United States security reports

G

Geiger.com

geiger.com

40

Geiger.com is a large, family-owned US-based distributor specializing in promotional products, corporate gifts, and imprinted apparel. The company positions itself as the largest family-owned promotional product distributor in the US, serving a broad business audience with a comprehensive product catalog and services including custom products, kitting, corporate programs, and expos. The website reflects a mature digital presence with extensive product categories, client brand logos, and active social media engagement. Technically, the website uses modern JavaScript frameworks such as Vue.js and Bootstrap 5, hosted likely on AWS infrastructure. Marketing and analytics tools include Google Tag Manager, Google Analytics, Osano CMP for consent management, Filestack for file handling, and Searchspring for search functionality. The site is mobile-optimized and accessible with good SEO practices, though performance metrics indicate slow loading. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. While some security headers are present, key TLS protocols and best practices like HSTS, OCSP stapling, and session resumption are not enabled. No incident response or vulnerability disclosure policies are found. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professionally designed and credible from a business standpoint but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL/TLS deployment, enabling modern security headers and protocols, implementing cookie consent, and publishing incident response information.

S&P Global is a leading enterprise in the financial data and analytics sector, providing essential intelligence through a combination of data, connected technologies, and expert insights. The website reflects a mature, well-structured digital presence with comprehensive content targeting financial professionals and enterprises. Technically, the site leverages Adobe Experience Manager CMS, integrates modern analytics and error tracking tools, and maintains good SEO and accessibility standards. However, a critical security gap exists due to the absence of a valid SSL certificate, which significantly impacts the security posture and overall trustworthiness. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. The domain registration aligns with the company's long-standing history and public presence, reinforcing legitimacy. Strategic improvements in SSL configuration and enhanced security practices are recommended to elevate the site's security and trust levels.

D

Delegate Healthcare Solutions LLC

delegate-group.com

38

Delegate Healthcare Solutions LLC operates as a leading manufacturer of foodservice software tailored for communal catering environments such as healthcare facilities, educational institutions, and senior living communities. The company offers a comprehensive suite of software solutions including patient service, foodservice management, full-service catering, and key functionalities like enterprise resource planning and menu ordering systems. Their market position is strong, supported by partnerships with notable clients and a clear focus on delivering integrated, cloud-hosted, and mobile-optimized solutions. Technically, the website is built on modern frameworks like Next.js and hosted on Vercel, with a CMS likely based on Strapi. While the site demonstrates excellent content quality, branding consistency, and user experience, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of modern TLS protocols. Privacy compliance is addressed through Cookiebot, ensuring consent mechanisms are in place. Overall, the business presents a credible and professional front but must urgently address its SSL/TLS configuration to improve security posture and trustworthiness.

Summit Printing LLC operates as an established online commercial printing company founded in 2010, offering a wide range of printing services including banners, brochures, business cards, mailing services, and graphic design. The company targets businesses and graphic designers across the United States and Canada, leveraging multiple plant locations to provide fast production and free shipping. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses PHP 7.0.33, jQuery, Modernizr, and is hosted behind Cloudflare with LiteSpeed server technology. However, the absence of a valid SSL certificate and HTTPS implementation is a significant security shortfall. Security headers such as HSTS, X-Frame-Options, and X-Content-Type-Options are present, but the lack of TLS protocols and certificate transparency compliance reduces the overall security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site scores moderately on content quality and business credibility but is penalized heavily for security deficiencies.

T

Tyco

tyco.com

40

Tyco, a subsidiary of Johnson Controls, is a mature enterprise-level provider of integrated security products and solutions, including access control, video surveillance, cloud services, and fire suppression. The company targets commercial and enterprise customers globally, leveraging a broad partner ecosystem and multiple subsidiary brands. The website demonstrates a professional design with good content quality and clear navigation, supported by modern technologies such as Sitecore CMS and Bootstrap. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses risks to secure communications. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the domain registration and WHOIS data confirm the legitimacy and maturity of the business. Strategic improvements in SSL and TLS configuration are recommended to enhance security and trust.

Tarian Group, LLC is a large US-based security services provider specializing in guarding services, integrated security technology, risk advisory, and preparedness training. The company targets critical infrastructure, government, healthcare, commercial, and residential sectors, positioning itself as North America’s fastest growing security provider with a client-centric and innovative approach. The website is built on WordPress with the Divi theme and several plugins, showing a modern but somewhat basic technical infrastructure. However, the absence of HTTPS and SSL certificates is a significant security shortfall. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and multiple licensed office locations. The security posture is weak due to lack of HTTPS and missing security headers, but no active vulnerabilities were detected. Overall, the site is professional and trustworthy but requires urgent security improvements.

A

AMETEK Grabner Instruments

grabner-instruments.com

40

AMETEK Grabner Instruments is a medium-sized business specializing in the development and manufacturing of automatic petroleum testing equipment, including vapor pressure testers, flashpoint testers, and fuel analyzers. The company operates globally with a strong market position as an innovator and thought leader in fuel analysis technology. Their website reflects a professional business model focused on manufacturing, sales, training, and technical support services for the petroleum and energy sectors. Technically, the website uses ASP.NET technology with JavaScript libraries and is hosted on AWS infrastructure. While the site is mobile optimized and has good content quality, it suffers from slow load times and lacks a valid SSL certificate, which impacts security posture significantly. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Security best practices are partially implemented but require urgent improvements, especially regarding HTTPS and security headers. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate entity.

L

Leviton Manufacturing Co., Inc.

brand-rex.com

40

Leviton Manufacturing Co., Inc. operates a comprehensive and professionally designed website offering a wide range of electrical and lighting control products targeting residential, commercial, and industrial markets. The company positions itself as a leader in home electrical safety with over 115 years of history, providing products such as lighting controls, wiring devices, networking solutions, electric vehicle charging, and submetering. The website demonstrates a mature digital presence with extensive product catalogs, market segmentation, and partner integrations. Technically, the site is built on Adobe Experience Manager with modern marketing and analytics tools integrated, ensuring good user experience and SEO. However, a critical security gap exists due to the absence of a valid SSL certificate and disabled TLS protocols, significantly impacting the security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain credibility.

M

Mons Royale

monsroyale.com

40

Mons Royale is a specialized e-commerce retailer offering high-performance merino wool apparel targeting outdoor and active lifestyle consumers. The company emphasizes sustainability and natural performance materials, positioning itself as a niche brand with a global presence through regional subdomains. Technically, the website is built on the Shopify platform with a modern tech stack including jQuery, GSAP, and various marketing and analytics integrations. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which undermines user trust and data security. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism despite extensive tracking. Business credibility is supported by consistent branding, social media presence, and B Corp certification. Overall, the site is professional and content-rich but requires urgent security improvements to meet industry standards.

I

International Society of Automation

isa.org

40

The International Society of Automation (ISA) is a well-established non-profit professional association focused on industrial automation. It serves a global audience of engineers, technicians, and management professionals by providing standards, certifications, training, and events. The organization holds a strong market position as a trusted source for automation standards and technical resources. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site uses Microsoft IIS with ASP.NET MVC and Kentico CMS, integrating modern JavaScript libraries and Google Tag Manager for analytics. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which are critical for secure communications. Privacy policies and terms of service are well documented, though cookie consent mechanisms appear lacking. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

BMW USA operates as the official US branch of BMW AG, providing a comprehensive digital platform for luxury vehicle sales, including new, pre-owned, electric, and hybrid models. The website offers rich content, detailed vehicle information, and multiple customer engagement tools such as build-your-own configurators, dealer locators, and financial services. The brand maintains a strong market position as a premium automotive manufacturer with a focus on innovation and customer experience. Technically, the site leverages Adobe Experience Manager, modern JavaScript modules, and integrates various analytics and marketing tools, reflecting a mature digital infrastructure. Security measures are partially implemented with secure cookies and some security headers, but the SSL certificate is invalid or missing, which is a critical issue. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting GDPR compliance. Overall, the website is professional and trustworthy but requires improvements in SSL configuration and security headers to enhance its security posture.

B

Bullhorn

invenias.com

40

Bullhorn is a well-established enterprise SaaS provider specializing in cloud-based staffing and recruitment software solutions, including the Invenias executive search platform. The company serves a global customer base with a comprehensive suite of products designed to streamline recruitment processes, enhance compliance, and improve business development efforts. The website reflects a mature digital presence with strong branding, professional content, and targeted messaging for staffing firms and executive search professionals. Technically, the site leverages WordPress CMS, integrates marketing automation tools like Marketo, and employs standard web technologies such as jQuery and Slick Carousel. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which is a critical vulnerability that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent via OneTrust, and GDPR adherence. Overall, the site is professional and credible but requires urgent remediation of SSL issues to ensure secure user interactions.

Edgewell Personal Care operates a global corporate website showcasing its portfolio of personal care brands. The site targets consumers and stakeholders interested in the company's products, culture, and sustainability efforts. Technically, the site is built on Shopify with Cloudflare CDN and security services, leveraging modern web technologies and cookie consent mechanisms. However, a critical security weakness is the absence of a valid SSL certificate and disabled TLS protocols, which undermines secure communications. Privacy compliance is well addressed with OneTrust cookie consent and GDPR indicators. Overall, the site presents a professional and trustworthy business image but requires urgent remediation of SSL and TLS issues to ensure secure user interactions.

C

Constable Alan Rosen

pct1constable.net

51

The website pct1constable.net represents the Harris County Constable's Office Precinct 1, a government law enforcement entity serving residents and visitors of Harris County, Texas. The site provides detailed information about the office's mission, divisions, community programs, and contact information, positioning itself as a trusted local public safety resource. The business model is that of a government service provider focused on law enforcement and community engagement. Technically, the site is built on WordPress with common plugins such as WPBakery Page Builder, Slider Revolution, and Contact Form 7, and integrates Google Analytics for visitor tracking. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Security headers are partially implemented, but modern TLS protocols and HSTS are missing, exposing the site to potential risks. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms, despite the use of tracking technologies. Overall, the site is functional and informative but requires urgent improvements in security and privacy to meet modern standards.

B

Bloomerang

initlive.com

63

Bloomerang operates as a leading provider of cloud-based donor management and fundraising software tailored for nonprofit organizations. The company offers a comprehensive suite of tools including donor CRM, fundraising, and volunteer management solutions, positioning itself as a trusted partner to over 26,000 nonprofits. Their market presence is reinforced by multiple industry awards and strong customer testimonials, reflecting a mature and well-established business model focused on SaaS delivery. Technically, the website is built on WordPress and leverages a modern technology stack including Yoast SEO, Google Tag Manager, and various marketing and analytics integrations such as Marketo and Microsoft Clarity. Hosting is provided via WP Engine with Cloudflare CDN, ensuring good infrastructure support. The site demonstrates excellent design quality, mobile optimization, and SEO practices, contributing to a positive user experience and strong digital maturity. From a security perspective, the site currently lacks a valid SSL certificate and does not support modern TLS protocols, which significantly undermines its security posture. While some security headers are present, critical improvements are needed to secure data transmission and protect user privacy. Privacy and cookie policies are comprehensive and GDPR compliant, indicating attention to regulatory requirements. Contact information is clearly provided, enhancing business credibility. Overall, Bloomerang's website reflects a professional and trustworthy nonprofit software provider with strong business credibility and digital presence. However, the absence of HTTPS and modern encryption protocols presents a critical security risk that should be addressed promptly to protect users and maintain trust.

W

WestRock

westrock.com

39

WestRock is a global leader in sustainable packaging manufacturing, operating across multiple countries with extensive packaging converting operations and paper mills. The company targets businesses requiring innovative and sustainable packaging solutions across diverse markets such as beverage, healthcare, foodservice, and retail. Their business model focuses on manufacturing and supplying a broad range of packaging products and services, supported by a strong digital presence and comprehensive content. Technically, the website leverages modern web technologies including Sitecore CMS, Coveo search, and Brightcove video players, indicating a mature digital infrastructure. However, the absence of a valid SSL/TLS certificate and HTTPS severely undermines the security posture, exposing users to risks and reducing trust. Privacy policies and cookie consent mechanisms are well implemented, reflecting good compliance practices. Overall, the site is professionally designed with clear navigation and strong branding, but critical security improvements are necessary to protect user data and enhance trust.

S&P Global Ratings operates as a leading global credit rating agency providing essential financial intelligence embedded into the workflows of customers worldwide. The website reflects a mature enterprise with a comprehensive offering of credit ratings, research, and analytics services targeted at investors, issuers, and intermediaries. The digital infrastructure leverages modern JavaScript libraries, marketing tools, and analytics platforms, hosted primarily on Amazon AWS with content delivery via Akamai. While the site is professionally designed with excellent content quality and user experience, it lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are present, but the absence of TLS protocols and certificate transparency compliance are critical gaps. Privacy policies and cookie notices are well implemented, indicating good privacy compliance. Overall, the website demonstrates high business credibility but requires urgent security improvements to align with best practices and protect user data.

B

BMC Software, Inc.

bmc.com

40

BMC Software, Inc. is a well-established enterprise software company specializing in IT service management, automation, and mainframe solutions. The website reflects a strong market position with a focus on AI-driven digital transformation and multi-cloud enterprise management. The content is comprehensive, professionally designed, and targets enterprise IT professionals and organizations. Technically, the site is built on Adobe Experience Manager and leverages modern personalization and analytics tools such as Mutiny and Adobe Launch, served via Cloudflare CDN. However, the security posture is weakened by an invalid SSL certificate and disabled TLS protocols, which are critical issues that need immediate remediation. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness but requires urgent security improvements to protect user data and maintain trust.

S

Stryker

stryker.com

40

Stryker is a large multinational healthcare company specializing in medical devices and healthcare solutions, serving a global audience including healthcare professionals and patients. The website serves as an international homepage with localized country sites, reflecting a broad global presence. Technically, the site is built on Adobe Experience Manager and hosted via AWS CloudFront, utilizing various marketing and analytics technologies such as Adobe DTM, Google Analytics, and Marketo. However, the website lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Security headers are implemented but cannot compensate for the absence of HTTPS. Privacy and cookie policies are not found, and no explicit contact information is provided on the homepage, which impacts privacy compliance and user trust. Overall, the site demonstrates moderate business credibility but requires urgent improvements in security and privacy compliance to meet modern standards.

B

Belimed INC.

belimed.com

40

Belimed INC. is a large healthcare-focused company specializing in medical and surgical instrument sterilization, disinfection, and cleaning products and services. The company positions itself as a trusted partner in advancing medical care and protecting patient and staff safety, with a global presence and over 1,000 employees across nine countries. Their business model is primarily B2B, serving sterile processing departments and healthcare providers with a comprehensive portfolio including washer-disinfectors, sterilizers, digitalization solutions, and training services. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Tailwind CSS for styling. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Connect, LinkedIn Pixel, and Calendly. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. However, the SSL certificate is invalid or missing, which significantly impacts the security posture. From a security perspective, the site implements several important HTTP security headers and a restrictive Content-Security-Policy, but the lack of a valid SSL certificate and incomplete HSTS implementation are critical weaknesses. No explicit security or incident response policies are found, and there is no vulnerability disclosure or security.txt file. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is professional and trustworthy from a business and content perspective but requires urgent remediation of SSL issues to improve security and user trust. Strategic improvements in security policy transparency and incident response readiness are also recommended.

I

ICW Group

icwgroup.com

36

ICW Group is a national commercial insurance provider specializing in workers' compensation, catastrophe insurance, and assumed reinsurance coverage. The company targets businesses seeking comprehensive insurance solutions and risk management services. Their website reflects a mature digital presence built on WordPress with Elementor, featuring well-structured content, clear navigation, and integration with multiple marketing and analytics tools such as Hotjar, Pardot, and Google Tag Manager. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. While cookie consent mechanisms and privacy policies are in place, explicit security policies and incident response information are absent. Overall, the website demonstrates good business credibility and user experience but requires urgent improvements in security to protect user data and enhance trust.

N

NNZ United States

nnzusa.com

40

NNZ United States is a well-established multinational packaging company with a history dating back to 1922. The company specializes in providing customized packaging solutions primarily for the fresh produce and industrial sectors. It operates through a broad network of subsidiaries across Europe, North America, and Africa, positioning itself as a market leader with a strong emphasis on sustainability and innovation. The website reflects a professional and comprehensive digital presence, offering detailed product portfolios, sustainability initiatives, and corporate information. Technically, the website is built on WordPress with modern tools such as Gravity Forms and Google Tag Manager integrated for analytics and marketing. While the site is well-structured, mobile-optimized, and SEO-friendly, it suffers from a critical security shortfall: the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Security headers are properly configured, but the lack of encryption undermines user trust and data protection. The company demonstrates good privacy compliance with clear privacy and cookie policies, including consent mechanisms. Contact information is readily available, including phone numbers, physical address, and contact forms, enhancing business credibility. However, no explicit security policy or incident response information is found on the site. Overall, NNZ USA presents a strong business and digital profile but must urgently address its SSL/TLS configuration to improve security and trustworthiness. Strategic improvements in this area will enhance user confidence and align the website with modern security standards.

Sensus, a brand under Xylem Inc., specializes in smart solutions for water, energy, and communication infrastructure, targeting utilities and municipalities. The website presents a mature, well-branded digital presence with comprehensive product and service information, supporting a B2B business model focused on smart utility networks and managed services. Technically, the site uses modern web technologies including EPiServer CMS and Cloudflare for hosting, but suffers from critical SSL/TLS misconfigurations, lacking a valid HTTPS certificate which severely impacts security posture. Security headers are well implemented, but the absence of HTTPS and modern TLS protocols is a major vulnerability. Privacy compliance is partially met with a clear privacy policy and terms of service, but no cookie consent mechanism is observed despite cookie usage. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and maintain trust.

The website represents a small private psychotherapy practice operated by Darchelle Worley MA, LMHC, based in Seattle, Washington. The business focuses on providing individual and group therapy services to adults and adolescents, emphasizing present-focused change and healing from past traumas. The site content is relevant and consistent with the healthcare sector, targeting clients seeking mental health support. Technically, the website is built on a legacy stack using Apache server and older versions of jQuery. It lacks a CMS and modern web technologies, resulting in basic mobile optimization and slow performance. The site is served over HTTP without a valid SSL certificate, which is a significant security concern. Google Analytics is used for tracking, but no privacy or cookie policies are present, indicating poor privacy compliance. From a security perspective, the absence of HTTPS, lack of security headers, and missing DNS security features such as DNSSEC and CAA records expose the site to risks. No incident response or security policies are published, and no forms are present to collect user data, reducing attack surface but also limiting user engagement. The domain's DNS records are incomplete or missing, and no SSL certificate is installed, which undermines trust and legitimacy. Overall, the website scores low on security and privacy compliance, moderate on business credibility and content quality, and basic on technical implementation. Strategic improvements in SSL deployment, privacy policy publication, and security header implementation are critical to enhance trust and compliance.

P

Patheon pharma services - Global CDMO

patheon.com

39

Patheon pharma services, a brand under Thermo Fisher Scientific, operates as a global contract development and manufacturing organization (CDMO) serving the pharmaceutical, biotech, and life sciences industries. The website presents a comprehensive portfolio of services including small and large molecule development, advanced therapies, clinical trial services, and commercial manufacturing. Positioned as a trusted partner with a global footprint, Patheon emphasizes integrated solutions and innovative drug development approaches to accelerate treatments to market. The business model focuses on end-to-end drug development and manufacturing partnerships, targeting pharmaceutical and biotech companies worldwide. The domain is mature and strongly protected, reflecting a stable and legitimate enterprise presence. Technically, the website is built on Adobe Experience Manager (AEM) and leverages modern JavaScript libraries such as jQuery, FontAwesome, and Slick Carousel, alongside marketing and analytics tools like Adobe Target and Genesys Messenger. Hosting and content delivery are managed via Akamai CDN, ensuring global reach and performance. The site is mobile optimized with good SEO practices and structured data for enhanced search visibility. However, performance metrics are not explicitly available. From a security perspective, the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, which is a critical vulnerability impacting user trust and data security. While some security headers are present, the misconfiguration of HSTS and absence of modern TLS protocols and cipher suites significantly weaken the security posture. Privacy compliance is well addressed through comprehensive privacy and cookie policies linked to the parent company’s domain, with GDPR compliance implied. Contact information is primarily via web forms, with no direct emails or phone numbers prominently displayed. Overall, the website demonstrates strong business credibility and professional digital presence but requires urgent remediation of its SSL/TLS and HTTPS implementation to meet modern security standards and protect user data. Strategic improvements in security configuration and explicit contact channels would enhance trust and compliance.

H

H.B. Fuller

hbfuller.com

40

H.B. Fuller is a well-established global manufacturer specializing in adhesives, sealants, and specialty chemical products with a 130-year history. The company serves diverse industrial sectors including electronics, medical, transportation, packaging, and construction. Their business model focuses on B2B manufacturing with strong technical support and sustainability initiatives. The website reflects a mature digital presence with comprehensive content, multi-language support, and clear navigation tailored to industrial customers and partners. Technically, the website leverages modern frameworks such as Bootstrap 5 and integrates advanced search capabilities via Coveo. It uses Cloudflare for hosting and CDN services, and employs multiple analytics and tracking tools including Google Analytics, Microsoft Clarity, Hotjar, and Application Insights. The site is mobile-optimized and SEO-friendly, though performance metrics were not available. From a security perspective, the site implements a robust Content Security Policy and uses multiple security headers. However, a critical weakness is the absence of a valid SSL certificate and lack of TLS protocol support, which severely impacts the security posture and user trust. Privacy compliance is strong, with comprehensive policies and consent management via Iubenda. Contact information and social media presence further enhance business credibility. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure communications and improve its security score. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and implementing HSTS and OCSP stapling to enhance security and user confidence.

B

Bridgestone Americas, Inc.

bridgestoneamericas.com

40

Bridgestone Americas, Inc. is a leading enterprise in the transportation sector specializing in tire manufacturing and sustainable mobility solutions. Founded in 1931 and operating as a subsidiary of Bridgestone Corporation, the company maintains a strong market position with a comprehensive digital presence. The website reflects a professional and consistent brand image, targeting both consumers and business clients with detailed corporate information and resources. Technically, the site leverages modern frameworks such as Adobe Experience Manager and Vuetify, supported by a robust hosting infrastructure on AWS. However, a critical security gap exists due to an invalid or missing SSL certificate, severely impacting the site's security posture. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained but requires urgent remediation of its SSL configuration to ensure secure user interactions.

T

Tulsa Public Schools

tulsaschools.org

40

Tulsa Public Schools operates a comprehensive public education system serving a large student population in Tulsa, Oklahoma. The website provides extensive resources for students, families, educators, and community members, including enrollment information, academic programs, family support, and career opportunities. The district positions itself as a community-focused organization committed to equity, excellence, and student success. Technically, the site leverages modern analytics and marketing tools, a reputable CMS (Finalsite), and Cloudflare for hosting and security. However, a critical security gap exists due to the absence of a valid SSL certificate, which undermines the secure delivery of content and user trust. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

Weatherford's PetroVisor website presents a mature and comprehensive SaaS platform focused on unifying data and analytics for the energy sector, specifically oil and gas production optimization. The platform integrates AI/ML capabilities and offers multiple modules addressing production, artificial lift, completion optimization, ESG, and enhanced oil recovery. The website is professionally designed, content-rich, and targets enterprise-level energy industry professionals. Technically, the site uses a modern tech stack including Kentico CMS, jQuery, and various analytics and marketing tools. However, a critical security gap exists as the site lacks a valid SSL certificate and does not serve content over HTTPS, exposing users to potential risks. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security incident response or vulnerability disclosure information is found. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic security improvements are necessary to enhance trust and protect user data.

E

Emerson Electric Co.

flexim.com

40

The website flexim.com serves as a comprehensive brand page for Flexim, a division of Emerson Electric Co., specializing in non-intrusive, clamp-on ultrasonic flow meters for liquids, gases, and steam. The site positions Flexim as an industry leader with a strong focus on industrial and energy sectors, offering a wide range of products, services, and customer support resources. The content is rich, professionally designed, and well-structured, targeting industrial customers and professionals seeking advanced flow measurement solutions. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, and Visual Website Optimizer, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, significantly impacting the site's security posture. Privacy and compliance measures are well addressed with clear privacy and cookie policies, and incident response channels are available. Overall, the site demonstrates high business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions and maintain trust.

Genuine Parts Company is a well-established global leader in the distribution of automotive and industrial replacement parts, founded in 1928. The company operates extensively across North America, Europe, and Australasia with a large workforce and numerous locations. Their business model focuses on providing quality parts and value-added solutions through a network of subsidiaries and partner brands such as NAPA and Motion. The website reflects a mature corporate presence with investor relations, sustainability reporting, and career opportunities prominently featured. Technically, the site is built on WordPress with common libraries and frameworks, and is hosted behind Cloudflare. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy compliance is addressed through a OneTrust cookie consent mechanism and a comprehensive privacy policy, but no explicit terms of service or security policies are found. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

M

Melitta

melitta.com

40

Melitta is a well-established company specializing in coffee products and related services, operating a professional website that serves both consumers and B2B partners. The site provides comprehensive information about the company, its sustainability initiatives, and customer service options, supported by a consistent brand presence and active social media engagement. The technical infrastructure leverages modern JavaScript libraries, Google Analytics, and Cloudflare CDN services, with good mobile optimization and accessibility features implemented via a third-party widget. However, the website's security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is functional and professional but requires urgent remediation of SSL and TLS issues to improve security and trustworthiness.

A

American Austrian Foundation

aaf-online.org

22

The American Austrian Foundation is a well-established non-profit organization dedicated to fostering knowledge transfer and experience exchange in medicine, culture, and media through fellowship programs and bilateral exchanges. The website reflects a professional and consistent brand with clear program offerings and international reach. Technically, the site is built on WordPress with Elementor and uses modern web technologies, but suffers from a critical lack of HTTPS, which undermines security and user trust. The security posture is weak due to the absence of a valid SSL certificate and missing security headers, although no major vulnerabilities were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is strong, supported by trust badges and consistent WHOIS data. Overall, the site is functional and informative but requires urgent security improvements to protect users and enhance trust.

Watts LLC is a well-established enterprise manufacturing and supplying plumbing, heating, water quality, drainage, and HVAC solutions globally. Founded in 1874 and headquartered in North Andover, Massachusetts, the company operates a broad portfolio of subsidiary brands and targets professionals and businesses in water technology sectors. The website reflects a mature digital presence with comprehensive content, strong branding consistency, and clear navigation tailored for a professional audience. Technically, the site leverages Sitecore CMS, Cloudflare hosting, and modern JavaScript libraries to deliver a good user experience with mobile optimization and accessibility features. However, the security posture is notably weak due to the absence of a valid SSL certificate and HTTPS support, which poses significant risks to user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but requires urgent security improvements to align with best practices.

S

SVCI

svci.net

37

SVCI is a specialized angel investor syndicate composed of leading Chief Information Security Officers (CISOs) focused on early-stage cybersecurity startups. The group leverages its deep industry expertise and network to identify promising companies and provide both capital and mentorship. Powered by Notable Capital, a significant early-to-growth VC firm, SVCI operates independently with a strong emphasis on ethics and transparency. The website presents a professional image with clear messaging about its mission and operations, targeting cybersecurity entrepreneurs and investors.

M

Mississippi University for Women

muw.edu

33

Mississippi University for Women (The W) is a public co-educational university founded in 1884, offering a broad range of undergraduate and graduate programs with a strong emphasis on academic excellence and leadership development. The university holds a solid market position in the southern United States, recognized for low student debt and transfer student friendliness. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, faculty, staff, and alumni. The content is rich, well-structured, and supported by active social media channels and event management tools.

K

Kollective Technology

kontiki.com

39

Kollective Technology operates a sophisticated enterprise video and collaboration platform focused on delivering observability, analytics, and optimization for large-scale video events. The company targets large enterprises and IT leadership teams, positioning itself as a leader in the technology sector with AI-powered solutions. The website is professionally designed, content-rich, and well-branded, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrations, hosted behind Cloudflare, and uses various marketing and analytics tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent security improvements.

Hitachi Vantara LLC is a leading enterprise technology company specializing in sustainable data infrastructure and hybrid cloud solutions. The company offers a broad portfolio including storage platforms, data management, infrastructure as a service, and integrated systems, supported by a strong partner ecosystem and customer success services. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation targeting enterprise IT professionals. Technically, the site is built on Adobe Experience Manager hosted on AWS, utilizing modern frameworks and third-party integrations for video and analytics. However, the absence of a valid SSL certificate and missing security headers represent significant security weaknesses that reduce the overall security posture. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by structured data, customer testimonials, and clear contact information. Overall, the site is trustworthy and professional but requires urgent improvements in SSL and security headers to enhance user trust and security.

P

Party and Be Married

partyandbemarried.com

37

Party and Be Married is a small, specialized event planning and coordination company focused on weddings, lifestyle, and business events primarily serving California and beyond. The company emphasizes a personalized, artistic approach to creating unique client experiences. The website is hosted on Squarespace and uses standard web technologies including JavaScript, FontAwesome, and Google Fonts. While the site design is professional and content is relevant, the technical infrastructure shows weaknesses such as lack of a valid SSL certificate and disabled HTTPS, which severely impacts security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is limited to an email and contact form, with no phone or physical address listed. Social media presence is active, supporting marketing efforts. Overall, the website is functional but requires significant improvements in security and compliance to meet modern standards.

O

Open Knowledge Maps

openknowledgemaps.org

30

Open Knowledge Maps is a well-established non-profit organization founded in 2014, focused on revolutionizing scientific knowledge discovery through AI-based search and visualization tools. Their platform serves researchers and the scientific community by providing an accessible and open infrastructure for literature search and concept identification. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and D3.js, and is hosted on Contabo servers. However, the absence of HTTPS is a critical security gap that undermines user trust and data protection. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms, alongside the use of privacy-respecting analytics (Matomo). Business credibility is supported by testimonials, awards, and open source transparency. Overall, the site is content-rich and professionally designed but requires urgent security improvements.

L

Lee Enterprises

oanow.com

40

Opelika Auburn News (oanow.com) is a regional news media website operated by Lee Enterprises, providing comprehensive local news, sports, weather, opinion, and lifestyle content for Opelika, Auburn, Lee County, and East Alabama. The site targets local residents and community members, offering both free content and subscription-based digital and print editions. The business model relies heavily on advertising revenue supplemented by subscription services. The website is professionally designed with consistent branding and good content quality, supported by a modern CMS platform (BLOX) and a robust advertising ecosystem integrating multiple ad networks and tracking technologies. Privacy compliance is addressed through the use of Osano consent management, indicating GDPR adherence.

Henry Schein, Inc. is a well-established global distributor of medical and dental supplies, serving healthcare professionals with a broad portfolio of products and services. The company holds a strong market position as a Fortune 500 enterprise with a history dating back to 1932. Their website reflects a professional and consistent brand image targeting dental and medical professionals, offering solutions ranging from supplies to practice management software and educational resources. Technically, the site is built on a Microsoft IIS and ASP.NET stack, leveraging multiple third-party marketing and analytics tools, with moderate performance and good mobile optimization. However, the SSL certificate is invalid or missing, which significantly impacts the security posture. While security headers and content security policies are implemented, the lack of valid HTTPS and modern TLS protocols is a critical vulnerability. Privacy compliance is basic, with no visible cookie consent mechanism or GDPR indicators, and no public security or incident response policies. Overall, the website is functional and credible but requires urgent improvements in SSL configuration and privacy compliance to enhance trust and security.

S

Sphera Solutions, Inc.

thinkstep.com

33

Sphera Solutions, Inc. is a leading provider of enterprise sustainability management software, data, and consulting services, targeting large enterprises across multiple industries globally. The company offers a comprehensive platform, SpheraCloud, that integrates sustainability, operational risk, and EHS management to help organizations meet regulatory and strategic goals. The website demonstrates a high level of digital maturity with modern technologies, multilingual support, and rich content including case studies, events, and resources. However, a critical security issue is the invalid SSL certificate, which undermines secure communications and trust. The presence of strong privacy and cookie policies with consent mechanisms indicates good compliance posture. Overall, the company is well-positioned in the market with strong branding and trust indicators but should urgently address SSL and related security configurations.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

M

Memorial Healthcare System

mhs.net

37

Memorial Healthcare System is a well-established nonprofit healthcare provider based in South Florida, offering a wide range of medical services including cancer care, heart and vascular treatment, maternity, mental health, and rehabilitation. The organization targets both patients and medical professionals, positioning itself as a leader in the regional healthcare market with multiple accreditations and a strong community presence. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and consistent branding. Technically, the site is hosted on Microsoft Azure using ASP.NET and integrates modern web technologies and analytics tools such as Google Tag Manager and Azure Application Insights. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site demonstrates high business credibility but requires urgent security improvements to protect user data and maintain trust.

Marriott Hotels is a globally recognized hospitality brand offering a wide range of hotel and resort accommodations, loyalty rewards, and premium guest experiences. The website reflects a mature digital presence with professional design, rich content, and integration of modern technologies such as React, Brightcove video, and Adobe DTM for analytics and marketing. However, the site currently lacks a valid SSL certificate, which is a critical security flaw that undermines user trust and data protection. Privacy and terms of use policies are present and comprehensive, supporting GDPR compliance. Overall, the business is well-established with consistent branding and a strong market position, but the technical security posture requires urgent improvement to meet industry standards.

Urban Outfitters is a large retail company specializing in lifestyle apparel and home decor targeting young adults. The website is protected by a PerimeterX Web Application Firewall (WAF) which presents a CAPTCHA challenge, blocking direct access to content and preventing detailed content and policy analysis. The technical infrastructure includes nginx server hosting and DNS managed via Google Cloud DNS. However, the SSL/TLS configuration is currently invalid or missing, resulting in no HTTPS availability and exposing the site to security risks. DNS and MX records indicate legitimate email infrastructure consistent with the retail business. Overall, the security posture is weak due to lack of HTTPS and missing security headers, and privacy compliance information is not accessible due to the WAF block. The domain registration data is consistent and legitimate, supporting the business credibility. Strategic improvements in SSL deployment and security header implementation are critical.

Metro by T-Mobile is a prominent prepaid wireless telecommunications provider operating under the parent company T-Mobile US. The website offers a comprehensive range of prepaid phone plans, devices, and home internet services targeting consumers in the United States and Puerto Rico. It positions itself as a value-driven brand with competitive pricing, device promotions, and benefits such as Amazon Prime and Google One integration. The site is professionally designed with clear navigation and rich content tailored to its target audience.

C

CTI Meeting Technology

ctimeetingtech.com

40

CTI Meeting Technology is a mature and established provider of comprehensive meeting management software solutions, serving the STEM meeting industry for over 40 years. Their all-in-one platform supports virtual, hybrid, and in-person events with a wide range of modules including abstract management, presentation management, program management, and more. The company targets meeting organizers, associations, PCOs, and other stakeholders involved in event planning and execution. Technically, the website is built on WordPress with Elementor and integrates various modern tools such as Calendly and Microsoft Clarity. However, the absence of a valid SSL certificate and HTTPS significantly impacts the security posture. While security headers are present, the lack of encryption is a critical vulnerability. The website demonstrates good privacy compliance with clear policies and contact information. Overall, the business is credible and well-positioned in its market, but it must address critical security issues to improve trust and compliance.

V

VAM USA

vam-usa.com

40

VAM USA is a medium-sized company specializing in premium connection solutions for the oil and gas industry, with a strong market position as a world leader and a parent company relationship to Vallourec Oil and Gas France. The website provides comprehensive business information, product details, and service offerings targeted at energy sector professionals and distributors in North America. Technically, the site is built on WordPress with common marketing and analytics tools but suffers from slow performance and lacks modern security implementations such as HTTPS and security headers. The security posture is weak due to the absence of a valid SSL certificate and no HTTPS support, which is a critical issue. Privacy compliance is poor, with no visible privacy or cookie policies. Overall, the site is professional and credible but requires urgent security improvements to protect users and enhance trust.