Energy security reports

C

Columbus Energy S.A.

columbusenergy.pl

53

Columbus Energy S.A. is a well-established Polish company specializing in renewable energy solutions for residential and business customers. Their offerings include photovoltaic installations, energy storage systems, heat pumps, intelligent energy management (Columbus Intelligence), and related services such as thermal modernization and electric vehicle charging stations. The company positions itself as a leading provider in Poland with a strong focus on eco-friendly and cost-saving technologies. The website is professionally designed, multilingual, and provides comprehensive information tailored to various customer segments including homeowners, businesses, farmers, and public institutions. Technically, the website is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight, TikTok Pixel, Microsoft Clarity, and SalesManago. It employs a cookie consent mechanism compliant with GDPR and provides detailed privacy policies. The site is mobile-optimized, SEO-friendly, and performs moderately well. From a security perspective, the site uses HTTPS and implements best practices such as asynchronous loading of scripts and cookie consent. However, DNSSEC is not enabled, and there is no visible security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain registered since 2014, supporting the company's legitimacy. Overall, Columbus Energy's website demonstrates a mature digital presence with strong business credibility and good security posture. Recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to further enhance trust and security.

C

Columbus

columbusenergy.cz

58

Columbus Energy a.s. is a Czech-based company specializing in the installation and supply of photovoltaic systems, heat pumps, and electric vehicle charging solutions primarily targeting households, businesses, and institutions. The company positions itself as a reliable general contractor offering turnkey renewable energy solutions with strong support for subsidy and financing programs. Their market presence is supported by a stable parent group, Columbus Group, and they maintain a significant footprint in the European renewable energy sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Microsoft Clarity, and Facebook Pixel, ensuring good performance and user experience across devices. Security posture is solid with HTTPS, cookie consent mechanisms, and secure form handling, although explicit security policies and incident response contacts are not published. Overall, the website reflects a professional, trustworthy business with comprehensive content and good privacy compliance.

B

BK Instal

bk-instal.cz

38

BK Instal is a small Czech Republic-based company specializing in photovoltaic power plant projects, installations, servicing, and energy savings solutions. The website presents a professional and modern approach to energy solutions, targeting owners and operators of photovoltaic systems and energy-conscious consumers. The company positions itself as a regional energy service provider with a focus on sustainable energy savings. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and professional but would benefit from improved privacy compliance and verified domain registration information.

I

Infigy

infigy.cz

52

Infigy is a Czech-based company specializing in smart energy management solutions that integrate photovoltaic systems, batteries, heat pumps, boilers, and electric vehicle chargers. Their platform optimizes energy consumption and production to maximize self-consumption and cost savings, targeting residential and commercial customers as well as energy communities. The company is relatively young, founded in 2022, but presents a professional and mature digital presence with strong local partnerships and certifications. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and well-positioned in the Czech energy market.

P

Pejšův mlýn spol. s r.o.

pejsuvmlyn.cz

43

Pejšův mlýn spol. s r.o. is a Czech milling company with a rich historical background dating back to the 16th century. The company operates multiple mills including Pejšův mlýn Sedlčany, Mlýn Křesín, and Mlýn Mirotice, producing high-quality flour using traditional methods. The website presents the business as a regional leader in milling with a focus on quality and certification. Technically, the website is built on Angular 14, uses Google Fonts and Google Tag Manager, and is moderately optimized for mobile devices. However, it lacks explicit privacy and cookie policies, and no security headers were detected, indicating room for improvement in security and compliance. The domain registration data is consistent with the business claims, showing a long-standing presence since 2001. Overall, the website is professional and trustworthy but should enhance its privacy compliance and security posture.

P

Paliva Větrovský

palivavetrovsky.cz

33

Paliva Větrovský is a small regional business based in the Czech Republic specializing in the sale and delivery of various types of coal and briquettes, primarily serving the Příbram region. The company emphasizes quality fuel products with guaranteed origin and offers both personal pickup and delivery services. The website is built on WordPress using common plugins and frameworks such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS and missing security headers, although some basic protections like copy protection scripts are implemented. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy for its business scope but requires significant improvements in security and privacy to meet modern standards.

5

5M square s.r.o.

novesvetlo.cz

43

5M square s.r.o. operates the website novesvetlo.cz, specializing in the sale of healthy and biodynamic lighting products including full-spectrum LED strips, blue light blocking glasses, and lighting solutions designed to support healthy sleep. The company targets customers seeking lighting solutions with positive health impacts, positioning itself as a niche e-commerce provider in the Czech Republic's energy-related retail sector. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site uses established JavaScript libraries such as jQuery and Flexslider, hosted likely with WEDOS, and implements cookie consent mechanisms, though lacks advanced security headers and explicit incident response information. Security posture is moderate with no critical vulnerabilities detected but could be improved with enhanced HTTP security headers and documented security policies. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness. Strategic recommendations include improving security headers, publishing security policies, and enhancing analytics and marketing transparency.

K Faktor is a certified testing laboratory specializing in measuring physical risk factors in both occupational and non-occupational environments within the Czech Republic. The company offers a range of accredited services including lighting intensity measurement, noise and vibration analysis, dust measurement, microclimate condition assessments, and energy audits. Their market position is supported by official accreditation and a clear focus on safety and compliance with government regulations. The website reflects a small but professional business targeting clients who require certified environmental and workplace safety measurements. Technically, the website is built using modern web technologies such as Bootstrap 5.1.3, ensuring responsive design and good user experience across devices. Hosting is managed via websupport.cz, a known Czech hosting provider. The site is moderately performant with good SEO practices but lacks advanced accessibility features. No CMS or analytics tools are detected, indicating a simple but effective technical infrastructure. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable scripts. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user confidence.

A

Association de l'aluminium du Canada

veritesurlalu.quebec

47

The website 'La vérité sur l'alu' is operated by the Association de l'aluminium du Canada, an industry association representing Canadian primary aluminium producers. The site focuses on promoting sustainable aluminium production in Quebec and Canada, highlighting the industry's low carbon footprint and economic contributions. It serves as an educational platform with interactive content such as quizzes to dispel myths about the aluminium industry. Technically, the website is built on WordPress using the Salient theme and WPBakery page builder, incorporating modern JavaScript libraries and SEO tools like Yoast. The site is hosted likely via GoDaddy, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

A

Association de l'aluminium du Canada

aluminium.ca

57

The Association de l'aluminium du Canada (AAC) is a well-established industry association representing the Canadian primary aluminium sector, with a history spanning over 100 years. The organization focuses on promoting sustainable prosperity within the aluminium industry, advocating for decarbonization efforts in North America, and supporting member alumineries. The website is professionally designed, bilingual (French primary with English option), and targets industry stakeholders, government entities, and the general public interested in aluminium and sustainability topics. AAC's market position is strong as a key national industry association with a medium-sized organizational footprint.

E

Eiffage Sénégal

eiffage.sn

54

Eiffage Sénégal is a subsidiary of the multinational Eiffage Group, operating primarily in the construction, civil engineering, and energy sectors within Senegal. The company positions itself as a key player in infrastructure development, offering services such as road construction, building, and energy systems. The website reflects a professional corporate presence with clear branding and comprehensive information about its business activities and social commitments. Technically, the site is built on the Jahia CMS platform, uses modern web technologies including Typekit fonts and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. The absence of explicit contact details and security policies on the homepage suggests areas for enhancement in transparency and user engagement. Overall, the website demonstrates a mature digital presence aligned with the company's market position in Senegal.

E

Eiffage

eiffage-aevia.com

56

Eiffage Ævia is a specialized subsidiary of the Eiffage Group focused on the conservation, maintenance, and improvement of civil engineering infrastructure and heritage. The company offers both services and products tailored to the construction and repair of civil engineering works, leveraging specialized equipment and in-house developed systems. The website reflects a professional B2B orientation targeting infrastructure professionals and stakeholders in the energy, transportation, and real estate sectors. Technically, the site uses modern JavaScript libraries, integrates Google reCAPTCHA for form security, and employs OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and visible security alerts, though some security headers are missing and no explicit incident response contacts are published. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the strong branding and affiliation with the reputable Eiffage Group mitigate these concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

N

Norsk Hydro ASA

r-100.no

58

The website www.r-100.no represents a project by Norsk Hydro ASA focused on promoting Hydro CIRCAL R100, an innovative aluminium product made entirely from recycled post-consumer scrap. The site highlights collaborations with prominent designers and showcases exhibitions, targeting design professionals and sustainability advocates. The business model centers on corporate branding and sustainable innovation promotion within the energy and manufacturing sectors. Technically, the site is built using modern frameworks such as Next.js and Sanity CMS, with integration of privacy-focused analytics via Plausible. The site demonstrates good mobile optimization and a professional design, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

I

Iskra d.d.

iskra.eu

10

Iskra d.d. is a well-established industrial company specializing in intelligent industrial solutions and electrotechnical products. With over 80 years of history and a workforce of approximately 1650 employees, Iskra serves a broad international market across energy, transportation, manufacturing, and telecommunications sectors. Their product portfolio includes capacitors, low voltage switchgear, measuring instruments, power automation, batteries, antenna systems, and traffic solutions. The company maintains a strong market position supported by subsidiaries and partnerships across Europe, including Croatia and North Macedonia. Technically, the website is built on a modern CMS platform (BCMS) with integration of popular technologies such as Bootstrap, Google Analytics, and JivoSite chat. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some technical improvements are recommended, particularly in security headers and accessibility compliance. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and explicit security or incident response policies. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance, though a dedicated privacy policy page was not found. The domain WHOIS data is privacy protected, which is typical for European companies, and no suspicious patterns were detected. Overall, Iskra presents a credible and professional online presence with moderate technical maturity and room for security enhancements. Strategic recommendations include strengthening security headers, publishing comprehensive privacy and security policies, and enhancing accessibility features to align with best practices and regulatory requirements.

I

ISTRABENZ PLINI d.o.o.

istrabenzplini.hr

11

Istrabenz plini d.o.o. is a Croatian energy company specializing in the supply of technical gases, LPG in bottles and tanks, natural gas, and innovative energy solutions. As part of the international SIAD Group, it holds a strong market position in Croatia, serving households, industrial clients, and public institutions. The company emphasizes sustainability and modern energy technologies. The website reflects a mature digital presence built on WordPress with modern SEO and user experience practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Contact and business information is transparent and comprehensive, supporting trust and credibility.

Faktor Journalisten AG is a Swiss-based small enterprise specializing in communication, technical journalism, and graphic design with a focus on sustainability, architecture, construction, and energy sectors. The company also operates a subsidiary publishing house, Faktor Verlag, which produces educational materials for professionals in planning and construction. The website is professionally designed with clear navigation and relevant content targeting industry professionals. Technically, the site uses standard web technologies with good mobile optimization and SEO practices but lacks advanced frameworks or CMS indications. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie information present but no explicit consent mechanism. Overall, the site is trustworthy and well-positioned within its niche.

B

Bosch Energy and Building Solutions

go-to-bosch.com

56

Bosch Energy and Building Solutions is a large, well-established business entity operating in Germany, specializing in integrated building technologies including security systems, energy efficiency, building automation, and digital services. The website reflects a professional and comprehensive digital presence with strong Bosch branding, targeting commercial building operators, planners, and partners. The company offers a broad portfolio of services and maintains active engagement through events and webinars. Technically, the site uses modern web technologies, including Google Tag Manager and custom Bosch frameworks, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong brand presence and professional content. Overall, the site is trustworthy, well-maintained, and compliant with GDPR regulations.

M

Maschinenringe Deutschland GmbH

maschinenringe.de

65

Maschinenringe Deutschland GmbH operates as a cooperative organization serving the agricultural sector in Germany. It provides a range of services including energy supply specialized for agriculture (LandEnergie), digital farming solutions (MeinAcker), purchasing advantages, professional services, and educational programs through its academy. The company has a strong market presence with over 230 regional offices, targeting farmers and agricultural businesses. The website reflects a mature digital infrastructure built on modern technologies like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

pso vertriebsprogramme GmbH

pso-vertrieb.de

37

pso vertriebsprogramme GmbH is a German-based company specializing in digital referral marketing and incentivization solutions, boasting over 20 years of experience and more than one million recommendations. The company targets businesses seeking to enhance customer acquisition and retention through innovative digital sales programs, including referral programs, sales partner solutions, and omnichannel sales strategies. Their market position is that of an established medium-sized B2B service provider with a strong reputation and a consistent brand presence. Technically, the website is built on WordPress using Elementor and Gravity Forms, optimized with WP Rocket for performance, and integrates Usercentrics for GDPR-compliant consent management. The use of Matomo analytics indicates a preference for privacy-conscious tracking. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs anti-spam measures, and monitors CSP violations, indicating a good security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the company. Strategic recommendations include enhancing security transparency, publishing a vulnerability disclosure policy, and continuing to maintain GDPR compliance and technical modernization.

W

WEMAG

wemag.com

46

WEMAG is a regional German energy and internet service provider specializing in sustainable solutions such as certified green electricity, natural gas, photovoltaic systems, heat pumps, and fiber-optic internet. The company targets private customers, businesses, and municipalities with tailored energy and telecommunications products. The website is built on Drupal 10 and incorporates modern technologies including lazy loading images and consent management via Usercentrics. Security posture is solid with HTTPS and consent mechanisms, though explicit privacy and security policies are not clearly presented. WHOIS data is unavailable, which slightly impacts trust but the professional presentation and clear service offerings support legitimacy. Overall, WEMAG demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

E

enercity AG

enercity.com

65

enercity AG is a major municipal energy provider in Germany, serving approximately one million customers with electricity, heat, and drinking water. The company also offers services related to electromobility, decentralized energy generation, energy efficiency, telecommunications, and smart infrastructure, emphasizing sustainability and climate neutrality. The website reflects a mature digital presence with comprehensive content, clear navigation, and a strong focus on corporate responsibility and investor relations. Technically, the site employs modern web technologies, including JavaScript and cookie consent management via consentmanager.net, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is missing or inaccessible, which is unusual but does not detract significantly from the site's legitimacy given the rich content and social media presence. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

enercity Erneuerbare GmbH

enercity-erneuerbare.de

74

enercity Erneuerbare GmbH is a German renewable energy company specializing in the development and operation of wind energy parks, photovoltaic installations, and energy storage solutions. The company targets municipalities, landowners, and investors interested in sustainable energy projects, positioning itself as a reliable partner in advancing Germany's energy transition. Their website reflects a professional and modern digital presence, leveraging Next.js and React technologies, with good mobile optimization and accessibility features. The site includes GDPR-compliant cookie consent mechanisms and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response information are not published. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, supporting the company's credibility in the energy sector.

E

ELITE Electro-Partner

electro-partner.ch

51

ELITE Electro-Partner operates a large network of electrical professionals serving Switzerland and Liechtenstein, positioning itself as a key player in the energy services sector. The website presents a professional image with clear branding and a focus on electrical services, targeting both consumers and businesses in the region. The business model centers on a broad partnership network providing electrical installation, maintenance, and repair services. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance documentation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and incident response information. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced transparency and security best practices.

S

Schweizerische Elektro-Einkaufsvereinigung eev Genossenschaft

eev.ch

53

The Schweizerische Elektro-Einkaufsvereinigung eev Genossenschaft operates as a leading marketing and service cooperative for the Swiss electrical trade sector. Their website targets electrical industry professionals and members, offering a range of services including marketing, event organization, contract partner management, and member support. The organization positions itself as a key player in the Swiss energy sector, providing exclusive models, advertising, and service solutions to its members. The website is professionally designed, multilingual, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Hotjar for user behavior analysis, and Cookiebot for GDPR-compliant cookie consent management. The site uses HTTPS with a service worker for progressive web app capabilities and lazy loading for images, indicating a moderate to good level of digital maturity. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's claims, showing a legitimate Swiss cooperative with transparent registration details. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

I

Interargem GmbH

interargem.de

50

Interargem GmbH operates as a regional energy company specializing in environmentally responsible waste-to-energy solutions through its modern waste incineration plants in Bielefeld and Hameln, Germany. The company focuses on converting regional waste into electricity and district heating, contributing significantly to environmental and climate protection efforts. Their market position is that of a trusted regional leader providing essential waste management and energy services to local businesses, households, and public institutions. Technically, the website is built on a WordPress CMS platform enhanced with Yoast SEO for search optimization and Consentmanager for GDPR-compliant cookie management. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were found, indicating a generally sound security posture, though improvements are recommended to enhance protection and transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the company's digital presence and security posture.

E

eEnergy

eenergy.com

61

eEnergy is a UK-based digital energy services provider specializing in energy efficiency, decarbonisation, and sustainability solutions for sectors including education, healthcare, public, and commercial industries. The company offers a range of services such as LED lighting upgrades, solar PV generation, EV charging infrastructure, energy analytics, and compliant financing options with no upfront costs. Their market position is supported by over 1,200 successful projects and significant investment in energy efficiency initiatives. Technically, the website is built on WordPress with modern SEO and analytics tools, optimized for performance and accessibility. Security posture is strong with HTTPS, security headers, and bot management, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. However, the WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

4

Sanierung mit Zukunft | Bis zu 80 % Energiekosten sparen und Förderungen sichern

42watt.de

39

42watt.de is a German energy consulting and service company specializing in sustainable renovation solutions that help customers save up to 80% on energy costs. The website positions the company as an independent advisor offering comprehensive services including planning, implementation, and subsidy management. The target audience primarily consists of homeowners and property owners interested in energy efficiency and sustainability. The company leverages a modern digital infrastructure built on Webflow, integrating multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, PostHog, and Sentry for monitoring and user insights. The website is well-designed, mobile-optimized, and provides a professional user experience, although explicit privacy and terms of service policies are not found in the provided content. Security posture is good with HTTPS and monitoring tools but lacks explicit security headers and published security policies. Overall, the site is safe, trustworthy, and compliant with basic cookie consent mechanisms but would benefit from enhanced privacy compliance and security transparency.

E

eEnergy

elight.com

61

eEnergy is a UK-based digital energy efficiency solutions provider focused on helping organizations eliminate energy waste and achieve Net Zero profitably. Their services include LED lighting upgrades, solar PV generation, EV charging infrastructure, energy analytics, and compliant financing options with no upfront costs. The company targets sectors such as education, healthcare, public sector, and commercial industries, positioning itself as a leading energy services provider with over 1,000 customers and numerous successful projects. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Tag Manager, Hotjar, and CookieYes for cookie consent management. Hosting is on AWS with Cloudflare Bot Management enhancing security. The site is fast, mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, multiple security headers, secure session management, and bot protection. However, the site lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. The business demonstrates credibility through certifications, customer testimonials, and media presence. Strategic recommendations include publishing formal security and incident response policies, adding vulnerability disclosure information, and providing direct contact details for data protection officers or security teams.

B

Buderus

buderus.lu

73

Buderus is a well-established company specializing in heating, solar, and ventilation system solutions, targeting both consumers and businesses primarily in Luxembourg and neighboring regions. The website presents a professional and modern interface, leveraging CoreMedia CMS and integrating Google Tag Manager for analytics and marketing purposes. While the site is well-structured and optimized for mobile devices, some technical improvements such as enhanced security headers and accessibility features could be implemented to strengthen its digital maturity. Security posture is generally good with HTTPS enabled, but the absence of WHOIS data limits the ability to fully verify domain legitimacy and registrant details. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a commitment to user data protection. Overall, the website is trustworthy and serves as a credible digital presence for Buderus, though domain registration transparency should be improved.

D

DIHK Unternehmensnetzwerk Klimaschutz

klima-plattform.de

50

The website www.klima-plattform.de serves as a German national platform under the DIHK umbrella, aimed at fostering a network for companies and multipliers engaged in climate protection. It provides a centralized resource for improving climate protection knowledge and facilitating collaboration across Germany. The platform is powered by TYPO3 CMS, indicating a stable and mature technical foundation. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. No advanced analytics or tracking scripts were detected, suggesting a minimal data collection approach. The domain registration details are limited but appear consistent with the business purpose. Overall, the site presents a professional and focused business presence but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

R

ROWE Mineralölwerk GmbH

rowe-oil.com

60

ROWE Mineralölwerk GmbH is a well-established German company specializing in the production and distribution of high-quality motor oils, gear oils, transmission oils, and lubricants for automotive and industrial applications. Founded in 1995, the company has built a strong international presence with a comprehensive product portfolio and a network of distributors. The website reflects a mature digital infrastructure with multi-language support, professional design, and clear navigation tailored to both industrial and private customers. Technically, the site employs modern technologies including Pimcore CMS, Matomo analytics, and Usercentrics for privacy compliance, ensuring a good user experience and adherence to GDPR standards. Security posture is robust with HTTPS enforcement and security headers, though some security policy documentation and incident response contacts are absent. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts the trustworthiness score. Overall, the website is professional, secure, and compliant, serving as a credible digital front for ROWE Mineralölwerk GmbH.

H

House of Energy

der-beste-arbeitgeber.de

55

Der beste Arbeitgeber is a German medium-sized company operating under the brand House of Energy, specializing in building services engineering sectors such as sanitary, heating, ventilation, and electrical technology. The company employs approximately 200 staff across five locations and manages over 1,000 construction projects annually with a turnover of around 16 million euros. The website serves as a recruitment and informational platform, targeting professionals seeking employment in technical and administrative roles within the construction and energy sectors. Technically, the website is built on WordPress with modern plugins including Revolution Slider, OneSignal for push notifications, and GDPR-compliant cookie consent mechanisms. The site is hosted on webgo.de, uses HTTPS with good SSL configuration, and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website presents a professional and trustworthy digital presence aligned with its business objectives.

H

HOFER GRÜNSTROM

xn--hofer-grnstrom-nsb.at

70

HOFER GRÜNSTROM is an Austrian green electricity provider focused on offering 100% Austrian eco-friendly power with an emphasis on sustainability, transparency, and customer savings. The website positions the company as a medium-sized energy retailer targeting environmentally conscious consumers in Austria. The digital infrastructure employs a modern technology stack including jQuery, React, Adobe DTM, and Piwik PRO analytics, hosted on a secure HTTPS platform with good mobile optimization and accessibility features. The integration of an advanced accessibility tool demonstrates a commitment to inclusive user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and contact information for incident response is noted. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

V

VERBUND

verbund.com

75

VERBUND is Austria's leading energy company and a major producer of electricity from renewable sources in Europe. The company focuses on sustainable energy generation using water, wind, and solar power, positioning itself as a key player in the clean energy transition. The website reflects a mature digital presence with comprehensive corporate information, investor relations, and sustainability initiatives. The technical infrastructure includes a custom CMS, modern JavaScript frameworks, and integration with Google Tag Manager and a consent management platform, indicating a commitment to privacy and analytics best practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a broad audience including customers, investors, and partners.

S

Schweizerische Elektro-Einkaufs-Vereinigung (eev Genossenschaft)

e-tec.swiss

50

The website www.e-tec.swiss is a professionally designed online magazine focused on electrical and communication technology topics, primarily serving the Swiss market. It provides comprehensive content on intelligent living, building automation, security systems, solar energy, and related electrical engineering subjects. The site is affiliated with the Schweizerische Elektro-Einkaufs-Vereinigung (eev Genossenschaft), which adds credibility and industry relevance. The content is well-structured, regularly updated, and targets both professionals and consumers interested in these technologies. Technically, the website uses a modern but somewhat dated JavaScript library (jQuery 1.11.3) alongside Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile optimized with good SEO practices and uses HTTPS securely. However, no advanced security headers were detected, and no CMS or hosting provider information was found. The site performance is moderate, with good mobile responsiveness and accessibility at a basic level. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies or incident response contacts. No vulnerabilities or suspicious external links were found. WHOIS data is privacy protected, which is common for Swiss domains, and the domain appears legitimate and consistent with the website's professional nature. Overall, the website presents a low risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and updating JavaScript libraries to maintain security posture.

Fischer Power Solutions Germany operates as a specialized provider of power and energy storage solutions, targeting industrial and commercial clients primarily in Germany. The company offers battery systems and energy management technologies, positioning itself as a niche player in the energy sector. The website reflects a professional digital presence with a focus on clear communication of services and compliance with privacy regulations. Technically, the site uses modern web technologies including Cookiebot for consent management and web fonts for branding consistency. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and compliance indicators suggest a legitimate business. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration to strengthen trust.

weg//weiser GmbH is a specialized technology company focused on providing advanced testing and analysis solutions for electric machines, particularly electric motors and power inverters. Founded in 2019 and based in Karlsruhe, Germany, the company targets developers, test engineers, application engineers, and software developers in the energy and transportation sectors. Their offerings include universal power inverter hardware and software solutions designed to optimize electric machine performance and efficiency. The company maintains a professional online presence with clear contact information and compliance with GDPR and cookie regulations. Technically, the website is built on WordPress with Elementor and enhanced by SEO and cookie consent plugins, hosted by One.com. The site demonstrates good performance, mobile optimization, and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response details. No vulnerabilities or suspicious content were detected. Overall, the domain registration is consistent with the business profile, showing legitimacy and appropriate domain age. The website content is safe, professional, and targeted at a general audience interested in electric machine testing technologies. Strategic recommendations include enhancing security headers, adding a security policy, and improving accessibility features to further strengthen trust and compliance.

S

SEFE Energy UK

sefe-energy.co.uk

60

SEFE Energy UK is a reputable business energy supplier operating primarily in the UK market, offering a broad range of gas, electricity, and renewable energy products tailored to business customers. The company is part of the larger SEFE Group, which has a strong European presence and a focus on decarbonisation and sustainable energy solutions. Their website reflects a professional and modern digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern web technologies including Umbraco CMS, Vue.js components, and integrates multiple analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is unavailable due to a registry error indicating the domain name is invalid, which is a concern for domain legitimacy but the website content and business information are credible and consistent with a legitimate energy supplier. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with minor penalties for WHOIS inconsistencies and missing security policy disclosures.

E

Elektro Lichtin AG

elektrolichtin.ch

48

Elektro Lichtin AG is a small regional electrical services company based in Möhlin, Switzerland, specializing in electrical installations, lighting, safety systems, network infrastructure, and household appliances. The website is primarily in German and targets local customers seeking professional electrical services. The business model focuses on service provision with a clear physical presence and contact information. The company maintains a moderate market position as a trusted local provider. Technically, the website uses standard HTML5 and CSS with JavaScript enhancements, including Google Analytics with IP anonymization and a cookie consent banner, indicating basic digital maturity and privacy awareness. The site is moderately optimized for mobile and accessibility but lacks advanced frameworks or CMS indications. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS (assumed from external Google Analytics scripts loaded over HTTPS), but no explicit security headers were detected in the provided data. The presence of cookie consent and anonymized analytics is positive, but the absence of published security policies or incident response information suggests room for improvement. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and safe for general audiences. The risk level is low, but strategic improvements in security headers, incident response transparency, and privacy policy detail would enhance compliance and trust.

A

Axiom Building Services Ltd.

axiombs.co.uk

51

Axiom Building Services Ltd is a well-established UK-based company specializing in mechanical and electrical design, installation, and maintenance services primarily targeting the commercial and industrial sectors across the South West and Midlands regions. Founded in 2006, the company has a strong market presence supported by multiple industry certifications and a professional digital footprint. Their website reflects a mature business with clear branding, comprehensive service descriptions, and active social media engagement. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and content management capabilities. The site is mobile-optimized and includes performance-enhancing features like lazy loading images and asynchronous script loading. Google Tag Manager is used for analytics, indicating a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were found, suggesting a solid but improvable security posture. Overall, the website and business demonstrate a high level of professionalism and trustworthiness with minor recommendations for enhancing security headers and publishing formal security policies to further strengthen compliance and risk management.

S

SEFE

sefe.eu

68

SEFE is a European energy company focused on securing reliable energy supply through trading, sales, infrastructure, and services across gas, power, and hydrogen sectors. The company positions itself as a key player in enhancing energy security and accelerating the transition to a low-carbon future in Europe. Their website reflects a professional and comprehensive digital presence with detailed sections on company strategy, sustainability, portfolio, and career opportunities. Technically, the website employs modern web technologies including ES6 JavaScript modules, jQuery, and integrates a GDPR-compliant cookie management platform (Usercentrics). Google Tag Manager is used for analytics and tracking, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and shows evidence of good security practices, although explicit security headers are not fully visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were found. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations.

S

SEFE Energy

sefe-energy.fr

51

SEFE Energy is a professional natural gas supplier targeting businesses and professionals in France. It offers tailored energy contracts, energy transition services including carbon compensation and audits, and emphasizes customer service quality. The company is part of the larger SEFE Group, an international energy enterprise owned by the German federal government, with sister sites in the UK, Netherlands, and Germany. The website is well-structured, professionally designed, and provides comprehensive information about its offerings and corporate values. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools such as Matomo, Google Tag Manager, and Hotjar, alongside a cookie consent mechanism via Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, with no detected blocking or WAF interference. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The WHOIS data is not publicly available due to AFNIC privacy policies, but the domain is active and updated recently, consistent with a legitimate business. Contact information is clear, including a company email and physical address. Privacy and cookie policies are present and GDPR compliant. No adult or questionable content is found, making the site safe for general audiences. Overall, SEFE Energy demonstrates a mature digital presence with strong business credibility and a solid security baseline, though it could enhance transparency around security policies and incident response.

S

SEFE Energy NL

sefe-energy.nl

66

SEFE Energy NL is a specialized energy supplier focused on providing business customers in the Netherlands with gas and electricity solutions, including green energy options. The company positions itself as a customer-centric and sustainability-conscious partner with over 12 years of experience. Their digital presence is modern and professional, leveraging Umbraco CMS, Vue.js, and multiple analytics and marketing tools to deliver a responsive and user-friendly website. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, SEFE Energy NL demonstrates a mature digital infrastructure and a trustworthy market position in the energy sector.

H

Hydrogen Germany

hydrogen-germany.de

58

Hydrogen Germany is a leading German economic alliance focused on promoting clean energy through hydrogen technologies. The organization serves as a platform uniting companies and associations across the hydrogen value chain to accelerate Germany's transformation into a hydrogen economy. The website presents comprehensive information about hydrogen production, transport, and application, targeting industry stakeholders and policymakers. Technically, the site is built on WordPress, uses modern JavaScript libraries, and is hosted with Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible source for hydrogen industry information in Germany.

B

Buderus

buderus.de

72

Buderus, a brand under the Bosch group, specializes in providing efficient and future-proof heating, solar, and ventilation technologies. The website presents a professional and consistent brand image targeting homeowners, installers, and businesses interested in environmentally friendly heating solutions. The technical infrastructure leverages CoreMedia CMS, Google Tag Manager, and Genesys CX widgets, indicating a mature digital presence with integrated customer support and analytics. Security posture is solid with HTTPS and secure chat implementations, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive GDPR-aligned privacy and cookie policies. Overall, the site reflects a reputable enterprise with strong business credibility and moderate technical sophistication.

House of Energy is a medium-sized German company specializing in integrated building services engineering, including sanitary, heating, ventilation, and electrical systems. With approximately 200 employees and multiple locations, it holds a solid market position in the construction sector, focusing on quality and customer satisfaction. The website is built on WordPress with modern plugins and demonstrates good technical maturity, including GDPR compliance and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

D

Die Sanierungsoffensive

sanierungs-offensive.de

48

Die Sanierungsoffensive is a German-based energy sector company specializing in providing comprehensive home renovation services focused on energy efficiency and sustainability. The company offers a digital Sanierungsrechner (renovation calculator) to help customers plan and estimate costs for modernizing heating, ventilation, sanitation, electrical installations, photovoltaics, and e-mobility solutions. Backed by the House of Energy GmbH, a medium-sized enterprise with multiple locations and a strong market presence, the website reflects a professional and well-structured digital platform supporting customer engagement and project management. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is partial due to missing explicit privacy policy and terms of service pages. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

Haluxvill Kft. operates a professional e-commerce platform specializing in electrical supplies, serving both retail and wholesale customers primarily in Hungary. The website offers a broad catalog of electrical products, indicating a medium-sized business with a solid regional presence in the energy sector. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, Google Analytics, and Hotjar, reflecting a moderate level of digital maturity with room for modernization and enhanced performance optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation, which are important for compliance and trust. Overall, the site is accessible, well-structured, and professionally branded, though improvements in privacy compliance and security best practices are recommended to strengthen the business's digital trustworthiness and regulatory adherence.

Grundfos Holding A/S is a global leader in water pump manufacturing and water technology solutions, serving industrial, commercial, and residential markets worldwide. The company emphasizes sustainability and innovation in water management. The website reflects a mature digital presence with extensive use of Adobe Experience Manager, Microsoft Azure hosting, and multiple integrated marketing and analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit vulnerability disclosure or incident response contacts were found. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.