Energy security reports

BEST - Bioenergy and Sustainable Technologies GmbH is a medium-sized Austrian research organization specializing in sustainable bioenergy technologies. The company focuses on developing biomass-based biorefineries, digital methods for energy systems, and sustainable supply and value chains. Their market position is that of a technological leader and research center in Austria and Central Europe, serving research institutions, industry partners, and policymakers. The website provides comprehensive information on projects, publications, and company offices, targeting stakeholders interested in renewable energy and bioeconomy. Technically, the website uses a CakePHP CMS with Bootstrap and common JavaScript libraries but lacks HTTPS, which is a critical security gap. The site is mobile-optimized and has good content quality and navigation but suffers from slow performance and basic SEO and accessibility. Security posture is weak due to missing SSL/TLS and modern security headers, though session cookies are set with secure flags and X-Frame-Options is enabled. Privacy compliance is basic with a cookie consent banner and a privacy policy PDF in German. Contact information is clearly presented with multiple Austrian office locations and verified company emails and phone numbers. Analytics tools include Google Analytics and Matomo, indicating moderate user tracking. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance security headers.

L

Linde PLC

the-linde-group.com

40

Linde PLC is a leading global industrial gases and engineering company focused on delivering innovative solutions to support customers across various sectors including clean energy and sustainability. The website reflects a mature, enterprise-level business with comprehensive content covering their expertise, sustainability initiatives, investor relations, and corporate governance. The technical infrastructure leverages modern tools such as Sitecore CMS, Azure Application Insights, and OneTrust for compliance, indicating a digitally mature platform. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of modern TLS protocol support, which exposes the site to potential risks and impacts user trust. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and compliance.

E

ENERGIEALLIANZ Austria GmbH

energieallianz.com

25

ENERGIEALLIANZ Austria GmbH is a mature and leading energy sales and trading company in Austria, founded in 2001. The company serves a large customer base including private, commercial, and industrial clients with electricity, natural gas, and related services. The website reflects a professional corporate presence with good content quality, customer testimonials, and comprehensive contact information. Technically, the site is built on TYPO3 CMS with standard web technologies but suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the lack of visible security policies, incident response contacts, and terms of service pages are gaps in governance documentation. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

B

Borouge

borouge.com

40

Borouge is a prominent petrochemical company specializing in the production and supply of innovative polyethylene and polypropylene solutions across multiple sectors including energy, infrastructure, healthcare, and agriculture. The company leverages advanced Borealis Borstar® technology to deliver tailored polymer products that meet specific customer needs, emphasizing sustainability and innovation. The website reflects a well-structured digital presence with comprehensive investor relations, media updates, and e-services, targeting industrial clients and stakeholders in the petrochemical industry. Technically, the site is built on Microsoft SharePoint, incorporating modern web technologies and basic mobile optimization. However, a critical security concern is the invalid or missing SSL certificate, which undermines the security posture despite the presence of multiple security headers and policies. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website demonstrates a solid business and digital foundation but requires urgent remediation of SSL issues to improve security and trust.

P

Pörner Ingenieurgesellschaft mbH

poerner.at

38

Pörner Ingenieurgesellschaft mbH is a well-established independent engineering company specializing in process engineering plant construction, headquartered in Vienna, Austria. With approximately 550 engineers across 10 European locations, the company serves industrial sectors including refineries, petrochemical, chemical, energy, gas, and pharmaceuticals. Pörner is recognized globally for its Biturox® bitumen oxidation technology, having licensed and built over 60 plants worldwide. The website reflects a professional business presence with comprehensive service descriptions and active news updates. Technically, the site is built on TYPO3 CMS with common JavaScript libraries, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, lack of security headers, and no advanced SSL features. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and enhance trust.

A

akaryon

akaryon.com

24

Akaryon is a mature small-sized company founded in 1999, specializing in software development with a focus on environmental informatics and sustainability tools. Their offerings include websites, webshops, CSR reporting tools, CO2 calculators, and support for funding applications. The company targets organizations, companies, and municipalities aiming to digitalize sustainability management. Technically, the website is built on WordPress with a variety of plugins for SEO, forms, and cookie management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

K

KRAL GmbH

kral.at

24

KRAL GmbH is a medium-sized Austrian company specializing in manufacturing screw pumps and flow measurement solutions primarily serving industrial sectors such as marine, power generation, chemical engineering, mechanical engineering, and oil & gas. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, offering detailed product and service information, supported by a global network of sales and service partners. The website integrates multiple marketing and analytics tools managed through Google Tag Manager and employs a comprehensive cookie consent mechanism to comply with GDPR requirements. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture, exposing users to potential risks and reducing trust. Security headers are partially implemented, but critical improvements are needed to align with best practices. Overall, the business demonstrates strong credibility and market positioning but requires urgent technical security enhancements to protect its digital assets and customer data.

S

Swimsol GmbH

swimsol.com

28

Swimsol GmbH is a specialized energy company focused on providing floating and rooftop solar photovoltaic (PV) systems primarily for island environments such as the Maldives. The company positions itself as a leader in solar-at-sea technology with over 35 islands operating their systems and a significant installed capacity. Their business model includes system design, installation, operation, maintenance, and financing options, targeting luxury resorts and small businesses in tropical regions. Technically, the website is built on WordPress with a modern tech stack including Fusion Builder and WP Rocket, but lacks a valid SSL certificate, which impacts security and user trust. The site is well-designed, mobile-optimized, and SEO-friendly, with comprehensive content and strong branding. However, the absence of HTTPS and security headers represents a critical security gap. Privacy compliance is addressed with visible policies and consent mechanisms. Overall, Swimsol demonstrates a strong market presence and professional online representation but should prioritize securing their website with HTTPS and enhanced security practices.

R

Rexel

rexel.com

40

Rexel is a global leader in multichannel distribution for the energy sector, providing sustainable and innovative solutions to professional customers worldwide. The company operates in 17 countries with nearly 2,000 branches and a workforce of approximately 27,000 employees. Their business model focuses on supporting electricians, installers, commercial and industrial companies, and suppliers with a broad portfolio of energy-related products and services. The website reflects a mature digital presence with comprehensive content, investor relations, and sustainability commitments. Technically, the site is built on WordPress with modern SEO plugins and integrates multiple analytics and marketing tools. However, the absence of a valid SSL certificate and HTTPS support is a critical security deficiency that undermines user trust and data protection. The site implements strong cookie consent mechanisms and complies with GDPR requirements, but lacks explicit security policies or incident response information. Overall, Rexel's website demonstrates high professionalism and business credibility but requires urgent security improvements to align with best practices.

A

ADRESYS Adaptive Regelsysteme Gesellschaft m.b.H.

adresys.com

24

ADRESYS Adaptive Regelsysteme Gesellschaft m.b.H. is a small Austrian company specializing in innovative safety solutions for lone workers, including emergency call systems and smart textile technologies. Operating as a subsidiary of OMICRON electronics GmbH, a global leader in energy technology testing, ADRESYS leverages advanced technology to enhance workplace safety. The website is professionally designed, multilingual, and provides comprehensive information about products and services, targeting industrial safety managers and workers. Technically, the site runs on WordPress with modern plugins for multilingual support, cookie consent, and analytics. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the business presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to improve security posture.

N

Nussbaumer

nussbaumer.be

27

Nussbaumer is a Belgian-based company specializing in electrical materials for low, medium, and high voltage applications. The company operates a B2B e-commerce platform powered by Sana Commerce, offering a wide range of products and training services targeted at electrical installers and industrial clients. The website is professionally designed with clear navigation and multilingual support, primarily in Dutch and French. Technically, the site runs on Microsoft IIS 10.0 and integrates Google Tag Manager for analytics and marketing purposes. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens the security posture. While security headers are partially implemented, critical SSL/TLS configurations are missing, exposing the site to potential risks. Privacy compliance is addressed with GDPR and cookie policies, including a consent mechanism. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

O

OVIVO Inc.

ovivowater.com

40

Ovivo Inc. is a well-established global leader in sustainable water treatment solutions with over 150 years of expertise. The company provides a comprehensive portfolio of equipment, technology, and services targeting industrial, municipal, and electronics sectors. The website reflects a mature digital presence with multilingual support and rich content tailored for B2B audiences. Technically, the site is built on WordPress with modern SEO and analytics tools, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, Ovivo demonstrates strong business credibility and professionalism but must urgently address its SSL/TLS configuration to improve security posture and user trust.

C

Clariant Ltd.

clariant.com

40

Clariant Ltd. is a leading global specialty chemicals company focused on delivering innovative and sustainable chemical solutions across multiple industries including energy, manufacturing, and plastics. The website reflects a mature enterprise with comprehensive content, strong branding, and a clear business model targeting industrial customers, investors, and job seekers. Technically, the site is built on a modern CMS platform (Sitecore) and integrates multiple marketing and analytics tools, demonstrating a high level of digital maturity. However, the absence of a valid SSL/TLS certificate and disabled TLS protocols represent a critical security weakness that undermines user trust and data protection. While security headers and privacy policies are well implemented, the lack of HTTPS significantly lowers the overall security posture. Strategic improvements in SSL deployment and enhanced incident response documentation would strengthen the site’s security and compliance standing.

iSi GmbH is a well-established global manufacturer specializing in pressurized gas chargers and related solutions across automotive, components, and culinary sectors. Founded in 1867 in Vienna, the company has a strong market presence with operations in over 90 countries. The website reflects a professional digital presence using modern web technologies such as Next.js and React, supported by a Shopware 6 CMS backend. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact the security posture and user trust. Privacy compliance is well addressed with comprehensive policies and a consent management platform. The company maintains transparency through corporate policies and whistleblower mechanisms, and engages users via social media and career portals.

K

Krajete GmbH

krajete.com

40

Krajete GmbH is a specialized Austrian company focused on developing nature-inspired solutions for industrial gas emissions management. Their expertise includes adsorber-based purification and bioprocesses that transform emissions into valuable resources, helping clients comply with environmental regulations and improve sustainability. The company targets industries with emission challenges and offers services such as regenerative NOx removal, emissions valorisation, gas sampling, and biomethanation. Technically, the website is built on WordPress using Oxygen builder and Yoast SEO, with Cloudflare as a hosting proxy. However, the site lacks a valid SSL certificate, exposing it to security risks. The cookie consent mechanism is implemented, and contact information is clearly provided. Security posture is basic with room for improvement in SSL, headers, and incident response policies. Overall, the website presents a professional business presence but requires urgent security enhancements to protect user data and improve trust.

P

Polytechnik Luft- und Feuerungstechnik GmbH

polytechnik.com

24

Polytechnik Luft- und Feuerungstechnik GmbH is a well-established Austrian company specializing in biomass energy technologies, with over 60 years of experience and a global footprint in 25 countries. The company offers advanced solutions for transforming biomass into CO2-neutral energy, including combustion, gasification, carbonization, and torrefaction technologies. Their market position is strong, supported by a medium-sized workforce and a comprehensive product portfolio. The website reflects a professional and content-rich digital presence, targeting industrial and energy sector clients seeking sustainable energy solutions. Technically, the website is built on WordPress with modern SEO and multilingual plugins, ensuring good accessibility and mobile optimization. However, performance metrics are lacking, and the absence of DNS A/AAAA records raises questions about hosting and domain resolution. The site uses common JavaScript libraries and cookie consent management tools, indicating a mature digital infrastructure. From a security perspective, the site suffers from a critical issue: the SSL certificate is invalid or missing, which undermines HTTPS security and user trust. Additionally, no DNS records are publicly visible, and security headers are minimal. While no major vulnerabilities are detected, the lack of a valid SSL certificate and absence of advanced security policies reduce the overall security posture. Overall, the website is credible and professional but requires urgent security improvements, especially regarding SSL/TLS configuration and DNS setup, to enhance trust and compliance. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Strategic recommendations include obtaining a valid SSL certificate, improving DNS configurations, and publishing explicit security and incident response policies.

B

BAUR GmbH

baur.at

29

BAUR GmbH is a well-established Austrian company specializing in high-precision testing and measurement technology for electrical energy distribution systems, with a strong market position as a leader in cable fault location, cable testing, and insulating oil testing. The company operates internationally with multiple subsidiaries across Europe, the Americas, and Africa, offering products, services, and training to ensure reliable energy supply. Technically, the website is built on a modern JavaScript stack with RequireJS, jQuery, and various UI libraries, hosted on an Apache server. However, the primary domain baur.at lacks HTTPS, which is a significant security concern, although the main content is served securely on baur.eu. Security headers are partially implemented, but the absence of SSL/TLS and modern protocols reduces the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates good business credibility and technical maturity but requires urgent security improvements to protect user data and enhance trust.

A

Austrian Power Grid

apg.at

40

Austrian Power Grid (APG) operates the national electricity transmission grid in Austria, ensuring secure and reliable power supply across the country. The company is positioned as a key infrastructure provider in the energy sector, focusing on grid operation, expansion, and innovation to support Austria's energy transition. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting market participants, stakeholders, and the general public. Technically, the site is built on TYPO3 CMS with Vue.js components and integrates Matomo for analytics, indicating a modern and privacy-conscious technology stack. However, the SSL/TLS configuration is critically deficient, with no valid certificate and no modern TLS protocols enabled, which severely impacts security posture and user trust. Security headers are well implemented, including CSP, HSTS (though limited), and X-Frame-Options, demonstrating awareness of web security best practices. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Business credibility is supported by consistent branding, social media presence, and detailed organizational information. Overall, while the business and content aspects are robust and professional, the lack of proper SSL/TLS implementation is a critical vulnerability that must be addressed urgently to protect users and maintain trust.

Bunge Global SA operates a comprehensive global agribusiness and food ingredient supply chain, connecting farmers to consumers with a focus on sustainability and renewable energy. The website reflects a large enterprise with a professional digital presence, including regional sites and investor relations. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent, but suffers from a critical lack of valid SSL/TLS certificates, impacting security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is content-rich and professionally designed but requires urgent security improvements to protect user data and trust.

L

Langmatz GmbH

langmatz.de

24

Langmatz GmbH is a medium-sized German company specializing in the development and manufacturing of infrastructure products for telecommunications, energy, and transportation sectors. Their product portfolio includes cable ducts, network distributors, outdoor enclosures, and related infrastructure components. The company positions itself as a leading European provider with a strong focus on quality and customer-centric solutions. Technically, the website is built on the Pimcore CMS platform, uses modern JavaScript libraries such as Swiper.js, and integrates Google reCAPTCHA for form security. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture of the site. Privacy and terms of service policies are present and comprehensive, supporting GDPR compliance. Contact information is clearly provided, including emails, phone numbers, and physical address, alongside active social media channels. Overall, while the business and content quality are excellent, the lack of proper SSL/TLS configuration is a critical security gap that needs immediate remediation.

Caverion Corporation is a leading northern European technical services and installation company specializing in building performance, infrastructure, and industrial site solutions. The company offers a broad range of services including automation, project management, energy solutions, and critical infrastructure support. It operates as part of the Assemblin Caverion Group, reflecting a strong market position in the energy and technical services sector. The website targets businesses and organizations seeking smart and sustainable built environment solutions. Technically, the site uses modern web technologies such as ASP.NET, Bootstrap, and Azure hosting with Cloudflare CDN. It employs multiple analytics and marketing tools, indicating a mature digital presence. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which is a critical vulnerability. Privacy and cookie policies are present and GDPR compliant, but no explicit security policy or incident response information is found. Overall, the website is professional and trustworthy but requires urgent SSL/TLS remediation to ensure secure communications.

Sulzer Ltd is a globally recognized leader in fluid engineering, specializing in the manufacturing and servicing of pumps, agitators, mixers, separation, and purification technologies. The company serves essential industries such as energy, manufacturing, and process industries, positioning itself as a key player in enabling sustainable and efficient industrial operations worldwide. Their website reflects a mature enterprise with comprehensive product and service offerings, strong branding, and a clear focus on sustainability and innovation. Technically, the website employs a modern technology stack including Apache server, Vue.js framework, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Pardot, and Hotjar. The site is hosted with Azure DNS and demonstrates good SEO and mobile optimization practices. However, performance metrics are not explicitly available. From a security perspective, while the site implements several important security headers and content security policies, it critically lacks a valid SSL/TLS certificate and does not support HTTPS, which severely undermines its security posture. This exposes users to potential risks and reduces trustworthiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website is professional and credible but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and improve its security score. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security header configurations to protect users and maintain trust.

SunEdison operates in the energy sector, but the current website at sunedison.com provides minimal content, consisting solely of a redirect script to a subpath (/lander). The lack of metadata, business information, or contact details limits the ability to fully assess the company's market position or services. The domain is registered with standard DNS records and uses Microsoft Outlook for mail exchange, indicating some level of operational infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. No privacy or cookie policies are present, and no security best practices such as security headers or DNSSEC are implemented. Overall, the website appears underdeveloped or in a placeholder state, which impacts trust and user experience negatively.

I

ION Group

openlink.com

40

ION Group operates the Openlink commodity management software, a comprehensive front-to-back solution designed for global commodity markets. The platform supports multiple commodity asset classes with advanced risk management, workflow automation, and customization capabilities, targeting large commodity-intensive corporations. The website demonstrates a mature digital presence with professional design, structured content, and extensive integration of analytics and marketing tools. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is strong, with a clear cookie consent mechanism and GDPR adherence. Overall, the business is well-positioned in the energy and finance sectors with a robust product offering, but should prioritize fixing SSL issues to enhance security and trust.

V

Vaillant

vaillant-group.com

40

Vaillant Group is a globally recognized leader in the energy sector, specializing in climate-friendly heating, cooling, and hot water solutions including heat pumps and gas condensing boilers. The company operates in over 60 countries with a workforce of approximately 16,000 employees, emphasizing sustainability and digital services. The website reflects a mature and professional business with consistent branding and comprehensive content tailored to customers, partners, and potential employees. Technically, the site leverages modern JavaScript libraries, lazy loading, and CDN hosting via Amazon S3 and CloudFront, with a CMS likely based on e-Spirit. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are present and GDPR compliant, and the site integrates Google Tag Manager for analytics and Consentmanager.net for consent management. Overall, the site is well-structured and user-friendly but requires urgent security improvements.

V

Vaillant Group Austria GmbH

vaillant.at

40

Vaillant Group Austria GmbH operates a comprehensive website focused on heating solutions including heat pumps, gas heating, photovoltaic systems, and smart home technologies targeted at private customers in Austria. The company is a well-established player with over 150 years of history and a dense service network, positioning itself as a market leader in the energy sector. The website provides detailed product information, customer testimonials, and service offerings, reflecting a mature business model with strong customer engagement. Technically, the site uses modern JavaScript libraries and marketing tools such as Optimizely and Google Tag Manager, with good mobile optimization and SEO practices. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are well implemented, but the lack of TLS protocols and OCSP stapling reduces the overall security posture. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

Tridonic is a mature company operating in the energy sector, specializing in lighting technology and solutions. The domain has been registered since 1998, indicating a well-established business presence. However, the website content is currently inaccessible due to a Cloudflare security challenge page, which blocks direct content analysis. The visible technical infrastructure includes Cloudflare DNS and WAF protection, but the SSL/TLS configuration is critically lacking with no valid certificate and no HTTPS support. This severely impacts the security posture and user trust. No privacy, cookie, or terms of service policies are visible, and no contact information is accessible on the landing page. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website requires significant improvements in SSL configuration and content accessibility to enhance security, compliance, and user experience.

P

PULSE ELECTRONICS

egston.com

27

Pulse Electronics, part of the YAGEO Group, is a medium-sized manufacturer and supplier of electronic components including power supplies, inductive components, and cable systems. The company targets B2B customers primarily in the energy and electronics sectors with a global presence and multiple locations. The website is professionally designed using WordPress and the Divi theme, with good content quality and clear navigation in German and English. Technical infrastructure includes modern CMS plugins and Google Tag Manager for analytics, but performance data is lacking. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, exposing the site to risks. Privacy compliance is strong with comprehensive GDPR-aligned privacy and cookie policies and consent mechanisms. Contact information is available via phone and contact form, but no direct emails are publicly listed. Overall, the site is trustworthy but requires urgent security improvements.

Y

Yara International ASA

yara.com

26

Yara International ASA is a global leader in crop nutrition, ammonia, and industrial nitrogen solutions, with a strong focus on sustainability and decarbonization of food and energy-intensive industries. The website presents comprehensive business information, targeting farmers, industrial clients, investors, and job seekers, reflecting a mature and enterprise-level business model. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Azure Application Insights, and Cloudflare CDN, indicating a robust digital infrastructure. However, a critical security weakness is the invalid SSL certificate and lack of TLS protocol support, which severely impacts the security posture. The site implements good security headers and GDPR-compliant cookie consent mechanisms, showing awareness of privacy and security best practices. Overall, the website is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

S

Siblik Elektrik GmbH & Co. KG

siblik.com

39

Siblik Elektrik GmbH & Co. KG is a medium-sized Austrian company specializing in electrical and building technology solutions, including smart home products and professional training. The company maintains a professional and content-rich website powered by TYPO3 CMS, targeting electrical contractors and end customers in Austria. Their market position is supported by multiple physical locations and a consistent brand presence. Technically, the website uses modern web technologies and integrates analytics and marketing tools, but lacks HTTPS security, which is a critical vulnerability. The security posture is weak due to the absence of SSL/TLS and related security headers, exposing users to potential risks. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

K

Klenk & Meder GmbH

klenk.at

23

Klenk & Meder GmbH is a well-established Austrian family-owned company specializing in electrical engineering services with over 55 years of experience and a workforce of approximately 750 employees. The company offers a broad range of services including electrical installation, network technology, photovoltaic systems, maintenance, and sales of electrical materials and devices. Their market position is strong within Austria, supported by a network of subsidiaries and partners. The website is professionally designed, content-rich, and targets both private and business customers as well as apprentices. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and good SEO practices, but suffers from a critical lack of HTTPS security due to an invalid or missing SSL certificate. The security posture is weak, lacking HTTPS and advanced security headers, which poses a significant risk. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the business credibility is high with clear contact information, certifications, and trust signals. Strategic improvements in security infrastructure are recommended to enhance trust and protect user data.

D

DeepOcean

deepoceangroup.com

40

DeepOcean is a leading ocean services provider specializing in accelerating sustainable use of ocean resources. The company operates across multiple sectors including renewables, oil and gas, and ocean minerals, offering full lifecycle services such as survey, project management, engineering, maintenance, and recycling. With a strong emphasis on digitalization and remote operations, DeepOcean positions itself as a technology-driven leader in the energy transition space. The website reflects a professional and consistent brand image targeting industry stakeholders, investors, and potential employees. Technically, the website is built on the Webflow platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management. Hosting and CDN services are provided via Cloudflare and Webflow. While the site demonstrates good design quality, mobile optimization, and SEO practices, performance metrics are unavailable. Accessibility is basic but present. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. Although some security headers are present, the absence of TLS protocols and cipher suites severely undermines the security posture. Cookie consent mechanisms are implemented, and privacy policies are comprehensive and GDPR compliant. However, incident response and vulnerability disclosure information are missing. Overall, the website is credible and professionally maintained but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL deployment, enhanced security header configurations, and the addition of incident response contacts to strengthen the security culture and compliance posture.

E

ENI

eni.com

40

Eni is a large, established integrated energy company headquartered in Italy with a strong global presence and diversified energy portfolio including oil & gas, renewables, and bioenergy. The website reflects a mature digital presence with comprehensive content covering corporate governance, sustainability, investor relations, and career opportunities. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted on Akamai CDN, and employs Adobe Helix for content management. However, the security posture is weakened by the absence of a valid SSL certificate and HTTPS support, which is a critical vulnerability. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

A

ACN Opportunity, LLC

myacn.com

40

ACN Opportunity, LLC operates a mature and established website offering essential services such as internet, energy, and wireless, combined with a home-based business opportunity model. The company targets individuals interested in essential services and entrepreneurial ventures, positioning itself as a trusted provider with strong industry memberships and a broad social media presence. Technically, the website leverages modern frontend technologies including Joomla CMS, Bootstrap, jQuery, and Swiper.js, hosted on AWS infrastructure with CloudFront CDN. The site is mobile optimized and SEO friendly, though performance metrics are unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS enforcement, despite the presence of several security headers. Privacy compliance is strong with comprehensive policies and a OneTrust cookie consent mechanism. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and enhance trust.

H

HAUSER GmbH

hauser.com

28

HAUSER GmbH is a well-established European provider specializing in refrigeration furniture and cooling technology, serving international clients primarily in the food retail and industrial sectors. The company offers comprehensive solutions including innovative, energy-efficient cooling systems, project management, and lifecycle services. With approximately 75 years of experience, HAUSER holds a strong market position as a trusted B2B Komplettanbieter in Austria and Europe. The website is professionally designed, content-rich, and targets business customers seeking high-quality refrigeration solutions. Technically, the website is built on Drupal 10 and employs modern web technologies including Matomo for analytics and TRUENDO for privacy management. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security and trust concern. Performance data is missing, and DNS records are incomplete, suggesting possible use of CDN or proxy services. The site is mobile-optimized and accessible with good SEO practices. From a security perspective, while several security headers are implemented, the absence of HTTPS and TLS protocols severely undermines the security posture. No explicit security policies or incident response contacts are provided, and no vulnerability disclosure mechanisms are found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, HAUSER GmbH presents a credible and professional business online presence but must urgently address SSL/TLS implementation to improve security and trust. Strategic recommendations include securing the website with valid certificates, enabling modern TLS protocols, and enhancing security transparency to align with best practices and regulatory requirements.

W

Wien Energie GmbH

wienenergie.at

39

Wien Energie GmbH is the largest regional energy supplier in Austria, serving approximately two million people and 230,000 commercial and industrial customers in and around Vienna. The company offers a broad range of energy-related services including electricity, natural gas, district heating, e-mobility, telecommunications, and energy consulting. It operates under the Wiener Stadtwerke Group, reflecting a strong market position and extensive service portfolio. The website is professionally designed with comprehensive content targeting both private and business customers, supported by active social media engagement and clear navigation.

Bilfinger SE is an established international industrial services provider specializing in maintenance, expansion, and operation of industrial plants primarily in the energy, chemicals, pharma, and oil & gas sectors. The company operates across Europe, North America, and the Middle East, offering a comprehensive service portfolio including consulting, engineering, manufacturing, assembly, maintenance, and digital applications. The website reflects a mature digital presence built on TYPO3 CMS with a professional design and multilingual support targeting industrial clients globally. Technically, the site uses Apache and PHP 7.4 with various JavaScript libraries and integrates Matomo for analytics and Consentmanager.net for cookie consent management. Security posture is moderate; while security headers and a content security policy are present, the SSL/TLS configuration is currently invalid or missing, which is a critical issue. No WAF or blocking mechanisms are detected, and the site is fully accessible. The domain registration data is consistent with the business claims, showing a long-established domain without privacy protection, supporting legitimacy. Overall, the site is professional and trustworthy but requires urgent SSL/TLS remediation to improve security and user trust.

B

BHDT GmbH

bhdt.at

22

BHDT GmbH is a specialist company focused on high pressure equipment and components for the chemical and petrochemical industries, operating primarily in Austria. The company is part of the Dr. Aichhorn Group and offers engineering, design, and production services. The website reflects a medium-sized B2B manufacturing business with a professional online presence and clear business segmentation. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and marketing analytics. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. Privacy policies are present but lack a cookie consent mechanism, which may affect GDPR compliance. Overall, the site is functional and professional but requires urgent security improvements.

K

Kreutzpointner

kreutzpointner.de

22

Kreutzpointner is a well-established family-owned company specializing in electrical and information technology solutions, with over 100 years of experience and operations in Germany, Austria, and Romania. The company offers a comprehensive portfolio including electrical installations, renewable energy, software solutions, and full-service offerings such as consulting, engineering, execution, and maintenance. Their market position is strong with multiple subsidiaries and a broad service spectrum targeting industrial, commercial, and public sectors. Technically, the website is built on WordPress with modern plugins and frameworks, providing good SEO and user experience. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by certifications and detailed company information.

H

Hotwell US

hotwellus.com

34

Hotwell US is a specialized company focused on developing advanced wireline well logging tools, systems, and software primarily serving the energy sector. The business operates a WordPress-based website that provides basic information about its products and services but lacks comprehensive content and contact details. The company appears to be a small-sized entity with a mature domain age of 18 years, indicating an established presence in its niche market. Technically, the website relies on older versions of WordPress and jQuery, with Cloudflare providing DNS and hosting services. SEO is moderately optimized using Yoast SEO, but mobile optimization and accessibility are basic. Security posture is weak due to the absence of HTTPS/SSL, lack of security headers, and missing privacy and cookie policies. Google Analytics is used for user tracking without any consent mechanism, raising privacy compliance concerns. Overall, the website presents a low trustworthiness level and requires significant improvements in security and compliance to meet modern standards.

U

UBIMET

ubimet.com

40

UBIMET is a mature meteorological services company founded in 2008, specializing in providing high-precision, tailored weather data and integrated systems to businesses across sectors such as energy, transportation, insurance, retail, and media. The company leverages proprietary AI-driven weather models combining multiple data sources to deliver scalable and precise weather information. Their market position is strong, supported by a consistent brand, client testimonials, and certifications like ISO 27001. Technically, the website is built on WordPress with modern plugins and lazy loading for images, but suffers from critical security shortcomings including the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact the security posture. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site presents professional content and good user experience but requires urgent security improvements to protect user data and enhance trust.

Schwarz & Schmidhofer Industrieanlagenbau GmbH is a medium-sized German company specializing in industrial plant construction, including piping, steel construction, and industrial assembly, with over 35 years of experience. The company serves leading clients in the chemical, petrochemical, energy, and environmental technology sectors, positioning itself as a reliable and professional partner offering precise and modern technical solutions. The website is built on WordPress with the Divi theme and supports multilingual content via Weglot, indicating a moderate level of digital maturity. However, the absence of HTTPS and a valid SSL certificate represents a significant security vulnerability, exposing users to potential data interception and undermining trust. The site lacks cookie consent mechanisms and explicit contact details, which impacts privacy compliance and user accessibility. Overall, while the business content and presentation are professional and relevant, the technical and security posture requires urgent improvement to meet modern standards and regulatory requirements.

M

Mersen

mersen.com

40

Mersen is a global industrial company specializing in electrical power and advanced materials, serving high-tech industries with customized solutions and key products. The company operates worldwide with over 50 industrial sites and 21 R&D centers across 33 countries, positioning itself as a leader in its sector. The website reflects a mature digital presence with comprehensive content, multi-language support, and active social media engagement. Technically, the site is built on Drupal 10 and leverages modern CDN and observability tools, but lacks a valid SSL certificate and modern TLS support, which is a critical security gap. Privacy and cookie policies are well implemented and GDPR compliant, but no explicit security policy or incident response information is provided. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect users and maintain credibility.

G

GLOBAL HYDRO Energy GmbH

global-hydro.eu

23

GLOBAL HYDRO Energy GmbH is a specialized technology leader in the small hydropower sector, offering comprehensive turnkey solutions including design, engineering, digital plant control, revitalization, and lifetime service. The company operates globally with a strong Austrian headquarters and emphasizes sustainable energy solutions. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses Pimcore CMS on an Apache server and integrates Cookiebot for cookie consent and Google reCAPTCHA for form security. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. Security headers are partially implemented but modern TLS protocols and cipher suites are missing, exposing the site to potential risks. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

WEB Windenergie AG is a large Austrian renewable energy company specializing in wind, photovoltaic, and hydropower plants. The company emphasizes citizen participation and operates across eight countries on two continents. Their business model focuses on green energy production and investment opportunities, positioning them as a leading player in Austria's renewable energy sector. The website is professionally designed with comprehensive content targeting private customers, business clients, municipalities, and investors. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and responsive design, but lacks HTTPS, which is a critical security flaw. Security headers are partially implemented, but the absence of SSL/TLS severely impacts the security posture. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Contact information and trust signals such as certifications and social media presence enhance business credibility. Overall, the site is functional and professional but urgently requires HTTPS implementation to improve security and trust.

T

Tranter Inc.

tranter.com

38

Tranter Inc. is a global manufacturer specializing in advanced gasketed and welded plate heat exchangers, serving diverse industrial sectors such as energy, marine, HVAC, and manufacturing. The company emphasizes innovation, quality, and sustainability, supported by a global service network and a strong digital presence powered by HubSpot CMS and marketing tools. Their website offers comprehensive product information, customer stories, and resource materials tailored to industrial clients worldwide. Technically, the website is built on a modern CMS platform with integration of analytics and marketing technologies like Google Tag Manager and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and clear navigation. However, the security posture is critically weak due to the absence of a valid SSL certificate and lack of HTTPS support, exposing visitors to potential risks. While security headers are partially implemented, the lack of TLS protocols and cipher suites significantly undermines the site's security. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a professional and credible business front but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and protect user data. Strategic improvements in security and incident response readiness are recommended to enhance trust and compliance.

Salzburg AG operates a comprehensive utility and telecommunications service platform primarily serving the Salzburg region in Austria. The company offers high-speed internet services under the CableLink brand, including fiber and wireless options, alongside TV and telephony services. It also provides energy supply and transportation services, positioning itself as a regional market leader with a large operational footprint. The website reflects a mature digital presence with extensive content, clear navigation, and multiple customer engagement channels. Technically, the site uses modern web technologies and analytics tools, though it currently lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but should address SSL issues to enhance security and user trust.

S

Shell Österreich

shell.at

40

Shell Österreich operates a comprehensive website targeting private and business customers in Austria, offering fuel products, electric vehicle charging, car care, and loyalty programs. The website is professionally designed with excellent content quality, clear navigation, and strong brand consistency. The technical infrastructure is based on Adobe Experience Manager with modern web technologies, but suffers from slow load times and lacks a valid SSL/TLS certificate, resulting in no HTTPS support. This is a critical security vulnerability that significantly impacts the site's security posture. Privacy and cookie policies are well documented and GDPR compliant, but no explicit security or incident response policies are found. Overall, the website is trustworthy and credible but requires urgent security improvements.

Y

yandree GmbH

yandree.com

36

yandree GmbH is a small Austrian IT services company specializing in IT documentation and data migration with over 20 years of experience. The company serves clients primarily in the energy, insurance, hosting, and IT sectors worldwide. Their website is built on Joomla CMS with a modern UI framework and includes comprehensive business and legal information. However, the site lacks HTTPS encryption, which is a critical security shortfall. Cookie consent mechanisms are implemented with a privacy-first approach, denying analytics and advertising cookies by default. The company demonstrates moderate digital maturity but should prioritize securing their website with SSL/TLS and enhancing security policies. Overall, yandree GmbH presents a professional and trustworthy business presence with room for technical and security improvements.

GE Vernova is a leading global energy technology company focused on accelerating the transition to reliable, affordable, and sustainable energy. The company offers a broad portfolio of energy generation and electrification technologies including gas, hydro, nuclear, steam power, wind power, and advanced electrification software and services. Their market position is strong, supported by a large global workforce and extensive technology base that contributes significantly to global electricity generation. The website reflects a professional and comprehensive digital presence with detailed business, investor, and sustainability information targeted at industry stakeholders, investors, partners, and potential employees. Technically, the site is built on Drupal 10, uses Cloudflare CDN, and integrates modern analytics and marketing tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which significantly impacts the security posture. Privacy and cookie policies are present and appear compliant with GDPR standards. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.