Energy security reports

Stradasalt is a Norwegian brand under GC Rieber Minerals specializing in environmentally friendly road salt and dust-binding solutions. The company targets road maintenance and municipal clients with a focus on sustainable and chloride-free products. The website reflects a professional B2B supplier with a clear market niche and consistent branding. Technically, the site uses modern web technologies including Matomo analytics and Cookiebot for consent management, ensuring compliance with GDPR and privacy best practices. Security posture is solid with HTTPS, CSRF protection cookies, and domain transfer restrictions, though DNSSEC is not enabled and some security headers are missing. No direct contact emails or phone numbers are provided, relying on a contact form instead. Overall, the site is well-structured, mobile-optimized, and trustworthy, with room for improvement in explicit business contact details and security policy disclosures.

T

TOPIN

topin.cz

57

TOPIN is a Czech-based professional portal specializing in heating technology, providing a wide range of expert articles, company catalogs, calculators, and a magazine subscription service. The website targets professionals and companies in the heating, ventilation, and energy sectors, offering valuable technical content and industry resources. The business model appears to be content-driven with advertising and subscription revenue streams. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, with a responsive design and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. The absence of WHOIS data is a concern for domain legitimacy verification, though the website content and structure suggest a legitimate and established operation. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Verlag Dashöfer, nakladatelství, spol. s r. o.

energetikainfo.cz

46

EnergetikaInfo.cz is a Czech online portal providing comprehensive information on energy production, distribution, and sales, including legal updates, technical standards, and sector news. Operated by Verlag Dashöfer, the site targets energy professionals such as manufacturers, distributors, and sellers, offering subscription-based access to specialized content and educational seminars. The portal demonstrates a mature digital infrastructure utilizing modern web technologies, analytics, and user engagement tools, including Google Tag Manager, Bing Ads, and Smartsupp live chat. Security measures include HTTPS enforcement and Google reCAPTCHA integration, ensuring secure user interactions. However, the absence of WHOIS data limits domain trust verification, though the website's professional presentation and affiliation with a known publisher support its legitimacy. Privacy and cookie policies are clearly presented with user consent mechanisms, aligning with GDPR requirements. Overall, the site is a reliable resource for energy sector stakeholders in the Czech Republic, with good technical and security posture but would benefit from enhanced transparency in domain registration and security headers.

Česká peleta is a Czech Republic-based informational and promotional website focused on wood fuel heating solutions, including pellets, briquettes, and wood. The site provides comprehensive content on heating technologies, product catalogs, certifications, and industry news, targeting consumers interested in modern, ecological heating options. The business is well-established with a domain age since 2010 and maintains partnerships with numerous industry members and certifications such as ENplus®. Technically, the website is built on WordPress with common web technologies and includes tracking via Google Analytics, Facebook SDK, and Seznam Retargeting. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Overall, the website is trustworthy and professional, with no signs of blocking or adult content, making it safe for general audiences.

C

Cech topenářů a instalatérů České republiky z.s.

cechtop.cz

47

Cech topenářů a instalatérů České republiky z.s. is a well-established professional guild association founded in 2000, serving the heating and plumbing industry in the Czech Republic. The organization provides a range of services including professional training, certifications, publications, and event organization, targeting industry professionals and educational institutions. The website reflects a mature digital presence with a clear focus on industry support and member services. Technically, the website is built on Drupal 10 with Bootstrap 4 and uses modern web technologies such as jQuery and Colorbox for UI enhancements. The site is hosted likely by WEDOS, consistent with the WHOIS data. It is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Cookie consent and privacy policies are implemented, indicating good privacy compliance. From a security perspective, the site uses HTTPS and has no visible security blocking mechanisms or exposed sensitive data. However, security headers are not detected and could be improved. No incident response or vulnerability disclosure policies are found. Overall, the security posture is solid but could benefit from enhancements. The domain registration data is consistent with the website content and business claims, with a long domain age supporting legitimacy. The site is free from suspicious or malicious indicators and maintains good trust signals through partner logos and comprehensive contact information.

CSTfire s.r.o. is a Czech-based company specializing in biomass combustion technology, providing environmentally friendly heating solutions primarily for industrial and agricultural clients. Their product portfolio includes small and large series biomass boilers, conveyor systems, and fuel conditioning services. The company positions itself as a CO2-neutral energy provider aiming to reduce fossil fuel dependency. Technically, the website is built on WordPress with a moderate performance profile and uses common plugins for anti-spam, gallery, and cookie consent management. Security posture is solid with HTTPS and anti-spam measures, though lacking published security policies and incident response contacts. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and business information appear professional and trustworthy. Overall, the site demonstrates good privacy compliance and user experience, with clear contact information and GDPR adherence.

T

TnG Air

zatopime.cz

59

TnG Air is a Czech manufacturer specializing in air-to-water heat pumps and photovoltaic systems, serving customers primarily in the Czech Republic and Slovakia. The company emphasizes a comprehensive service model including design, delivery, installation, and after-sales support, backed by a 10-year warranty and a dedicated service network. Their market position is strengthened by over 10,000 installations and 26 years of technology development. The website is professionally designed, mobile-optimized, and rich in content, targeting residential and commercial property owners seeking energy-efficient heating and solar solutions. Technically, the website leverages modern JavaScript libraries, Google Analytics, Hotjar for user behavior analysis, and is built on the Solidpixels CMS platform. It employs HTTPS with good SSL configuration and includes cookie consent mechanisms aligned with GDPR. However, the absence of WHOIS data and missing HTTP security headers present areas for improvement in trust and security posture. Security-wise, the site demonstrates good practices such as secure forms with validation and anti-spam tokens, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The overall risk is moderate with recommendations to enhance HTTP security headers and publish security policies. Overall, TnG Air's digital presence reflects a mature, trustworthy energy solutions provider with room to improve domain transparency and security hardening to further boost customer confidence.

R

ROMOTOP

romotop.cz

44

ROMOTOP is a Czech-based company recognized as a European leader in manufacturing and selling fireplace stoves, fireplace inserts, and design fireplaces. Their products emphasize ecological standards and cater to a broad audience including consumers seeking heating solutions for standard and low-energy homes. The website is professionally designed with multilingual support and clear navigation, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring a responsive and interactive user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks visible security headers and explicit privacy or security policies, indicating room for improvement. The absence of WHOIS data reduces transparency and trust slightly, but the overall professional presentation and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and verifying domain registration details to improve trust and compliance.

I

iKomunita.cz

ikomunita.cz

66

iKomunita.cz is a Czech company specializing in community energy solutions, primarily focusing on photovoltaic systems for residential buildings and housing cooperatives (SVJ). The company offers comprehensive services including project design, installation, financing, and after-sales support, leveraging state subsidies and innovative energy sharing technologies. Their market position is strong within the Czech Republic, with over 250 completed projects and a network of 35+ partner companies. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, cookie consent, and certified components, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

S

Schiedel

schiedel.com

70

Schiedel is a well-established company specializing in ceramic and stainless steel chimney systems, stoves, and ventilation solutions primarily serving the European market. The company positions itself as a leader in energy-efficient chimney and integrated stove & ventilation systems with over 75 years of experience. Their website reflects a professional and consistent brand image with a focus on durable and high-quality products. The target audience includes both consumers and businesses seeking reliable chimney and ventilation solutions. Technically, the website employs modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management, indicating a moderate level of digital maturity. However, the absence of explicit CMS or hosting details limits a full infrastructure assessment. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and published security policies, which suggests room for improvement in security posture. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced privacy, security disclosures, and WHOIS transparency to improve trust and compliance.

A

Agentura Inforpres, s.r.o.

infotherma.cz

60

Infotherma.cz is the official website for INFOTHERMA, a well-established international exhibition focused on heating, energy savings, and renewable energy sources. The event is organized by Agentura Inforpres, s.r.o., a Czech company with a long history dating back to 2000. The website serves as a comprehensive portal for visitors and exhibitors, providing registration, event information, media resources, and partner details. The site is professionally designed with clear navigation and a focus on the energy sector, targeting industry professionals and stakeholders interested in energy efficiency and sustainable technologies. Technically, the website uses modern web technologies including Google Tag Manager and Google Analytics for tracking, served via a reputable Czech hosting provider REG-ZONER. The site is mobile-optimized and loads quickly, with a cookie consent mechanism compliant with GDPR requirements. The CMS platform is ISSA CMS, a specialized content management system. While security headers are not explicitly detected, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were found. From a security perspective, the site demonstrates good practices such as cookie consent and HTTPS usage but lacks publicly available security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the business's history. Overall, Infotherma.cz is a credible, professional website supporting a niche energy exhibition business. It maintains good privacy compliance and technical standards but could enhance its security posture by publishing formal security policies and improving security headers. The site is safe for general audiences with no adult or questionable content.

S

Sdružení oboru vodovodů a kanalizací ČR, z.s.

vystava-vod-ka.cz

56

The website vystava-vod-ka.cz represents the international water industry exhibition 'VODOVODY-KANALIZACE' (VOD-KA), a significant event in Central Europe focused on water supply and sewerage technologies. The event is organized by Sdružení oboru vodovodů a kanalizací ČR, z.s., with operational support from Exponex, s.r.o. The site provides detailed information about the exhibition, including past event summaries, exhibitor catalogs, and contact details. The business model centers on event organization and industry networking, targeting professionals and companies in the water sector. The website content is professionally presented in Czech, with good navigation and mobile optimization.

E

Exponex, s.r.o.

dny-teplarenstvi-a-energetiky.cz

54

The website www.dny-teplarenstvi-a-energetiky.cz represents a well-established conference event focused on the heating and energy sectors in the Czech Republic. It serves as a platform for industry professionals, partners, exhibitors, and media to engage in discussions shaping the future of the energy field. The business model centers on event organization and conference hosting, with a strong presence indicated by attendance and partner statistics. The site content is professional and relevant, targeting industry stakeholders. Technically, the website uses legacy JavaScript libraries such as jQuery 1.11.2 and jQuery UI, along with Lightbox.js for UI elements. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No CMS or hosting provider information is evident. Security measures include a cookie consent mechanism; however, no security headers or advanced protections are detected, and the SSL configuration could not be verified from the data provided. From a security perspective, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a concern for domain legitimacy and trust but does not directly impact the operational security of the website. Privacy compliance is supported by an external privacy policy and a cookie consent banner, indicating awareness of GDPR requirements. Contact information is transparent and professional, enhancing business credibility. Overall, the website is functional and professional but would benefit from technical modernization, enhanced security headers, and improved domain transparency. Strategic recommendations include updating JavaScript libraries, implementing security headers, verifying SSL configurations, and publishing incident response and security policies to strengthen trust and compliance.

V

Veletrhy Brno, a.s.

amper.cz

66

Veletrhy Brno, a.s. operates the AMPER trade fair, a leading international event in the fields of electrotechnics, electronics, and energy in the Czech Republic and Slovakia. The website showcases a professional and comprehensive platform for exhibitors and visitors, featuring detailed event information, multimedia galleries, and active social media engagement. The technical infrastructure employs modern web technologies and tracking tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data slightly reduces trust but does not detract from the overall legitimacy and professionalism of the site.

M

Munck

munck.dk

56

Munck is a well-established Danish nationwide construction and infrastructure group specializing in road construction, district heating, sewer networks, electrical and fiber networks, unique construction projects, and harbor facilities. The company targets business and public sector clients within Denmark, leveraging over 25 years of domain presence and experience. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with Elementor, incorporating modern web technologies and cookie consent management via Cookiebot. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. Security posture is solid with HTTPS and consent management but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, Munck presents a credible and trustworthy digital presence aligned with its business operations.

B

BVH Bitumen Vertrieb und Handel GmbH

bvh-bitumen.de

41

BVH Bitumen Vertrieb und Handel GmbH is a specialized German company founded in 2001 that focuses on the distribution and trading of bitumen products for road construction and industrial applications. Their website reflects a niche business model targeting B2B customers in the energy and construction sectors, offering products such as oxidized and modified bitumen. The company positions itself as an experienced supplier adhering to industry standards. Technically, the website is built on the namRED CMS, an older open-source framework, with basic JavaScript and CSS usage. The site lacks modern mobile optimization and advanced SEO features, indicating a moderate level of digital maturity. Security posture is minimal with no detected HTTPS enforcement or security headers, and no visible incident response or security policies. Privacy compliance is limited, with a basic privacy policy but no cookie consent mechanism. Overall, the site is functional but could benefit from modernization and enhanced security and privacy practices.

O

OK a.m.b.a

ok.dk

67

OK a.m.b.a is a well-established Danish energy company providing a broad range of energy products including fuel, heating oil, electricity, natural gas, and heat pumps. The company operates over 670 local fuel stations across Denmark, targeting private consumers, businesses, and public sector clients. The website reflects a professional and consistent brand presence with clear business offerings and a focus on local energy supply services. Technically, the website employs modern web technologies including JavaScript modules, Google Tag Manager, Adobe Experience Cloud, and Cloudflare for hosting and security. The site is mobile-optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, although explicit security headers and incident response contacts are not clearly visible. The absence of WHOIS data is a notable gap in domain legitimacy verification, which slightly impacts the overall trust score. Overall, the website is professional, secure, and compliant with privacy standards, serving its target market effectively.

Munck Asfalt is a Danish company specializing in asphalt production and paving services for various infrastructure projects including motorways, country roads, municipal roads, bridges, industrial areas, and parking lots. The company targets both private and business customers, positioning itself as a local/regional supplier with its own asphalt factories. The website is built on the SiteSuite CMS platform and integrates modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. The digital maturity is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS usage and cookie consent management, but lacks visible security headers and explicit security policies. Privacy compliance is supported by Cookiebot, though no dedicated privacy policy or terms of service pages were found. Overall, the website presents a professional and trustworthy image consistent with a small business in the energy and transportation sector.

G

GC Rieber Minerals

gcrieber-salt.com

58

GC Rieber Minerals is a Norwegian-based company specializing in the supply and development of mineral and salt products for diverse markets including road maintenance, fishery, aquaculture, industrial applications, food production, and agriculture. The company emphasizes sustainability and circular economy principles, positioning itself as a partner for businesses seeking innovative and environmentally responsible mineral solutions. Their portfolio includes well-known brands such as Norsal and Stradasalt, which cater to premium salt products and de-icing solutions respectively. The company operates across multiple Nordic countries with detailed contact points and a professional online presence. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, with integrations for GDPR compliance and map services. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. Despite this, the website content and branding are consistent and professional, mitigating some risk. Privacy and cookie policies are comprehensive and GDPR compliant, supporting the company’s commitment to data protection. Overall, GC Rieber Minerals presents a credible and professional business front with a strong focus on sustainability and customer engagement. Security and compliance practices are good but could benefit from enhanced transparency in domain registration and additional security headers.

N

Nynas

nynas.com

61

Nynas is a well-established specialty chemicals company founded in 1996, focusing on providing bitumen and naphthenic solutions that support sustainable infrastructure and electrification. The company targets industrial and infrastructure sectors with a B2B business model and positions itself as a leader in sustainable specialty chemicals within the energy sector. The website reflects a professional and consistent brand image with good content quality and clear business messaging. Technically, the website employs modern technologies including JavaScript, Google Tag Manager, and Cookiebot for analytics and cookie consent management. The site is hosted with domainnetwork.se DNS servers and uses HTTPS with a good SSL configuration. Performance and mobile optimization are rated as moderate to good, with accessibility and SEO features well implemented. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, cookie consent with granular controls, and domain transfer/update protections. However, DNSSEC is not enabled, and no explicit security policy or incident response contact information is published. Security headers are not explicitly detected, and no vulnerability disclosure mechanism is found. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The overall risk assessment is low, with no signs of malicious or suspicious activity. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, adding security headers, and providing clear incident response contacts to enhance trust and compliance. The website is suitable for general audiences and contains no adult or questionable content.

S

SBS Cargo

sbscargo.cz

36

SBS Cargo is a traditional forwarding company established in 2012, specializing in rail and maritime transport services. The company leverages generational knowledge in forwarding and transport sectors, serving clients primarily in energy, coal, steel, wood, paper, chemical oil, and industrial products. Their market position is that of a small but established player with a focus on traditional and reliable logistics solutions. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the website is built on WordPress with Bootstrap and jQuery, optimized for mobile devices and SEO-friendly through the Yoast SEO plugin. Hosting appears to be provided by Webglobe, consistent with the domain's nameserver information. Performance is moderate with good design quality and navigation clarity, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response details are present on the homepage, limiting transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and incident response information to improve trust and regulatory adherence.

PREOL, a.s. is a leading Czech company specializing in the processing of rapeseed seed and production of related products such as biofuels, animal feed, and food products. It operates as part of the AGROFERT group, a major player in the Czech agricultural and energy sectors. The website presents a professional image with clear branding, multilingual support, and comprehensive information about its business activities and compliance with GDPR regulations. The company targets both general consumers and business partners in the energy and agricultural industries. Technically, the website uses a custom CMS (Poski), JavaScript libraries such as jQuery, and includes responsive design features for mobile optimization. While the site performs moderately well, there is room for improvement in accessibility and security headers. The cookie consent mechanism and GDPR information demonstrate a commitment to privacy compliance. From a security perspective, the site lacks visible security headers and explicit incident response or security policy pages, which could be enhanced to improve trust and resilience. The absence of WHOIS data is a concern for domain legitimacy, although the website content and business information align with a reputable corporate entity. Overall, the site is secure enough for general use but would benefit from strengthened security practices and transparency. The overall risk assessment is moderate with recommendations to improve security headers, SSL configuration, and incident response transparency. These steps will enhance user trust and regulatory compliance, supporting the company’s strong market position in the Czech energy and agricultural sectors.

V

Verdo

verdo.com

64

Verdo is an energy solutions company specializing in sustainable energy production, energy savings, and bioenergy fuel sales. The website presents a professional and consistent brand image targeting general and business audiences interested in sustainable energy. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and LinkedIn marketing integrations, supported by a cookie consent mechanism that complies with GDPR principles. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding mitigate some risk. Security posture is moderate with room for improvement in security headers and published security policies. Overall, the website is functional and professional but requires enhanced transparency and security practices to improve trust and compliance.

E

edie

edie.net

68

edie is a UK-based media platform specializing in sustainability news, resources, and events aimed at empowering sustainable business practices. The website offers a variety of content including news articles, podcasts, case studies, and webinars, targeting business professionals interested in sustainability and net-zero initiatives. The platform is positioned as a reputable source within the sustainability sector, supported by a consistent brand presence and active social media channels. Technically, the site is built on WordPress with modern web technologies such as jQuery and Google Tag Manager, and it employs advertising and tracking services like AdvertServe and Lytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but explicit security headers and policies are not clearly identified. WHOIS data is unavailable, likely due to privacy protection, which is common for media businesses but slightly reduces transparency. Overall, the site is professional, content-rich, and trustworthy with room for improvement in security and privacy disclosures.

E

Entwässerungsbetrieb Lutherstadt Wittenberg

abwasser-wittenberg.de

58

The Entwässerungsbetrieb Lutherstadt Wittenberg is a municipal utility specializing in wastewater management and treatment services for the Lutherstadt Wittenberg region in Germany. The website serves as an informational portal providing details on wastewater treatment plants, sewer networks, disposal services, environmental protection, and customer service. It is part of the Stadtwerke Lutherstadt Wittenberg group, indicating a stable local market position with a medium-sized operational scale. The company emphasizes environmental responsibility and community service. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates accessibility tools like eyeAble. The site is mobile-optimized, well-structured, and includes SEO best practices. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, though it lacks explicit security headers and published incident response policies. Overall, the website demonstrates a good security posture with room for improvement in formal security documentation and header implementation. The domain WHOIS data is minimal but consistent with the business profile, and no suspicious indicators are present. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts to maintain security and compliance.

W

wittenberg-net GmbH

wittenberg-net.de

57

wittenberg-net GmbH is a regional telecommunications company operating in Germany, focusing on providing high-speed internet and telephony services primarily through fiber optic technology. As part of the Stadtwerke Gruppe, it serves local communities with broadband expansion and reliable connectivity solutions. The website reflects a professional and consistent brand image, targeting residents and businesses in the served regions. Technically, the site is built on TYPO3 CMS with Bootstrap framework, indicating a modern and maintainable infrastructure. Accessibility and mobile optimization are well addressed, with external scripts enhancing user experience and analytics. Security posture is moderate; HTTPS is used, and cookie consent mechanisms are implemented, but explicit privacy policies and security headers are lacking. WHOIS data is limited due to DENIC privacy policies but shows no suspicious indicators, supporting the legitimacy of the domain. Overall, the site is trustworthy and functional but could improve in transparency and security best practices.

T

theTribe

advenir.mobi

45

Advenir.mobi is the official website for the Advenir program, a French national initiative led by Avere-France to finance electric vehicle charging infrastructure. The program targets individuals, professionals, and public entities, providing financial incentives to accelerate the deployment of EV charging points across France. The website offers comprehensive information about the program, including eligibility, project definition, installer directories, and news updates. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices, accessibility features, and cookie consent mechanisms. Security posture is generally good with HTTPS and consent management, but the domain's expired status and lack of DNSSEC are notable risks. Overall, the site is professional, trustworthy, and well-positioned to serve its audience, though domain renewal is critical to maintain trust and availability.

S

Seven2one

seven2one.de

58

Seven2one is a specialized technology partner and full-service software provider focused on the energy sector in Germany and the DACH region. With over 20 years of experience, they offer cloud-native platform technology (Questra®) and comprehensive consulting, development, and support services to energy companies. Their market position is strong with over 120 customers and 50 productive systems. Technically, the website is built on modern Webflow CMS with integrations like Google Analytics and Cloudflare security features, demonstrating digital maturity and good performance. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms policies are missing, representing compliance gaps. Overall, the website is professional and trustworthy, but could improve transparency and GDPR compliance by publishing dedicated policy pages and contact details.

EEX Group is a leading global provider of market platforms for energy and commodity products, including power, natural gas, environmentals, freight, metals, and agriculturals. The company operates a network of over 950 trading participants across 25 locations worldwide and is part of the Deutsche Börse Group. Their services encompass exchange trading, clearing, registry, risk management, market data, and transparency services, positioning them as a key player in the energy and commodity markets. The website reflects a mature digital presence built on TYPO3 CMS, leveraging modern JavaScript libraries and interactive maps to enhance user experience. Privacy and cookie policies are well implemented with consent mechanisms, and the site maintains a professional design with clear navigation and mobile optimization. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the overall business credibility is supported by consistent branding, detailed corporate information, and multiple subsidiary references. Recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust and compliance.

C

Core29

core29.co.uk

58

Core29 is a UK-based business intelligence and digital transformation consultancy specializing in energy and industrial sectors. Founded in 2012, it offers services including consulting, business process mapping, technology implementation, data analytics, ESG, and digital HR solutions. The company positions itself as a niche provider delivering customisable applications and rapid implementation with competitive pricing. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress with Elementor and performance optimizations via WP Rocket. Hosting and domain registration are managed through Cloudflare with DNSSEC enabled, indicating a secure and stable infrastructure. However, the site lacks publicly accessible privacy and cookie policies, which is a compliance gap. Security posture is good with HTTPS and DNSSEC but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, content-rich, and well-targeted to business clients seeking digital transformation services.

8

80:20 Procurement

lscustoms.com

65

LS Customs is a UK-based customs consultancy specializing in bespoke customs compliance solutions primarily for the energy sector. The company positions itself as a trusted partner to businesses needing to comply with HMRC regulations, offering expert advice and implementation of customs processes. The website reflects a professional and well-branded business with ISO certifications and client testimonials that reinforce its credibility. Technically, the site is built on WordPress using Elementor and JetEngine plugins, with modern SEO and analytics tools integrated, including Google Analytics and Google Tag Manager. Security is well managed with HTTPS and appropriate security headers, although privacy and cookie policies are notably absent, representing a compliance gap. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy despite the professional web presence. Overall, the website is accessible, well-designed, and business-focused, but the lack of WHOIS data and privacy documentation should be addressed to improve trust and compliance.

Aberdeen Marine Logistics Alliance (AMLA) operates as a collaborative vessel sharing initiative focused on optimizing marine logistics and reducing costs for energy sector operators in the UK. The platform facilitates vessel sharing among members through a structured sharing policy and charge-back mechanism, supported by a facilitator company, Peterson. The website presents a professional and clear description of its services and member companies, targeting marine logistics operators and energy companies. Technically, the site is a static Adobe Muse-generated site hosted via Cloudflare, using legacy JavaScript libraries and basic mobile optimization. Security posture is moderate with HTTPS and DNSSEC enabled but lacks modern security headers and uses outdated jQuery. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

P

Peterson

petersonlighthouse.com

57

Peterson Lighthouse is a B2B software ecosystem focused on digitalizing the end-to-end logistics supply chain, particularly for the energy and transportation sectors. The platform offers a suite of specialized applications that enhance visibility, planning, and management of logistics operations, including port activity, transport management, and vessel activity capturing. The company positions itself as an expert-driven provider leveraging decades of logistics experience to deliver operational efficiencies and advanced analytics. Technically, the website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is professional and trustworthy, with room for improvement in security and compliance documentation.

P

Parifex

parifex.fr

61

Parifex is a French-based company specializing in project management and engineering services with a strong focus on industrial systems integration and road safety solutions. The company offers consulting, engineering studies, logistics management, and innovative traffic control products such as radars. With over 20 years of experience, Parifex positions itself as a reliable partner for clients across various sectors including energy, transportation, and smart city projects. The website is professionally designed, multilingual (French and English), and regularly updated with news and events, reflecting an active and credible business presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, leveraging modern web technologies and optimized for mobile devices. The site employs HTTPS and includes a GDPR-compliant cookie consent mechanism, indicating attention to privacy and security compliance. However, no explicit security headers were detected, and WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. Security posture is moderate with good SSL configuration and privacy practices but could be improved by implementing security headers and publishing vulnerability disclosure policies. The absence of incident response contacts and security policies suggests room for enhancement in security governance. Overall, the website is trustworthy and professional but would benefit from improved transparency and security hardening. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, improving accessibility, and conducting regular security audits of third-party scripts to maintain a strong security posture and build greater trust with clients and partners.

Proelektrotechniky.cz is a specialized Czech online portal focused on electrical engineering, industrial automation, electronics, and energy sectors. It provides curated news, expert articles, event invitations, and consulting services primarily targeting professionals and experts in these technical fields. The website has a long-standing presence since 2012, indicating established market positioning within its niche. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Analytics, and Google Custom Search Engine, hosted under Czech domain infrastructure. The design and user experience are functional but basic, with moderate mobile optimization and SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policies. No direct contact emails or phone numbers are found, which may impact user trust and compliance. Overall, the site is safe, professional, and content-rich but would benefit from enhanced privacy compliance and security practices.

S

SSI GROUP

ssi.cz

60

SSI GROUP is a large, established integrated facility management company based in the Czech Republic, offering comprehensive services including security, cleaning, facility management, technology, and energy solutions. The company operates through multiple subsidiaries specialized in these sectors, serving a broad business clientele. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress and leverages modern analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though the absence of a published security policy and incident response contacts suggests room for improvement. Privacy compliance is strong, with a clear GDPR policy and cookie consent mechanism in place. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but overall the site and business appear legitimate and professional.

O

Open Grid Europe GmbH

oge.net

78

Open Grid Europe GmbH operates as a leading gas transmission system operator in Germany, focusing on natural gas, biogas, hydrogen, and CO2 infrastructure. The company provides a broad range of services including transportation, technical services, and market information to shippers, network operators, and connection customers. Their website reflects a strong commitment to sustainability and climate protection, with detailed reporting and active communication channels. Technically, the site is built on Neos CMS with modern libraries such as jQuery and Bootstrap, offering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

SP Electricity North West

enwl.co.uk

68

SP Electricity North West operates as the regional electricity distribution network operator for the North West of England, managing critical infrastructure such as overhead lines, underground cables, and substations. The company serves both residential and business customers, providing essential services including power cut information, connection services, and specialized support such as the Extra Care register. The website reflects a mature digital presence with multi-language support and comprehensive customer resources, positioning the company as a key utility provider in its region. Technically, the website employs modern web technologies including AngularJS and React frameworks, integrates with Microsoft Bot Framework for chat services, and uses analytics and monitoring tools such as Google Analytics, Hotjar, and Azure Application Insights. The site demonstrates good performance, accessibility, and SEO practices, with mobile optimization and clear navigation. Cookie consent and privacy compliance mechanisms are implemented, indicating attention to regulatory requirements. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes multiple security headers to protect against common web vulnerabilities. No exposed sensitive data or vulnerable libraries were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and aligned with the business's operational needs. The absence of WHOIS data for the queried subdomain is due to the nature of the query rather than an indication of illegitimacy. The site’s digital maturity and compliance posture are strong, though enhancements in transparency around security policies and incident handling would further strengthen trust and resilience.

SP Energy Networks operates as a regional electricity transmission and distribution network operator serving Central & Southern Scotland, Merseyside, Cheshire, North Wales, and North Shropshire. The company is part of Scottish Power Ltd, itself a subsidiary of the Iberdrola Group, positioning it as a significant player in the UK energy sector. The website provides comprehensive information about their services, customer support, power cut management, and investment in innovation, targeting residential and commercial electricity customers within their service areas. Technically, the website is built on ASP.NET WebForms and integrates modern tools such as Google Tag Manager, Facebook Pixel, and Osano for cookie consent management, alongside ReciteMe for accessibility enhancements. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy and cookie policies are clearly presented, and the site includes multiple contact forms and phone numbers for customer engagement. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup for the domain www.spenergynetworks.co.uk failed due to domain naming rules, indicating it may be a subdomain or alias rather than a registered domain, which slightly reduces domain registration trust but does not impact the legitimacy of the business. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with recommendations to enhance security headers and publish a vulnerability disclosure policy to further strengthen its security posture.

ScottishPower is a major UK energy provider offering gas and electricity supply, renewable energy solutions such as solar panels, and home services including boiler care and EV charging. The company positions itself as a customer-centric and environmentally conscious energy supplier with award-winning customer service and partnerships with charities like Cancer Research UK. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, with integrated consent management and analytics tools. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response information is publicly available. Overall, the website is professional, well-designed, and trustworthy, supporting a large enterprise energy business. The WHOIS data for the 'www' subdomain is unavailable due to domain naming rules, but this does not detract from the legitimacy of the main domain.

E

Electric Ireland

electricirelandrewards.ie

67

Electric Ireland Rewards is a customer loyalty platform operated by Electric Ireland, a leading energy provider in Ireland. The website offers curated rewards and offers to its customers, encouraging engagement through vouchers, competitions, and green initiatives. The platform targets Irish residents and customers interested in energy-related benefits. The business is well-established with a domain age consistent with its market presence and brand history. Technically, the website employs a modern but somewhat dated AngularJS framework combined with Bootstrap and jQuery for UI and interactivity. It integrates Google Tag Manager for analytics and OneTrust for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. No vulnerabilities or exposed sensitive data were detected in the provided content. Incident response and vulnerability disclosure information are not present, indicating potential gaps in transparency. Overall, the website demonstrates a solid business credibility and privacy compliance posture, with good content quality and user experience. The absence of direct contact emails or phone numbers on the main page suggests reliance on dedicated contact pages. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

E

Electric Ireland

electricireland.com

73

Electric Ireland is a prominent electricity supplier serving Northern Ireland, offering a range of services including electricity supply, online account management, keypad meter top-ups, and direct debit setups. The website targets residential and business customers in Northern Ireland and positions itself as a leading energy provider in the region. The digital infrastructure is built on Sitefinity CMS with modern technologies such as jQuery, Bootstrap, and Google Tag Manager, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The absence of WHOIS data reduces domain trustworthiness, but the overall website professionalism and business presence indicate legitimacy. Strategic recommendations include publishing security policies, vulnerability disclosure, and verifying domain registration details.

B

Bravida

bravida.fi

70

Bravida is a large Nordic technical service provider specializing in building installations and maintenance, with a strong presence in Finland and neighboring countries. The company offers a broad range of technical services that support building life systems, targeting property owners and facility managers. Their website reflects a mature digital presence with multilingual support and comprehensive cookie consent management, indicating compliance with GDPR and privacy best practices. Technically, the site leverages modern analytics tools including Microsoft Application Insights and Google Analytics, hosted likely on Microsoft Azure, and uses a CMS inferred to be EPiServer. Security posture is strong with HTTPS enforced, anti-CSRF protections, and security headers implemented, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-structured, with room for improvement in accessibility and explicit security disclosures.

B

Bravida

bravida.se

66

Bravida is a leading Nordic provider of comprehensive facility services and installation solutions specializing in electrical, HVAC, ventilation, automation, fire protection, and security systems. The company targets property owners, facility managers, and businesses across the Nordic region, offering integrated services to maintain and enhance building infrastructure. The website reflects a professional and consistent brand presence with localized versions for neighboring Nordic countries, emphasizing its market leadership and broad service portfolio. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Microsoft Application Insights, and Cookiebot for consent management. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident from meta tags and structured data. Performance is moderate, with asynchronous loading of scripts and use of CDN-hosted resources. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements a detailed cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information published. The use of multiple third-party analytics and marketing tools indicates extensive user tracking, though managed with user consent. Overall, the website is trustworthy and professionally maintained, with no indications of malicious content or security risks. The absence of WHOIS data for the www subdomain is typical and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact channels for security and privacy inquiries to further strengthen trust and compliance.

North American Independent Laboratories (NAIL) is a non-profit organization focused on accrediting electrical equipment testing laboratories in the United States and Canada. Their NAIL for PET accreditation program is positioned as the sole accreditation program for electrical protective equipment test labs in North America, emphasizing worker safety and OSHA compliance. The website serves as an informational platform to promote the accreditation program and provide a directory of accredited labs. Technically, the website is built on WordPress with common plugins such as TablePress and FlexSlider, hosted likely via GoDaddy. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers, and no visible privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is functional and moderately trustworthy but would benefit from enhanced security practices and compliance documentation.

O

Oceantic Network

offshorewindus.org

61

Oceantic Network is a specialized business network focused on the offshore wind energy sector, providing industry news, events, and networking opportunities to professionals and businesses within this niche. The website is built on WordPress and leverages modern web technologies such as UIkit and FontAwesome, with Cloudflare DNS services enhancing its infrastructure. The site demonstrates good SEO practices and a professional design, targeting a specialized audience in the renewable energy industry. From a technical perspective, the website uses a modern tech stack with performance and mobile optimization rated as good. However, there are areas for improvement including enabling DNSSEC and implementing security headers to enhance security posture. The site uses multiple marketing and tracking tools including Google Analytics and Facebook Pixel, indicating moderate user tracking. Security-wise, the site benefits from HTTPS and domain registration protections but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No privacy or cookie policies were detected, which is a compliance gap. Contact information is not explicitly provided in the analyzed content, which may impact user trust and business credibility. Overall, the website is a legitimate and professional platform serving a niche market but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and policy disclosures to strengthen trust and security posture.

Z

Zbridge B.V.

zbridge.nl

56

Zbridge B.V. is a small Dutch company specializing in offshore access solutions, notably their Bring-to-Work system, targeting the energy and transportation sectors. The company maintains a professional online presence via a Squarespace-hosted website with clear contact information and a cookie consent mechanism. Technically, the website leverages modern web technologies and is mobile-optimized, though it lacks some advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but could be improved by implementing additional security headers and publishing security policies. Overall, the website is trustworthy and business-focused, with no signs of suspicious activity or content safety concerns.

V

Van Oord

vanoord.com

68

Van Oord is a globally recognized marine contractor specializing in marine infrastructure, offshore wind, coastal protection, and land reclamation with over 155 years of experience. The company positions itself as a leader in delivering innovative and sustainable marine solutions, targeting clients in energy, transportation, and infrastructure sectors worldwide. The website reflects a mature digital presence with professional design, multilingual support, and active engagement through social media channels. Technically, the site leverages modern technologies including React, Drupal CMS, and integrates Google Analytics and Tag Manager for data insights. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, but the overall business credibility remains high based on website professionalism and trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration and incident response.

Heerema is a well-established company specializing in offshore marine contracting, fabrication, and engineering solutions primarily serving the energy and transportation sectors. The company offers a broad range of services including offshore wind projects, transport and installation, decommissioning, and fabrication services. The website reflects a professional corporate presence with consistent branding and a focus on quality, safety, and social responsibility. The domain age and registration details support the legitimacy and maturity of the business. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and RequireJS. The site is moderately optimized for performance and mobile responsiveness, with basic SEO and accessibility features. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks DNSSEC and visible security headers, which are recommended for enhanced security. There is no publicly available security policy or incident response information, which could be improved to increase trust and compliance. Privacy and cookie policies are present with a consent mechanism, but GDPR compliance indicators are basic. Overall, the website presents a trustworthy and professional image with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.

B

Barge Master

barge-master.com

44

Barge Master is a specialized company providing advanced motion compensation systems designed to improve offshore workability in challenging marine environments. Their product portfolio includes platforms, gangways, cranes, and feeders that enable secure and efficient operations in offshore wind, heavy civil, and marine salvage sectors. The company targets offshore industry professionals and project managers seeking to reduce weather downtime and increase operational control. The website reflects a medium-sized enterprise with a professional digital presence, leveraging TYPO3 CMS and integrating Google Analytics for user insights. Technically, the website is built on a modern CMS platform with responsive design and good SEO practices. The use of Google Analytics and Tag Manager indicates moderate user tracking. However, the absence of explicit security headers and cookie consent mechanisms suggests room for improvement in privacy compliance and security hardening. The website is served over HTTPS with good SSL configuration, ensuring secure data transmission. From a security perspective, the site shows good practices such as secure forms and no visible sensitive data exposure. However, the lack of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts trustworthiness. No WAF or blocking mechanisms were detected, and the content is fully accessible and safe for general audiences. Overall, Barge Master presents a credible and professional business website with solid technical foundations but would benefit from enhanced privacy compliance and security policies to strengthen trust and regulatory adherence.