headline: Headline (default)

background: gelb graue wolken

background: gelb graue wolken hero-image

richtext: Richtext (default)

button: Button primary/secondary

form: Form (default)

separator: Separator (default)

spacer: Spacer (default)

gallery: Gallery (default)

image: Image (default)

date: Date (default)

multimedia: Multimedia (default)

carousel old: Carousel (default) 

carousel old: Hero Image (default)

image ticker: Image Ticker (default)

text with image: Text with Image (default)

cards: Cards (default) 

accordion: Accordion (default)

html: html (default)

image with markers: Image with markers (default)

quicklinks: quicklinks (default)

searchbar: Searchbar (default)

richtext: Richtext (footer)

richtext: Richtext (gelbe Aufzählungszeichen)

cards: Cards (PaBu Preise)

text with image: Text with Image (als Hero)

cards: Cards (Emmie Preise)

richtext: Richtext (grüne Aufzählungszeichen)

cards: Cards (joboffers)

slider: Slider (Karriere)

richtext: Richtext (grüne Aufzählungszeichen) (joboffers)

button: Button primary/secondary (joboffers)

image ticker: Image Ticker (logo loesung)

text with image: Text with Image (YouTube Video)

cards: Cards (foerderprogramm) 

slider: Slider (default)

carousel 2: Carousel 2 (default)

carousel 2: Hero Image 2 (default)

image: Image (Portallösung - Störer)

richtext: Richtext (Portallösung - Störer)

quicklinks: quicklinks (Portallösung Störer)

cards: Cards (Portallösung) 

headline: Headline (Portallösung)

richtext: Richtext News

headline: Headline (News)

overview: Overview (default)

slider: Slider (Blog-Übersicht)

carousel 2: Hero Image 2 (config test page)

carousel 2: Carousel 2 (config test page)

cards 2: Cards 2 (default)

image ticker: Image Ticker (emmie logo loesung)

overview: Overview (AM Blog)

Das Logo der AM GmbH mit den Buchstaben A und M für Application Management.

AM GmbH Logo klein

The AM GmbH logo with the letters A and M for Application Management.

AM GmbH Logo small

128.png

AM LOCATIONS MeschedeFeldstraße 3459872 Meschede HamburgBorsteler Chaussee 4722453 Hamburg DortmundPariser Bogen 1144269 Dortmund

SERVICES <a href="/en/application-management" rel="" target="_self" class="rte-link">Application Management</a> <a rel="" target="_self" class="rte-link" href="/en/entwicklung-design">Development &amp; Design</a> <a rel="" target="_self" class="rte-link" href="/en/cloud-it-betrieb">Cloud &amp; IT Operations</a> <a rel="" target="_self" class="rte-link" href="/en/service-helpdesk">Service &amp; Helpdesk</a> <a rel="" target="_self" class="rte-link" href="/en/kuenstliche-intelligenz">Artificial Intelligence</a> <a rel="" target="_self" class="rte-link" href="/en/referenzen">References</a>

NAVIGATION <a rel="" class="rte-link" href="/en/kompetenzen">Competences</a> | <a rel="" target="_self" class="rte-link" href="/en/loesungen">Solutions</a> <a rel="" target="_self" class="rte-link" href="/en/pagebuilder-fuer-strapi">AM PageBuilder</a> | <a rel="" target="_self" class="rte-link" href="/en/emmie-online-vergabe-plattform">EMMIE</a> <a rel="" target="_self" class="rte-link" href="/en/microsoft-365">Microsoft 365</a> <a rel="" class="rte-link" href="/en/unternehmen">About Us</a> | <a rel="" class="rte-link" href="/en/joboffers">Your Career</a> <a rel="" target="_self" class="rte-link" href="/en/blog">Blog</a> | <a rel="" target="_self" class="rte-link" href="/en/search">Site Search</a> <a rel="" target="_self" class="rte-link" href="/en/links">Links</a>

footer

Emblem für LinkedIn mit den Buchstaben i und n

LinkedIn Social Media Icon

Emblem for LinkedIn with the letters i and n

linkedin.svg

Xing-Logo in grauem Quadrat mit abgerundeten Ecken

Xing Social Media Icon

Xing logo in grey square with rounded corners

square_xing.svg

Instagram Social Media Icon

square_instagram.svg

socialMedia

SOCIAL MEDIA

main

 Competences

Kompetenzen

page

Development & Design

Entwicklung & Design

Portals, Headless CMS

 Progressive Web Apps

Web Programming

Web Design & Usability

Cloud & IT Operations

Cloud- & IT-Betrieb

AM Data Centres

Container-Management

Middleware

Software & Licences

Service- & Helpdesk

User-Helpdesk (UHD)

Hardware-Management

Monitoring & 24/7 Fullservices

Process Management

Prozessmanagement für Unternehmen

Business Process Management

Workflow Automation

 Technologies & Solutions

Solutions

Lösungen – Digitalisierung und Compliance 

Solutions – Digitalisation and Compliance

PageBuilder for Strapi

All Content Elements

Documentation

Price & Licences

PageBuilder Demo

EMMIE - Die VergabeSuite

EMMIE – Online-Vergabe-Management-Plattform

EMMIE - Direktkauf

EMMIE For Thuringia

Prices & Licences

Services

Application Management

Artificial Intelligence

Microsoft 365

CMS Migration Service

Data Integration Services

Legacy Applications

Operation And Support

Intranet Portals

Intranet-Portal

About Us

Unternehmen

Blog

Unternehmensblog

Your Career

Karriere

Public Funding Programmes

Förderprogramme für Unternehmen

References

Referenzen Übersichtseite

Our Locations

Unsere Standorte

Certificates & Awards

Zertifikate und Auszeichnungen

 Contact

Kontakt

Did the results of our site search not help you as expected when you enter your request? Or were there no search results for your query? Feel free to contact us directly and we will be happy to help you: <a rel="" target="_self" class="rte-link" href="/en/kontakt">Go to the contact page</a> In the meantime: We are sure you find something interesting to read in our blog. Below, we have linked the latest articles from the AM GmbH company blog. In these articles, we look at digitalisation in Germany from various perspectives and focus on best practices for companies and public authorities.

show

blog

<h1>The 10 Biggest Security Vulnerabilities In The Microsoft 365 Tenant</h1> by <a rel="noopener noreferrer" target="_blank" class="rte-link" href="https://www.linkedin.com/in/sebastian-lorenz-seo/">Sebastian Lorenz</a> | Date: May 13, 2026

Microsoft 365 Tenant Check

Companies often assume that IT security is automatically guaranteed when using Microsoft 365. However, the reality of day-to-day operations paints a different picture: the most critical vulnerability is not the platform itself, but the configuration within the Microsoft 365 tenant. Failing to perform a Microsoft Tenant Check can result in security vulnerabilities remaining undetected for years. This is exactly where our structured Microsoft Tenant Audit comes in. We identify the 10 biggest security vulnerabilities in Microsoft 365 tenants, including specific recommendations for action using the Microsoft Tenant Check.

The lack of multi-factor authentication (MFA) is one of the biggest vulnerabilities in the configuration of Microsoft 365. If MFA is not enabled in the M365 tenant, a compromised password is enough to gain full access. Hackers exploit this very vulnerability to gain access to user accounts in the Microsoft 365 tenant. A lack of MFA protection is therefore one of the most common causes of security incidents. <h3>Common MFA issues in a Microsoft 365 tenant:</h3><ul><li>MFA is not enabled and required for all users</li><li>Exceptions exist for MFA usage</li><li>Legacy authentication is active and bypasses MFA requirements</li></ul> <h3>Microsoft Tenant Check For Missing Multi-Factor Authentication:</h3>The Microsoft Tenant Check Basic verifies whether multi-factor authentication is enabled in the Microsoft 365 tenant and identifies users without MFA configuration. Admin accounts, in particular, are checked for multi-factor authentication. With the Microsoft Tenant Check Premium, multi-factor authentication in the Microsoft 365 tenant is analyzed in detail. The Premium Check detects exceptions, checks for the addition of security keys, and evaluates whether legacy authentication can bypass MFA in the Microsoft 365 tenant.

The absence or inadequate configuration of these features is another critical vulnerability in Microsoft 365 security. If conditional access policies are not configured in the tenant, users can log in regardless of their location, device, or security risk. This Microsoft Entra ID zero-trust strategy prevents hackers from easily accessing the Microsoft 365 tenant with stolen credentials. Without these restrictions (conditional access), a key security mechanism for an M365 configuration is missing. Often, these policies are set to “report only” instead of being properly enabled. <h3>Common Access Errors In The Microsoft 365 Tenant:</h3><ul><li>No conditional access in the Microsoft 365 tenant</li><li>Conditional access policies not active for all M365 users</li><li>Admin accounts are not fully protected</li><li>No blocking of unsafe countries</li><li>No device access verification with restrictions</li></ul> <h3>Microsoft Tenant Check For Conditional Access:</h3>The Microsoft Tenant Check Basic verifies whether conditional access policies exist in the Microsoft 365 tenant and whether basic rules are active. A Microsoft Tenant Check Premium also checks the conditional access policies in the tenant to ensure that admin accounts are secured. It evaluates the blocking of unsafe countries and analyzes the correct implementation of device checks. For effective security in the tenant, you should implement specific conditional access policies, such as mandatory multi-factor authentication for all users, protection of admin accounts, blocking of unsafe countries, and restricting access to non-compliant devices. Microsoft Tenant Check Premium not only identifies missing conditional access policies but also assists in implementing these policies to improve the security of your M365 configuration.

Having too many global administrator accounts results in too many instances of unrestricted access to the entire Microsoft 365 tenant. If there are too many global administrators, the risk of inadvertently granting full access to a compromised account increases. This is precisely why the number of administrators is one of the most critical checks in every Microsoft tenant check and every Microsoft tenant audit. <h3>Common Admin Errors In The Microsoft 365 Tenant:</h3><ul><li>A high number of user accounts with administrative privileges</li><li>Global administration is not reviewed regularly</li><li>Former users still have admin privileges</li><li>Lack of separation between user accounts and admin access</li></ul> <h3>Microsoft Tenant Check For Global Admins:</h3>The Microsoft Tenant Check Basic assesses the number of global admin accounts in the Microsoft 365 tenant and identifies any unusual deviations in the configuration. A Microsoft Tenant Check Premium also analyzes how these accounts are used, detects obsolete accounts, and evaluates whether the number of accounts in the Microsoft 365 tenant aligns with best practices. In addition to reducing the number of global administrators in the Microsoft 365 tenant, you should assign smaller, targeted admin roles. Additionally, Privileged Identity Management (PIM) should be implemented in the Microsoft 365 tenant. Why use PIM in M365? This limits admin rights to a specific timeframe (e.g. 8 hours instead of indefinitely), and the extended access is automatically revoked after a defined period. This measure is also included in the Microsoft Tenant Check Premium.

Legacy Authentication is a well-known yet common vulnerability in Microsoft 365. If Legacy Authentication is enabled in the tenant, hackers can log in using outdated protocols and thereby bypass modern security measures such as multi-factor authentication. This active Legacy Authentication in the Microsoft 365 tenant is specifically exploited, as many attacks occur precisely through these old access methods. Without disabling Legacy Authentication, a critical security vulnerability remains. <h3>Common Authentication Issues In The Microsoft 365 Tenant:</h3><ul><li>M365 Legacy Authentication not disabled</li><li>Outdated protocols in use (e.g. IMAP, POP, SMTP Auth)</li><li>No rules in place to block Legacy Authentication</li><li>Other applications accessing Legacy Authentication</li></ul> <h3>Microsoft Tenant Check For Legacy Authentication:</h3>Microsoft Tenant Check Basic quickly determines whether legacy authentication is disabled in the Microsoft 365 tenant. It identifies active connections to M365. Microsoft Tenant Check Premium supplements the findings from the Basic Check with a list of affected users and applications. The Premium Check assesses which protocols are still using legacy authentication in the tenant.

One of the most common attack vectors in Microsoft 365 is weak email security. If this is not configured correctly in the Microsoft 365 tenant, phishing emails, other fraudulent content, and malware can reach your employees’ inboxes unimpeded. Hackers specifically exploit unpatched vulnerabilities in the Microsoft 365 tenant to trick users into revealing their credentials or to inject malicious code. Without strong email security, your M365 integration remains vulnerable overall. <h3>Common Email Issues In A Microsoft 365 Tenant:</h3><ul><li>Anti-phishing policies are not enabled in the Microsoft 365 tenant</li><li>Safe links and safe attachments are not enabled in the tenant</li><li>SPF, DKIM, and DMARC have not been configured or have been configured incorrectly</li><li>Microsoft Defender has not been set up or is only partially set up (license-dependent)</li></ul> <h3>Microsoft Tenant Check For Weak Email Security:</h3>The Microsoft Tenant Check Basic verifies whether email security settings, such as anti-phishing policies and authentication methods, are present in the Microsoft 365 tenant. The Microsoft Tenant Check Premium examines email security in the Microsoft 365 tenant in much greater detail. Configurations for anti-phishing policies, safe links, and safe attachments are analyzed. The Premium Check also includes verification of the correct implementation of SPF, DKIM, and DMARC in the tenant.

If external sharing in the Microsoft 365 tenant is not clearly regulated, data may be shared with unauthorized individuals in an uncontrolled manner. This uncontrolled external sharing within the tenant can result in sensitive information becoming accessible outside the organization. Without clear sharing policies, a significant attack surface is created. <h3>Common Sharing Errors In The Microsoft 365 Tenant:</h3><ul><li>Anonymous external sharing allowed in the tenant</li><li>No expiration dates for external sharing in the tenant</li><li>External users are not regularly reviewed</li><li>External user accounts have no expiration date</li><li>Global activation of sharing without restrictions</li></ul> <h3>Microsoft Tenant Check For Uncontrolled External Sharing:</h3>The Microsoft Tenant Check Basic assesses the status of external sharing permissions in the Microsoft 365 tenant. It also checks the status of anonymous external sharing. With the Microsoft Tenant Check Premium, external sharing in the tenant is analyzed in detail. Expiration dates, usage by external users, and risks posed by uncontrolled external sharing in the M365 tenant are checked.

Orphaned user accounts represent an often underestimated risk in <a rel="" target="_self" class="rte-link" href="/en/microsoft-365-security">Microsoft 365 security</a>. If these accounts are no longer actively used but still exist, unnecessary access opportunities remain. These accounts are often no longer monitored and can be specifically exploited by hackers. <h3>Common User Account Issues In A Microsoft 365 Tenant:</h3><ul><li>Orphaned user accounts in the tenant that have not been deactivated</li><li>Guest accounts remain active unnecessarily</li><li>No regular account reviews in the M365 tenant</li></ul> <h3>Microsoft Tenant Check For Orphaned User Accounts:</h3>With the Microsoft Tenant Check Basic, all user accounts in the Microsoft 365 tenant are checked, and inactive accounts as well as outdated guest accounts are identified. The Microsoft Tenant Check Premium also detects particularly high-risk accounts and highlights specific actions needed to address orphaned user accounts in the tenant.

If monitoring is not enabled in the Microsoft 365 tenant, attacks and suspicious activity will go undetected. Without log files, there is no visibility into who is accessing which data and when. Ultimately, a lack of monitoring and logging leads to security incidents being detected too late, severely compromising the security of your M365 instances. <h3>Common Monitoring Errors In The Microsoft 365 Tenant:</h3><ul><li>M365 monitoring and logging not enabled</li><li>Audit logging not enabled in the tenant</li><li>Log file analysis not possible</li><li>No alerts set up for suspicious activity</li></ul> <h3>Microsoft Tenant Check For Missing Monitoring and Logging:</h3>A Microsoft Tenant Check Basic verifies that audit logging is enabled in the Microsoft 365 tenant. The Microsoft Tenant Check Premium, on the other hand, analyzes log usage, reviews alerts, and determines whether monitoring and logging are actively used in the tenant to detect security incidents.

Which Tenant Check is right for your business? From threat landscapes and requirements to an early warning system in Microsoft 365. A detailed breakdown of the features. What is the process for an M365 Tenant Check? A consultation with the AM GmbH is a great first step toward greater M365 security. But read on to find out what goes into the analysis, in-depth assessment, and final report.

Comparing Tenant Check Basic And Premium

The Microsoft Secure Score often goes unused, even though it is a central component of Microsoft 365 security. If the score is not checked regularly in the tenant, security vulnerabilities remain undetected. Without using the Microsoft Secure Score, the M365 tenant lacks a clear assessment of the current security status. As a result, security is not actively improved, and existing risks persist. <h3>Common Secure Score Issues In The Microsoft 365 Tenant:</h3><ul><li>Microsoft Secure Score is not checked regularly</li><li>Actions recommended by the Secure Score are not implemented</li><li>The score is not viewed as a helpful performance metric</li><li>No prioritization of actions from the Microsoft Secure Score</li></ul> <h3>Microsoft Tenant Check For The Unused Secure Score:</h3>The Microsoft Tenant Check Basic only verifies whether the Microsoft Secure Score is present in the tenant and whether basic measures are being followed. In addition, the Microsoft Tenant Check Premium includes an evaluation of the Microsoft Secure Score as well as the implementation of the recommended measures. The Premium Check also highlights potential improvements to the Microsoft Secure Score.

A fundamental vulnerability in the Microsoft 365 tenant is a lack of governance. Without clear rules for users, permissions, data, and usage, you lose the necessary control. A lack of governance in the tenant leads to uncontrolled development of structures and the creation of security vulnerabilities. <h3>Typical Governance Errors In The Microsoft 365 Tenant:</h3><ul><li>No defined governance in the Microsoft 365 tenant</li><li>No policies, outdated policies, or only unclear policies in place</li><li>Lack of technical implementation of defined policies</li><li>No regular review of governance in the tenant</li></ul> <h3>Microsoft Tenant Check For Lack Of Governance:</h3>The basic setup of appropriate rules and structures is part of the Microsoft Tenant Check Basic. It checks whether basic governance is in place in the Microsoft 365 tenant and whether policies are defined. However, you can only receive a detailed assessment with the Microsoft Tenant Check Premium. This analyzes governance in the tenant for policy implementation and identifies vulnerabilities.

Most security vulnerabilities in a Microsoft 365 tenant arise not from missing features, but from inadequate configuration and a lack of oversight. This is precisely where a structured Microsoft Tenant Check comes in: it identifies security vulnerabilities and highlights specific risks. A regular Microsoft Tenant Audit ensures that security in the tenant is not only checked once but is also maintained at a high level over the long term. Companies that want to improve their Microsoft 365 security sustainably should therefore rely on a continuous Microsoft Tenant Check. We’d be happy to advise you!

Fabien SchumacherHead of the Sales Business Unit As a long-time sales manager at the AM GmbH, Fabien is your personal point of contact for all things Microsoft 365. He coordinates the setup and testing of M365 tenants at the AM GmbH. With Fabien, you receive expert advice from a single source, ensuring that potential security vulnerabilities in your IT infrastructure are identified and addressed more quickly.

Your Contact Person

M365 Tenant 10 Sicherheitslücken

M365 Tenant 10 Security Vulnerabilities

m365_sicherheitsluecken_thumb.webp

Lösungen und Beschreibung der 10 größten Sicherheitslücken, die auch Ihre M365-Konfiguration betreffen. Für mehr Sicherheit im Microsoft 365 Tenant.

Die 10 größten Sicherheitslücken im Microsoft 365 Tenant

<h1>Standard Software vs. Custom Development: Which Solution Is Right For You?</h1> by <a rel="noopener noreferrer" target="_blank" class="rte-link" href="https://www.linkedin.com/in/swantje-schemmerling/">Swantje Schemmerling</a> | Date: March 17, 2026

Setting The Course For Digital Transformation

When companies digitize websites or business processes, sooner or later the question arises as to whether to purchase a standard solution in the form of an standard product or to consider a custom development. At first glance, this may seem like a purely financial decision. In practice, however, there is much more at stake. This decision not only affects your budget and timeline, but also determines how flexibly you can respond to new requirements. It also shapes the interaction between your systems and determines the stability of the solution in day-to-day use.

A standard software is a pre-developed product solution designed for the broad spectrum of businesses. These include, for example, content management systems (CMS), portal solutions, as well as CRM and ERP systems. You receive a solution that fundamentally works and is often ready for use in a short time. If you need results quickly, this approach often works well. You’re quickly on a stable footing, and many features have already proven themselves in practice. Extensions and security updates are rolled out regularly. However, ready-made product comes with fixed specifications. This can quickly lead to compromises, especially in organically grown IT environments. Off-the-shelf products work best when your requirements are close to the standard and you only need to cover a few special cases. These limitations often become apparent in everyday use: <ul><li>Your processes must adapt to the software’s logic</li><li>You remain dependent on the vendors and their product strategies</li><li>You often end up paying for features you don’t actually need in your day-to-day work</li><li>Licenses, add-ons, or feature changes can incur additional costs</li><li>Interfaces are available, but they don’t always fit seamlessly into your IT environment</li></ul>

Custom development results in a software solution that focuses on your company’s business processes. Together with the AM GmbH, you first clarify what the application is intended to achieve. You define how data flows through the systems and how users will interact with them. Based on this, we develop the architecture, implement the functions, and design the user interface with <a rel="" target="_self" class="rte-link" href="/en/barrierefreiheit-usability">accessibility and usability</a> in mind. Your departments often adopt such solutions more quickly, and the benefits are particularly evident in daily use: <ul><li>Processes can be mapped directly</li><li>Seamless integration into your existing IT environment</li><li>Customizations and extensions remain possible at any time</li><li>You retain control over data and technology</li></ul> At the same time, the initial effort increases. You invest more time in design and coordination. You make decisions regarding operation and maintenance. We start with a thorough requirements analysis and translate your goals into a viable technical design. We then implement the application and continue to develop it together with you. The result is a software solution that runs reliably in everyday use and can be adapted to new requirements. You can learn more about this in the section on <a rel="" target="_self" class="rte-link" href="/en/konzeption-prototyping">design and prototyping of digital products</a>. Custom development is particularly worthwhile when the software is a central component of your business model. This approach is also ideal when off-the-shelf systems consistently hinder your processes or require too many compromises. Our case study on the <a rel="" target="_self" class="rte-link" href="/en/referenzen-telekom-personalportal">Telekom HR Service Portal</a> demonstrates how such solutions can work in practice; in this project, we integrated various HR services into a central platform for Deutsche Telekom.

Many digital projects start with the question of cost. Nevertheless, focusing on entry-level prices often leads in the wrong direction, because the actual costs only become apparent over the years. A standard product can quickly become more expensive. License costs rise, and extensions add extra expenses. This leads to workarounds in daily operations that consume resources. If you need to switch systems later, you’ll have to make investments again. Then it affects not only the technology but also organization and operations. A custom development costs more upfront but pays off in the long run. It maps your business processes more efficiently and integrates your systems seamlessly. Above all, it gives you flexibility as your company evolves. So don’t just ask yourself what software costs today. What matters is which application will support your business model more reliably in three, five, or ten years.

Often, there is no direct path to your goal if you strictly commit to just one approach. In practice, a hybrid approach frequently works best. You rely on proven building blocks, such as frameworks or a Headless CMS. On top of these, you build the extensions your company needs. These typically include custom business processes and the logic behind them. Interfaces and user interfaces can also be tailored specifically to your requirements in this way. This saves you time because you don’t have to reinvent the wheel. At the same time, you retain the freedom to customize where standard software becomes too inflexible. The AM GmbH supports you in this process. We help you determine the right balance between standard and custom development so that the solution doesn’t become unnecessarily complex later on.

A ready-made product is a good fit if your requirements are largely standardized and you’re comfortable with its limitations. Custom development, on the other hand, is worthwhile if your processes play a central role and you want to tailor the application to your specific needs. Choosing the right software solution means evaluating whether a standard product, custom development, or a hybrid approach best supports your business goals. That decision should be based on a careful analysis of your business processes, and operating conditions. Simply looking at the starting price or relying on gut feeling rarely leads to a solution that supports your business in the long term. Whether you choose a standard product, custom development, or a hybrid approach, the right solution depends on your specific requirements. The AM GmbH supports you in this process with a well-founded assessment.

Carsten KöhlerProduct Owner I support companies in planning and implementing custom and hybrid software solutions. We ensure that systems not only work today but can also scale to meet new requirements. We also handle the integration of your business processes and advise you on established and emerging technologies, such as AI integration and APIs.

Your Contact

Standardsoftware vs. Individualentwicklung

standardsoftware_vs_individualprodukte_thumb.webp

Standard software or a custom solution? Find out when off-the-shelf software is sufficient and when custom development is the better choice.

Standard Software vs. Custom Development: Which Solution Is Right For You?

<h1>Sorry PHP, But We Need To Talk About JS Tech Stack</h1> by <a rel="nofollow noopener noreferrer" target="_blank" class="rte-link" href="https://www.linkedin.com/in/sebastian-lorenz-seo/">Sebastian Lorenz</a> | Date: December 15, 2025

Our Match With JavaScript And TypeScript

Web development has undergone profound changes in recent years. Where PHP-based systems and monolithic architectures once dominated the internet, companies now rightly expect flexible platforms, high performance, and a modern user experience. Why is that? Because it simply works! At the AM GmbH, we have been consciously relying on a modern JavaScript and TypeScript stack for years. Sometimes we are asked: "Sorry, but why?" Let's talk about that and get to the bottom of this question, instead of leaving you in the dark.

Even up-to-date online systems are still based on traditional PHP structures. This classic, monolithic architecture combines backend, frontend and databases into a fixed block. Looking back, this was sufficient for simple websites for a long time, but modern digital platforms today place completely different demands on web development.&nbsp; The monolithic approach inevitably brings structural disadvantages: changes have a direct impact on the entire system, and maintenance costs increase with each new feature. In addition, technical flexibility in development is severely limited. When we think of dynamic online portals or even web apps, the classic PHP approach simply lacks the necessary agility.

At the AM GmbH, our development teams switched to decoupled, API-first architectures years ago. By using a modern Headless CMS such as Strapi and highly flexible front-end frameworks such as React and Next.js, we consistently separate content, logic and display methods from one another. This separation creates freedom: content is always available centrally and can be displayed via any frontend. It doesn't matter whether our customers want to display the content on a website, in a web app, through a web portal or in a mobile application (PWA/native app). The frontend and backend can be developed independently of each other without one side slowing down the other. Try that with PHP. Our forward-looking approach means we make projects more flexible, accumulate less technical debt and deliver significantly better expandability for the future.

Today's users expect loading times in the millisecond range and interactive behaviour similar to that of a native app. If you're thinking about SEO, yes, Google expects this too! Looking back briefly, classic PHP pages re-render content with every click. This is a time-consuming approach that no longer meets today's performance requirements and user expectations. How can internet performance be improved today? The JavaScript framework Next.js offers a combination of server-side rendering, static generation and client-side interactivity. Put simply, this means that we can achieve values that were previously only possible with highly specialised systems. This not only has a positive effect on the user experience, but is also a major factor in technical search engine optimisation. What's more, your marketing team will also be delighted because conversion rates are better thanks to faster loading times.

While PHP has historically been entrenched and has only been modernised slowly, the modern JavaScript ecosystem has developed rapidly in parallel. TypeScript in particular provides us with a tool in web development that makes large code bases stable and maintainable. Why? Typing prevents errors, improves collaboration within our teams and thus creates a solid foundation for long-term projects. This is not just a trend: With TypeScript as a modern online ecosystem, we are relying on a stack that is not only up to date today, but is also visibly evolving. This is an important factor when customers look ahead and invest in sustainable digital platforms.

Many PHP-based content management systems, such as Typo3 or WordPress, are firmly linked to the front end. What users do not see leads to typical challenges in development: plugins that are difficult to maintain, security vulnerabilities that need to be addressed, increasing update problems and limited flexibility in designing new front ends. A Headless CMS such as Strapi overcomes these limitations of monolithic CMSs. Content becomes more structured, is provided independently and can therefore be played out in any channel. For our customers, this means finally having real content management solutions that are no longer limited but can be flexibly expanded. With our in-house frontend solution, you experience intuitive content management paired with technical flexibility. More about: <a rel="" target="_self" class="rte-link" href="/en/pagebuilder-fuer-strapi">The AM PageBuilder</a>

PHP systems are often hosted in the traditional way: a server with manual updates and manual backups; plugins come from third-party providers. This increases risks and causes high operating costs in the long term. In contrast, our projects have been based for years on modern deployment strategies, automated build pipelines and cloud era hosting platforms, such as container environments or Kubernetes clusters. This makes operations management more stable and efficient at the same time. More specifically, you benefit from: <ul><li>Automated updates</li><li>Higher data security</li><li>Zero downtime deployments</li><li>Flexible scaling for growing access numbers</li></ul>

The classic PHP approach had its merits. It shaped and expanded the web. For simple websites without any data management or expandability requirements, PHP-based CMSs are still an option today. So it's only right to say thank you – the internet would be much poorer without PHP! But for the kind of digital solutions our customers need (portals, platforms, intranets, web apps, etc.), PHP wasn't enough for a long-term relationship. We've long since settled on the JS tech stack. Admittedly, we ran both in parallel for a while, but we wanted to be sure, of course! To summarize again, what led us to the JavaScript/TypeScript-based stack: <ul><li>Modern architecture with high security</li><li>Outstanding performance and strong scalability</li><li>Flexible further development for long-lasting solutions</li><li>Customized updates and better automation</li></ul> In short: The JS tech stack is the foundation for digital products that are future-proof.

Carsten KöhlerProduct Owner I support your company with web-based solutions that not only impress today, but also grow with you in long term. The modern JS tech stack provides the perfect basis for this. This is precisely why the AM GmbH relies on it for web developent.

JavaScript Tech Stack

js_tech_stack_php_thumb.webp

Why do we rely on JavaScript and have moved away from PHP-based systems? Here, we report on our best tech stack match in web development in recent years.

Sorry PHP, But We Need To Talk About JS Tech Stack

<h1>Progressive Web Apps: The Bridge Between Website And Native App</h1> By <a rel="nofollow noopener noreferrer" target="_blank" class="rte-link" href="https://www.linkedin.com/in/henrike-villis/">Henrike Villis</a> | Date: 24. July 2025

Web Technology With Future

Progressive Web Apps are at an interesting point in their development. While they're not part of the current technology hype, they've established themselves as a consistently relevant solution, with a growth rate of around $6 billion expected by 2030. But what exactly defines PWAs, and why should companies have this technology on their radar? Here, we reveal how a progressive web app bridges the gap between a traditional website and a native mobile app.

A Progressive Web App is essentially a website that behaves like a native app. The key difference, however, lies in its development efficiency. While an app for iOS or Android requires dedicated programming, it takes significantly less time to create a PWA from an existing website, as the same code base often serves as the foundation. Well-known examples are all around us: Spotify, SPIEGEL, and YouTube operate as PWAs, as do online menus like Starbucks, for example. Often used even unconsciously, this innovation combines the flexibility of a website with the convenience of a native app, offering decisive advantages for companies and users alike. <h3>Did you know?</h3>You can tell whether the website you are visiting is a progressive web app by looking at the download symbol in the URL in your browser.

Push notifications, offline functionality, lightning-fast loading times – PWAs offer all this and more. But what makes this technology so special, and why is it worthwhile for companies to integrate PWAs into their digital strategy? A core feature of PWAs is their offline functionality. However, PWAs don't necessarily have to operate completely offline; often, only certain functions are available without an internet connection. Think, for example, of the timetable or the map at a festival. These locations often lack a good internet connection, so PWAs are ideal for these cases. This is made possible by so-called service workers. These are scripts that cache important data in the background, thus providing offline functionality. This flexibility makes them particularly attractive for companies that want to offer their users added value even with a poor internet connection. Push notifications are at least as important as offline capability. Whoever gets website visitors to install the PWA on their smartphone wins. Companies can reach these users specifically and in real time with push notifications, such as current offers, reminders, or personalized news. Users are activated regularly, return more often, and achieve more conversions.

<ul><li>PWAs can be installed directly from the browser and appear with their own icon on the home screen.</li><li>Progressive Web Apps require only limited storage space, usually less than 1 MB.</li><li>Users receive push notifications and app-like operation, all without having to go through app stores.</li><li>The barrier to installation is significantly reduced and can lead to higher installation rates.</li><li>Can be installed independently of devices and operating systems.</li></ul> The last point, however, presents a challenge. Especially on the iOS operating system, PWAs are repeatedly treated poorly by Apple. They only work via Safari, push notifications are limited, and installation isn't as seamless as on Android devices. Could Apple be concerned about the diminishing influence of the App Store? One can only speculate. Apple even briefly announced that it would completely block PWAs in the EU, but reversed this decision after massive protests and regulatory pressure. However, the reach remains attractive for most companies, as PWAs work across platforms and are particularly effective on Android and desktop platforms.

For companies, PWAs offer not only technological but also economic advantages. Development is significantly more efficient than with native apps because a single code base for web and mobile is often sufficient, eliminating the need for complex app store processes. Updates are installed automatically and without user intervention, simplifying maintenance and further development and ensuring applications are always up-to-date. Their reach is also greater: PWAs run on virtually every device and operating system. This makes them particularly attractive for companies that want to respond quickly and flexibly to market changes. Success stories like AliExpress (+104% conversion rate), Flipkart (+70%), and Starbucks (doubling of daily users) demonstrate how effective PWAs can be for consumer-oriented services and platforms. From a user perspective, PWAs are popular for four main reasons: <ul><li>Speed</li><li>Installability</li><li>Reliability</li><li>Engagement</li></ul> F.I.R.E. (fast, installable, reliable, engaging). 50% of smartphone users prefer mobile websites because they don't want to install yet another app that eats up storage space. However, a PWA is often less than 1 MB in size and is therefore most likely to be spared the next time it's deleted.

Google, for example, actively promotes the development and adoption of PWAs. The company sees PWAs as an important building block for a better user experience on the web and has launched numerous initiatives to increase their visibility and adoption. Google defines PWAs as reliable, fast, and user-friendly, which is why PWAs tend to rank higher in search results. Google's support ensures that PWAs have significant advantages over traditional native apps in terms of <a rel="" target="_self" class="rte-link" href="/en/seo">SEO and reach</a>.

<ul><li>Do you already have a website and want to make it available as a <a rel="" target="_self" class="rte-link" href="/en/pwa-website-als-app">progressive web app</a>?</li><li>Are you considering whether a PWA makes sense for your business model and would like sound advice on opportunities and challenges?</li><li>Are you looking for an efficient, cross-platform solution to future-proof your digital offering?</li></ul>

Please enter a search term.

The Latest Articles From The AM GmbH Blog

Die 10 größten Sicherheitslücken im Microsoft 365 Tenant

Standard Software vs. Custom Development: Which Solution Is Right For You?

Sorry PHP, But We Need To Talk About JS Tech Stack

Progressive Web Apps: The Bridge Between Website And Native App

More Online Visibility With SEO Expertise