Energy security reports

SAMSUNG SDI is a leading enterprise specializing in advanced battery and electronic materials technology, serving global markets with a focus on sustainability and innovation. The website targets investors, partners, and job seekers, providing comprehensive information on business sectors, ESG initiatives, and investor relations. Technically, the site employs established JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and incident reporting, though lacking explicit cookie consent and vulnerability disclosure. Overall, the site reflects a professional and trustworthy corporate presence with room for improvement in privacy compliance and accessibility.

R

RED Drilling & Services GmbH

red-drilling-services.at

46

RED Drilling & Services GmbH is a medium-sized Austrian company specializing in premium drilling solutions for the energy sector. Their services encompass planning, execution, and aftercare of drilling projects supported by modern equipment and skilled personnel. The company positions itself as a premium partner with certifications including SCC** and multiple ISO standards, emphasizing safety, quality, and environmental responsibility. The website is built on TYPO3 CMS and features a professional design with good navigation and mobile optimization. Security practices include cookie consent mechanisms and adherence to recognized safety certifications, though some technical security headers and incident response details are missing. Overall, the site is trustworthy and well-aligned with the company's business claims.

G

gwc

gwc.at

32

gwc is a consulting firm specializing in business development, innovation management, and corporate finance with a focus on sectors such as energy, telecommunications, craftsmanship, and digitalization. The company supports clients in developing strategies, managing innovation portfolios, and securing public funding. The website is professionally designed using WordPress with modern plugins and offers a clear navigation structure and GDPR-compliant cookie consent. However, the site lacks HTTPS which is a significant security concern. No direct contact emails or phone numbers are provided, only a contact form. Security policies and incident response information are not published, indicating room for improvement in transparency and security posture.

B

bevmat e.U.

bevmat.eu

20

bevmat e.U. is a small Austrian company specializing in control cabinet components, energy distribution, and measurement technology. The company targets businesses in the energy sector and operates through a network of European partners. The website reflects a basic online presence with limited content and indicates it is undergoing a relaunch. Technically, the site uses the cm4all CMS platform with older JavaScript libraries and lacks HTTPS, which impacts security and trust. The cookie consent mechanism is implemented, but privacy and terms policies are missing. Security posture is weak due to outdated libraries and missing HTTPS, exposing the site to potential risks. Overall, the site is functional but requires significant improvements in security, privacy compliance, and content quality to enhance business credibility and user trust.

REXEL Austria GmbH is a leading wholesale distributor of electrical installation materials and devices in Austria, with over 25 years of market presence. The company focuses on sustainable and innovative products and services in automation, technology, and energy management, serving industrial, trade, and commercial sectors. Their business model includes comprehensive logistics, building automation, and facility management solutions, supported by two strong sales networks, SCHÄCKE and REGRO. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audiences. Technically, the site is built on the Neos CMS platform using PHP and JavaScript frameworks, hosted with Google Cloud services, and optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

A

ActivSolar

activsolar.com

45

ActivSolar is a Dutch-language website focused on providing advanced active solar energy solutions for homes and businesses, emphasizing sustainability and energy efficiency. The platform showcases eco-projects, solar energy companies, and related services, positioning itself as a niche player in the renewable energy sector. The website is built on a modern WordPress infrastructure using WooCommerce and Elementor, with integrations such as Google Maps for location-based listings. Security posture is solid with HTTPS enabled and no exposed sensitive data, though explicit security headers and incident response policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the site is professional and functional but would benefit from enhanced privacy and security disclosures.

S

Sweco

swecogroup.com

28

Sweco is a leading European architecture and engineering consultancy specializing in sustainable urban development, infrastructure, energy, and water solutions. With a workforce of 22,000 experts, the company serves a broad client base including public and private sectors, emphasizing sustainability and innovation. The website reflects a mature digital presence with comprehensive content, investor relations, and sustainability reporting. Technically, the site is built on WordPress with modern plugins and scripts, but suffers from a critical security flaw due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which undermines user trust and security. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, Sweco's digital footprint is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to meet security best practices.

K

KAEFER SE & Co. KG

kaefer.com

25

KAEFER SE & Co. KG is a global industrial services company specializing in technical services such as insulation, access solutions, surface protection, fire protection, and electrical/mechanical services. With over 33,000 employees and a presence in more than 150 cities across approximately 30 countries, KAEFER positions itself as a reliable partner for industrial plants, ships, and buildings worldwide. The website reflects a mature business with comprehensive service offerings and a strong emphasis on sustainability and innovation. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WP Rocket, and Slider Revolution, providing a good user experience and SEO optimization. However, performance is moderate and accessibility is basic. Mobile optimization is good, and the site uses cookie consent management to comply with GDPR. From a security perspective, the site has implemented several important HTTP security headers and uses secure cookies. However, a critical issue is the absence of a valid SSL certificate and the lack of enabled TLS protocols, which severely impacts the security posture and user trust. This is a significant vulnerability that should be addressed immediately. Overall, the website is professional and trustworthy in content and business representation but requires urgent improvements in SSL/TLS configuration to ensure secure communications and protect user data.

A

Aura Light International AB

auralight.com

40

Aura Light International AB is a well-established company specializing in sustainable and energy-efficient lighting solutions for professional environments such as public spaces, industry, and retail. The company offers a broad range of products including luminaires, light sources, and smart lighting control systems, positioning itself as a leading player in the Nordic and international markets. The website reflects a professional B2B business model with clear product segmentation and customer engagement channels. Technically, the website is built on the Litium e-commerce platform with integrations such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-structured, mobile-optimized, and SEO-friendly, although performance metrics are not available. Hosting appears to be via Fastly CDN with Varnish caching. From a security perspective, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical vulnerability impacting user trust and data security. Security headers are partially implemented, but modern TLS protocols are disabled. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Contact information is readily available, but no explicit security policy or incident response details are found. Overall, Aura Light's website demonstrates solid business credibility and content quality but requires urgent improvements in SSL/TLS configuration to enhance security posture and user trust. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and publishing incident response contacts to strengthen security transparency.

S&P Global Commodity Insights is a leading enterprise providing comprehensive commodity market data, price assessments, and analytics, leveraging over a century of expertise. The website is professionally designed, highly relevant to its target audience of energy and commodity market professionals, and employs modern technologies including Adobe Experience Manager and various JavaScript libraries. However, a critical security issue is present due to an invalid or missing SSL certificate, which significantly impacts the site's security posture. Despite this, the site maintains strong privacy compliance with clear policies and consent mechanisms. The domain registration data aligns well with the business identity, reinforcing legitimacy. Strategic recommendations include immediate remediation of SSL issues, enhancement of security policies, and implementation of incident response and vulnerability disclosure frameworks.

F

FLUSSBAU iC GesmbH

flussbau-ic.at

25

FLUSSBAU iC GesmbH is a specialized consulting company operating internationally with a focus on water and river engineering, including flood protection, hazard zone planning, and water infrastructure construction. The company offers comprehensive services from planning to execution and engages in research and development to maintain innovation. The website reflects a professional and consistent brand presence targeting professionals and organizations in the water engineering and environmental sectors. Technically, the website is built on TYPO3 CMS with common web technologies like jQuery and Bootstrap, providing a good user experience and mobile optimization. However, the absence of HTTPS is a critical security flaw that severely impacts the site's security posture. The site implements a cookie consent mechanism and provides clear contact information, but lacks advanced security headers and domain security features such as DNSSEC and CAA records. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and compliance are recommended to enhance trust and protect user data.

S

S.I.O.T. spa

tal-oil.com

29

The TAL Group operates a strategic transalpine oil pipeline transporting energy from the Port of Trieste to Central European refineries, with subsidiaries in Italy, Austria, and Germany. The website presents a professional and consistent business profile focused on energy transportation and sustainability, targeting European industrial and governmental stakeholders. Technically, the site is built on WordPress with common plugins for user management and GDPR compliance, hosted likely on Cloudways. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, despite the presence of several security headers. Privacy and cookie policies are well implemented and GDPR compliant, but no explicit terms of service or incident response policies are found. Overall, the site is functional and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols.

The Bernard Gruppe is a medium-sized, owner-managed engineering group founded in 1983, specializing in interdisciplinary engineering services across energy, industry, infrastructure, and transportation sectors. With approximately 400 employees and operations in over 40 countries, the company offers comprehensive consulting, planning, and project realization services, including specialized software and hardware solutions. The website content reflects a professional engineering firm with a broad service portfolio and international presence. Technically, the website is built on WordPress using the Avada theme and includes a cookie consent mechanism from an external provider. However, the site lacks HTTPS support and modern security configurations, which significantly impacts its security posture. Performance data is missing, and SEO and accessibility features are basic. No analytics or tracking services beyond cookie consent are detected. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, exposing users to potential data interception risks. The site also lacks security headers, DNSSEC, and other modern protections. No privacy policy, terms of service, or incident response information is provided, indicating gaps in compliance and security transparency. Overall, the website presents a moderate business credibility but suffers from significant security and privacy shortcomings. Strategic improvements in SSL deployment, security headers, and privacy documentation are essential to enhance trust and compliance.

H

HOT Microfluidics (fluidXlab)

fluidxlab.com

31

fluidXlab GmbH, formerly HOT Microfluidics, is a specialized technology company focused on advanced fluidic and laboratory services primarily serving the energy sector. Their offerings include microfluidic products, turnkey microfluidic technology platforms, and laboratory services supporting enhanced oil recovery, underground hydrogen storage, and carbon capture solutions. The company positions itself as a niche leader with a strong emphasis on innovation and compliance with high HSE standards. The website reflects a professional and consistent brand image, targeting energy companies and research institutions engaged in subsurface energy challenges. Technically, the website is built on WordPress with Elementor and employs modern web technologies and performance optimizations. However, the SSL certificate is currently invalid, which poses a critical security risk. The site includes GDPR-compliant privacy and cookie policies with a consent mechanism, and integrates marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. Social media presence is active on LinkedIn, X (Twitter), and YouTube. Overall, the website demonstrates good business credibility and privacy compliance but requires urgent remediation of SSL issues to improve security posture.

The AES Corporation is a global energy company focused on delivering clean, renewable, and innovative energy solutions worldwide. The company positions itself as a Fortune 500 leader with a strong commitment to sustainability, serving diverse audiences including businesses, investors, and career seekers. Their business model emphasizes greener capacity, smart grids, carbon-free electricity, and digital solutions, supported by a broad network of regional subsidiaries. Technically, the website is built on Drupal 10 with modern frontend technologies and demonstrates good mobile optimization and accessibility. However, critical security issues exist, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact the security posture. Privacy and cookie policies are present with consent mechanisms, and the site employs extensive analytics and marketing tools. Overall, the website is professional and content-rich but requires urgent security improvements to align with best practices.

The website energy.at is currently inaccessible beyond a Cloudflare security challenge page, which blocks direct content access. This prevents a full assessment of the business, its services, or its digital presence. The site lacks a valid SSL/TLS certificate, serving content only over HTTP, which is a critical security deficiency. No privacy, cookie, or terms of service policies are present, and no contact information or business details are visible. The technical infrastructure relies on Cloudflare for protection, but the challenge page limits user access and analysis. Overall, the site exhibits poor content quality, minimal technical implementation, and a weak security posture. The lack of HTTPS and visible business information significantly reduces trust and credibility.

Veolia Australia and New Zealand operates as a leading provider of sustainable environmental solutions focusing on water, energy, and waste management. The company leverages global expertise and innovative technologies to support ecological transformation and sustainability goals for businesses and communities in the region. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with a large enterprise. Technically, the site is built on Drupal 10 and uses modern web technologies and Cloudflare CDN for delivery. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Contact is primarily facilitated through webforms and social media channels, with no explicit company emails or phone numbers publicly listed. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the site is professional and content-rich but requires urgent security improvements to meet best practices.

SCHOLLENBERGER Kampfmittelbergung GmbH is a specialized service provider in ordnance and explosive material recovery operating primarily in Austria and Germany. Established in 2009 and employing around 380 staff, the company offers comprehensive services including surface and depth probing, aerial image evaluation, and diving operations. It is part of the SOCOTEC Group, which enhances its market position and operational capabilities. The website presents detailed business information and service descriptions targeting industrial, governmental, and private clients requiring ordnance clearance and related environmental services. Technically, the site is built on TYPO3 CMS with modern frontend libraries but suffers from critical security shortcomings such as lack of HTTPS and DNS misconfigurations. These issues undermine trust and expose the site to risks. No privacy or cookie consent mechanisms are implemented, which may affect GDPR compliance. Overall, the business is credible and professional, but the digital infrastructure requires urgent security and technical improvements.

Burgenland Energie is a regional energy provider based in Austria, specializing in renewable energy solutions such as photovoltaic systems, battery storage, heat pumps, and e-mobility services. The company targets private customers, municipalities, and businesses within the Burgenland region, emphasizing energy independence and sustainability. Their digital presence includes a professional website with comprehensive product information, customer portals, and active social media channels. Technically, the website is built using modern web technologies including React and Next.js, hosted on AWS infrastructure with CloudFront and S3. While the site is mobile-optimized and well-structured for SEO and accessibility, performance metrics indicate slow loading times, which could be improved. The use of Google Tag Manager and Zoho CRM scripts indicates integration with marketing and customer relationship management tools. From a security perspective, the website lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability that undermines user trust and data security. Other security best practices such as HSTS, OCSP stapling, and session resumption are also missing. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism in place. Overall, the website presents a trustworthy and professional business with strong content and user experience but requires urgent improvements in SSL/TLS configuration to enhance security posture and protect user data effectively.

I

ISZ Markt

isz-markt.at

38

ISZ Markt is a leading Austrian wholesale distributor specializing in installer supplies, heating, electrical, and home technology products. With 70 locations across Austria and a strong parent company, Frauenthal Handel Gruppe AG, ISZ Markt serves professional installers and contractors with a broad product range and fast delivery services. The website is professionally designed using WordPress and Elementor, featuring comprehensive content, structured data, and good SEO practices. However, the website suffers from a critical security issue due to an invalid SSL certificate and lack of enabled TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with a cookie consent mechanism and detailed privacy policy. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the site is credible and trustworthy but requires urgent SSL/TLS remediation to improve security and user trust.

F

Franz Hasler AG

franzhasler.li

25

Franz Hasler AG is a well-established company based in Liechtenstein specializing in sustainable construction, solar energy solutions, and comprehensive construction management services. The company leverages over a century of tradition combined with ecological values to serve clients seeking environmentally conscious building solutions. Their business model focuses on acting as a general and total contractor, managing projects from planning through to completion, ensuring quality, timing, and cost control. The company maintains subsidiaries focused on solar energy and construction management, enhancing their service portfolio. Technically, the website is built on WordPress with standard web technologies and plugins. However, the site suffers from slow load times and lacks modern security configurations such as HTTPS, security headers, and cookie consent mechanisms. Mobile optimization and navigation are good, but performance and security are areas needing improvement. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, exposing users to potential data interception risks. The lack of security headers and no visible incident response or security policies further weaken the security posture. Privacy compliance is minimal, with no cookie consent or GDPR indicators present. Overall, while the business credibility and content quality are good, the technical and security shortcomings significantly impact the website's trustworthiness and user safety. Strategic improvements in security and privacy compliance are essential to enhance the company's digital maturity and protect its clients and reputation.

A

accilium GmbH

accilium.com

24

accilium GmbH is a medium-sized management and strategy consultancy specializing in digital transformation within the mobility, energy, and public sectors. With over 130 consultants across multiple European offices, it holds a strong market position among the top consultancies in the German-speaking region. The company offers services including strategy and innovation, business transformation, data intelligence, and organizational consulting. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, accilium demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS security to protect its users and enhance trust.

I

Interenergo d.o.o.

interenergo.si

35

Interenergo d.o.o. is a medium-sized energy company based in Slovenia, operating as part of the Austrian Kelag group since 2009. The company focuses on renewable energy investments, energy efficiency solutions, power purchase agreements, and energy trading across Southeast Europe. Their website is professionally designed with clear navigation and bilingual support, targeting businesses and investors interested in green energy solutions. Technically, the site uses modern JavaScript libraries and cookie consent mechanisms but lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented, but the absence of HTTPS significantly lowers the security posture. Contact information and privacy policies are clearly provided, supporting GDPR compliance. Overall, the website is functional and trustworthy but requires urgent improvements in SSL/TLS implementation to enhance security and user trust.

J

Jung Eco Building Solutions GmbH

jung-ingenieure.com

37

Jung Eco Building Solutions GmbH is a specialized engineering consultancy focused on climate engineering, green building design, and energy consulting primarily serving clients such as builders, planners, and architects in Germany. The company offers tailored energy and climate concepts, building envelope optimization, and certification services for sustainable buildings. Their market position is that of a niche player in the energy and sustainability sector with a small company size and a professional online presence. Technically, the website is built on WordPress with common libraries like Bootstrap and jQuery, but lacks HTTPS and modern security configurations, which is a significant risk. The absence of cookie consent mechanisms and incident response information indicates partial GDPR compliance. Overall, the website is content-rich and professionally designed but requires urgent security improvements to protect user data and enhance trust.

C

CTP Chemisch Thermische Prozesstechnik GmbH

ctp-airpollutioncontrol.com

18

CTP Chemisch Thermische Prozesstechnik GmbH is a well-established Austrian company specializing in industrial air pollution control solutions with 40 years of experience. The company offers customized turnkey systems for air purification, VOC emission control, and hazardous pollutant removal, serving a global industrial clientele. Their website reflects a professional presence with clear business information and a focus on environmental technology. Technically, the site is built on Drupal 8 with modern web components but lacks a valid SSL certificate, which is a critical security shortfall. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. However, the absence of HTTPS significantly undermines the site's security posture and trustworthiness. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate the site's security and compliance standing.

N

NETxAutomation Software GmbH

netxautomation.com

37

NETxAutomation Software GmbH is a medium-sized company specializing in building management software and multi-protocol gateways for medium-sized and enterprise building automation projects. With over 20 years of experience and a presence in more than 100 countries, the company offers a comprehensive suite of products including the NETx BMS Platform and NETx Multi Protocol Server, alongside services such as project analysis, commissioning, and driver development. Their target audience includes system integrators, electrical engineers, and end customers seeking integrated building automation solutions. Technically, the website is built on Joomla CMS with jQuery and FontAwesome libraries, served by an Apache 2.4.62 server. However, the site lacks a valid SSL certificate and does not support HTTPS or modern TLS protocols, which significantly impacts its security posture. Performance metrics are not available, but the site shows basic mobile optimization and accessibility features. SEO is basic but includes meta tags and alternate language links. From a security perspective, the site implements some security headers such as Strict-Transport-Security and X-Content-Type-Options, and uses HttpOnly cookies. However, the absence of a valid SSL certificate, lack of TLS support, and missing advanced security headers reduce the overall security score. No explicit security or incident response policies are found, and no vulnerability disclosure or security.txt file is present. Overall, the website is professional and content-rich but suffers from critical security shortcomings due to missing HTTPS. Strategic improvements in SSL/TLS deployment and enhanced security policies are recommended to improve trust and compliance.

L

Ligabue

ligabue.it

26

Ligabue S.p.a. is a well-established company specializing in global food service and logistics for the maritime and energy sectors. The company operates in 16 countries with a network of 200 partners and suppliers across 417 ports, providing ship supply, cargo services, industrial services, and maritime hospitality. Their website reflects a professional and comprehensive digital presence, leveraging WordPress CMS and modern frontend technologies. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy policies are well addressed through a reputable third-party provider, indicating good compliance with GDPR standards. Overall, the company demonstrates strong business credibility and market positioning but must urgently address its security posture to align with best practices and regulatory requirements.

B

BDI Bioenergy

bdi-bioenergy.com

25

BDI-BioEnergy International GmbH is a medium-sized Austrian company specializing in technology development and industrial plant engineering focused on chemical recycling, bioenergy, and sustainable industrial solutions. The company positions itself as an innovative leader with a strong emphasis on research, development, and turnkey plant solutions for the circular economy. Their key services include biodiesel retrofit, advanced pretreatment, smart operations, biogas, and green technology solutions. The website is built on WordPress with a modern tech stack including Yoast SEO, WPML for multilingual support, and various plugins for user interaction and spam protection. However, the site lacks HTTPS, which is a critical security shortfall. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. The company holds ISO 9001:2015 certification, enhancing its credibility. Overall, the website is professional and well-structured but requires urgent security improvements to protect user data and enhance trust.

ENERGIEALLIANZ Austria GmbH is a well-established energy sales and trading company founded in 2001, serving millions of customers in Austria and abroad with electricity, natural gas, and related services. The website reflects a mature digital presence built on TYPO3 CMS with modern web technologies and a focus on sustainability and customer service. Security posture is strong with HTTPS, secure cookies, and OCSP stapling, though improvements like HSTS and security.txt could enhance it further. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Contact information is transparent and includes multiple channels. Overall, the site demonstrates professionalism, trustworthiness, and good technical implementation.

A

AEROCOMPACT Europe GmbH

aerocompact.com

23

AEROCOMPACT Europe GmbH operates as a global provider of photovoltaic mounting solutions, specializing in intelligent solar racking systems for roofs and open spaces. The company positions itself as a dynamic pioneer in the energy transition sector, offering both physical products and digital planning tools such as the Aerotool platform. Their market presence is supported by multiple global offices and a comprehensive service portfolio targeting solar engineers, project developers, and wholesalers. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Google Tag Manager, Swiper.js, and Globe.gl for interactive features. While the site is content-rich and well-structured with good SEO practices, performance metrics indicate slow loading times, and accessibility features are basic. Mobile optimization is good, ensuring usability across devices. From a security perspective, the site lacks a valid SSL certificate and does not properly support HTTPS, which is a critical vulnerability. Security headers are minimal, and modern TLS protocols are not enabled. Despite these issues, the site uses secure cookies and has implemented privacy and cookie policies compliant with GDPR. Analytics and marketing tools are in use, with moderate user tracking. Overall, the website demonstrates strong business credibility and content quality but suffers from significant security shortcomings that must be addressed to protect user data and maintain trust. Strategic improvements in SSL/TLS configuration and security headers are recommended to elevate the security posture and compliance level.

BBI International operates as a specialized media and events company serving the biofuels, biomass, biodiesel, ethanol, carbon capture, sustainable fuels, and unmanned aircraft systems industries. The company publishes multiple niche magazines and organizes several well-established conferences and expos, positioning itself as a key information and networking hub within these sectors. The website content reflects a focused business model targeting industry professionals and companies seeking news, education, and event participation. Technically, the website runs on a Microsoft IIS server using ASP.NET with legacy jQuery scripts and integrates Google Analytics and Tag Manager for tracking. However, the site lacks HTTPS, exposing visitors to security risks and undermining trust. Security posture is weak with no SSL certificate, no advanced security headers, and no cookie consent mechanisms, indicating compliance gaps especially regarding GDPR. The WHOIS data aligns well with the business profile, confirming legitimacy and consistent registration details. Overall, the site provides relevant content but requires significant security and privacy improvements to meet modern standards.

M

mlu-recordum Environmental Monitoring Solutions GmbH

recordum.com

24

JCT NextGen AQMS is a specialized provider of air quality monitoring solutions, leveraging the acquisition of mlu-recordum to offer innovative and cost-effective environmental monitoring products. The company operates under the JCT Group umbrella, which includes subsidiaries focused on gas sampling, liquid sampling, and process analytics. The website presents a professional and consistent brand image targeting industrial and environmental sectors, primarily in Austria. Technically, the site is built on WordPress with Elementor and uses Borlabs Cookie for GDPR-compliant cookie management. However, the absence of a valid SSL certificate and HTTPS implementation is a significant security shortfall. While privacy policies and contact information are well presented, the lack of explicit security policies, incident response, and vulnerability disclosure pages indicates room for improvement in security transparency. Overall, the site is functional and informative but requires urgent security enhancements to protect users and improve trust.

C

Calderys

calderys.com

40

Calderys is a globally recognized enterprise specializing in refractory products and thermal protection solutions for industries operating under high temperature conditions, primarily serving the energy and manufacturing sectors. The company offers a comprehensive range of products and services including steel casting enhancement, metallurgical fluxes, and refractory services, supported by a broad international network of offices and experts. The website reflects a mature business with a strong market position and a recent strategic alliance with HarbisonWalker International, enhancing its footprint in the refractory industry. Technically, the website is built on Drupal 10 and incorporates modern front-end libraries and tools such as Google Tag Manager and Slick Carousel. While the site is mobile-optimized and SEO-friendly with good content quality and navigation, performance metrics indicate slow loading times. Accessibility is basic but present. The hosting is provided by Vox Teneo Web Engine. From a security perspective, the site lacks a valid SSL certificate and does not support any TLS protocols, which is a critical vulnerability exposing users to risks and undermining trust. Although some security headers like Content Security Policy and X-Frame-Options are implemented, the absence of HTTPS and HSTS significantly lowers the security posture. Privacy compliance is well addressed with GDPR-compliant cookie consent mechanisms and clear privacy policies. Business credibility is high with detailed contact information, social media presence, and consistent branding. Overall, the website is professionally designed and content-rich but suffers from critical security shortcomings that must be addressed urgently to protect user data and maintain trust. Strategic recommendations include immediate SSL/TLS deployment, enabling modern security protocols, and enhancing security headers and incident response capabilities.

N

N-SIDE

n-side.com

38

N-SIDE is a specialized deeptech company focusing on providing optimization and analytics solutions for the life sciences and energy sectors. Their offerings include software and professional services aimed at improving pharmaceutical manufacturing efficiency, clinical trial management, and energy forecasting and power matching for market participants. The website reflects a professional digital presence built on HubSpot CMS, leveraging modern web technologies and marketing tools such as Google Tag Manager. However, the security posture is weak due to the absence of a valid SSL certificate and proper HTTPS configuration, which poses a significant risk to user trust and data security. Privacy compliance is minimal, with no visible privacy or cookie policies, and no explicit contact information is provided on the homepage. Overall, the site demonstrates moderate business credibility and technical maturity but requires urgent improvements in security and privacy compliance to meet industry standards.

din – Dietmar Nocker Sicherheitstechnik GmbH & Co KG is a medium-sized Austrian company specializing in emergency lighting solutions with over 40 years of industry experience. The company offers a comprehensive portfolio including product development, systems, and service support, targeting businesses requiring compliant emergency lighting. Their market position is strong in Austria and neighboring countries, supported by multiple locations and a professional online presence. Technically, the website is built on WordPress with multilingual support and privacy-conscious analytics via Matomo. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security shortfall, exposing users to risks and undermining trust. The company demonstrates good privacy compliance with detailed cookie consent mechanisms and GDPR-aligned policies. Overall, the business is credible and professional but must urgently address its security posture to protect users and maintain trust.

M

Microtronics Engineering GmbH

microtronics.at

27

Microtronics Engineering GmbH is a medium-sized Austrian company specializing in technology solutions for environmental technology and energy management. Their offerings include advanced data loggers, sensors, and an IoT platform designed for reliable data transmission even in harsh environments. The company has a strong international presence with partners in 80 countries and a focus on B2B markets in energy and environmental sectors. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating marketing and analytics tools such as HubSpot and Google Analytics. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect users and enhance credibility.

Hoval Österreich operates as a leading provider of technologically advanced heating and climate control solutions in Austria, targeting both residential and commercial sectors. Their product portfolio includes heating systems for heat pumps, oil, gas, biomass, and solar, complemented by climate technology solutions for heating, cooling, and ventilation. The company maintains a strong market position supported by a comprehensive website that offers detailed product information, customer references, and service options including customer support and online ordering via myHoval. Technically, the website is built on the SAP Commerce (Hybris) platform, integrating modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management. However, performance is moderate with slow DNS resolution and no page size or load time data available. Mobile optimization and SEO are well addressed, but accessibility is basic. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, significantly weakening its security posture. While security headers like HSTS, X-Frame-Options, and XSS protection are present, the absence of a valid certificate and weak SSL/TLS configuration are critical issues. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Contact information is available but lacks explicit security policy or incident response details. Overall, the website is professional and trustworthy from a business and content perspective but requires urgent improvements in SSL/TLS configuration to enhance security and user trust. Strategic recommendations include fixing the SSL certificate, enabling modern TLS versions, and tightening CORS policies.

P

Pan American Energy S.L., sucursal Argentina

pan-energy.com

35

Pan American Energy (PAE) is a leading integrated private energy company operating primarily in Argentina and the Latin American region. The company focuses on upstream oil and gas operations, downstream refining and distribution, and renewable energy projects. It positions itself as a major producer, employer, and investor in the energy sector of Argentina, with presence in neighboring countries. The website reflects a corporate and professional image with clear navigation and multilingual support, targeting investors, suppliers, and job seekers. Technically, the site is built on Microsoft SharePoint and ASP.NET technologies, leveraging modern JavaScript libraries and frameworks for UI and analytics integration. However, the absence of HTTPS and SSL certificates is a critical security flaw, exposing users to potential risks. Security headers are partially implemented, but key protections like HSTS and TLS protocols are missing. Privacy compliance is weak, with no visible cookie consent or GDPR indicators. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

Xylem Inc. is a leading enterprise specializing in innovative water solutions and water technology, serving diverse sectors including energy, municipal water, healthcare, and manufacturing. The company offers a broad portfolio of products and services such as water and wastewater treatment systems, pumps, digital water solutions, and parts and supplies. Their market position is strong with a global footprint and multiple subsidiary brands. The website reflects a professional and comprehensive digital presence with excellent content quality and consistent branding. Technically, the site uses modern JavaScript frameworks, Google Tag Manager for analytics, and is hosted behind Cloudflare, but lacks a valid SSL certificate, which significantly impacts its security posture. Security headers are present but the absence of HTTPS and related SSL/TLS features lowers the overall security score. Privacy policies and terms of service are well documented, though no explicit cookie consent mechanism was detected. Contact information is primarily via contact forms with no direct emails or phone numbers found. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS implementation to enhance security and user trust.

Ploier + Hörmann is a medium-sized Austrian construction company specializing in energy and telecommunications infrastructure, with over 50 years of experience. The company operates as part of the larger Unternehmensgruppe LEYRER + GRAF, which strengthens its market position and resource base. Their website is professionally designed using TYPO3 CMS, providing clear navigation and relevant content targeted at clients in the construction and infrastructure sectors. However, the absence of a valid SSL certificate and HTTPS severely impacts their security posture and user trust. While cookie consent and privacy policies are implemented, there is a lack of explicit security policies or incident response information. The company maintains active social media channels and links to sister companies, indicating a well-connected business ecosystem.

K

Kpler

jbcenergy.com

40

Kpler is a medium-sized, Belgium-based data and analytics company specializing in commodity and energy markets. It provides proprietary data, market analysis, forecasts, and maritime tracking services to a professional B2B audience including traders, analysts, and logistics managers. The company has strengthened its market position through acquisitions such as JBC Energy and ClipperData, consolidating its leadership in commodity data analytics. Technically, the website is built on Webflow CMS, hosted via Cloudflare, and employs modern JavaScript libraries and marketing tools. However, the site suffers from a critical security issue due to an invalid SSL certificate and lack of TLS protocol support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

P

Primagaz

primagaz.fr

40

Primagaz is a well-established French energy supplier specializing in propane, butane, GPL, and biopropane gas products and services. Founded in 1938, the company targets both residential and professional customers, including those in remote areas not connected to natural gas networks. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Marketing and analytics tools such as Google Tag Manager, Visual Website Optimizer, and Cludo search are integrated, indicating a focus on user experience and conversion optimization. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and comply with modern web standards.

A

ATMOSA Petrochemie GmbH

atmosa.at

40

ATMOSA Petrochemie GmbH is a medium-sized Austrian company specializing in the production and supply of Phthalic Anhydride, a key petrochemical product. Established in 1995, it has positioned itself as a major European producer with a focus on reliability and long-term supply to chemical producers globally. The website reflects a professional business presence with clear company information, product details, and contact options targeting industrial clients and partners. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and analytics tools, hosted on infrastructure linked to hostprofis.com. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to risks and undermining trust. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

C

CANBERRA PACKARD Central Europe GmbH

cpce.net

40

CANBERRA PACKARD Central Europe GmbH is a well-established company specializing in the sales, installation, and servicing of nuclear and environmental radiation detection and measurement equipment, as well as medical radiation diagnostic and therapy equipment. Founded in 1987 in Austria, the company has grown to become the largest supplier in Central and Eastern Europe, serving a diverse clientele including government organizations, nuclear power plants, research centers, and international bodies. The website reflects a professional corporate presence with relevant content and clear contact information, targeting industry professionals and institutional customers. Technically, the website is built on WordPress 6.8.1 running PHP 8.2.28 and hosted on DigitalOcean infrastructure. While the site demonstrates good mobile optimization and accessibility, performance metrics are lacking, and SEO optimization is basic. The absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks and undermining trust. Security headers are minimal, and no advanced security frameworks or incident response policies are evident. From a security perspective, the site’s posture is weak due to the lack of HTTPS, no cookie or privacy policies, and no vulnerability disclosure mechanisms. The SPF record is valid, and DNS configurations are consistent with the business location, but the SSL/TLS configuration is non-existent, which is a major vulnerability. No WAF or blocking mechanisms are detected, indicating open accessibility but also potential exposure. Overall, the site is functional and professional in content but requires urgent improvements in security and privacy compliance to meet modern standards. Strategic recommendations include implementing HTTPS with a valid certificate, publishing privacy and cookie policies, and enhancing security headers and incident response readiness to improve trust and compliance.

B

Bioquadrat Energie- und Wassertechnik Holding GmbH

biogest.at

37

BIOGEST is a well-established Austrian company specializing in the design, construction, and operation of biomethane and biogas plants. With over 30 years of experience and more than 200 plants worldwide, they position themselves as a full-service provider offering project development, engineering, co-investment, construction, and maintenance services. Their target audience includes farmers, investors, and customers interested in sustainable energy solutions. The website is professionally designed, content-rich, and provides comprehensive contact information and social media presence. Technically, the site is built on TYPO3 CMS and served via Cloudflare, but lacks a valid SSL certificate, which is a critical security shortfall. Cookie consent mechanisms and tracking via Google Tag Manager are implemented, but GDPR compliance is basic. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance.

Landis+Gyr is a global leader in smart metering and grid edge intelligence technologies, providing advanced energy management solutions to utilities and energy providers. The company offers a broad portfolio including smart meters, analytics, consumer engagement, and managed services, positioning itself as a key enabler of the modern digital energy grid. Their website reflects a mature enterprise with comprehensive content, strong branding, and active communication channels including news, blogs, and social media. Technically, the site is built on WordPress with a robust set of plugins and integrations for analytics, marketing, and multilingual support. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine user trust and data protection. Security headers are partially implemented, and cookie consent mechanisms comply with GDPR standards. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of its SSL/TLS configuration to meet modern security expectations.

V

VINICKY Armaturen Handels GmbH

vinicky.at

37

VINICKY Armaturen Handels GmbH is an established Austrian company specializing in industrial valves and pumps, serving sectors such as water treatment, petrochemical, building technology, and power plants. The company has a long history dating back to 1952 and recently expanded its portfolio by acquiring Sonnleitner Industriearmaturen GmbH, enhancing its market position and product offerings. The website reflects a professional B2B supplier model targeting industrial clients with a focus on reliability and comprehensive solutions. Technically, the website is built on Joomla CMS with common JavaScript libraries and plugins, but lacks modern performance optimizations and mobile responsiveness is basic. Security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing users to risks. Privacy compliance is partially addressed with cookie consent mechanisms and basic privacy policy presence. Overall, the site is functional but requires significant improvements in security and technical modernization to meet current standards.

R

RP Global

rp-global.com

40

RP Global is a well-established large-scale developer, operator, and investor in the renewable energy sector with over 40 years of experience. The company focuses on solar PV, wind, hydro, hydrogen, and energy storage projects primarily in Europe and Latin America, with a significant project pipeline exceeding 14 GW(p). Their business model centers on project development, investment, and strategic partnerships, positioning them as a key player in the renewable energy market. Technically, the website is built on ASP.NET and hosted on Microsoft IIS with Umbraco CMS, incorporating modern web technologies such as Google Tag Manager and Google Fonts. However, performance is slow and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate, lack of HTTPS, missing security headers, and no incident response or security policy disclosures. Privacy compliance is minimal with policies present but no consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

E

EXERGY Studios, s.r.o.

exergystudios.com

35

EXERGY Studios, s.r.o. is a Slovak-based company specializing in building certification services such as BREEAM and LEED, building simulation, optimization, and integrated design. The company targets building owners, developers, and construction professionals seeking to enhance building performance and certification compliance. Their market position is that of a niche regional expert with a small business size and a focused service portfolio. Technically, the website is built on Joomla CMS using a Gavick template and includes legacy JavaScript libraries like jQuery 1.7 and MooTools. The site lacks HTTPS, which significantly impacts its security posture. Security headers are minimal, and no advanced security practices such as HSTS or OCSP stapling are implemented. Privacy compliance is poor, with no visible privacy or cookie policies or consent mechanisms. Business credibility is moderate due to the presence of trust indicators like membership in SKGBC and USGBC but is weakened by the lack of clear contact information and security best practices.

F

Fritz HOLTER GmbH

holter.at

40

Fritz HOLTER GmbH operates a comprehensive website focused on sanitary and heating wholesale distribution in Austria, with additional services in wellness and pool solutions. The company has a strong market presence with over 150 years of history, targeting both professional installers and end consumers. The website is content-rich, professionally designed, and offers multiple user engagement channels including partner installer search, online bathroom planner, and newsletter subscription. Technically, the site uses modern technologies such as Vue.js and Storyblok CMS, hosted on AWS CloudFront CDN, with good SEO and accessibility practices. However, the security posture is weakened by an invalid or missing SSL certificate, lack of HTTPS enforcement, and absence of modern TLS protocols, which poses a significant risk. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent SSL/TLS remediation to improve security and user trust.