Energy security reports

S

SLB

slb.com

40

SLB is a global energy technology company focused on driving innovation for a balanced planet. Their website showcases a comprehensive portfolio of solutions spanning decarbonization, digital transformation, and traditional oil and gas services. The company targets energy industry professionals, investors, partners, and job seekers, positioning itself as a market leader with extensive service offerings and a strong sustainability commitment. Technically, the website employs modern technologies such as jQuery, Brightcove video, Coveo search, and integrates multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and offers rich content with clear navigation. However, the security posture is weakened by an invalid or missing SSL certificate and lack of HTTPS support, which is a critical issue. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site reflects a mature enterprise with good business credibility but requires urgent security improvements to protect user data and maintain trust.

K

Kemira Oyj

kemira.com

40

Kemira Oyj is a global leader specializing in sustainable chemical solutions primarily for water-intensive industries such as pulp & paper, water treatment, and energy sectors. The company offers a comprehensive portfolio including water treatment chemicals, fiber production solutions, industrial chemicals, and digital services aimed at process optimization. Their website reflects a mature digital presence with strong emphasis on sustainability, investor relations, and corporate governance, targeting industry professionals, investors, suppliers, and potential employees. The company is headquartered in Helsinki, Finland, and maintains a large operational scale with over 4,700 employees.

E

Evides N.V.

evides.nl

40

Evides N.V. is a large, established public utility company providing reliable and sustainable drinking water services to approximately 2.5 million consumers and businesses in the southwest Netherlands. The company operates a comprehensive digital infrastructure including a customer portal (Mijn Evides), extensive self-service options, and detailed information resources. Their market position is strong with a focus on quality, sustainability, and customer engagement. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Microsoft Azure, and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security measures are in place including a strict Content Security Policy and multiple security headers; however, the SSL certificate is currently invalid and no modern TLS protocols are enabled, representing a critical security risk. Privacy compliance is robust with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.

E

ertex solar

ertex-solar.at

40

Ertex solar is a specialized company focused on building-integrated photovoltaics (BIPV), offering innovative solar energy solutions integrated into architectural elements such as façades, balconies, and roofs. With a strong emphasis on aesthetics and energy transition, the company serves architects, developers, and environmentally conscious clients globally. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive product information. Technically, the site runs on a modern WordPress stack with SEO and performance optimizations, hosted on OVHcloud. Security posture is solid with HTTPS and multiple security headers, though SSL/TLS protocol support requires enhancement. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain and WHOIS data corroborate the legitimacy and consistency of the business claims.

T

Thöni Industriebetriebe GmbH

thoeni.com

22

Thöni Industriebetriebe GmbH is a well-established family-owned industrial group based in Austria, specializing in aluminum manufacturing, automotive components, environmental energy technology, machinery and plant construction, and hose production. The company operates internationally with multiple production sites across Austria, Germany, Italy, and the USA. The website reflects a professional and comprehensive digital presence, targeting industrial clients and partners in related sectors. Technically, the site is built on WordPress with modern frontend frameworks and plugins, but suffers from a critical lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility and content quality are high, but the security deficiencies pose a risk to user trust and data protection.

I

IMPROCESS GmbH

improcess.at

24

IMPROCESS GmbH is a small Austrian biotech consulting engineering firm specializing in process improvement, energy efficiency, and environmental performance for manufacturing operations. Their website presents a professional image with clear business focus and partner affiliations. The technical infrastructure is based on WordPress with common web technologies but lacks HTTPS, which is a critical security gap. The site uses Google Analytics for user tracking but does not provide privacy or cookie policies, indicating poor privacy compliance. Security posture is weak due to missing SSL, lack of security headers, and exposed PHP version. Overall, the website is functional and informative but requires significant improvements in security and privacy to meet modern standards.

S

Schmied & Fellmann

schmied-fellmann.at

25

Schmied & Fellmann is a medium-sized Austrian company specializing in electrical engineering services including consulting, planning, installation, and maintenance. They also operate a retail business offering electrical devices, installation materials, postal services, and school and office supplies. The company targets businesses and institutions primarily in the St. Pölten and Wilhelmsburg regions. Their market position is solid locally, supported by certifications such as 'Leitbetrieb' and a broad portfolio of services and references. Technically, the website is built on TYPO3 CMS with common frontend libraries and demonstrates good content quality and navigation. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. No modern security headers or cookie consent mechanisms are implemented, and no analytics or tracking scripts are detected. Overall, the website is functional and professional but requires urgent security improvements to protect user data and improve trust. Strategic recommendations include obtaining a valid SSL certificate, implementing security headers, and adding privacy compliance features.

ITS Industrial Turbine Services GmbH is a specialized company focused on providing advanced systems and solutions for industrial gas turbines, including monitoring, control, and spare parts. Their key offerings include the TMOS SCADA monitoring system, MACH7 turbine control system, premium flame scanners, and GE Speedtronic™ spare parts. The company targets industrial sectors such as oil, gas, steel, aluminum, and paper industries worldwide, positioning itself as a reliable and experienced partner with over a decade of expertise. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, with integration of Google Tag Manager and Cookiebot for analytics and cookie consent management. However, the absence of a valid SSL certificate and HTTPS support is a significant technical and security shortfall. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features. From a security perspective, the lack of HTTPS and related security headers severely impacts the security posture. No explicit security policies or incident response contacts are published, and DNS security features like DNSSEC and CAA are not enabled. Cookie consent is implemented, but GDPR compliance indicators are minimal. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enhancing security headers, publishing security policies, and improving GDPR compliance measures.

L

Legrand

legrand.com

40

Legrand is a global specialist in electrical and digital building infrastructures, offering a wide range of products and solutions tailored for various countries and global markets. The company positions itself as a leader in its industry, targeting both B2B and B2C customers seeking advanced electrical infrastructure solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation, although some key contact information is not directly visible on the landing page. Technically, the website is built on Drupal 10 and leverages modern technologies such as Google Tag Manager and tarteaucitron.js for cookie consent management, hosted via Amazon CloudFront CDN. While the site shows basic mobile optimization and accessibility features, performance data is unavailable. SEO optimization is basic but present through meta tags and Open Graph data. From a security perspective, the site implements several important HTTP security headers and a content security policy. However, the lack of a valid SSL certificate and absence of TLS protocols severely undermine the security posture, exposing users to risks and reducing trust. No vulnerabilities like Heartbleed or POODLE were detected, but the SSL misconfiguration is a critical issue. Overall, the website demonstrates moderate digital maturity and business credibility but requires urgent remediation of SSL issues to improve security and user trust. Privacy compliance is good with clear cookie consent mechanisms and GDPR-aligned policies. Strategic improvements in security infrastructure and enhanced contact transparency would strengthen the company's online presence and risk posture.

F

Flowserve Corporation

flowserve.com

40

Flowserve Corporation is a global enterprise specializing in manufacturing and servicing industrial flow control products such as pumps, valves, seals, and actuators. The company serves critical industries including energy, chemicals, water management, and oil & gas, positioning itself as a market leader with a comprehensive product portfolio and strong brand presence. The website reflects a mature digital infrastructure built on Drupal 10, with modern front-end technologies and multi-language support, indicating a high level of digital maturity and user experience focus. Security posture is mixed; while security headers and policies are well implemented, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, which poses a significant risk to secure communications. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website is professional, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to improve security and user trust.

C

Christof Group

christof-group.at

26

Christof Group is a large, family-owned industrial group specializing in critical process equipment manufacturing and plant engineering services, operating across Austria, Germany, and Slovenia. The company is positioned as a world leader in its sector with a strong portfolio of subsidiaries and a history of over 150 years in the industry. The website reflects a professional B2B business model targeting industrial clients in energy, petrochemical, and pharmaceutical sectors. Technically, the site is built on WordPress with modern SEO and multilingual capabilities but lacks HTTPS, which is a significant security shortfall. The security posture is weak due to the absence of SSL/TLS encryption and limited security headers, exposing the site to potential risks. Privacy compliance is addressed with a cookie consent mechanism and privacy policy, but incident response and security policies are missing. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

I

ILF Consulting Engineers

ilf.com

23

ILF Consulting Engineers is a large, privately owned international engineering and consulting firm specializing in infrastructure, energy, water, and environmental projects. With over 3,000 employees and a global presence spanning 45+ offices across six continents, ILF positions itself as a leader in sustainable engineering solutions. The website reflects a professional and comprehensive digital presence, offering detailed information about their services, business areas, and corporate values. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, providing a good user experience and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. Security headers are present, but the lack of TLS protocols and HSTS reduces overall security. Privacy compliance is addressed with a comprehensive privacy and cookie policy, though no explicit consent mechanism is detected. Business credibility is strong with clear company information and trust indicators such as ISO 27001 certification and Great Place to Work recognition. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

E

Excellence AG

excellence.ag

39

Excellence AG is an international technology partner specializing in engineering and IT services with a strong focus on green technology and sustainability. The company operates multiple offices across Germany and the Netherlands, offering green tech job opportunities and supporting sustainable projects in energy and transportation sectors. Their website is professionally designed, content-rich, and targets professionals interested in green technology careers and partnerships. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, integrated with Google Tag Manager and social login plugins for LinkedIn and Xing. The hosting appears to be on AWS infrastructure. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Performance metrics are not available, but the site shows good mobile optimization and SEO practices. From a security perspective, the absence of HTTPS and modern TLS protocols significantly lowers the security posture. No advanced security headers or incident response policies are evident. Privacy compliance is partially met with a comprehensive privacy policy and GDPR consent statements on forms, but no cookie consent mechanism is detected. Business credibility is supported by ISO 9001 certification, multiple office locations, and professional content. Overall, the website presents a trustworthy and professional business front but requires urgent security improvements, especially enabling HTTPS and enhancing security headers, to protect user data and improve trustworthiness. Strategic recommendations include SSL implementation, security header enhancements, and adding explicit cookie consent mechanisms to align with privacy regulations.

A

AMETEK Grabner Instruments

grabner-instruments.com

40

AMETEK Grabner Instruments is a medium-sized business specializing in the development and manufacturing of automatic petroleum testing equipment, including vapor pressure testers, flashpoint testers, and fuel analyzers. The company operates globally with a strong market position as an innovator and thought leader in fuel analysis technology. Their website reflects a professional business model focused on manufacturing, sales, training, and technical support services for the petroleum and energy sectors. Technically, the website uses ASP.NET technology with JavaScript libraries and is hosted on AWS infrastructure. While the site is mobile optimized and has good content quality, it suffers from slow load times and lacks a valid SSL certificate, which impacts security posture significantly. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Security best practices are partially implemented but require urgent improvements, especially regarding HTTPS and security headers. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate entity.

D

Daikin

daikin-ce.com

38

Daikin Central Europe operates as a regional branch of Daikin Industries, Ltd., specializing in air conditioning, heating, ventilation, heat pump, and refrigeration solutions. The website targets businesses and consumers in Central Europe, offering a broad portfolio of HVAC products and services. The company maintains a strong market position with multiple country-specific domains, reflecting a well-established regional presence. Technically, the website is built on Adobe Experience Manager CMS and leverages modern frontend technologies including Adobe Helix RUM for performance monitoring and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap. Security headers are partially implemented but insufficient without proper encryption. Privacy compliance is weak, with no visible privacy or cookie policies, and no contact information is provided on the landing page, limiting user trust and regulatory compliance. Overall, the site is professional and well-branded but requires urgent security and privacy improvements.

The website routeco.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of business content. This prevents direct analysis of the website's content, policies, or contact information. The domain is mature, registered since 1997, and protected with strong domain status flags, indicating a legitimate business presence. However, the lack of a valid SSL/TLS certificate and the presence of a WAF block significantly limit the ability to assess the website's security posture and user experience. Technically, the site is hosted behind Cloudflare, which provides DNS and security services, but the absence of HTTPS and modern TLS protocols is a critical security gap. The security headers are partially implemented but insufficient without proper SSL. Performance and SEO cannot be evaluated due to the blocked content. No privacy, cookie, or terms of service policies are visible, nor is any contact information or business metadata. From a security perspective, the site suffers from critical issues including no SSL, no HSTS, and no OCSP stapling. The Cloudflare WAF block suggests active protection against potential threats but also impacts legitimate user access. The domain WHOIS data is consistent and trustworthy, with no suspicious patterns detected. Overall, the website's current state poses a high risk for user trust and accessibility. Strategic recommendations include immediate SSL certificate deployment, reviewing WAF rules to avoid blocking legitimate users, publishing clear privacy and cookie policies, and providing accessible contact information to improve business credibility and compliance.

H

Hoval Aktiengesellschaft

hoval.com

40

Hoval Aktiengesellschaft operates as a leading provider of advanced indoor climate control solutions, specializing in heating, ventilation, and energy-efficient systems for a broad range of building types including residential, commercial, and industrial sectors. The company maintains a strong international presence with a well-structured website that clearly communicates its product offerings and corporate philosophy focused on sustainability and energy responsibility. Technically, the website leverages modern web technologies and SAP Commerce platform, supported by Google Tag Manager and OneTrust for privacy compliance. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses risks to user trust and data security. Privacy compliance is robust with clear policies and consent mechanisms in place. Overall, the website reflects a mature digital presence but requires urgent remediation of SSL and TLS issues to enhance security and trust.

S

SimTech GmbH

simtechnology.com

31

SimTech GmbH is a specialized software company providing advanced simulation technology primarily for energy and chemical engineering sectors. With over 30 years of experience, the company offers simulation software (IPSEpro), model libraries, consulting, and training services targeted at plant manufacturers, consultants, and R&D organizations. The website reflects a professional and consistent brand with clear business information and reputable client references. Technically, the site is built on Joomla CMS with modern frameworks but lacks HTTPS, which is a critical security gap. Security headers are present but insufficient without SSL/TLS. Privacy compliance is good with a clear privacy policy, though no cookie consent mechanism is implemented. Overall, the site is content-rich and trustworthy but requires urgent security improvements to protect user data and enhance trust.

E

e7 GmbH

e-sieben.at

28

e7 GmbH is an Austrian energy and environmental engineering consultancy specializing in energy efficiency, renewable energy, and climate protection. The company offers a broad range of services including energy audits, management, consulting for new construction and renovations, energy innovations, and international projects. Their market position is that of a specialized small enterprise with a strong focus on sustainable energy solutions. The website content is professionally presented, targeting businesses and organizations interested in energy and climate solutions. Technically, the website is built on the webEdition CMS platform and uses Matomo for analytics, reflecting a privacy-conscious approach. However, the site suffers from a lack of HTTPS support and valid SSL certificates, which significantly undermines its security posture. Performance is slow, and no modern TLS protocols or security headers are configured, exposing the site to potential risks. From a security perspective, the absence of HTTPS and security headers are critical vulnerabilities. No explicit security policies or incident response contacts are provided, which could impact trust and compliance. Privacy compliance is reasonably good due to the presence of a comprehensive privacy policy and cookie information, although no explicit consent mechanism is observed. Overall, the website is functional and professional but requires urgent security improvements, especially enabling HTTPS and implementing security best practices. Strategic recommendations include obtaining a valid SSL certificate, enabling HSTS, adding security headers, and enhancing incident response transparency to improve trust and compliance.

A

AF Compressors

afcompressors.com

40

AF Compressors is a well-established manufacturer specializing in oil-free piston compressors, serving industrial sectors including PET bottling. The company positions itself as a world leader with a strong focus on energy and cost savings. Their website reflects a medium-sized enterprise with a global service network and a consistent brand presence. Technically, the site is built on WordPress with modern libraries and tracking tools, but suffers from a critical lack of HTTPS and valid SSL certificates, which severely impacts security posture. Privacy policies and cookie consent mechanisms are implemented, though extensive tracking scripts may affect privacy compliance. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

S

Symvaro GmbH

symvaro.com

22

Symvaro GmbH is a small Austrian company specializing in digital solutions for water and waste management, targeting municipalities and associations. Their key offerings include WATERLOO, a water meter data management system, and Die Müll App, a smart waste management service. The company positions itself as a niche provider focused on efficiency, simplicity, and data protection. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet, but lacks a valid SSL certificate and proper DNS configuration, which negatively impacts security and trust. The security posture is weak due to missing HTTPS and DNS records, although some security headers like HSTS are present. Privacy compliance is partially met with a comprehensive privacy policy hosted externally but lacks cookie consent mechanisms. Overall, the website is functional and professionally designed but requires significant improvements in security and domain management to enhance trust and compliance.

Sensus, a brand under Xylem Inc., specializes in smart solutions for water, energy, and communication infrastructure, targeting utilities and municipalities. The website presents a mature, well-branded digital presence with comprehensive product and service information, supporting a B2B business model focused on smart utility networks and managed services. Technically, the site uses modern web technologies including EPiServer CMS and Cloudflare for hosting, but suffers from critical SSL/TLS misconfigurations, lacking a valid HTTPS certificate which severely impacts security posture. Security headers are well implemented, but the absence of HTTPS and modern TLS protocols is a major vulnerability. Privacy compliance is partially met with a clear privacy policy and terms of service, but no cookie consent mechanism is observed despite cookie usage. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and maintain trust.

A

ATMOsphere

atmo.org

56

ATMOsphere is a globally recognized event organizer specializing in conferences and networking events focused on natural refrigerants and clean cooling technologies. Established in 2009 and managed by the parent company shecco, ATMOsphere serves as a market accelerator by bringing together key industry stakeholders including policy makers, manufacturers, and end users. The website effectively communicates the business purpose, upcoming events, and team information, supported by multimedia testimonials and social media engagement. Technically, the website is built on WordPress with Elementor and uses modern plugins to enhance user experience and analytics. However, the absence of a valid SSL certificate and lack of a privacy policy represent significant security and compliance gaps. The cookie consent mechanism is implemented, but GDPR compliance cannot be fully confirmed due to missing privacy documentation. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect user data and build trust.

A

ATMOsphere

naturalrefrigerants.com

48

NaturalRefrigerants.com is a well-established industry portal published by ATMOsphere, focusing on natural refrigerant-based cooling and heating technologies. It serves as a global marketplace and news source, connecting buyers and providers worldwide. The website demonstrates a strong market position as a leading source of information since 2006, with a professional design and comprehensive content. Technically, the site is built on WordPress with Elementor and WooCommerce, leveraging modern web technologies but suffers from slow performance and lacks a valid SSL certificate, which impacts its security posture. The absence of HTTPS and security headers are critical vulnerabilities that need immediate attention. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is credible and trustworthy but requires significant security improvements to protect user data and enhance trust.

The website imerys.com is currently inaccessible due to an AWS WAF security challenge that requires JavaScript verification, resulting in minimal HTML content and no visible business or security information. The domain is registered and uses professional DNS and email services, indicating a legitimate enterprise-level business likely operating in the energy sector. However, the lack of a valid SSL/TLS certificate and absence of accessible content severely limit the ability to assess the company's digital maturity and security posture. The DNS configuration and MX records suggest a well-established infrastructure, but the website's security configuration needs urgent improvement to enable secure HTTPS access and reduce user friction caused by the WAF challenge. Overall, the site presents a low trustworthiness score due to inaccessibility and missing security best practices.

F

Flaga s r.o.

flaga.cz

21

Flaga s r.o. is a mature Czech energy company specializing in the distribution of liquefied petroleum gas (LPG) in cylinders, tanks, and for automotive use. The company has a strong market presence supported by a 27-year domain age and recognized safety certifications. Their website targets both corporate and individual customers in the Czech Republic and Poland, offering a range of LPG products and customer services including electronic invoicing. Technically, the website is built on Joomla CMS with PHP 8.3.3 backend and jQuery frontend, integrating Google Tag Manager and OneTrust for analytics and cookie consent. However, the site lacks HTTPS, which is a critical security deficiency. Security headers are partially implemented but the absence of SSL/TLS and modern protocols significantly weakens the security posture. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the business credibility is solid, but the technical and security implementations require urgent improvements to meet modern standards.

I

illwerke vkw AG

illwerkevkw.at

40

illwerke vkw AG is a well-established energy company based in Austria, specializing in renewable energy production including hydropower, wind, and photovoltaic sources, as well as energy trading and supply. The company has a strong regional presence in Vorarlberg and operates several subsidiaries in related sectors such as energy networks and tourism. The website reflects a professional and consistent brand image with comprehensive business information and active social media engagement. Technically, the site uses modern JavaScript libraries and frameworks, including Bootstrap and jQuery, and integrates Google Tag Manager and Usercentrics for analytics and consent management. However, the lack of a valid SSL certificate and HTTPS support is a significant security shortfall, impacting the overall security posture and user trust. Privacy policies and cookie consent mechanisms are well implemented, indicating good compliance with GDPR requirements. Overall, the website is informative and user-friendly but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

4ward Energy Research GmbH is a specialized research institution focused on energy technologies and energy economics. The company offers a broad range of services including technology development, business model creation, concept and study preparation, simulations, and knowledge transfer. Their expertise spans project leadership and coordination, particularly within national and EU research funding frameworks. The website targets research projects, companies, and municipalities involved in the energy sector, positioning itself as a reliable partner with extensive experience and a strong network. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as Bootstrap and jQuery, ensuring good mobile responsiveness and user experience. However, the site lacks HTTPS support, which is a critical security shortfall. Security headers are minimal but some best practices like X-Content-Type-Options are implemented. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy in German. Contact information is clearly presented with official company email, phone, and physical address. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

K

KOHLBACH

kohlbach.at

34

KOHLBACH is a company specializing in biomass energy solutions, targeting businesses and organizations interested in sustainable energy production. The website presents a basic digital presence with minimal content and limited business information. The technical infrastructure uses modern JavaScript frameworks such as React and integrates third-party services like CookiePro for cookie consent and Google Tag Manager for analytics. However, the website lacks HTTPS, which is a critical security deficiency, and does not provide privacy policies or contact information, limiting trust and compliance. Security posture is weak due to missing SSL, lack of security headers beyond Content-Security-Policy, and absence of domain security features like DMARC and DNSSEC. Overall, the site is functional but requires significant improvements in security and compliance to meet industry standards.

S

Stork

stork.com

40

Stork is an established industrial services company focused on asset management, maintenance, and consultancy primarily in the energy and process industries. Recently acquired by Bilfinger, Stork operates under its umbrella in several key countries including Belgium, the Netherlands, Germany, and the USA. The website presents a comprehensive overview of their services and global presence, targeting industrial clients seeking lifecycle asset support. Technically, the site uses modern React technology but suffers from slow load times and lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well addressed with clear cookie and privacy policies including consent mechanisms. However, explicit contact details like emails and phone numbers are not readily available, relying mainly on contact forms. Overall, the site is professional and trustworthy but would benefit from improved security configurations and performance optimizations.

C

Caterpillar Energy Solutions GmbH

mwm.net

28

MWM, operating under Caterpillar Energy Solutions GmbH, is a well-established company specializing in highly efficient and environmentally friendly combined heat and power plants and block heating power plants. With over 150 years of experience, the company offers a broad portfolio of gas engines and power generation solutions targeting industrial, commercial, and public utility sectors globally. The website reflects a mature digital presence with comprehensive product and service information, supported by a global service and sales network. Technically, the site is built on WordPress with common libraries and plugins, but suffers from a critical lack of a valid SSL certificate, which severely impacts its security posture. Privacy policies and GDPR compliance are well addressed, and contact is primarily via web forms. Overall, the site is professional and trustworthy but requires urgent security improvements.

F

FLSmidth A/S

flsmidth.com

39

FLSmidth A/S is a global leader in mineral processing equipment and services, serving the mining industry with a comprehensive portfolio of products, parts, and digital solutions. The company emphasizes sustainability through its MissionZero program, aiming for zero-emissions mining by 2030. The website is built on a modern Next.js framework and hosted on Vercel, reflecting a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which significantly impacts the site's security posture. Despite this, the site provides extensive business and investor information, clear contact details, and demonstrates good privacy compliance with comprehensive legal pages. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

Weatherford's PetroVisor website presents a mature and comprehensive SaaS platform focused on unifying data and analytics for the energy sector, specifically oil and gas production optimization. The platform integrates AI/ML capabilities and offers multiple modules addressing production, artificial lift, completion optimization, ESG, and enhanced oil recovery. The website is professionally designed, content-rich, and targets enterprise-level energy industry professionals. Technically, the site uses a modern tech stack including Kentico CMS, jQuery, and various analytics and marketing tools. However, a critical security gap exists as the site lacks a valid SSL certificate and does not serve content over HTTPS, exposing users to potential risks. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security incident response or vulnerability disclosure information is found. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic security improvements are necessary to enhance trust and protect user data.

E

Emerson Electric Co.

flexim.com

40

The website flexim.com serves as a comprehensive brand page for Flexim, a division of Emerson Electric Co., specializing in non-intrusive, clamp-on ultrasonic flow meters for liquids, gases, and steam. The site positions Flexim as an industry leader with a strong focus on industrial and energy sectors, offering a wide range of products, services, and customer support resources. The content is rich, professionally designed, and well-structured, targeting industrial customers and professionals seeking advanced flow measurement solutions. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, and Visual Website Optimizer, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, significantly impacting the site's security posture. Privacy and compliance measures are well addressed with clear privacy and cookie policies, and incident response channels are available. Overall, the site demonstrates high business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions and maintain trust.

A

Amiblu Group

amiblu.com

25

Amiblu Group operates as the world's largest producer and technology partner for GRP (glass-fiber reinforced plastics) pipe systems, focusing on sustainable water infrastructure solutions. The company targets urban and rural communities, industries, and infrastructure planners, offering a broad portfolio of pipe products, technical documentation, and reference databases. Their market position is strong, supported by certifications such as EcoVadis and partnerships like the UNESCO World Engineering Day 2025. The website reflects a mature, well-established business with a professional and consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including caching and multilingual support. However, performance is moderate and accessibility is basic. The site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. Security headers are minimal, and no advanced security policies are implemented. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing users to potential risks. No incident response or security policy information is publicly available. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

H

HAKOM Time Series GmbH

hakom.at

26

HAKOM Time Series GmbH is a medium-sized Austrian company specializing in time series management software and cloud services for the energy sector. The company positions itself as a technology leader with over 30 years of experience, offering both on-premises and cloud-based solutions under the PowerTSM® brand. Their website reflects a professional and comprehensive digital presence, targeting energy industry professionals and IT developers with detailed product information, news, webinars, and customer success stories. The company maintains active engagement through social media and newsletter subscriptions. Technically, the website is built on TYPO3 CMS and uses modern web technologies including jQuery and Swiper.js for interactive content. The hosting provider is identified as Web-Crossing. While the site is mobile-optimized and SEO-friendly with proper metadata and structured data, performance metrics are not explicitly available. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy in German. From a security perspective, the site lacks a valid SSL/TLS certificate and does not support modern TLS protocols, which is a critical vulnerability impacting user trust and data security. Security headers such as HSTS and CSP are present but cannot compensate for the missing HTTPS encryption. No explicit security policy or incident response information is found, which could be improved to enhance transparency and trust. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to meet modern security standards and protect user data effectively. Strategic recommendations include obtaining a valid SSL certificate, enabling TLS 1.2/1.3, and enhancing security policies and incident response disclosures.

I

Intemann GmbH

intemann.com

24

Intemann GmbH is a medium-sized Austrian company specializing in technical building services across multiple sectors including energy, industrial plants, commercial and residential construction, and hospitality. The company offers comprehensive services such as planning, prefabrication, ventilation technology, and maintenance. Their market position is that of an established regional player with international project reach, supported by a consistent brand presence and certifications. Technically, the website is built on TYPO3 CMS with a modern JavaScript stack but lacks HTTPS, which is a critical security shortfall. The site includes cookie consent mechanisms and clear contact information, supporting GDPR compliance. However, the absence of SSL/TLS and security policies reduces the overall security posture. Strategic improvements in security infrastructure and incident response readiness are recommended to enhance trust and compliance.

RAG Austria AG is Austria's largest energy storage company and a leading technical storage operator in Europe, specializing in the storage, conversion, and conditioning of gaseous energy carriers with a strong focus on renewable gases such as hydrogen. The company has a well-established market position with a history spanning over 90 years and operates multiple subsidiaries and partnerships in the energy sector. Technically, the website is built on TYPO3 CMS and uses modern tools like Usercentrics for cookie consent and Matomo for analytics, reflecting a moderate digital maturity. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS, which significantly impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the company presents a professional and trustworthy online presence but must urgently address its SSL/TLS configuration to improve security and trust.

R

Roswel

roswel.nl

40

Roswel is a small international wholesale company specializing in fittings, piping systems, and sustainable heating technologies, including pellet stoves. Established in 2009, it serves various sectors such as water technology, agriculture, and installation technology, primarily targeting businesses in the Netherlands and Germany. The company also acts as a distributor for SALUS CONTROLS in the Netherlands, offering products and support for heating and cooling control systems. The website reflects a professional business with clear product offerings and contact channels but lacks advanced security measures.

H

Harouge Oil Operations

harouge.com

40

Harouge Oil Operations is a Libyan energy company specializing in the development and exploitation of oil fields. The company operates under international agreements and OPEC directives, focusing on safe and efficient oil extraction and export. Their website provides corporate information, news, tenders, and operational details primarily targeting industry stakeholders and partners. Technically, the site is built on Joomla CMS with K2 content management and uses common web technologies like jQuery and Bootstrap. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which critically impacts security posture. Security headers are partially implemented but insufficient without proper TLS. Privacy compliance is weak, with no cookie consent or detailed privacy policy. Contact information is limited to a contact form and webmail link, with no explicit emails or phone numbers. Overall, the website is functional but requires significant improvements in security and privacy to meet modern standards.

S

SABIC

sabic.com

40

SABIC is a large multinational petrochemical company headquartered in Saudi Arabia, specializing in manufacturing and supplying polymers, chemicals, specialties, and agri-nutrients. The website reflects a mature enterprise with a comprehensive digital presence targeting industrial customers, investors, and job seekers. The content is professionally presented with clear navigation and consistent branding. Technically, the site uses ASP.NET technology with modern JavaScript libraries and Google Tag Manager for analytics and marketing. However, the SSL/TLS configuration is critically flawed with no valid certificate and no TLS protocols enabled, severely impacting security posture. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and professional but requires urgent remediation of HTTPS and SSL issues to ensure secure user interactions.

S

Scheuch Group

scheuch.com

40

Scheuch Group is a well-established Austrian company specializing in industrial air cleaning and environmental technology solutions, holding a world market leader position since its founding in 1963. The company offers comprehensive services including devices, components, assembly, and consulting tailored to various industries. Their website reflects a professional digital presence with multilingual support and clear business information targeting industrial clients. Technically, the site is built on WordPress with modern plugins and frameworks, but suffers from a critical security weakness due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support. Security headers are partially implemented, but the lack of encryption significantly undermines the site's security posture. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, the site is trustworthy and professionally maintained, but urgent improvements in SSL/TLS configuration are necessary to enhance security and user trust.

M

Minimax GmbH

minimax.de

37

Minimax GmbH is a well-established leader in the fire protection industry with over 120 years of experience. The company offers a broad range of fire detection, suppression, and prevention systems tailored for various industries including energy, manufacturing, and transportation. Their market position is strong, supported by a comprehensive portfolio of products and services, including maintenance and training. The website reflects a professional and consistent brand image targeting industrial and commercial clients seeking reliable fire safety solutions. Technically, the site uses modern JavaScript modules, a CDN for content delivery, and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, leaving the site vulnerable to interception and undermining user trust. Security headers are properly configured, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to align with best practices and protect users.

G

GrECo International AG

vmg.at

36

GrECo International AG is a leading Austrian risk and insurance management company specializing in industry, trade, commerce, and the public sector. Recently, it merged with VMG Versicherungsmakler GmbH, consolidating their services under the GrECo Group brand. The company offers comprehensive risk analysis, insurance brokerage, claims management, and risk engineering services, targeting clients primarily in Austria and the CEE region. The website is professionally designed, content-rich, and optimized for SEO with structured data and multilingual support. Technically, the site runs on WordPress with Elementor and uses Matomo for analytics, but suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Security headers are partially implemented, but modern TLS protocols and HSTS are not properly enabled. Privacy policies and cookie policies are present and GDPR compliant, with minimal user tracking. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.

E

Endress+Hauser AG

endress.com

40

Endress+Hauser AG is a global leader in industrial measurement instrumentation and automation solutions, serving diverse sectors including energy, chemical, life sciences, water treatment, and oil & gas. The company offers a comprehensive portfolio of products and services, including flow, level, liquid analysis, optical analysis, pressure, and temperature measurement devices, alongside software and system products. Their website reflects a mature digital presence with extensive product information, customer support, and training resources, targeting industrial process engineers and related professionals worldwide. Technically, the website employs modern web technologies such as JavaScript, CSS, JSON-LD structured data, and utilizes Tealium for analytics and tag management. The site is hosted on reliable infrastructure, likely Amazon AWS, and demonstrates good mobile optimization, accessibility, and SEO practices. However, performance metrics indicate slow loading times, which may impact user experience. From a security perspective, the site has critical deficiencies: it lacks a valid SSL certificate and does not enable HTTPS or modern TLS protocols, severely impacting its security posture. While some security headers are present, the absence of proper SSL/TLS configuration is a major risk. Privacy and cookie policies are well implemented with consent mechanisms, and contact information is clearly provided, enhancing trust. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include immediate SSL certificate installation, enabling HTTPS and modern TLS versions, and enhancing security headers and session management. These steps will significantly improve the site's security score and user confidence.

ChargePoint, Inc. operates the be.ENERGISED platform, a modular SaaS solution designed to support businesses in building and expanding electric vehicle (EV) charging services. The website targets enterprises, fleet operators, partners, and EV drivers primarily in Germany and Europe, offering comprehensive services including charge point operation, software integration, billing, roaming, and white-label solutions. The company holds a strong market position with significant penetration among Fortune 50 companies and a large active charging network. Technically, the site is built on Drupal 10 and hosted on Pantheon, with integrations such as Google Tag Manager and Google Maps API enhancing functionality. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, despite the presence of some security headers and GDPR-compliant privacy and cookie policies. Overall, the site demonstrates high content quality and business credibility but requires urgent improvements in security infrastructure to protect user data and maintain trust.

V

VARIOTHERM HEIZSYSTEME GMBH

variotherm.com

21

Variotherm Heizsysteme GmbH is an established Austrian company specializing in surface heating and cooling systems for floors, walls, and ceilings, leveraging over 30 years of expertise. Their product portfolio targets contractors, installers, architects, and end customers seeking efficient heating and cooling solutions. The company maintains a professional online presence with multilingual support and a comprehensive product and service offering. Technically, the website is built on TYPO3 CMS served by Apache, with integrated analytics via Matomo and Google Tag Manager. However, the absence of HTTPS and a valid SSL certificate significantly undermines the security posture. While cookie consent mechanisms and privacy policies are in place, the lack of advanced security headers and incident response information indicates room for improvement. Overall, the website is functional and professional but requires urgent security enhancements to protect user data and improve trust.

Ö

Ökovolt Solartechnik GmbH

oekovolt.com

27

Ökovolt Solartechnik GmbH is a well-established company specializing in photovoltaic solutions for industry, commerce, municipalities, real estate developers, and private households. With over 15 years of experience, the company offers comprehensive services including planning, financing, installation, and operation of photovoltaic large-scale systems. Their market position is strong, supported by detailed project references and a professional online presence. Technically, the website is built on WordPress with modern SEO and analytics tools, but suffers from a critical lack of HTTPS due to an invalid SSL certificate, which undermines security and trust. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policies. Overall, the company demonstrates a mature digital infrastructure but must urgently address SSL issues to improve security posture and user trust.

K

Kreisel Electric GmbH

kreiselelectric.com

21

Kreisel Electric GmbH is a medium-sized Austrian company specializing in advanced battery technology and high-voltage battery systems for electrification projects across commercial, marine, off-highway, and motorsport sectors. The company leverages patented immersion cooling technology to deliver high safety, performance, and longevity in their products. Their market position is strengthened by strategic partnerships with industry leaders such as BASF and Allego, reflecting a commitment to sustainability and innovation. The website is professionally designed, content-rich, and targets B2B customers seeking electrification solutions. Technically, the site is built on WordPress with modern SEO and marketing tools like Google Tag Manager and OneTrust for cookie consent. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy compliance is addressed through comprehensive policies linked to Deere & Company, indicating a strong privacy posture. Contact information is clearly provided, enhancing business credibility. Overall, while the business and technical maturity are solid, urgent improvements in security infrastructure are recommended.

V

VAM USA

vam-usa.com

40

VAM USA is a medium-sized company specializing in premium connection solutions for the oil and gas industry, with a strong market position as a world leader and a parent company relationship to Vallourec Oil and Gas France. The website provides comprehensive business information, product details, and service offerings targeted at energy sector professionals and distributors in North America. Technically, the site is built on WordPress with common marketing and analytics tools but suffers from slow performance and lacks modern security implementations such as HTTPS and security headers. The security posture is weak due to the absence of a valid SSL certificate and no HTTPS support, which is a critical issue. Privacy compliance is poor, with no visible privacy or cookie policies. Overall, the site is professional and credible but requires urgent security improvements to protect users and enhance trust.