Energy security reports

A

Airswift

linkoilandgas.com

59

Airswift is a well-established international recruitment and workforce solutions company specializing in technology, engineering, and energy sectors. With over 40 years of experience and a global footprint of 60 offices, Airswift offers comprehensive services including talent acquisition, employer of record, consulting, and managed solutions. The website reflects a mature business with a strong market position and a clear focus on STEM professionals and technical recruitment worldwide. Technically, the site is built on HubSpot CMS, leveraging modern marketing and analytics tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with the company's business objectives.

Arcadis is a leading global design and consultancy firm specializing in sustainable solutions for natural and built assets. With over 36,000 employees across more than 30 countries, the company offers services in engineering, consultancy, digital innovation, and project management. The website reflects a strong market position with a focus on improving quality of life through sustainable development. Technically, the site is built on the Sitecore CMS platform, leveraging modern JavaScript libraries, Google Analytics, and consent management tools like Cookiebot. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy of the domain and its alignment with the company's business claims. Overall, the website presents a professional, trustworthy, and compliant digital presence.

A

AQS

aqsmed.com

29

AQS is a Malta-based company specializing in renewable energy solutions including solar photovoltaic systems, smart home automation, EV chargers, and energy storage. The company targets both residential and commercial customers, offering a range of products and services with leasing and revenue sharing options. Their market position is supported by a significant installed base of over 50,000 panels and a portfolio of notable projects. Technically, the website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with room for improvement in security and privacy compliance.

Paragon Offshore Limited is an offshore drilling company that underwent significant corporate restructuring, culminating in its acquisition by Borr Drilling Limited in 2018. The website primarily serves as a corporate notice platform informing visitors about the ownership change and the status of shares. The company operates in the energy sector, specifically offshore drilling, and functions as a subsidiary under Borr Drilling Limited. The website content is minimal and focused on corporate information rather than marketing or customer engagement. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks mobile optimization and accessibility features, and no advanced SEO or analytics tools are evident. The performance is moderate but limited by the simplicity of the site. There is no evidence of HTTPS usage or security headers, which indicates a weak security posture. From a security perspective, the site lacks critical elements such as HTTPS, privacy and cookie policies, contact information, and incident response details. No forms or user input mechanisms are present, reducing attack surface but also limiting user engagement. The absence of security best practices and compliance indicators suggests the site is informational only and not designed for interactive or transactional use. Overall, the website presents a low-risk profile due to its static nature but suffers from poor security and privacy compliance. Strategic improvements in security, privacy policies, and technical modernization are recommended to enhance trust and compliance.

A

Arkadia Group

arkadiagroup.fr

29

Arkadia Group is a French independent engineering consulting company specializing in project management and engineering services across key industrial sectors including energy, transport, aerospace, defense, and life sciences. The company emphasizes a human-centered and sustainable engineering approach, supported by multiple ISO certifications (ISO 9001, ISO 19443, MASE, CERFI) that reinforce its commitment to quality and security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients in France and internationally. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and reCAPTCHA, ensuring good performance, SEO, and security practices. Security posture is strong with HTTPS, form protections, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and credible business.

P

PT Freeport Indonesia

ptfi.co.id

56

PT Freeport Indonesia is a major mining company operating in Papua, Indonesia, specializing in copper, gold, and silver extraction and processing. The company maintains a strong market position with global concentrate marketing and emphasizes sustainability, community engagement, and corporate governance. The website reflects a professional digital presence with good content quality and navigation, supporting both Indonesian and English languages. Technically, the site uses modern JavaScript libraries and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms, though lacks some advanced security headers and explicit incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

O

Ophi Technologies Oy

ophi.fi

35

Ophi Technologies Oy is a Finnish technology company specializing in bioenergy solutions, mechanical and automation design, and manufacturing services. The company positions itself as an innovative domestic player with a focus on maximizing customer value through technology products and engineering services. Their partnership with Siemens underscores their industrial credibility and market presence. The website is professionally designed using WordPress and Elementor, featuring clear navigation and bilingual support (Finnish and English). The technical infrastructure includes modern web technologies and a moderate performance profile with good mobile optimization. Security posture is solid with HTTPS enforced and form validation implemented, though explicit security policies and cookie consent mechanisms are absent. Overall, the site reflects a trustworthy and credible business with room for improvement in privacy compliance and security transparency.

C

Camilleri & Cuschieri Consulting Engineers

camilleriandcuschieri.com

15

Camilleri & Cuschieri Consulting Engineers is a well-established Maltese engineering consultancy firm specializing in building engineering services and industrial controls since 1979. The company serves a diverse clientele including banks, universities, and property developers, offering services such as project design, surveys, testing, certification, and energy audits. Their market position is strong within Malta, supported by client testimonials and a professional online presence. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder and Slider Revolution, with a moderate performance and good mobile optimization. However, the site lacks HTTPS, which is a significant security shortfall. The presence of cookie consent and analytics tools indicates some level of privacy awareness, though no explicit security or incident response policies are published. Security posture is moderate but impacted by the absence of HTTPS and security headers, exposing the site to potential risks. The site collects user data via contact forms and uses third-party services like Google Analytics and Tawk.to chat, which require careful privacy management. Overall, the website is professional and credible but requires urgent security improvements, especially implementing HTTPS and enhancing security headers. Privacy policies are present but could be more comprehensive. Strategic recommendations include upgrading security infrastructure, formalizing incident response, and improving accessibility and compliance documentation.

W

World-Class Oilfield Services

oilserv.com

27

OiLSERV is a leading integrated oilfield services company operating primarily in the Middle East and North Africa region. The company emphasizes uncompromising ethics, quality, and tailored solutions across a broad portfolio of services including drilling, cementing, wireline logging, well testing, and production solutions. Their market position is strong as a regional leader with a focus on client commitments and continuous improvement. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. Security features include HTTPS, Google reCAPTCHA, and cookie consent mechanisms aligned with GDPR. However, explicit security policies and incident response contacts are not published, indicating room for improvement in transparency and readiness. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through cookie policies and consent banners. The domain is privacy protected but has an appropriate age consistent with the company's history, supporting legitimacy. Overall, OiLSERV presents a professional and trustworthy online presence with strong business credibility. Strategic enhancements in security policy publication and incident response transparency would further strengthen their security posture and stakeholder trust.

G

Galea Curmi Engineering Services Ltd.

galeacurmi.com

32

Galea Curmi Engineering Services Ltd. is a specialized consulting engineering firm based in Malta, focusing on infrared thermography, VOC optical gas imaging, building services consultancy, and equipment sales and rentals. The company targets private, commercial, and industrial clients requiring technical engineering solutions. The website presents a professional image with clear service offerings and participation in European co-financed projects, indicating a credible market position in the energy and engineering sectors. Technically, the website is built on WordPress with legacy jQuery libraries and uses Breeze caching for performance. While the site is accessible and moderately optimized, it lacks modern security headers and uses outdated JavaScript libraries, which pose security risks. The site has basic mobile optimization and SEO but does not implement advanced analytics or tracking. From a security perspective, HTTPS is enabled, but no advanced security headers or policies are detected. The absence of privacy and cookie policies indicates non-compliance with GDPR best practices. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain uses privacy protection for WHOIS data, which is common but reduces transparency. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and contact transparency to enhance trust and reduce risk.

R

Reliance Industries Limited

ril.com

54

Reliance Industries Limited is a leading Indian conglomerate with diversified operations in energy, petrochemicals, retail, telecommunications, new energy, and media sectors. The company holds a dominant market position as the largest private sector corporation in India and is recognized globally in petrochemicals and refining. Their website reflects a mature digital presence with comprehensive business information, investor relations, and corporate social responsibility initiatives. Technically, the site is built on Drupal 9, leveraging modern web technologies and CDN services for performance and scalability. Security posture is strong with HTTPS, security headers, and anonymized analytics, though improvements can be made in privacy compliance with visible cookie consent and formal security policies. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

M

Marine Electrical Consulting Ltd

mec-ltd.co.uk

36

Marine Electrical Consulting Ltd is a specialized consultancy offering marine, offshore, and industrial electrical engineering services with over 25 years of experience. Their website highlights a broad range of engineering and consulting services tailored to ship owners, operators, and offshore project stakeholders. The company positions itself as a trusted expert in marine electrical power system design, control automation, software engineering, and project support. The website content is professionally presented with clear navigation and relevant service descriptions, targeting a niche market within the energy and transportation sectors.

NOV is a leading global energy services company specializing in oilfield equipment, technologies, and expertise to support the oil and gas industry worldwide. With a history spanning over 150 years, NOV positions itself as a technology-first innovator driving efficiency, safety, and sustainability in energy production. The company targets industry customers seeking advanced solutions to complex energy challenges. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not found. Overall, the site reflects a mature enterprise with professional branding and comprehensive content, supporting a high level of trust and credibility.

DNO ASA is a Norwegian oil and gas operator with active operations in the Middle East and the North Sea, publicly listed on the Oslo Stock Exchange. The company provides comprehensive investor relations information, corporate governance details, and operational insights through a professionally designed and well-structured website. The target audience includes investors, industry professionals, and partners within the energy sector. The business model focuses on exploration, production, and supply chain management in oil and gas. Technically, the website leverages modern analytics tools such as Google Analytics and Google Tag Manager, integrates Google Maps for location visualization, and is built on the Umbraco CMS platform. The site is mobile optimized, accessible, and SEO friendly, providing a good user experience. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security headers and a public security policy or incident response contact are not present, representing areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with a high legitimacy score based on WHOIS data consistency. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure channels to further strengthen trust and compliance.

H

hotset

hotset.de

49

hotset GmbH is a medium-sized German company specializing in industrial heating and thermal engineering solutions. Established in 1973, it offers a broad portfolio of heating elements, thermosensor technology, and process control systems. The company maintains an international presence with subsidiaries in Malta, Singapore, USA, China, India, and Great Britain, positioning itself as a trusted development partner in the energy sector. The website reflects a mature digital infrastructure built on WordPress with modern plugins and SEO optimizations, providing a professional user experience and comprehensive content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with a detailed privacy policy and cookie management. Overall, hotset demonstrates a high level of business credibility and digital maturity.

N

Nabors Industries Ltd.

nabors.com

47

Nabors Industries Ltd. operates as a leading global provider of advanced drilling rigs, software, wellbore services, and equipment primarily serving the energy sector. With operations spanning approximately 15 countries, the company emphasizes innovation through automation, digital operations platforms such as RigCLOUD, and energy transition initiatives including emissions reporting and rig electrification. The website reflects a mature enterprise with a comprehensive service portfolio targeting operators, contractors, and oilfield service providers. Technically, the website is built on WordPress using the Divi theme and several plugins enhancing user experience and functionality. It employs modern JavaScript libraries and integrates Google Analytics and VisitorQueue for user tracking. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs some security best practices. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence for Nabors Industries, with recommendations to enhance security policies, privacy compliance, and transparency to further strengthen its risk posture.

SOCOTEC España is a well-established engineering consultancy and TIC service provider operating primarily in Spain and Colombia. As part of the SOCOTEC Group, it holds a strong market position in infrastructure, construction, and environmental sectors, emphasizing sustainability and innovation. The website reflects a mature digital presence with comprehensive service offerings and a clear focus on resilience and decarbonization. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes performance monitoring and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response disclosures are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting SOCOTEC's reputation as a leading engineering firm.

C

China Oilfield Services Limited

cosl.com.sg

44

China Oilfield Services Limited (COSL) is a leading integrated offshore oilfield services provider primarily serving the Asian market with a global footprint. The company offers a comprehensive range of services including geophysical surveys, drilling, well services, and marine support, supported by a large fleet of vessels and advanced technical equipment. The website reflects COSL's enterprise scale and market leadership with detailed service descriptions and investor information. Technically, the website uses standard web technologies such as jQuery and JavaScript, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by implementing HTTPS enforcement and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy features.

Strategic Risk Solutions (SRS) is a leading provider of captive insurance management and alternative risk financing consulting services. With over 25 years of experience, SRS positions itself as the world's largest independent insurance company manager focused exclusively on captive insurance. The company offers tailored solutions to help organizations control and leverage risk, providing customized captive insurance frameworks and ongoing management support. Their market position is strong, supported by a global presence and multiple subsidiary companies. The website reflects a professional and content-rich platform targeting organizations seeking advanced risk management solutions. Technically, the site is built on WordPress with modern frameworks and plugins, including analytics and GDPR compliance tools. Security posture is robust, with HTTPS enforced and ISO 27001 certification prominently displayed, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

A

American Residential Services LLC

ars.com

57

American Residential Services LLC operates the ARS/Rescue Rooter brand, providing comprehensive residential HVAC, plumbing, electrical, and home comfort services across the United States. The company positions itself as a trusted service provider with a strong market presence, offering emergency services, maintenance, installation, and repair. Their website reflects a mature digital presence with clear branding, extensive service information, and multiple customer engagement channels including phone and online booking. Technically, the website leverages modern frameworks such as Bootstrap and Umbraco CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Braze, and Matomo, and demonstrates good mobile optimization and accessibility. The site uses HTTPS with no visible security misconfigurations, though it lacks some advanced security headers and explicit security policies. From a security perspective, the site maintains a solid posture with encrypted communications, validated form inputs, and no exposed sensitive data. However, it does not publish incident response or vulnerability disclosure policies, which could be improved to enhance trust and compliance. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, though transparency around data retention could be enhanced. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively. Strategic improvements in security policy transparency and legal completeness would further strengthen its risk posture and customer confidence.

C

Carlo Gavazzi

carlogavazzi.com.mt

57

Carlo Gavazzi is an established international group specializing in the design, manufacture, and marketing of electronic automation components, primarily serving the industrial and building automation markets. The company maintains a strong global presence with a comprehensive product portfolio including sensors, solid state relays, energy meters, and IIoT solutions. Their website reflects a professional and consistent brand image, supported by a modern TYPO3 CMS infrastructure and responsive design. The site includes detailed product information, industry-specific solutions, and a robust cookie consent mechanism ensuring compliance with privacy regulations. Security-wise, the website demonstrates good practices with no critical vulnerabilities detected, although there is room for improvement in implementing security headers and publishing explicit security policies. Overall, the domain registration data aligns well with the company's business claims, reinforcing the site's legitimacy and trustworthiness.

M

Multigas

multigas.com

60

Multigas is a well-established company specializing in the manufacture and distribution of industrial and medical gases, serving diverse sectors such as healthcare, food and beverage, industrial, and refrigerant markets primarily in Malta. The company has a strong market position with over 90 years of experience and multiple industry certifications, reflecting its commitment to quality and safety. The website demonstrates a professional digital presence with clear navigation, sector-specific content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some security headers are not explicitly detected and could be improved. Overall, the site is compliant with privacy regulations and provides a trustworthy user experience.

W

Water Services Corporation

wsc.com.mt

39

Water Services Corporation (WSC) is the primary government-owned utility responsible for the complete drinking and wastewater cycle in Malta. The website reflects a mature and well-established organization with a clear market position as Malta's water services provider. Key services include water production, distribution, wastewater management, customer support, and educational outreach. The site targets residents and businesses within Malta, providing comprehensive information and service access. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Elementor, supported by SiteGround hosting. It employs Google Analytics and MonsterInsights for analytics and Tidio for live chat support. The site is mobile-optimized with good SEO practices and moderate performance. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses some security best practices but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a comprehensive privacy policy exists, but no cookie consent mechanism is implemented despite tracking scripts. Overall, the website is professional, trustworthy, and credible with room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen the security posture and user trust.

UNEC is a Malta-based company specializing in the supply and servicing of industrial equipment, commercial vehicles, construction machinery, power generation solutions, and warehousing systems. It acts as the official representative for major brands such as Caterpillar and DAF, positioning itself as a key player in the local industrial and transportation sectors. The company offers a comprehensive range of services including leasing, rentals, and maintenance, targeting industrial and commercial clients in Malta. The website reflects a professional business with consistent branding and clear service offerings. Technically, the site is built on WordPress using Elementor, with modern front-end libraries and moderate performance. However, there is room for improvement in security posture, including the implementation of security headers and HTTPS verification. Privacy compliance is limited, with no visible privacy or cookie policies, which may pose regulatory risks. Overall, UNEC presents a credible and established business with a solid digital presence but should enhance its security and privacy practices to align with best practices and regulatory requirements.

T

TerraCore

terracoregeo.com

49

TerraCore is a specialized technology company focused on providing advanced hyperspectral imaging solutions for mineral analysis, primarily serving the mining and energy sectors. The company positions itself as a world leader in hyperspectral core imaging, offering a range of services including onsite and in-lab imaging, equipment rental and sales, consulting, and digital core storage. Their technology enables clients to gain detailed mineralogical insights to optimize exploration and production processes. The website reflects a professional and content-rich digital presence with clear navigation and strong branding. Technically, the website is built on WordPress using Elementor and Astra theme, hosted likely on GoDaddy infrastructure. It employs modern web technologies and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs well, with good SEO and accessibility features. Security-wise, HTTPS is enforced and anti-spam measures are in place, but there is room for improvement in security headers and privacy compliance mechanisms. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of cookie consent and detailed security policies indicates partial compliance with privacy regulations like GDPR. The domain registration details align well with the business claims, supporting the legitimacy of the website. Overall, TerraCore demonstrates a mature digital presence with strong business credibility but could enhance privacy and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing comprehensive security and incident response policies, adding terms of service, and enhancing security headers to strengthen trust and compliance.

Helmerich & Payne, Inc. is a well-established enterprise in the energy sector specializing in drilling rig contracting and advanced drilling technologies. The company has a strong market position with a history dating back to 1920 and offers a broad range of drilling services including offshore, geothermal, land drilling, and managed pressure drilling. The website reflects a professional corporate presence with comprehensive content, clear navigation, and consistent branding. It also highlights recent acquisitions and subsidiaries such as KCA Deutag and Kenera, expanding its global footprint and service capabilities. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, LinkedIn Insight, StackAdapt, HubSpot, and OneTrust for cookie consent management. The site is mobile optimized, accessible, and SEO friendly, though the CMS and hosting provider are not explicitly identified. Performance is moderate with good technical implementation overall. From a security perspective, the site uses HTTPS with excellent SSL configuration and integrates cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and incident response contacts are not found, indicating room for improvement in security transparency and readiness. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting the company's credibility and business operations effectively.

G

Global Tech Malta Ltd.

gtm.com.mt

50

Global Tech Malta Ltd. is a Malta-based company specializing in renewable energy solutions, fire safety, and security systems for residential and commercial clients. The company offers a broad portfolio of services including solar panels, energy storage, CCTV, fire alarms, and security systems, supported by a team with over 50 years of combined experience. Their market position is that of an established local provider with partnerships with global brands, targeting homeowners and businesses in Malta. The website is built on WordPress and integrates modern technologies such as Gravity Forms and Zoho SalesIQ for customer engagement. While the site is professionally designed with good navigation and mobile optimization, it lacks some privacy compliance features such as a cookie consent mechanism and explicit security headers. The security posture is moderate with HTTPS enabled and no visible critical vulnerabilities. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website presents a credible and professional business presence with room for improvement in privacy and security policies.

P

PG Global

pg-global.com

56

PG Global is an established international specialist recruitment company focused on the energy, oil & gas, renewable energy, and marine sectors. With over 20 years of experience, it serves a global clientele by connecting professionals with relevant job opportunities and providing comprehensive recruitment and consultancy services. The company positions itself as a leading player in its niche with a strong emphasis on quality and client satisfaction. Technically, the website is built on WordPress, leveraging modern SEO tools like Yoast SEO and performance optimizations such as WP Rocket. It integrates multiple social media platforms and analytics services, indicating a mature digital presence. The site is mobile-optimized and provides multilingual support, enhancing accessibility for international users. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks some security headers and formal security policies, which could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The domain registration details are consistent with the business claims, supporting legitimacy. Overall, PG Global's website reflects a professional and credible business with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

V

Valaris Limited

enscoplc.com

54

Valaris Limited operates as a global leader in offshore drilling services, providing a technologically advanced fleet of drillships, semisubmersibles, and jackups. The company emphasizes safety, operational excellence, and customer satisfaction, serving clients worldwide. Their website reflects a professional corporate presence with dedicated sections for investors, customers, employees, and suppliers. The digital infrastructure is built on the Q4 Inc platform, leveraging modern JavaScript libraries and third-party widgets for investor relations and analytics. While the site is well-structured and content-rich, security practices could be enhanced by implementing additional HTTP security headers and a cookie consent mechanism. Overall, the website demonstrates a mature digital presence aligned with the company's market position.

C

Carlo Gavazzi

gavazzi.dk

55

Carlo Gavazzi is an established international group specializing in the design, manufacture, and marketing of electronic automation components, primarily serving the industrial and building automation markets. The company maintains a strong market position with a comprehensive product portfolio including sensors, solid state relays, energy meters, and related automation devices. Their website reflects a professional and consistent brand image with clear business descriptions and a focus on global reach through multiple language and regional versions. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Bootstrap 5 and jQuery, with integration of Cookiebot for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could enhance its security posture. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism, but lacks explicit public security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, indicating a high level of legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

The website at airproducts.com is currently inaccessible, returning an HTTP 403 Forbidden error page with minimal HTML content. This prevents any direct analysis of the site's content, metadata, or technical infrastructure. As a result, no information about the company's privacy policies, contact details, or security posture can be extracted from the site itself. The lack of accessible content severely limits the ability to assess the company's digital maturity or compliance status. From the domain and URL alone, the company likely operates in the energy sector and is of significant size, but no further business details are available. The technical infrastructure and security posture cannot be evaluated due to the blocked access, and no security headers or SSL configuration details are present in the provided data. Given the blocked status, the overall risk assessment is that the site is currently not accessible for analysis, which may be due to security controls, IP restrictions, or other access policies. Strategic recommendations include verifying access permissions, checking for WAF or firewall configurations, and ensuring that public-facing content is available for proper security and compliance evaluation.

P

Panda

greenstar.ie

53

Panda.ie is the official website of Panda, a leading waste management and recycling company in Ireland with over 30 years of industry experience. The company offers a range of services including household waste collection, skip hire, skip bags, and recycling centres targeting both residential and business customers. The website is professionally designed using WordPress and optimized for SEO, providing clear navigation and relevant content to its audience. The technical infrastructure includes modern libraries and plugins such as Yoast SEO, Font Awesome, Google Tag Manager, and GDPR cookie consent mechanisms, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site demonstrates good privacy compliance and business credibility, with transparent policies and active social media engagement. The domain registration details align well with the business claims, supporting the legitimacy of the website.

P

Panta

pantalesco.com

44

Panta is a professional building services contractor based in Malta, specializing in mechanical and electrical engineering, plumbing, HVAC, lift installations, and the supply of professional tools. The company targets homeowners, installers, developers, and engineers, positioning itself as a reliable and established player in the local market. Their website reflects a medium-sized business with a clear focus on quality service delivery and product offerings. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as Gravity Forms and Visual Composer, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, supporting good user experience and engagement. Security-wise, the website enforces HTTPS, uses reCAPTCHA on forms, and includes terms acceptance, but lacks explicit security policies and incident response information. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

Khafji Joint Operations is an enterprise-level energy sector company operating in Saudi Arabia, likely focused on oil and gas joint operations. The website is built on SAP Enterprise Portal technology with a Java 6.0 backend and serves as a corporate portal. The site content is minimal and primarily technical, embedding the main content via an iframe. There is a lack of publicly accessible business and contact information, and no privacy or cookie policies are present. Technically, the site lacks HTTPS and security headers, which poses security risks. The overall digital maturity appears basic with room for improvement in security, privacy compliance, and user experience.

T

Transocean Ltd.

deepwater.com

47

Transocean Ltd. operates as a leading offshore drilling contractor specializing in ultra-deepwater and harsh-environment floaters. The company serves a global energy market, providing drilling services with a focus on performance, safety, and operational excellence. The website reflects a mature business with a strong investor relations presence and a professional digital footprint. Technically, the site uses modern web technologies including Google Analytics and Google Tag Manager for tracking, and employs responsive design with multimedia content to engage users. However, there is room for improvement in accessibility and explicit privacy compliance mechanisms. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence online.

P

PJSC LUKOIL

lukoil.com

46

PJSC LUKOIL is a major global vertically integrated oil and gas company with a significant presence in upstream and downstream sectors. The website reflects a mature corporate entity with comprehensive investor relations, sustainability initiatives, and product offerings. Technically, the site uses modern JavaScript libraries and APIs, including Yandex Maps and Yandex Metrika for analytics, and is well-structured with responsive design. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are not published. Privacy compliance is partial due to the absence of a cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with the company's business stature.

B

BUTEC Utility Services (BUS)

bus.com.lb

32

BUTEC Utility Services (BUS) operates as a key distribution service provider responsible for the design, operation, and maintenance of the electrical distribution network in Northern Mount Lebanon and North Lebanon on behalf of EDL. The company offers a range of services including planning and design, operations and maintenance, construction and AMI, meter reading and bill collection, customer services, and non-technical losses reduction. Positioned as one of three main providers in the Lebanese electricity distribution sector, BUS targets electricity consumers and customers within its coverage area. The website content is well-structured and professionally presented, providing clear information about services and customer support channels. Technically, the website employs legacy technologies such as jQuery 1.8.2 and SWFUpload, which pose potential security and compatibility risks. The site integrates Google Analytics and Google Tag Manager for user tracking but lacks modern cookie consent mechanisms and comprehensive privacy compliance features. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO practices. From a security perspective, the site does not display advanced security headers or incident response policies, and the use of deprecated technologies increases vulnerability exposure. No direct contact emails or security contacts are provided, limiting incident response readiness. The domain uses privacy protection for WHOIS data, which reduces transparency but the overall legitimacy is supported by consistent business information and active social media presence. Overall, the website scores moderately in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in technology modernization, security hardening, and privacy compliance would enhance the site's trustworthiness and resilience.

L

Liquigas Malta Ltd

liquigasmalta.com

45

Liquigas Malta Ltd is a well-established energy company specializing in the supply and distribution of LPG gas and autogas in Malta and Gozo. With over 70 years of experience, the company holds a leading market position offering a range of products including bulk LPG, gas cylinders, autogas for vehicles, and related accessories. The website reflects a professional business model targeting residential and commercial customers, providing both online ordering and physical points of sale. The company emphasizes ecological responsibility and cost savings through cleaner energy solutions. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Slider Revolution. The site uses modern web technologies including Google reCAPTCHA v3 for form security and integrates Google Fonts for typography. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. Security headers are partially implemented, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of a dedicated security policy or incident response contact is noted. The domain uses privacy protection for WHOIS data, which is justified given the business type. Overall, the security posture is solid but could be improved with enhanced headers and formal policies. The overall risk assessment is low with a high trustworthiness rating. Strategic recommendations include strengthening security headers, publishing security and incident response policies, and enhancing accessibility compliance. The website effectively balances business credibility, privacy compliance, and user experience, making it a reliable digital presence for Liquigas Malta Ltd.

E

Expro Group Holdings UK 2 Limited

exprogroup.com

54

Expro Group Holdings UK 2 Limited is a leading enterprise in the energy sector, specializing in full-cycle energy services across the well life cycle. Their offerings include well construction, flow management, subsea well access, and well intervention, supported by innovative technology and data-driven solutions. The company positions itself as a visionary partner focused on productivity, efficiency, and sustainability in energy operations. Technically, the website employs a mature tech stack including jQuery, Google Tag Manager, Cookiebot for consent management, and integrates third-party services like Vimeo and Google Maps. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforcement, CSRF protection on forms, and cookie consent compliance, though explicit security policies and incident response contacts are absent. Overall, the site reflects a professional and trustworthy business with extensive analytics and marketing integrations, supporting a comprehensive digital presence.

D

Duisburger Versorgungs- und Verkehrsgesellschaft mbH

dvv.de

51

Duisburger Versorgungs- und Verkehrsgesellschaft mbH (DVV) is a large municipal multi-service company based in Duisburg, Germany, providing essential services including energy supply (electricity, gas, water, heat) and public transportation. The company operates through numerous subsidiaries covering various sectors such as public transport, energy networks, and service providers. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies and includes comprehensive information about the company, its subsidiaries, and corporate governance. Privacy compliance is well implemented with a detailed cookie consent mechanism and GDPR-aligned privacy policy. However, explicit security and incident response policies are not publicly disclosed. The company maintains a good security posture with HTTPS and no visible vulnerabilities, but could improve by adding security headers and formal vulnerability disclosure channels.

M

MedservRegis PLC

medservenergy.com

53

MedservRegis PLC is a globally recognized provider of integrated logistics and specialist services primarily serving the Oil & Gas, Energy, and Mining sectors. Operating across 12 countries on 4 continents, the company leverages its extensive experience and strategic partnerships to deliver high-quality, safety-focused, and sustainable solutions. Their service portfolio includes port and base logistics, OCTG services, drilling fluids and gases, and technical services, supported by ISO certifications and a commitment to environmental responsibility. The website reflects a mature digital presence with professional design, good SEO, and mobile optimization. Technically, the site is built on WordPress with modern plugins and APIs, including Google Maps and reCAPTCHA for security. Security posture is strong with HTTPS and no exposed sensitive data, though some security headers and policies could be improved. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site projects a trustworthy and professional image aligned with the company's market position.

E

Engineering for Science and Industry (Malta) Ltd

esimalta.com

42

Engineering for Science and Industry (Malta) Ltd is a specialized engineering company focused on delivering integrated solutions in building management, fire and gas detection, home automation, industrial automation, and security systems. The company serves a B2B market primarily in Malta, positioning itself as an innovative and original provider with a solid reputation. Their website showcases detailed case studies, partner affiliations with reputable global companies, and a comprehensive range of services covering the entire project lifecycle from consulting to maintenance. Technically, the website is built on ASP.NET Web Forms with legacy jQuery libraries and uses carouFredSel for carousel functionality. Google Analytics is implemented for user tracking, but the site lacks HTTPS and modern security headers, which is a significant security concern. The site is moderately optimized for performance and mobile use but could improve accessibility and privacy compliance. From a security perspective, the absence of HTTPS and security headers lowers the security posture significantly. No explicit privacy or cookie consent mechanisms are present, and incident response contacts are missing. The WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site is functional and professional but requires urgent security and privacy improvements. Strategically, the company should prioritize implementing HTTPS, enhancing security headers, and introducing privacy compliance mechanisms to protect user data and improve trust. Regular updates to technology stacks and clearer incident response policies would further strengthen their security posture and business credibility.

Bajada New Energy is a company specializing in renewable energy solutions and water filtration products, including solar water heaters, reverse osmosis systems, and EV charging solutions. The company positions itself as a provider of sustainable energy products with a focus on environmental responsibility and customer value. The website reflects a small to medium-sized business with a clear focus on energy and water filtration sectors, targeting both consumers and commercial clients. Technically, the website employs modern frameworks such as Bootstrap and uses popular libraries like jQuery and Font Awesome, indicating a moderate level of digital maturity. The presence of Google and Facebook tracking scripts suggests active marketing and analytics efforts. Security-wise, the site uses HTTPS and includes some best practices but lacks explicit security headers and detailed security or incident response policies. Overall, the website is functional and professional but could improve in privacy compliance and security transparency.

E

ElectroGas Malta Ltd.

electrogas.com.mt

55

ElectroGas Malta Ltd. operates as a private consortium providing Malta with its first LNG-to-Power electricity generation facilities. Established in 2016, the company manages the Delimara Power Plant, delivering safe, reliable, and cleaner energy to the Maltese Islands. Their operations have significantly improved energy efficiency and reduced emissions, positioning them as a key energy provider in Malta. The website reflects a mature digital presence built on WordPress, leveraging modern plugins and SEO tools to maintain visibility and user engagement. Security measures such as HTTPS, security headers, and cookie consent mechanisms are in place, though some plugins like Revolution Slider require updates to mitigate known vulnerabilities. Contact information and corporate policies are clearly presented, supporting transparency and compliance. Overall, the site demonstrates a solid security posture and professional business credibility with room for technical modernization and enhanced accessibility.

NM Group is a UK-based company specializing in optimizing the performance of electricity networks through advanced remote sensing technologies and software solutions such as Caydence AAR. The company positions itself as a leading global specialist serving utility network operators and energy companies with services including 3D asset management, vegetation management, thermal rating, and LiDAR mapping. Their website reflects a professional and consistent brand image with comprehensive service descriptions and global reach. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, NM Group demonstrates a mature digital presence aligned with its business objectives and regulatory requirements.

C

Core Lab

corelab.com

51

Core Laboratories operates as a leading global provider of proprietary reservoir description and production enhancement services primarily serving the oil and gas industry. With a presence in over 70 offices across more than 50 countries, the company offers specialized laboratory and field services that enable clients to optimize reservoir performance and maximize hydrocarbon recovery. Their service portfolio includes advanced diagnostics, AI-driven data analysis, and carbon capture subsurface characterization, positioning them as a key player in energy sector innovation. Technically, the website is built on a modern WordPress CMS platform utilizing a variety of plugins and frameworks such as Elementor, Visual Composer, and GeneratePress. The infrastructure is hosted on WPEngine, ensuring reliable performance and scalability. The site demonstrates good mobile optimization, SEO practices, and accessibility features, supported by comprehensive metadata and structured data for enhanced search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements several security headers. Client portals incorporate two-factor authentication, and cookie consent mechanisms are in place, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected, though explicit security policies and vulnerability disclosure mechanisms could be improved. Overall, the website reflects a professional, trustworthy, and technically sound digital presence aligned with the company's market position. Strategic recommendations include enhancing security transparency, expanding incident response contact information, and further improving accessibility compliance to maintain leadership in digital maturity.

E

Enemalta plc

enemalta.com.mt

60

Enemalta plc is the leading electricity services provider and network operator in Malta, established in 1977. The company offers a comprehensive range of energy services including electricity distribution, network upgrades, and customer support. It maintains a strong market position as the primary utility provider in the Maltese Islands, serving both residential and business customers. Subsidiaries such as Energiva and partnerships like ARMS extend its service offerings into power engineering and utility retail optimization. The website reflects a mature digital presence with modern WordPress infrastructure, SEO optimization, and customer engagement features such as outage maps and contact forms. Privacy and cookie compliance are well implemented, demonstrating adherence to GDPR requirements. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and aligned with the company's business objectives.

F

Falzon Group of Companies

falzongroup.com

33

Falzon Group of Companies is a Malta-based bespoke fuel energy provider specializing in supplying fuel and environmental solutions to local and international industries, including marine fuels and lubricants. The company positions itself as a leading supplier in the Mediterranean region, offering a comprehensive range of services such as fuel for industry, bunker supplies, household heating fuels, environmental services, and lubricants. Their business model focuses on a supply chain and logistics operation that delivers fuel where and when customers need it. Technically, the website is built on WordPress using the Salient theme and several plugins including WPBakery Page Builder and Contact Form 7. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy with a solid business presence but would benefit from improved privacy compliance and enhanced security practices to reduce risk and increase user trust.

A

AquaBioTech Group

aquabt.com

39

AquaBioTech Group is a Malta-based consultancy specializing in environmental, technical, and financial services for the aquaculture industry. The company offers a broad range of services including aquaculture development, recirculating aquaculture systems (RAS) engineering, contract research, fisheries research, and marine environmental consulting. Their market position is that of an established international consultancy with a diverse global project portfolio, targeting aquaculture stakeholders, environmental agencies, and marine research organizations. Technically, the website is built on WordPress with modern technologies such as jQuery, Slider Revolution, and AmCharts for interactive maps. The site demonstrates good digital maturity with responsive design, SEO optimization, and structured data implementation. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, includes essential security headers, and shows no signs of exposed sensitive data or vulnerable libraries. However, it lacks explicit security policies and incident response contact information. Privacy compliance is adequate with a comprehensive privacy policy and GDPR adherence, but it lacks a cookie consent mechanism. Overall, the website presents a professional and trustworthy image with clear business information and contact details. The risk assessment indicates a low risk profile, with recommendations focusing on enhancing privacy compliance and security transparency.

E

Elmemesser

elmemesser.lv

10

Elmemesser is a leading industrial gas supplier in the Baltic region, offering a wide range of gases, equipment, and technical support services. The company targets industrial and commercial customers requiring reliable gas supply solutions, supported by a modern online webshop and multiple physical sales points. The website reflects a mature digital presence with multilingual support and clear business information. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.