Energy security reports

K

Kompostářská asociace

kompostarska-asociace.cz

47

Kompostářská asociace is a Czech Republic based non-profit organization dedicated to advocating for the composting industry. Founded in 2020, it serves as a collective voice for stakeholders in the composting sector, providing industry representation and information dissemination. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard CMS capabilities. The site includes cookie consent mechanisms via Cookiebot and uses Google Tag Manager configured to limit ad personalization and analytics storage, reflecting a basic privacy-conscious approach. However, the absence of a published privacy policy, terms of service, and explicit contact information limits transparency and compliance. Security posture is moderate with no detected security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

W

World Dredgers GmbH & Co. KG

world-dredgers.de

49

World Dredgers GmbH & Co. KG is a specialized engineering company focused on the design, construction, and servicing of suction dredgers and related equipment for efficient gravel and sand extraction. The company emphasizes innovation, notably with its autonomous GPS-based movement control system for dredgers, enhancing operational efficiency and automation. Their market position is that of a niche specialist serving B2B clients in the energy and transportation sectors related to raw material extraction. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a credible small-sized enterprise with a clear business focus and parent company affiliation.

D

Designwerk

designwerk.com

49

Designwerk is a medium-sized company specializing in electromobility solutions, including electric vehicle manufacturing, energy storage, and charging infrastructure. The company targets businesses and organizations interested in sustainable energy and transportation solutions, positioning itself as a niche player in the energy and transportation sectors. The website is professionally designed using WordPress and the Avada theme, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website presents a professional business front but requires improvements in security and compliance to enhance trustworthiness.

TÜV SÜD is a globally recognized enterprise specializing in safety, security, and sustainability solutions, with a rich history spanning over 150 years. The company offers a broad range of services including testing, inspection, certification, auditing, training, and technical advisory across multiple industries such as energy, transportation, manufacturing, real estate, and healthcare. Their market position is that of a trusted partner for businesses seeking compliance and quality assurance worldwide. Technically, the website is built on modern frameworks such as Next.js and integrates advanced consent management tools like OneTrust, alongside Adobe's digital marketing and analytics solutions. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, TÜV SÜD employs strong HTTPS encryption, comprehensive security headers, and cookie consent mechanisms, indicating a robust security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt file suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low risk profile with strong trust indicators and professional content. The missing WHOIS data for the queried subdomain is a minor concern but likely a technical querying issue rather than a legitimacy problem. Strategic recommendations include enhancing public security disclosures, maintaining up-to-date third-party libraries, and improving incident response visibility.

S

STORK Umwelt GmbH

stork-leipzig.de

46

STORK Umwelt GmbH is a medium-sized German company specializing in recycling, waste management, and resource recovery, primarily serving the Leipzig/Halle region. The company operates under the umbrella of the STORK Unternehmensgruppe and offers a range of services including container services, mobile processing technology, and civil engineering. The website reflects a professional and consistent brand image with clear communication of services and certifications such as ISO 14001:2015. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes a cookie consent mechanism, indicating a reasonable level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

S

STORK Umweltdienste GmbH

stork-mobil.de

44

STORK Umweltdienste GmbH operates as a specialized provider of mobile mineral waste processing technology, focusing on modular mobile solutions for the treatment of slag, ash, construction debris, and dredged material. The company is positioned within the energy and transportation sectors, serving industrial clients requiring on-site processing capabilities. Their business model centers on B2B services with a strong emphasis on modularity and customization. The website reflects a medium-sized enterprise with consistent branding and professional presentation, supported by a parent company, STORK Unternehmensgruppe. Technically, the site is built on TYPO3 CMS with modern web standards, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels.

S

sensis+wiegon

digitalerwertstoffhof.de

51

sensis+wiegon is an innovative competence cluster specializing in digital and autonomous waste management solutions for municipalities and businesses in Germany. With over 30 years of experience, the company offers a comprehensive suite of services including cloud portals, mobile apps, hardware installations, and software integration to modernize waste collection and recycling processes. Their market position is strengthened by multiple awards and a strong focus on customer service and digital transformation. Technically, the website employs modern JavaScript libraries, analytics tools like Matomo and LinkedIn Insight Tag, and is likely built on Django, ensuring a robust and scalable infrastructure. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is solid with HTTPS and CSRF protections, though additional security headers and a published security policy would enhance trust. Overall, sensis+wiegon presents a credible and professional digital presence aligned with its business goals.

R

REMEX GmbH

remex.de

59

REMEX GmbH is a leading expert in mineral resource management and recycling, specializing in the disposal, recycling, and recovery of mineral waste materials. As part of the REMONDIS Group, REMEX offers comprehensive services including mineral waste processing, production of substitute building materials, metal recovery, landfill management, and environmental remediation. The company targets businesses in construction, industry, and waste management sectors, positioning itself as a market leader in Europe and Asia with approximately 50 years of experience. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and FriendlyCaptcha for form security. The site is well-structured, mobile-optimized, and provides multilingual support. Hosting and DNS management are professionally handled via brandshelter.com nameservers. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect contact forms. However, it lacks visible security headers and a formal vulnerability disclosure policy. Privacy compliance is strong with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, REMEX GmbH's website reflects a professional, trustworthy, and business-focused digital presence with room for improvement in security headers, cookie consent, and incident response transparency. The domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness.

N

N2 Applied

n2applied.com

50

N2 Applied is a Norwegian technology company specializing in plasma-based nitrogen fertiliser production technology. Their innovative approach offers sustainable, fossil-free fertiliser solutions that address environmental challenges and reduce dependency on traditional fossil fuel-based processes. The company targets farms and industrial operations seeking local, circular, and electric fertiliser production alternatives. Their website reflects a professional and modern digital presence built on WordPress, incorporating SEO and GDPR compliance tools. Social media integration and clear contact information enhance their business credibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers could be made. Overall, N2 Applied demonstrates a mature business and digital infrastructure aligned with their market position as a technology innovator in the energy sector.

E

Eyde Material Park

eydematerialpark.com

10

Eyde Material Park is a sustainable industrial park based in Norway, focusing on the battery value chain and supporting the green transition. The website presents a professional and consistent brand image, targeting businesses and stakeholders in the energy and green technology sectors. The business model revolves around providing industrial park facilities and infrastructure to companies involved in battery production and related green industries. Founded in 2021, the company positions itself as a key player in Norway's green industrial landscape. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted with Azure DNS, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Analytics are implemented via Plausible Analytics, reflecting a privacy-conscious approach. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

S

Sitepartner AS

sitepartner.no

10

Sitepartner AS is a Norwegian consulting company specializing in site management, construction management, and project management primarily within the energy and transportation sectors. Founded in 2015, the company offers expert consultancy services to project owners, contractors, and suppliers involved in energy, rail, and network expansion projects. Their website reflects a professional and consistent brand presence with clear service offerings and client references. The company targets infrastructure and energy sector clients in Norway, positioning itself as a niche player with practical experience and high competence. Technically, the website is built on WordPress with modern JavaScript libraries such as Alpine.js and Splide.js, and integrates Google Tag Manager and GDPR-compliant cookie management via Complianz. The site is mobile-optimized, has good SEO practices, and loads with moderate performance. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear cookie and privacy policies. Contact information is comprehensive, including multiple emails, phone numbers, and social media links. The domain age and WHOIS data support the legitimacy of the business. No critical issues or blocking mechanisms were detected, allowing full content accessibility. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and maintaining regular updates to plugins and themes to mitigate vulnerabilities. These steps will further strengthen trust and security culture while supporting compliance and operational resilience.

V

Volt Power Analytics

voltpoweranalytics.com

65

Volt Power Analytics is a specialized energy market analysis company focused on the Nordic and European power markets. Founded in 2022, it offers advanced forecasting tools and data services designed to support power market professionals, investors, and analysts in navigating the energy transition. Their product suite includes real-time market intelligence, long-term price forecasts, and tailored commodity databases, emphasizing renewable energy and green transition support. The company positions itself as an independent and trusted provider with a strong focus on customization and data transparency. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools such as Yoast SEO, HubSpot, and Plausible Analytics. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. Security practices include HTTPS, domain transfer protection, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is a gap. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Business credibility is high, supported by clear contact information, professional content, and trust signals such as client logos and LinkedIn presence. Overall, Volt Power Analytics presents a professional, secure, and privacy-conscious digital presence suitable for its target market. Strategic improvements in DNS security and published security policies would further enhance trust and resilience.

E

Eyde-klyngen

eydecluster.com

52

Eyde-klyngen is a Norwegian cluster organization focused on fostering growth and competitiveness in the green process industry sector. Established in 2007, it serves as a collaborative platform for core companies and competence providers to develop sustainable industrial solutions. The website presents a professional and well-structured digital presence, leveraging modern web technologies and CMS (Umbraco), with good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers properly implemented. However, the absence of a publicly accessible privacy policy and terms of service pages, combined with missing WHOIS registration data, introduces concerns regarding compliance and domain legitimacy. Social media integration and event information enhance engagement with the target audience. Overall, the website reflects a credible and established business entity within the Norwegian energy and manufacturing sectors.

I

Industrie – Wasser – Umweltschutz e.V.

iwu-dueren.de

45

Industrie – Wasser – Umweltschutz e.V. (IWU) is a regional non-profit association serving industrial companies with a focus on environmental law and water management. The organization provides legal advice, administrative procedure support, environmental policy representation, and training for environmental officers. It collaborates closely with regional industry associations and municipalities, positioning itself as a key environmental service provider in its region. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the site is built on WordPress with Visual Composer and uses standard web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Overall, the site is trustworthy and compliant with GDPR, though improvements in security practices and transparency could enhance its posture.

S

Stadtwerke Hammelburg GmbH

stadtwerke-hammelburg.de

53

Stadtwerke Hammelburg GmbH is a regional utility company serving the Hammelburg area in Germany, providing essential services including electricity, gas, water, heat supply, and telecommunications via their HAB-Net DSL service. The company also operates local amenities such as the Saaletalbad swimming pool and parking facilities. Their market position is that of a trusted regional provider with a diversified portfolio catering to both residential and business customers. The website reflects a professional and consistent brand image with clear service offerings and customer support channels. Technically, the site is built on Joomla CMS with modern frontend technologies and includes a comprehensive GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the regional energy and telecommunications sectors.

Z

Zentralverband Deutscher Schornsteinfeger e.V.

zds-schornsteinfeger.de

54

Zentralverband Deutscher Schornsteinfeger e.V. (ZDS) is a well-established German trade union and professional association serving the chimney sweep industry since 1907. The organization provides member services including advocacy, education, publishing, and employment support. The website reflects a mature digital presence with clear navigation, professional content, and active social media engagement. Technically, the site is built on Liferay CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. Security posture is adequate with HTTPS and secure login forms, but lacks visible security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-suited for its target audience of industry professionals and members.

L

LAG Main4Eck

fabuly.de

9

Fabuly.de is a regional discovery platform focused on the Bavarian Untermain area, offering curated content and interactive maps for nature, history, technology enthusiasts, and sustainability advocates. The platform includes a related ecoKompass subsite dedicated to promoting sustainable projects and eco-friendly solutions. The website is professionally designed with consistent branding and good content relevance, targeting a general audience interested in regional exploration and sustainability. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted on servers indicated by the nameservers your-server.de and second-ns domains. Mobile optimization and navigation clarity are good, though accessibility features are basic. Security posture is moderate with no visible security headers or advanced policies, and no cookie consent mechanism is present. WHOIS data is minimal but consistent with a small regional platform. Overall, the site is safe, trustworthy, and compliant with GDPR based on the presence of a privacy policy, but improvements in security headers and contact transparency are recommended.

A

Arte Bunkering OÜ

artebunkering.com

34

Arte Bunkering OÜ is a specialized marine fuel supply company founded in 2012, operating globally with offices in Europe, Asia, and the Americas. The company focuses on delivering marine fuel oil, gas oil, lube oil, and eco-friendly fuels such as LNG to over 3000 vessels annually across more than 650 ports. Their business model centers on providing personalized, efficient, and timely bunkering services with competitive pricing, targeting shipping companies and vessel operators worldwide. The website reflects a professional and consistent brand image with clear contact information and a global presence, supporting their market position as an experienced player in the marine energy sector. Technically, the website employs modern web standards including HTML5, CSS with LESS preprocessing, and JavaScript. It is hosted likely by Loginet, with responsive design elements and basic accessibility features. However, the site lacks advanced SEO optimization and does not appear to use a CMS or analytics tools based on the provided data. Performance is moderate, and mobile optimization is good. From a security perspective, the site uses HTTPS (implied by base href https URL), includes a CSRF token meta tag indicating some security awareness, but lacks DNSSEC and visible security headers. There is no privacy or cookie policy found, which is a compliance gap, especially under GDPR. Incident response and vulnerability disclosure information are absent. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is moderate but could be improved with better policy transparency and technical security controls. The overall risk assessment is moderate with no critical vulnerabilities or blocking detected. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

H

Heinrich Wegener & Sohn Bunkergesellschaft m.b.H.

wegener-bunker.de

43

Heinrich Wegener & Sohn Bunkergesellschaft m.b.H. is a specialized German company providing marine fuels and lubricants worldwide, with a strong reputation built over more than 50 years. The company emphasizes quality, sustainability, and certified standards such as ISO 9001 and IMPA membership. Their target audience includes maritime shipping companies and related stakeholders. The website is built on TYPO3 CMS with Bootstrap and jQuery, featuring a professional design and good mobile responsiveness. Matomo analytics is used with privacy-conscious settings disabling cookies. Security posture is solid with HTTPS and some privacy measures, but lacks advanced security headers and formal incident response disclosures. Contact information is comprehensive with multiple phone numbers but no public emails or contact forms. Overall, the site is trustworthy and business-focused with room for improvement in privacy and security transparency.

P

PMG Holding

holdingpmg.com

52

PMG Holding operates as a physical supplier of marine bunker fuels in the Black Sea region, offering products such as Marine Bunker Fuel Oil and Marine Gasoil. Additionally, the company engages in global cargo trading, positioning itself as a niche player in the energy and transportation sectors. The website is professionally designed using the Wix platform, featuring structured data for local business identification and basic SEO metadata. Technical infrastructure relies on Wix's hosting and content management services, with Google Tag Manager integrated for analytics. Security posture is moderate, with HTTPS implied but lacking explicit security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is minimal, limited to a phone number in structured data. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the website presents a professional front but requires improvements in compliance, security transparency, and domain legitimacy verification.

I

IBT Bunkering & Trading

ibtbunker.com

44

IBT Bunkering & Trading is a well-established global bunker trader based in Hamburg, Germany, with over 45 years of market presence. The company specializes in marine fuel supply, offering services such as spot trading, formula-based contracts, and price hedging to shipping companies worldwide. Their business model focuses on building long-term, reliable relationships with clients and suppliers, supported by a strong network and industry memberships. Technically, the website employs modern web technologies including Bootstrap and JavaScript, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled and domain registration is stable, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security practices would strengthen its posture.

Z

Zukunftsindustrie.de

zukunftsindustrie.de

53

Zukunftsindustrie.de is a German career portal focused on the metal and electrical industries, emphasizing opportunities in the energy transition and high-tech sectors. The website serves as an information hub and job portal targeting professionals and job seekers interested in these industries. The platform is positioned as a niche resource supporting industry growth and workforce development in Germany. Technically, the site is built on ASP.NET Web Forms, uses Cookiebot for GDPR-compliant cookie management, and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. Hosting is managed via internet1.de, with proper SSL and security headers implemented, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, CSRF protections, and cookie consent mechanisms, though the site lacks a publicly available security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate tracking and advertising transparency. Recommendations include publishing explicit security and incident response policies, improving accessibility, and maintaining regular audits of third-party scripts to enhance security further.

U

Uniper

uniper-digital.de

60

Uniper Digital operates a secure customer login portal leveraging Microsoft Azure B2C identity services. The website serves as an authentication gateway for Uniper's digital energy services, targeting customers and partners in the energy sector. The platform uses modern OAuth2 and OpenID Connect protocols to ensure secure access. The technical infrastructure is robust, hosted on Azure cloud, and employs contemporary JavaScript frameworks and libraries. Security posture is strong with HTTPS enforced and secure token handling, although explicit security headers could be improved. Privacy compliance is limited on the login page, lacking visible privacy and cookie policies. Overall, the site reflects a mature digital presence aligned with corporate branding and security best practices.

V

Verein Deutscher Zementwerke e.V.

vdz.info

69

The Verein Deutscher Zementwerke e.V. (VDZ) operates as a leading research and competence center for the cement, concrete, and environmental protection sectors in Germany. Established in 1877, it serves as a non-profit association providing technical, scientific, and economic-political services including research, certification, consulting, and training to the cement industry and related stakeholders. The website reflects a mature and professional organization with comprehensive service offerings and a strong market position in the energy and manufacturing sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including SVG graphics and asynchronous JavaScript modules for enhanced user experience. It integrates Matomo analytics for privacy-conscious user tracking and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained digital infrastructure. From a security perspective, the site enforces HTTPS and employs secure form handling practices. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the WHOIS data aligns consistently with the website's claims, supporting legitimacy. Overall, the VDZ website demonstrates a high level of professionalism, security, and compliance suitable for its industry and audience. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and stakeholder confidence.

P

Puukattila Maga-Finland

maga-finland.fi

58

Puukattila Maga-Finland operates as the official reseller of Maga wood boilers in Finland, providing durable and efficient heating solutions tailored for Finnish consumers. The website presents a clear business focus on energy sector products, specifically heating systems, and targets a local Finnish audience. The company positions itself as a trusted distributor with a focus on quality and reliability. Technically, the website is built on the Wix platform, leveraging standard Wix scripts and Google Tag Manager for analytics and marketing. The site is mobile-optimized and uses HTTPS, indicating a baseline level of digital maturity. However, the absence of privacy and cookie policies, as well as lack of explicit security incident response information, suggests gaps in compliance and security transparency. Overall, the security posture is moderate with room for improvement in security headers and compliance documentation. The website is safe for general audiences and does not contain any adult or questionable content.

C

City-USE GmbH & Co. KG

city-use.de

55

City-USE GmbH & Co. KG is a well-established cooperative energy partner based in Germany, specializing in providing tailored energy procurement and management solutions to municipal utilities. Founded in 1999, the company operates a certified data center and offers a broad portfolio of services including electricity and gas procurement, hosting, energy data management, and consulting on legal and technical topics. Their strong network of 16 municipal shareholders in the Unterfranken region positions them as a trusted regional player in the energy sector. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, GSAP animations, and accessibility tools like Eye-Able. The site demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented effectively, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent with opt-in. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the business claims, showing consistency and legitimacy. Overall, the website presents a professional, trustworthy, and compliant digital front for City-USE GmbH & Co. KG. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trustworthiness.

Z

ZER-QMS Zertifizierungsstelle GmbH

zer-qms.de

44

ZER-QMS Zertifizierungsstelle GmbH is a German certification body specializing in quality, environmental, energy, and occupational safety management certifications. Their services include auditing and certification for standards such as ISO 9001, ISO 14001, OHSAS 18001, and DIN Spec 91436, targeting businesses seeking compliance and sustainability certifications. The company positions itself as a reliable partner with a focus on environmental and quality standards, supported by customer testimonials and recognized certifications. Technically, the website uses modern web technologies including HTML5, CSS3, and JavaScript libraries like Siema and SimpleBar for UI enhancements. The site is mobile-optimized and well-structured, though it lacks some advanced accessibility features and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a formal vulnerability disclosure policy, which are recommended for improved security posture. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance compliance and security maturity.

T

tegosgroup

tegos-group.com

63

tegosgroup is a medium-sized German company founded in 2017 specializing in cloud platform software solutions for optimizing business processes in the circular economy, particularly focusing on waste management, disposal, and recycling sectors. The website presents a professional and consistent brand image with good content relevance and user experience. Technically, the site is built on WordPress using Gravity Forms and jQuery UI, hosted by IONOS SE, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are found. Overall, the site is trustworthy but could improve privacy compliance and security transparency.

P

PAULY Rechtsanwälte Köln

pauly-rechtsanwaelte-koeln.de

58

PAULY Rechtsanwälte Köln is a small law firm specializing in environmental and energy law based in Cologne, Germany. The website presents a professional appearance using WordPress with the Avada theme and includes SEO optimization via Rank Math PRO. The technical infrastructure includes Google Tag Manager for analytics and Borlabs Cookie for cookie consent management. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information such as emails or phone numbers were found in the provided content. Security posture is moderate with no detected security headers and unknown SSL configuration. WHOIS data is minimal with generic hosting name servers and no detailed registrant information, which slightly reduces trustworthiness. Overall, the website is functional and professionally designed but would benefit from enhanced transparency and security practices.

H

Hülskens Holding GmbH & Co. KG

huelskens.de

51

Hülskens Holding GmbH & Co. KG is a well-established German company specializing in the supply of mineral resources such as Kies and Sand, production of transport concrete and precast concrete elements, water construction, logistics, and insurance brokerage. With a history dating back to the early 20th century and a workforce exceeding 900 employees, the company holds a strong regional market position serving construction, energy, and logistics sectors. Their business model focuses on B2B services with multiple subsidiaries and specialized business units, supported by a professional and content-rich website. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, and hosted by agenturserver. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks explicit security policies or incident response information. Overall, the domain registration and WHOIS data align well with the company's claims, supporting legitimacy and trustworthiness.

H

Hülskens Sediments GmbH

huelskens-sediments.de

49

Hülskens Sediments GmbH is a specialized technology company focused on sustainable sediment management solutions for reservoirs and impoundments. Their patented ConSedTrans® system enables continuous, automated sediment removal without disrupting water storage functions such as drinking water supply and energy generation. The company positions itself as an innovative niche player with recognized technology and strong environmental compliance. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries like jQuery and Swipe.js, and is hosted on agenturserver infrastructure. The site is well-structured, mobile-optimized, and GDPR compliant with a clear cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

E

EDP Group

edpr.com

71

EDP Group is a well-established global energy company with a strong focus on renewable energy and sustainability. The website serves as a centralized hub for information about the group and its subsidiaries, including EDP Renewables. The site is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content for investors, clients, and partners. Technically, the site is built on Drupal CMS and integrates modern analytics and monitoring tools such as Google Tag Manager, HubSpot, and Dynatrace. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partially demonstrated through cookie consent mechanisms, but a dedicated privacy policy page was not found on the analyzed URL. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

A

Axians eWaste GmbH

enature.cloud

70

Axians eWaste GmbH operates the eNATUREcloud portal, a specialized platform designed to assist large companies in the EU with environmental and energy reporting, particularly compliance with the European Energy Efficiency Directive. The company positions itself as a niche provider in the energy and waste management sector, offering integrated tools for waste management, environmental reporting, and audit databases. The website reflects a professional B2B service model targeting enterprises with significant operational scale. Technically, the website leverages a modern but standard technology stack including jQuery, Bootstrap, FontAwesome, and Slick Carousel, running on a WordPress CMS platform. Authentication is managed via OpenID Connect through Keycloak, indicating a secure and modern identity management approach. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and uses secure authentication protocols. However, there is a lack of visible security headers and no public security or incident response policies, which could be improved. Cookie consent mechanisms and privacy policies are well implemented, supporting GDPR compliance. The absence of WHOIS data for the domain suggests it is a subdomain or internally managed domain, which is consistent with the professional nature of the site. Overall, the website demonstrates a solid security posture and business credibility with minor areas for improvement in security best practices and transparency. The risk level is low, and the site is suitable for its intended professional audience.

Axians eWaste GmbH operates a specialized online service portal focused on waste management solutions, providing centralized software architecture to streamline processes for businesses in the environmental sector. The website serves as a gateway to multiple related portals and services under the Axians brand, targeting primarily German-speaking business customers. The technical infrastructure is based on modern JavaScript libraries and ASP.NET MVC framework, with a moderate level of mobile optimization and accessibility. Security measures include CSRF protection and cookie consent mechanisms, though explicit security headers and incident response information are lacking. Overall, the website presents a professional and trustworthy digital presence consistent with a medium-sized enterprise in the energy and environmental services sector.

Axians eWaste GmbH operates the eTFSportal, a specialized cloud-based software solution designed to facilitate compliance with EU regulations on cross-border waste shipments. The portal supports electronic notification and transport management processes, targeting companies involved in waste transport and disposal. The business is positioned as a niche provider within the energy and transportation sectors, leveraging its parent company Axians' expertise and infrastructure. The website demonstrates a professional and consistent brand presence with clear business information and multilingual support. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google reCAPTCHA v3 for security. The portal integrates various UI components and validation mechanisms to ensure usability and security. Hosting appears professional and GDPR compliant, though some security enhancements such as DNSSEC and security headers could be improved. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business present a trustworthy and professional image with moderate technical sophistication and good compliance practices. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.

A

Axians eWaste GmbH

eanvportal.de

55

Axians eWaste GmbH operates the eANVportal, a specialized web-based platform for managing electronic waste disposal and compliance in Germany. The portal supports waste producers, disposers, and authorities by providing transparent, legally compliant waste tracking and documentation services. The company positions itself as a key player in the German waste management software market, offering additional portals and services such as eNATUREportal and eTFSportal, targeting B2B customers in the environmental and energy sectors. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and various UI libraries, with Spring Security handling authentication. The site is mobile-optimized and provides a professional user experience, although some accessibility and SEO aspects are basic. Security practices include HTTPS enforcement and client-side password encoding, but improvements are recommended in password handling and HTTP security headers. The security posture is solid but not exemplary, with no visible incident response or vulnerability disclosure mechanisms. Privacy compliance is strong, with clear cookie consent and privacy policies aligned with GDPR. Contact information is complete and transparent, enhancing business credibility. Overall, the website is trustworthy and professionally maintained, suitable for its business audience. Strategic security enhancements and transparency improvements would further strengthen its position and user trust.

A

Axians Deutschland

axians.de

80

Axians Deutschland is a prominent ICT solutions provider and digital transformation partner operating as part of the global VINCI Energies network. The company focuses on delivering industry-specific digitalization services, primarily targeting business customers in Germany's energy and technology sectors. The website reflects a professional and consistent brand presence, emphasizing Axians' role as a pioneer in digital transformation. Technically, the site is built on WordPress with modern libraries and includes SEO and analytics tools such as Yoast SEO Premium and Matomo Analytics. Security measures include HTTPS usage and Google reCAPTCHA integration, alongside a cookie consent mechanism, although explicit security policies and headers are not evident. The WHOIS data is partially consistent with the website's claims but lacks detailed registrant information, slightly impacting trust. Overall, the site is well-structured, secure, and compliant with basic privacy standards, suitable for its business audience.

L

LOBBE

lobbe.de

51

LOBBE is a German family-owned company specializing in environmental and industrial services including emergency management, waste disposal, sewer technology, and remediation. The company positions itself as a sustainable and safety-focused service provider targeting industrial clients and municipalities. Their website is professionally designed using WordPress with Elementor and Yoast SEO, supporting multilingual content via Weglot. The technical infrastructure is modern and hosted on a cloud provider with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy-conscious scripting, though explicit security policies and incident response plans are not published. Overall, the website is trustworthy and compliant with GDPR, featuring comprehensive privacy and cookie policies. Strategic improvements include publishing security policies and vulnerability disclosure information to enhance transparency and trust.

K

Kronos Solar

kronos-solar.com

75

Kronos Solar is a well-established solar photovoltaic development company operating primarily in Germany, France, the Netherlands, and the UK. As part of the global renewable energy group EDPR since 2022, it offers a fully integrated business model covering project development, financing, construction, ownership, and operation of utility scale solar farms. The company has a strong market position with over 1.5 GW of commissioned projects and a clear focus on powering the clean energy transition. The website reflects a professional corporate presence with good content quality and clear navigation aimed at investors, partners, and stakeholders in the renewable energy sector. Technically, the site is built on Drupal CMS, uses Google Tag Manager for analytics, and implements OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is basic with cookie consent but no explicit privacy policy or terms of service detected. Overall, the site is trustworthy and professional, with room for enhanced security and compliance transparency.

InduRec is a German-based company specializing in industrial dismantling, demolition, hazardous substance remediation, site recycling, and waste disposal services. The company targets industrial clients requiring environmentally conscious and resource-efficient deconstruction and recycling solutions. Their website highlights references from major industrial clients, indicating a solid regional market presence. Technically, the website uses legacy JavaScript libraries such as jQuery 1.4.2 and Spry Accordion, with basic mobile optimization and SEO. Security posture is moderate but could be improved by updating libraries, implementing security headers, and enforcing HTTPS. Privacy compliance is good with a clear cookie consent mechanism and a privacy policy in German. No terms of service or incident response policies are publicly available. Overall, the website is functional and trustworthy but would benefit from modernization and enhanced security practices.

T

Tregler Brennstoffe

tregler-brennstoffe.at

51

Tregler Brennstoffe is a small, established business specializing in the buying, processing, and selling of quality firewood in the Czech Republic and Austria since 1991. The website reflects a regional energy sector focus with clear business descriptions and a professional presentation. Technically, the site uses modern JavaScript frameworks such as Vue.js and a Laravel Nova backend, indicating a mature digital infrastructure. The presence of multiple analytics and tracking tools shows an active approach to marketing and user behavior analysis. Security posture is moderate with HTTPS enabled and some best practices observed, but lacks explicit security headers and published privacy policies, which are areas for improvement. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced compliance and security documentation.

S

SURSCHISTE

surschiste.com

60

SURSCHISTE is a French industrial and commercial operator specializing in the valorization and transformation of by-products from thermal power plants. As a subsidiary of EP Power Minerals (EPPM), it holds a stable market position within the energy sector, focusing on sustainable industrial processes. The website reflects a professional business presence with clear descriptions of its core services and target audience. Technically, the site is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented, indicating some privacy awareness. However, the absence of a visible privacy policy and terms of service reduces privacy compliance confidence. Security posture is moderate with HTTPS enabled and domain status locks, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, the website is functional and professional but would benefit from improved privacy and security disclosures to strengthen trust and compliance.

M

MINERALplus STORK GmbH

mineralplusstork.de

49

MINERALplus STORK GmbH operates a modern slag processing plant in Zossen, Germany, specializing in recycling slag and ash from waste to energy plants. The company is jointly managed by STORK Umweltdienste GmbH and MINERALplus GmbH, both part of the EP Power Minerals group. Their services include metal recovery and production of construction materials from slag, serving industrial and construction sectors regionally. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation. It employs Matomo analytics with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and spam-protected emails, though additional security headers and policies could enhance protection. Overall, the site reflects a trustworthy and credible business presence with clear contact information and certification evidence.

E

Euroment

euroment.com

44

Euroment is a well-established supplier of certified pulverized coal fly ash and limestone powders primarily serving the Benelux region. The company emphasizes sustainability and innovation, particularly in reducing CO2 emissions in cement-bound systems. Their website is professionally designed using TYPO3 CMS, featuring good mobile optimization, clear navigation, and comprehensive content about their products and services. The technical infrastructure includes modern technologies such as Matomo for analytics and Klaro for cookie consent management, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which slightly impacts overall trust. Contact information is primarily via a contact page without explicit emails or phone numbers visible on the site. Overall, Euroment presents a credible and professional business front with minor areas for improvement in transparency and security best practices.

E

EP Energo Mineral Sp. z o.o. and EP Energo Mineral Deutschland GmbH

epenergomineral.pl

52

EP Energo Mineral operates as a specialized supplier and service provider in the energy and construction sectors, focusing on the management and supply of power plant by-products such as fly ash, slag mixtures, and microspheres. The company is supported by experienced shareholders and offers laboratory testing and logistics services to ensure product quality and reliable delivery. The website is professionally designed, multilingual, and provides comprehensive business and product information targeting industrial clients in Poland and Germany. Technically, the site uses TYPO3 CMS with Matomo analytics and a consent management platform, reflecting a modern digital infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, though the absence of security headers and WHOIS data transparency are notable gaps. Overall, the site presents a trustworthy business presence but would benefit from enhanced security disclosures and domain registration clarity.

M

MINERALplus GmbH

mineralplus.de

46

MINERALplus GmbH is a German company specializing in industrial waste disposal and the production of construction and mine packing materials from waste. Founded in 2000 through a merger, it operates as a subsidiary of EP Power Minerals GmbH under the EPH Group umbrella. The company serves industrial and construction sectors with certified waste treatment, recycling, and landfill services. The website is built on TYPO3 CMS, uses Matomo for analytics, and Klaro for cookie consent management, reflecting a modern and privacy-conscious technical infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and trustworthy, with no signs of malicious content or blocking mechanisms.

C

ClimatePartner GmbH

climatepartner.com

76

ClimatePartner GmbH is a medium-sized German company specializing in climate action services, including carbon accounting, reduction, and climate projects. Positioned as a trusted partner for companies aiming to achieve net zero emissions, ClimatePartner offers B2B services focused on sustainability and environmental impact reduction. The website reflects a professional and consistent brand image, targeting corporate clients interested in decarbonization and compliance with climate-related regulations. Technically, the site is built on Drupal 10, integrating modern marketing and analytics tools such as Google Tag Manager and Cookiebot, ensuring a good digital maturity level with mobile optimization and accessibility considered. Security posture is strong with HTTPS enforced and security headers present, though the absence of a public security policy and incident response contact suggests room for improvement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website and business presence indicate a legitimate and professional organization with moderate risk due to lack of WHOIS transparency.

O

on-collect solutions AG

on-collect.de

39

on-collect solutions AG operates a legaltech cloud platform specializing in debt collection and receivables management, primarily serving companies in the energy sector in Germany. The company combines software as a service with consulting and legal expertise to optimize the entire customer lifecycle in receivables management. Their platform integrates seamlessly with ERP systems and offers automated processing, digital file management, and comprehensive reporting. The website positions on-collect as a pioneer in legaltech with over 200 customers using their SaaS solution. Technically, the website is built on WordPress with Elementor and Bootstrap, leveraging modern JavaScript libraries and Matomo for privacy-conscious analytics. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks some security headers and formal security policies. Overall, the security posture is good but could be improved by adding explicit privacy and cookie policies, incident response information, and security headers. The domain WHOIS data is consistent with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategic recommendations include enhancing privacy compliance, publishing security and incident response policies, and implementing security headers to strengthen trust and compliance with GDPR and related regulations.

E

e-rechtsanwälte.eu

e-rechtsanwaelte.de

42

e-rechtsanwälte.eu is a specialized legal consultancy firm focusing on energy law, IT law, internet law, and data protection, primarily serving energy suppliers and medium-sized industries in Germany. The website presents a professional image with clear navigation and a modern design, leveraging WordPress with Elementor and Bootstrap frameworks. The firm offers a range of legal services including contract law, insolvency law, and organizational liability. Technically, the site uses HTTPS, Matomo analytics with cookies disabled, and a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of a published privacy policy and terms of service pages suggests room for improvement in compliance transparency. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the lack of security headers is a minor concern. Overall, the website is trustworthy and professional, though enhancing privacy and security disclosures would strengthen its compliance and user trust.

Uniper is a large, established energy company headquartered in Germany, focused on power generation, energy trading, and accelerating the energy transition through renewables and hydrogen economy development. The company operates in over 40 countries and has a strong green energy portfolio. The website is built on Drupal 10 with modern web technologies and includes comprehensive content about their business, strategy, and sustainability efforts. Security posture is strong with HTTPS, security headers, and captcha-protected forms, though explicit incident response contacts and vulnerability disclosure policies are not found. Privacy and compliance policies are comprehensive and GDPR compliant. Overall, the website reflects a mature digital presence consistent with a reputable energy sector enterprise.