure, non-commercial cloud storage with features such as file sharing, collaboration, and project-specific storage. The service emphasizes data protection under strict German regulations and operates data centers exclusively in NRW. Technically, the site uses Imperia CMS and Bootstrap, with a moderate performance profile and good mobile optimization. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is good with a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the site is trustworthy and professionally presented, with no signs of malicious content or vulnerabilities.

Admoderate is a specialized digital brand development agency based in Germany, focusing on medium-sized businesses and agencies. They offer services including brand creation, corporate website design, and digital media conception with over 10 years of experience. The company positions itself as a reliable partner for digital growth in the mid-market segment and is part of the queo Gruppe, enhancing its market credibility. Technically, the website is built on WordPress using Elementor and optimized with Yoast SEO and WP Rocket, ensuring fast performance and excellent mobile responsiveness. Security measures include HTTPS enforcement, content security policy monitoring, and cookie consent management, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong professional presence with good SEO and privacy compliance, but could improve transparency on security and vulnerability disclosures.

S

Social Web macht Schule

social-web-macht-schule.de

0

Social Web macht Schule is a small educational organization based in Dresden, Germany, focused on promoting media literacy and digital media prevention among students, parents, and teachers. Their key services include workshops and prevention projects aimed at combating cyberbullying and encouraging safe use of social networks. The website is professionally designed using the Wix platform, featuring structured data for local business and website information, which supports their credibility. Technically, the site uses Wix's Thunderbolt framework and includes scripts to enhance security by hardening fetch and XMLHttpRequest calls. However, the site lacks visible privacy and cookie policies, which is a compliance gap given GDPR requirements. Security headers are not detected, and there is no public incident response or vulnerability disclosure information, which could be improved to enhance trust and security posture. Overall, the website is safe, well-targeted to its audience, and demonstrates a moderate level of technical maturity.

P

Procunia GmbH

procunia-online.de

0

Procunia GmbH is a specialized financial consulting firm focused on providing professional financing solutions for medium-sized enterprises in Germany. Their services include comprehensive financial planning, rating optimization, and capital procurement, leveraging over 15 years of industry experience. The company positions itself as a trusted advisor to the SME sector, offering tailored financing strategies beyond traditional banking products. The website reflects a professional and consistent brand image with clear communication channels and detailed team profiles. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern content management and SEO capabilities. Security posture is solid with HTTPS enforced and some privacy-conscious scripting, though security headers could be improved. No blocking or WAF challenges were detected, allowing full content accessibility. Overall, the site demonstrates good digital maturity and business credibility with minimal tracking and a strong focus on privacy compliance.

I

intolight

intolight.de

0

Intolight is a specialized creative agency based in Germany, focused on designing and implementing interactive installations and exhibitions for clients including museums, events, and trade shows. The company positions itself as a niche player with expertise in immersive and interactive digital experiences, supported by a portfolio of notable clients such as Netflix and Thyssenkrupp. Technically, the website is built on WordPress using the Avada theme and several modern plugins, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent managed via Borlabs Cookie, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a well-managed digital presence for a small but important business in the creative technology sector.

Q

queo valueTec

queo-valuetec.com

0

queo valueTec is a German technology company specializing in tailored software solutions aimed at sustainable value creation and business process optimization. The company positions itself as a trusted partner offering services from business analysis through solution architecture, software development, and application management. Their client portfolio includes notable organizations such as VW and Fraunhofer, supported by certifications like TISAX and CPRE, underscoring their commitment to quality and security. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript libraries and analytics tools such as Matomo and Facebook Pixel. The site demonstrates good mobile optimization, SEO practices, and a professional design, reflecting a mature digital presence. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, indicating attention to privacy regulations. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional presentation and certifications. Overall, queo valueTec presents a credible and professional business with a solid technical foundation and reasonable security posture. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance further.