Security Directory

U

ULMATEC GmbH

ulmatec.de

0

ULMATEC GmbH operates a professional website focused on modular extraction and filtration systems for industrial applications. The company positions itself as a specialized provider in the manufacturing sector, offering tailored solutions to business clients. The website is built on a modern WordPress CMS with Elementor page builder and includes multiple marketing and analytics integrations, indicating a mature digital presence. However, the WHOIS data for the domain www.ulmatec.com is missing or indicates the domain is not registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. Overall, the website is safe and professional but would benefit from improved transparency and domain registration verification.

Y

Yaskawa

yaskawa.de

0

Yaskawa is a prominent provider of industrial automation solutions in Germany, specializing in products such as industrial robots, frequency converters, servomotors, and control systems. The website targets industrial and manufacturing businesses, positioning itself as a leading automation technology provider. The digital infrastructure leverages modern technologies including Bootstrap for frontend styling, Matomo for privacy-respecting analytics, and Usercentrics for cookie consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and security headers present, although explicit privacy policies and terms of service are not found in the analyzed content. Overall, the website is professional, well-structured, and trustworthy, but could improve transparency by publishing comprehensive privacy and security policies.

M

Menzel Metallchemie GmbH

menzel-metallchemie.de

0

Menzel Metallchemie GmbH is a German-based medium-sized company specializing in the development and manufacturing of minimum quantity cooling and lubrication technologies using biodegradable high-performance oils. Positioned as a pioneer and market leader, the company serves industrial manufacturers, particularly in metal and plastic processing sectors, offering products such as spray technology systems, cooling lubricants, safety cold bronzing systems, and technical cleaning solutions. The website reflects a professional and consistent brand image with comprehensive product information and multiple contact channels including GDPR-compliant forms. Technically, the website is built on Mae CMS and employs modern web technologies including HTML5, CSS, JavaScript, and jQuery, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with good SEO practices, though some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms incorporating CSRF tokens and GDPR consent checkboxes. However, explicit security policies and incident response information are absent, and security headers are not detected. No vulnerabilities or suspicious content were found, indicating a generally sound security posture. Overall, the website is trustworthy and professional, with strong business credibility and compliance with privacy regulations. Recommendations include implementing cookie consent mechanisms, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.

A

Akademie des Versicherers im Raum der Kirchen

autobahnkirche.de

0

The website autobahnkirche.de represents a non-profit organization focused on providing spiritual rest stops along German highways, known as Autobahnkirchen. The site is managed by the Akademie des Versicherers im Raum der Kirchen, supported by entities such as HUK-Coburg and Deutsche Telekom. The business model centers on offering travelers places for reflection, rest, and spiritual comfort, with information about locations and events. The website content is well-structured, professionally presented, and targets travelers and visitors interested in spiritual respite. Technically, the site is built using Adobe Experience Manager CMS, with standard web technologies including JavaScript and CSS. Hosting appears to be managed by Deutsche Telekom, inferred from nameservers. Performance is moderate with basic mobile optimization and accessibility features. The site uses Dynatrace for monitoring user experience and performance. SEO and meta tags are basic but sufficient for the site's scope. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. However, no explicit security headers were detected in the provided data, and no incident response or security policy pages are present. No forms or contact emails are visible on the main page, limiting direct user data collection. The WHOIS data aligns with the website's organizational claims, showing a consistent and legitimate registration. Overall, the website presents a low-risk profile with a good level of professionalism and compliance for a non-profit entity. Recommendations include enhancing security headers, improving mobile and accessibility features, and adding explicit security and incident response policies to strengthen trust and compliance.

M

Markgrafenkirchen im Markgraftum Ansbach

markgrafenkirchen-ansbach.de

0

The website www.markgrafenkirchen-ansbach.de serves as an informational platform dedicated to the Markgrafenkirchen churches located in the Markgraftum Ansbach region of Germany. It provides visitors with historical, architectural, and cultural insights about these churches, supported by interactive maps, directories, and downloadable brochures. The site targets tourists, local community members, and cultural heritage enthusiasts. It is supported and financed by regional church organizations, reflecting a niche cultural heritage focus within the government/non-profit sector. Technically, the site is built on Drupal 10 CMS, employing modern web technologies including the Klaro consent manager for GDPR compliance and jQuery Colorbox for image galleries. Hosting is provided by kunde24.de, a typical hosting provider for small to medium German websites. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a clean and professional design. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed in headers), employs a cookie consent mechanism, and does not expose sensitive data or vulnerable libraries in the HTML content. However, explicit HTTP security headers are not detected, and no dedicated security or incident response policies are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent. No analytics or tracking beyond consent management is observed, indicating a privacy-conscious approach. Overall, the website presents a low-risk profile with a good balance of content quality, technical implementation, and privacy compliance. It is suitable for its cultural heritage mission but could improve security posture by adding security headers and explicit policies. Contact information is limited to a contact form, which may impact direct communication channels.

M

Markgrafenkirchen e.V.

markgrafenkirchen.de

0

Markgrafenkirchen e.V. is a non-profit organization dedicated to the cultural, spiritual, and touristic promotion of the Markgrafenkirchen churches in Upper Franconia, Germany. The website serves as a comprehensive resource offering detailed information about nearly 60 churches, including photos, events, tours, and educational materials. The organization is positioned as a niche cultural heritage promoter with a strong regional focus and supported by European Union funding. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and some security plugins, though improvements can be made in cookie consent and explicit security policies. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

Mobil Betriebskrankenkasse is a public health insurance provider based in Munich, Germany, operating as a Körperschaft des öffentlichen Rechts with self-administration. The website targets insured persons, offering services such as online processing of sick notes, sickness benefits, bonus programs, preventive health offers, and free health courses. The organization is a member of the BKK Landesverband Bayern, indicating its regional market position within Bavaria. The website presents a professional and consistent brand image with good content quality and accessibility features.

Kassensuche GmbH operates a German-language online portal focused on helping users find and compare statutory health insurance providers (gesetzliche Krankenkassen) in Germany. The website offers multiple tools including a contribution calculator, user-type based search, and detailed benefit comparisons. The portal targets insured individuals in Germany seeking optimal health insurance options. Technically, the site uses modern JavaScript modules, jQuery, and lazy loading techniques to enhance performance and user experience. The site is hosted with reputable DNS providers and uses HTTPS, ensuring secure connections. Security posture is adequate but could be improved by adding security headers and explicit incident response information. Privacy compliance is partially met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

I

ITSG - SV-Meldeportal der Sozialversicherung für Arbeitgeber

sv-meldeportal.de

0

The SV-Meldeportal is an official electronic reporting portal operated by the Informationstechnische Servicestelle der gesetzlichen Krankenversicherung GmbH (ITSG), serving employers and self-employed individuals in Germany for social insurance data exchange. It provides a secure, system-verified fill-in aid for submitting mandatory social insurance notifications, contribution statements, certificates, and applications. The portal is positioned as a government-related service with a clear focus on compliance and secure communication. Technically, the website is built on a modern WordPress CMS platform, utilizing popular plugins such as Yoast SEO Premium and WPBakery Page Builder. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some improvements in security headers and cookie consent mechanisms could be made. The presence of ISO 27001 certification indicates a strong commitment to information security standards. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data in its HTML content. However, explicit security headers are not visibly implemented, and no incident response contact details are provided. The site lacks a cookie consent banner despite having a cookie policy, which may affect GDPR compliance. Overall, the security posture is solid but could benefit from enhancements in transparency and technical controls. The overall risk assessment is low, with the site appearing trustworthy, professionally maintained, and aligned with its stated business purpose. Strategic recommendations include implementing comprehensive security headers, adding a cookie consent mechanism, publishing vulnerability disclosure information, and providing clear incident response contacts to further strengthen trust and compliance.

S

Stiftung Gesundheit

stiftung-gesundheit.de

0

Stiftung Gesundheit is a German healthcare-focused organization dedicated to disseminating health knowledge and education, as indicated by its website title and description. The website targets a general audience interested in health information and operates likely as a non-profit or educational entity. Technically, the site is built on WordPress using the Elementor page builder, with modern font integration via Typekit and emoji support. The site is accessible, mobile-optimized, and uses HTTPS, but lacks advanced security headers and privacy compliance documentation. No contact information or formal policies such as privacy or cookie policies are present, which limits user trust and compliance with GDPR. The WHOIS data is minimal and lacks detailed registrant information, which slightly reduces domain trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and legal adherence.

B

BDG – Bundesverband der Deutschen Gießerei-Industrie

guss.de

0

The website www.guss.de represents the BDG – Bundesverband der Deutschen Gießerei-Industrie, a prominent German foundry industry association. It serves as an information hub for industry news, events, research projects, and training related to the foundry sector. The site targets professionals, researchers, and stakeholders within the German manufacturing and foundry industry. The business model is centered on advocacy, knowledge dissemination, and member services, positioning BDG as a key industry player in Germany. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, and integrates modern tools such as Google Tag Manager, Google Analytics, and Usercentrics for consent management. Hosting is provided by Intersolute, as indicated by the domain's nameservers. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with a professional and consistent design. From a security perspective, the site enforces HTTPS and uses consent management for cookies, reflecting GDPR awareness. However, no explicit privacy policy or terms of service pages were found in the provided content, and no security headers were detected, suggesting room for improvement in security hardening. No vulnerabilities or exposed sensitive data were identified. The WHOIS data aligns well with the website content, indicating a legitimate and trustworthy domain registration. Overall, the website is professional, content-rich, and trustworthy, but could enhance its privacy and security posture by publishing clear policies, adding security headers, and providing contact information for incident response. These improvements would strengthen compliance and user trust.

V

VHBS

vhbs.de

0

VHBS is a specialized organization operating in the maritime transportation sector, focusing on container charter market indices such as New ConTex, industry news, and event organization like the EISBEIN dinners. The website targets shipping professionals and partners in the maritime industry, providing market data, news, and networking opportunities. Technically, the site is built on TYPO3 CMS with legacy jQuery libraries and uses CanvasJS for charting. The site is moderately optimized for performance and mobile use but could benefit from modernization and enhanced accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and uses outdated JavaScript libraries, which could pose risks. Privacy compliance is basic but present, with a privacy policy and cookie banner. Contact information is limited to a login form and partner emails referenced in news content. Overall, the site is professional and trustworthy within its niche but could improve technical and security aspects to enhance user trust and compliance.

B

bulb

bulb-startups.de

0

bulb is a German startup support network focused on providing legal and business consulting services to founders and startups. The website positions itself as a practical and relevant resource offering support through a strong network and specialized advice, particularly in labor law. The company targets startups and entrepreneurs, aiming to help transform ideas into successful businesses. The website is built on WordPress using the Avada theme and includes modern web technologies such as jQuery and WPForms. Cookie consent is managed via Cookiebot, indicating GDPR compliance. Social media presence on Instagram and LinkedIn supports community engagement. Security posture is good with HTTPS enforced and spam protection on forms, though security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, well-structured, and trustworthy, serving a niche startup support market in Germany.

H

Hamburger Verkehrsverbund

hvv.de

0

Hamburger Verkehrsverbund (hvv) operates as the primary public transportation network for Hamburg and its surrounding areas, providing comprehensive services including timetable information, ticket sales, and mobility consulting. The website serves as a digital portal for users to access schedules, purchase tickets, and stay informed about service updates. The platform targets public transit users in the Hamburg region and positions itself as a leading transportation provider with a strong regional presence. Technically, the website employs a modern JavaScript stack with libraries such as jQuery UI, GSAP, and Moment.js to enhance user experience and performance. It features responsive design and accessibility considerations, including keyboard navigation and ARIA roles. The site integrates tracking via etracker for analytics while maintaining GDPR compliance through cookie consent mechanisms and a detailed privacy policy. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, explicit security headers and a published security policy or vulnerability disclosure are absent, representing areas for improvement. No signs of WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a solid balance of usability, compliance, and security suitable for a public transportation entity. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

K

Kallinich Media GmbH & Co. KG

chemie-azubi.de

0

Chemie-Azubi.de is a specialized educational blog operated by Kallinich Media GmbH & Co. KG, focusing on apprenticeships and dual study programs in the German chemical industry. The platform provides comprehensive career guidance, company profiles, and chemistry knowledge targeted at students, apprentices, parents, and educators. It holds a niche position supported by chemical industry employers and associations, emphasizing practical career information and industry insights. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, hosted on Schlundtech infrastructure. It integrates privacy-compliant analytics (Matomo) and user consent management (Usercentrics), reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

A

Arbeitgeberverband im Bezirk Hildesheim e.V.

agvhildesheim.de

0

The Arbeitgeberverband im Bezirk Hildesheim e.V. is a well-established regional employer association representing approximately 200 member companies and nearly 22,000 employees across the Hildesheim, Alfeld, Holzminden, and Peine regions in Germany. Founded in 1949, it serves as a voluntary association providing legal, social-political, and economic representation and support to its members. The website clearly communicates its mission, services, and organizational structure, targeting regional employers seeking advocacy, legal advice, training, and networking opportunities. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted on rzone.de servers. It features a professional design with responsive elements and basic SEO optimizations. The site includes a cookie consent mechanism compliant with GDPR and employs JavaScript-based email cloaking to reduce spam. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or suspicious elements were found. The WHOIS data is minimal but consistent with the business claims, and no privacy protection is used, which is appropriate for this type of organization. Overall, the website presents a trustworthy, professional, and compliant digital presence for a regional employer association, with room for improvement in security headers and incident response transparency.

A

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V.

anaev.de

0

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V. is a regional non-profit employer association in Northern Germany providing labor law advisory services, legal representation, and political interest representation for its member companies. The website is professionally designed using TYPO3 CMS and modern web technologies, offering clear navigation and relevant content targeted at member companies and stakeholders. The technical infrastructure is moderate in performance with good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS implied but could be improved by adding explicit security policies and incident response contacts. Overall, the website is trustworthy and credible with strong partner networks and clear contact information.

U

UV Nord

uvnord.de

0

UV Nord is a regional employers' association in northern Germany, providing advocacy, information, and networking services to its member companies. The website is professionally designed using WordPress and Elementor, with a focus on labor law, social law, infrastructure, and economic topics relevant to the region. The technical infrastructure is modern and includes performance optimizations and a consent management platform for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is trustworthy and serves its target audience effectively.

V

Verband Forschender Arzneimittelhersteller e.V. (vfa)

starkamstandort.de

0

The website starkamstandort.de serves as an informational and advocacy platform for the pharmaceutical industry in Germany, operated under the umbrella of the Verband Forschender Arzneimittelhersteller e.V. (vfa). It highlights the importance of pharma as a key industry through events, policy discussions, and economic insights, targeting policymakers, industry stakeholders, and the general public interested in healthcare innovation. The site is well-branded, consistent, and professionally designed, reflecting a large and established organization with significant market influence. Technically, the site is built on the Contao Open Source CMS, utilizing modern web technologies such as jQuery, Bootstrap, and Swiper for responsive and interactive user experience. The site is mobile-optimized and SEO-friendly, with comprehensive metadata and structured data enhancing discoverability. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. It uses secure session management and CSRF protection cookies. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious patterns were detected. Overall, the site presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include adding security headers, publishing a security policy, and providing clearer contact information for incident response to further strengthen trust and security.

L

Startseite – #LebeFarbe

lebe-farbe.de

0

The website www.lebe-farbe.de is a German-language site focused on the theme of color and its impact on home environments. It provides content about the effects of colors and how they can transform living spaces, targeting a general audience interested in home decoration and color psychology. The site uses WordPress as its CMS and integrates third-party services such as Cookiebot for cookie consent management, Google Analytics, Facebook Pixel for tracking, and Spotify embeds for audio content. The technical infrastructure is modern with HTTPS enabled, though some security headers are not explicitly detected in the provided content. The cookie consent mechanism is comprehensive and GDPR compliant, but no explicit privacy policy or terms of service pages were found in the analyzed content. Contact information such as emails or phone numbers is not present in the visible HTML content, which limits direct user engagement channels. WHOIS data is minimal but consistent with a German domain, with no privacy protection or suspicious patterns detected. Overall, the website presents a good level of professionalism and compliance but could improve transparency and security posture by publishing privacy and terms documents and enhancing security headers.

M

MEHRWERT:PFLEGE

mehrwert-pflege.com

0

MEHRWERT:PFLEGE is a healthcare-focused non-profit initiative affiliated with the Verband der Ersatzkassen e. V. (vdek), providing free and comprehensive process consulting to promote employee health in hospitals, stationary and ambulatory care facilities. The website presents a professional and well-structured digital presence with clear navigation, multimedia content, and strong branding consistency. Technically, it is built on WordPress with the Avada theme and employs modern web technologies and SEO best practices. Security posture is good with HTTPS and cookie consent mechanisms, though some advanced security headers and incident response information are missing. The domain WHOIS data is unavailable, which raises some concerns about registration transparency but does not detract from the overall legitimacy suggested by the content and affiliations. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details.

V

vdek and Ersatzkassen

gesund-digital.info

0

Gesund digital is a German-language digital health education platform supported by major health insurers such as vdek and Ersatzkassen. It aims to empower users, particularly older adults and insured members, to effectively use digital health applications and understand digital health services. The website provides structured modules on finding, understanding, and trusting digital health offerings, including electronic patient records and telemedicine. Technically, the site uses modern frontend technologies like Alpine.js and serves content over HTTPS with a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is solid with no evident vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. The WHOIS data is privacy protected, which is justified given the healthcare context, and no suspicious patterns were detected. Overall, Gesund digital presents a trustworthy, professional, and user-friendly platform for digital health literacy.

S

Stiftung Gesundheit

arzt-auskunft.de

0

Stiftung Gesundheit operates the Arzt-Auskunft platform, a comprehensive German healthcare provider search service established in 1997. The platform enables patients to find doctors, clinics, therapists, and pharmacies nearby, offering features such as online appointment booking and information on barrier-free practices. The website is well-positioned in the German healthcare information market with a large user base and a strong reputation as a non-profit entity. Technically, the website employs modern frontend technologies including Vue.js, Bootstrap, jQuery, and Choices.js, ensuring a responsive and user-friendly experience across devices. Hosting is managed via Schlundtech, a reputable provider. The site demonstrates good SEO and accessibility practices, though performance is moderate. From a security perspective, the site uses HTTPS and deferred script loading, but lacks explicit security headers and a visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism was observed. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response details to further strengthen security posture and compliance.

M

Vermittlerportal - gesetzlicheKrankenkassen.de Vermittlerportal

makleraktiv.de

0

Makleraktiv.de operates as a specialized distribution partner portal focused on statutory health insurance in Germany. It targets insurance brokers and professionals by providing tools such as comparison calculators, online application processing without signature requirements, and a pooling service for membership applications. The platform emphasizes its 25 years of experience and offers a registration system for brokers to access these services. Technically, the website uses modern web technologies including Bootstrap and JavaScript ES modules, hosted on infrastructure associated with DomainControl. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and secure form submission but lacks visible advanced security headers and CSRF protections, which are recommended for improvement. Privacy compliance is partially addressed via a privacy policy hosted on a related domain, but no cookie consent mechanism is present on the login page. Overall, the website is legitimate and functional with moderate trustworthiness, suitable for its business purpose.

K

Künstlersozialkasse

kuenstlersozialkasse.de

0

The Künstlersozialkasse website serves as the official online presence for the German statutory social insurance scheme for self-employed artists and publishers. It provides comprehensive information about the KSVG law, services, compliance, and contributions, targeting artists, publishers, and companies obligated to pay contributions. The site is positioned as a government-related entity under the parent organization Knappschaft-Bahn-See since 2025, offering key services such as insurance coverage, online forms, and up-to-date news. Technically, the website is built on TYPO3 CMS with Bootstrap and FontAwesome, ensuring a modern and responsive design. Cookie consent is managed via Cookiebot, and analytics are handled by Matomo, reflecting a privacy-conscious approach. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit terms of service and vulnerability disclosure mechanisms.

K

Knappschaft-Bahn-See

arbeitgeberversicherung.de

0

The website arbeitgeberversicherung.de represents the employer insurance services provided by Knappschaft-Bahn-See, a major German government-related insurance entity. It offers comprehensive insurance coverage for employers regarding employee sickness and maternity benefits through Umlageverfahren U1 and U2. The site targets employers in both commercial and private sectors, including those with Minijobbers and employees insured under the Knappschaft system. With over two million customers and a history dating back to 1969, it holds a strong market position in Germany's social insurance landscape. Technically, the website is built on the Government Site Builder CMS, leveraging modern JavaScript libraries, Matomo analytics, and Usercentrics for cookie consent management. The site is well-optimized for mobile and accessibility, with good SEO practices and a moderate performance profile. It uses HTTPS and encrypted form submissions, ensuring secure data handling. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent management but lacks explicit published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with its government insurance service mission. Strategic improvements could include publishing dedicated security and incident response information and enhancing security headers to further strengthen its security posture.

M

Minijob-Zentrale

minijob-zentrale.de

0

Minijob-Zentrale is the official German government portal dedicated to providing comprehensive information and administrative services related to Minijobs and minor employment in Germany. It serves as the central registration and reporting authority for such employment types, targeting both employers and employees. The website offers a broad range of services including registration, calculators, informational articles, newsletters, and a household job marketplace platform. The site is well-positioned as a trusted government resource with authoritative content and a strong market presence in the employment sector.

F

Finest Audience Academy

aflare.de

0

The website aflare.de appears to be a small-scale affiliate marketing or digital marketing related site powered by Finest Audience Academy. The content is minimal and primarily focused on marketing tracking technologies. The technical infrastructure includes common analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA, hosted behind Cloudflare nameservers. However, the site lacks critical privacy and cookie policies, contact information, and visible security best practices, which limits its trustworthiness and compliance posture. The WHOIS data is limited but consistent with Cloudflare usage, providing no strong indicators of illegitimacy but also lacking transparency. Overall, the site demonstrates basic digital maturity but requires significant improvements in privacy compliance, security posture, and business transparency to enhance credibility and user trust.

F

fit trotz Family

fit-trotz-family.de

0

fit-trotz-family.de is a German niche fitness blog focused on helping parents balance fitness, family, and work life. The website offers fitness tips, product reviews, challenges, and local gym information with childcare options. It targets parents seeking practical advice to maintain an active lifestyle despite family commitments. The site is built on the Jimdo Creator CMS platform, hosted by Jimdo GmbH, and uses modern web technologies including jQuery and Google Analytics with GDPR-compliant cookie consent mechanisms. The design is professional, mobile-optimized, and content is relevant and trustworthy. Security posture is good with HTTPS enforced and basic security best practices, though additional security headers could improve protection. No critical vulnerabilities or exposed sensitive data were found. Contact is primarily via a company email address, with no phone or physical address listed. Overall, the website is safe, family-friendly, and compliant with privacy regulations.

machtfit operates a German health platform that connects companies, their employees, and health partners to promote employee wellness and engagement. The platform positions itself as a key intermediary in corporate health management, targeting medium-sized businesses in Germany. The website is built on WordPress using Elementor, integrating modern web technologies and analytics tools such as Hotjar and Google Tag Manager, although Google Analytics is not fully configured. The technical infrastructure is hosted on AWS, ensuring reliable performance and scalability. The site demonstrates good mobile optimization and SEO practices but lacks comprehensive privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but the absence of security headers and incident response policies suggests room for improvement. Overall, the website is professional and functional, but enhancing privacy compliance and security transparency would strengthen its credibility and trustworthiness.

S

SECURVITA

securvita.de

0

SECURVITA is a well-established German health insurance provider offering a broad range of statutory and private insurance products with a strong emphasis on natural healing methods and family services. The company is recognized as one of Germany's best health insurers, supported by awards and a comprehensive service portfolio including modular insurance options, bonus programs, and financial products. The website is professionally designed, content-rich, and targets German-speaking customers seeking health insurance solutions. Technically, the site is built on TYPO3 CMS, hosted on plusserver.com, and incorporates modern accessibility and cookie consent technologies. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels primarily via phone and contact forms.

Mobil Betriebskrankenkasse is a public health insurance provider based in Munich, Germany, operating as a Körperschaft des öffentlichen Rechts with self-administration. The company serves insured persons primarily in Bavaria and offers services such as online processing of sick notes, sickness benefits, bonus programs, preventive health offers, and free health courses. It is a member of the BKK Landesverband Bayern, indicating a solid regional market position within the German healthcare sector. The website is professionally designed with good content quality and clear navigation, targeting insured individuals seeking health insurance services. Technically, the site employs modern web technologies including Cookiebot for consent management and Matomo for analytics, ensuring GDPR compliance and user privacy. The site is mobile-optimized and accessible, with structured data enhancing SEO and user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

BMW BKK is a health insurance provider affiliated with BMW AG, offering comprehensive health coverage and services primarily targeting BMW employees and their families in Germany. The website presents a professional and consistent brand image with detailed service offerings including preventive health programs, exclusive benefits, and digital services. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and performance optimization tools, ensuring a good user experience across devices. Security posture is strong with HTTPS and secure script loading, though explicit security headers and visible privacy policies are lacking. Overall, the site is trustworthy and well-positioned in its niche market.

B

BRANDUNG

brandung.de

0

BRANDUNG is a digital agency based in Cologne and Berlin, Germany, specializing in smart e-commerce solutions, innovative online experiences, sustainable online marketing, and AI services. The company targets businesses seeking digital transformation and marketing expertise in the German market. The website is professionally designed using modern web technologies such as Next.js and React, with content management likely powered by Storyblok. The site demonstrates good mobile optimization and SEO practices, with a clear focus on user experience and branding consistency. From a technical perspective, the website employs HTTPS and integrates consent management through Usercentrics, reflecting GDPR compliance efforts. Google Tag Manager is used for analytics and tracking, indicating moderate user tracking. However, the site lacks explicit privacy policy, terms of service, and security policy pages, which are critical for full compliance and user trust. No contact emails or phone numbers were found in the analyzed content, limiting direct communication channels. Security posture is moderate with HTTPS enforced and consent management in place, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. No WAF or blocking mechanisms were detected, allowing full content accessibility. The domain WHOIS data shows agency-related nameservers consistent with the business location, but lacks detailed registrant information, slightly reducing trustworthiness. Overall, BRANDUNG presents as a credible and professional digital agency with a solid technical foundation but would benefit from enhanced transparency in privacy, security policies, and contact information to improve compliance and user trust.

E

Evangelisch-lutherische Landeskirche Hannovers

landeskirche-hannovers.de

0

The Evangelisch-lutherische Landeskirche Hannovers website serves as the official digital presence of the regional Evangelical Lutheran Church in Hannover, Germany. It provides comprehensive information about church administration, community services, religious ceremonies, and social support programs. The site targets church members, affiliates, and the general public interested in the church's activities. The organization holds a significant position as a large non-profit religious entity within its region. Technically, the website employs modern web technologies including Font Awesome 7 for icons, Matomo for privacy-conscious analytics, and Turbo (Hotwire) for enhanced user experience. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates security headers, contributing to a strong security posture. However, it lacks an explicit cookie consent mechanism and published security or incident response policies, which are areas for improvement to enhance compliance and transparency. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's mission. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

S

STILLE erLEBEN

stilleerleben.de

0

STILLE erLEBEN is a small hospitality business operating evangelical guesthouses in Bavaria, Germany, focused on providing quiet and spiritual retreat experiences. The website is built on Drupal 10 with Bootstrap and jQuery, offering a moderate level of technical maturity with good mobile optimization and basic SEO features. The content is well-structured and relevant to its target audience seeking tranquility and spiritual rest. From a security perspective, the website uses HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks important security headers and does not provide a security policy or incident response contact information. Privacy compliance is partially met with a privacy policy page present, but no cookie consent mechanism is implemented. Business credibility is moderate due to the absence of explicit contact details and trust indicators. Overall, the website is functional and professional but could improve its security posture and privacy compliance to enhance trustworthiness and regulatory adherence.

E

Evangelisch-Lutherische Kirche in Bayern (ELKB)

uebernachtungshaeuser-elkb.de

0

The website www.uebernachtungshaeuser-elkb.de serves as an informational portal for the Evangelisch-Lutherische Kirche in Bayern's network of group accommodations. It targets church groups, youth groups, families, and seminar attendees seeking lodging in scenic Bavarian locations. The site offers detailed descriptions of various types of houses, including self-catering and fully serviced options, and promotes community and spiritual experiences. Technically, the site is built on Drupal 10, uses Bootstrap for responsive design, and integrates Matomo analytics with privacy-conscious settings. The Klaro consent manager ensures GDPR-compliant cookie handling. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and policies are absent. No contact emails or phone numbers are directly published, relying on a contact form instead. Overall, the site is professional, trustworthy, and well-suited for its non-profit church audience.

E

Evangelisch-Lutherische Kirche in Bayern

motorrad-evangelisch.de

0

Motorrad-Evangelisch.de is a niche community website operated under the Evangelisch-Lutherische Kirche in Bayern, targeting motorcycle enthusiasts interested in evangelical Christian faith and community events in Bavaria and neighboring regions. The site offers event listings, spiritual gatherings, regional contacts, and multimedia content to engage its audience. Technically, the site is built on Drupal 10, leveraging modern web technologies and includes GDPR-compliant privacy and cookie consent mechanisms. Hosting is provided by kunde24.de, a professional hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers could be improved. Contact information is clearly presented with church-affiliated emails and phone numbers, enhancing trust and credibility. Overall, the website is well-structured, accessible, and professionally maintained, serving its community effectively.

S

Soli deo gloria - Gott allein sei Ehre

solideo.de

0

Soli deo gloria is a non-profit initiative focused on Evangelical church music in Bavaria, Germany. The website provides information about church music professions, events, instruments, and associations, targeting church musicians and members of the Evangelical Lutheran Church. The platform is niche and regionally focused, serving as a cultural and religious resource. Technically, the site is built on Drupal 10 with Bootstrap components, hosted on German servers, and optimized for mobile devices with good navigation and content quality. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professionally presented, and safe for general audiences.

E

Evangelische Kirche in Bayern (ELKB) implied

offene-kirchen-bayern.de

0

The website offene-kirchen-bayern.de serves as an informational portal for open evangelical churches in Bavaria, Germany. It is affiliated with the Evangelische Kirche in Bayern (ELKB) and provides visitors with details about churches open on weekdays, special church types, and related tourism information. The site targets the general public interested in religious and cultural visits. Technically, it is built on Drupal 10 with modern libraries such as Leaflet.js for interactive maps and Bootstrap for responsive design. The site demonstrates good content quality, clear navigation, and consistent branding aligned with ELKB. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.

B

Bergspiritualität: Endlich Pilgern

bergspiritualitaet.com

0

The website bergspiritualitaet.de is a German-language platform dedicated to spiritual mountain experiences, including retreats, pilgrimages, and mountain masses. It targets a broad audience interested in spirituality and nature, offering educational courses and community events. The site is built on TYPO3 CMS with a moderate technical infrastructure, incorporating common JavaScript libraries and a cookie consent mechanism. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and incident response information. Privacy compliance is good with a clear privacy policy and cookie consent. Business credibility is moderate due to limited explicit company or contact information. Overall, the site is professionally presented with consistent branding and relevant content for its niche.

E

Evangelisch-Lutherische Kirche in Bayern (ELKB) implied

berggottesdienste.de

0

Berggottesdienste.de is a niche non-profit website affiliated with the Evangelical Lutheran Church in Bavaria, providing information and promotion of outdoor mountain church services across various Bavarian regions. The site targets churchgoers and visitors interested in religious events in nature, offering a searchable database and links to related church tourism resources. Technically, the website is built on Drupal 10 with Bootstrap, hosted via kunde24.de, and demonstrates good mobile optimization and navigation clarity. Security posture is solid with HTTPS enforced, though lacking advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, safe, and professionally presented, serving its community-focused mission effectively.

R

Rüffert Werbung GmbH

rueffert.de

0

Rüffert Werbung GmbH is a small German manufacturer and installer specializing in high-quality advertising technology and outdoor advertising solutions. Their offerings include illuminated advertising pylons, light advertising, LED letters, advertising towers, and building lighting, serving a broad range of business customers from single enterprises to large chains. The company emphasizes comprehensive service from planning through installation, ensuring product quality and customer satisfaction. Technically, the website employs modern web technologies including jQuery and Siema slider, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms are absent. Overall, the site reflects a professional and trustworthy business with active customer engagement and social media presence.

P

profihost

de-nserver.de

0

profihost is a German technology company specializing in managed hosting, cloud services, and IT infrastructure solutions tailored for businesses, especially in e-commerce. Their website presents a professional and comprehensive portfolio of services including managed servers, security solutions, performance optimization, and specialized hosting for platforms like Shopware and Magento. The company targets business customers seeking reliable and scalable hosting and IT services. Technically, the website is well-structured, mobile-optimized, and uses modern technologies such as Google Tag Manager and consent management tools to ensure compliance and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall website professionalism and content quality suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details for trust enhancement.

B

Blechexpo Internationale Fachmesse für Blechbearbeitung

blechexpo-messe.de

0

Blechexpo is a leading international trade fair specializing in sheet metal processing and related joining technologies, held in Stuttgart, Germany. The website serves as a professional platform to provide information about upcoming events, exhibitor details, and industry news. It targets professionals and companies within the manufacturing sector, particularly those involved in cold forming, cutting, joining, and related technologies. The business model revolves around organizing and hosting trade fairs that facilitate industry networking and innovation showcasing. Technically, the website is built on WordPress with a modern tech stack including jQuery, WP Rocket for performance optimization, Borlabs Cookie for consent management, and WPML for multilingual support. The site demonstrates excellent mobile optimization, SEO practices, and fast performance, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks explicit published privacy policies, terms of service, and security incident response information, which are important for compliance and trust. No critical vulnerabilities or WAF blocking were detected, and no sensitive data exposure was found. Overall, the website is professional, trustworthy, and well-maintained, but could improve privacy and security transparency by publishing relevant policies and contact points. Strategic recommendations include adding privacy and terms pages, publishing security policies, and enhancing security headers to further strengthen trust and compliance.

B

Buth Maschinen + Technik GmbH & Co. KG

baisonlaser.de

0

Baison Laser Europa, operated by Buth Maschinen + Technik GmbH & Co. KG, is a specialized distributor of fiber laser cutting machines for metal processing in Europe. The company offers a range of high-performance laser cutting and welding equipment targeting industrial manufacturing sectors. Their market position is that of an official distributor with a focus on precision, efficiency, and automation in metal cutting technologies. The website reflects a professional and consistent brand image with clear product offerings and calls to action such as live and online demos. Technically, the site is built on the Webflow CMS platform, utilizing modern web technologies including Google Fonts, jQuery, and Usercentrics for GDPR-compliant cookie management. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, but lacks advanced security headers and published security policies. Overall, the site is trustworthy and safe with no adult or questionable content detected. WHOIS data is partially consistent with the business claims but lacks detailed registrant information. The domain appears legitimate with no privacy protection or suspicious patterns. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding vulnerability disclosure information to improve trust and compliance.

F

Fräser24

fraeser24.shop

0

Fräser24 is a German-based small e-commerce business specializing in milling and engraving tools and accessories. The website offers product categories such as Fräsen (milling), Gravieren (engraving), and Zubehör (accessories). Although the site is currently under construction, it provides basic navigation and contact options including a phone hotline and contact form. The business targets manufacturing professionals and hobbyists requiring specialized tools. Technically, the site is built on the Shopware platform with a ThemeWare theme, featuring responsive design and basic SEO elements. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is good with a cookie consent mechanism and privacy policy present. Overall, the website is functional but could improve in security and content depth to enhance trust and user experience.

B

Buth Graviersysteme GmbH & Co. KG

bg-cam.de

0

Buth Graviersysteme GmbH & Co. KG operates the BG-CAM website, specializing in the manufacture and sale of high-precision portal milling machines tailored to customer requirements. The company targets manufacturing workshops and industrial clients needing robust, vibration-free milling solutions with advanced CNC control. The website demonstrates a strong market position within a niche manufacturing segment, offering detailed product specifications, configurators, and comprehensive customer support channels. Technically, the site is built on the Webflow platform with modern web technologies, delivering good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a small but credible German manufacturing business.

Q

queo

queo.de

0

queo is a German technology company founded in 2004 specializing in agency business and software development. With over 180 employees across six locations, it operates multiple group brands including queo valueTec, queonext, intolight, Procunia, Social Web macht Schule, and admoderate. The company targets business clients seeking integrated communication, technology, and software solutions. The website is professionally designed, well-structured, and optimized for mobile, reflecting a mature digital presence. The technical infrastructure is based on the Neos CMS and Flow PHP framework, utilizing modern JavaScript libraries and analytics tools such as Matomo and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, alongside references to TISAX certification indicating adherence to automotive industry security standards. However, explicit security headers and incident response contacts are not evident, suggesting areas for improvement. Overall, queo presents a credible and trustworthy business with a good balance of technical sophistication and compliance.

Z

zur Mühlen Gruppe

zurmuehlengruppe.de

0

The zur Mühlen Gruppe is a large German manufacturing company specializing in the production and distribution of meat and sausage products. With approximately 4,000 employees across 12 locations, the company produces over 2 billion consumer packages annually and holds multiple prestigious awards such as 'Marke des Jahrhunderts' and 'Top Marke 2020'. Their business model focuses on high-quality food production, supported by rigorous quality assurance processes including 50,000 laboratory tests annually. The company also operates internationally through its subsidiary zur Mühlen International (ZMI), marketing products in over 40 countries. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries like jQuery and Swiper.js for interactive content. The site demonstrates good mobile optimization, clear navigation, and professional design, although some accessibility features are basic. Performance is moderate, with no critical errors or broken elements detected. However, there is no visible cookie consent mechanism, and security headers are not explicitly present in the provided data. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks explicit security headers and incident response information. No forms or contact emails are visible on the main page, limiting direct user communication channels. There is no security.txt or vulnerability disclosure policy found. Overall, the security posture is moderate but could be improved by implementing standard security headers, cookie consent, and incident response contacts. The overall risk assessment is low to moderate. The site is legitimate, professionally maintained, and focused on a well-established business sector. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, publishing incident response policies, and improving contact information visibility to strengthen trust and security culture.