Energy security reports

S

swisscleantech

swisscleantech.ch

50

swisscleantech is a Swiss-based economic association focused on promoting a climate-neutral economy by 2050. With around 700 members, including major corporations, it acts as a policy influencer and knowledge hub for sustainable business practices. The website is professionally designed, multilingual, and provides comprehensive information about its services, events, and partnerships. Technically, it is built on WordPress with modern libraries and integrates Google Analytics and Algolia for search and tracking. Security posture is good with HTTPS and some security headers, but lacks explicit cookie consent and security policies. Overall, the site is trustworthy and well-positioned in its niche.

E

Evodrop AG

evodrop.com

56

Evodrop AG is a Swiss-based company specializing in advanced water treatment systems, leveraging patented technologies and sustainable methods such as malic acid-based descaling without salt. Positioned as a market leader in Switzerland, the company targets residential, commercial, and industrial customers, emphasizing health, sustainability, and innovation. The website reflects a mature digital presence with multilingual support, strong SEO, and comprehensive content showcasing certifications, awards, and customer testimonials. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast load times and mobile responsiveness. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though formal security policies and incident response information are not publicly disclosed. Overall, the website and domain registration data indicate a legitimate, trustworthy business with a professional online presence.

C

carbon-connect AG

carbon-connect.ch

67

carbon-connect AG is a Swiss-based company specializing in ESG and sustainability consulting, focusing on CO2 footprint calculation, emissions reduction strategies, and climate protection projects. Established in 2013, it serves primarily SMEs, non-profits, and public sector clients in the DACH region. The company offers a comprehensive suite of services including corporate and product carbon footprinting, sustainability reporting, and verified climate compensation projects. Their market position is strengthened by ISO 9001 certification and a broad partner network. Technically, the website is built on Webflow CMS with integrations to HubSpot for forms and analytics, and Google Tag Manager for marketing and tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, employing modern web technologies and consent management mechanisms to comply with GDPR. From a security perspective, the site enforces HTTPS and integrates cookie consent with Google Consent Mode and HubSpot. While no critical vulnerabilities or exposed sensitive data were found, the absence of explicit security headers and a published security policy or incident response contact are areas for improvement. No vulnerability disclosure or security.txt file is present. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The business is legitimate, transparent, and well-positioned in its niche. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

W

Web-Plan GmbH

web-plan.com

53

Web-Plan GmbH operates a specialized online platform serving the construction and building industry in Switzerland. The website functions as a search engine and network hub connecting architects, engineers, contractors, and suppliers with project owners and other stakeholders. The platform offers project listings, company directories, product showcases, and information on emerging sectors such as e-mobility. The company has a solid market position within its niche, supported by a domain registered since 2002 and a consistent brand presence. Technically, the website is built on WordPress with WooCommerce integration, leveraging common web technologies such as jQuery and Google services for fonts, maps, and analytics. The site demonstrates good mobile optimization and SEO practices, though some technical debt is noted in the use of an older jQuery version. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site employs HTTPS and domain transfer protections, but lacks advanced security headers like Content-Security-Policy and does not publish incident response or vulnerability disclosure information. No critical vulnerabilities or malicious indicators were found, but updating libraries and enhancing security policies would strengthen the posture. Overall, Web-Plan GmbH presents a trustworthy and professional digital presence with a clear business focus. Strategic improvements in security and privacy compliance would enhance user trust and regulatory alignment.

D

DTEK

dtek.com

68

DTEK is a leading private investor and operator in Ukraine's energy sector, positioning itself as a pan-European energy group focused on sustainable and resilient energy solutions. The company targets energy sector stakeholders, investors, and the European energy market, emphasizing its role as the largest private investor in Ukraine's energy industry. The website reflects a professional corporate presence with clear branding and consistent messaging aligned with its business objectives. Technically, the website employs modern digital tools including Google Tag Manager, Cookiebot for consent management, and Facebook SDK for social media integration. The site is HTTPS secured, mobile optimized, and demonstrates good SEO practices, although some accessibility features could be enhanced. The domain is well-established since 2000, with consistent WHOIS data and no privacy protection, indicating transparency. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain, but lacks DNSSEC and explicit security headers. Cookie consent is managed effectively via Cookiebot, supporting GDPR compliance. However, no public security policy, incident response contacts, or vulnerability disclosure mechanisms were found, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy norms, but could benefit from enhanced security policies and transparency to further strengthen its security posture and user trust.

S

Schweizer Fachmedien GmbH

energierundschau.ch

59

energieRUNDSCHAU is a specialized Swiss energy industry magazine published by Schweizer Fachmedien GmbH. The website provides current news, feature articles, and e-magazines focused on the energy sector, targeting professionals and stakeholders within Switzerland. The business operates as a niche media publication with a consistent brand presence and a clear focus on energy-related content. Technically, the website is built on WordPress CMS using common plugins such as Visual Composer and integrates Google Analytics and reCAPTCHA for analytics and security. The site enforces HTTPS and uses modern web technologies, providing a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and form protections, though it lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is evident with a comprehensive privacy policy, but cookie consent mechanisms are missing. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned within its market niche.

I

IWB

iwb.ch

58

IWB is a large regional utility company based in Switzerland, primarily serving the Basel region with energy, water, telecommunications, and mobility services. The company positions itself as a leading provider of climate-friendly energy solutions in Switzerland. The website reflects a professional and consistent brand image, with good content quality and user experience tailored to its target audience of residents and businesses in the region. Technically, the site uses modern technologies including Magnolia CMS, Salesforce Community for customer engagement, and OneTrust for cookie consent management. The presence of Google Tag Manager and Facebook Pixel indicates moderate user tracking and analytics capabilities. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security and incident response policies are not published on the site. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy and terms of service. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

H

H2-Hub Schweiz

h2-hub.swiss

60

H2-Hub Schweiz is a regional energy ecosystem hub focused on green hydrogen energy in the Basel region and Switzerland. The website serves as an informational platform supporting the Swiss Energy Strategy 2050 by promoting sustainable hydrogen solutions. The business positions itself as a key regional player in the energy transition towards CO2-neutral energy carriers. Technically, the website is built on the Wix platform using modern web technologies and demonstrates good mobile optimization and SEO basics. However, it lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS implied and some JavaScript security hardening, but missing security headers and incident response information. Overall, the domain WHOIS is privacy protected, which is common for small businesses but reduces transparency. The website is professional and trustworthy with clear business contact information and consistent branding.

E.ON Drive Germany GmbH is a leading enterprise in the energy and transportation sectors, specializing in electric mobility solutions for businesses. The company leverages the extensive infrastructure and expertise of its parent company, E.ON SE, to provide comprehensive charging solutions, smart logistics, and green energy tariffs. Their market position is strong in Europe, supported by a professional and well-structured website that targets commercial customers seeking sustainable mobility options. Technically, the website is built on Adobe Experience Manager, uses modern JavaScript modules, and integrates advanced consent management tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs reputable third-party services, and manages user privacy effectively, though some security headers could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, with no signs of blocking or malicious activity.

E.ON is a leading European energy company specializing in energy distribution networks, infrastructure solutions, and retail services. The company targets a broad audience including private customers, business clients, investors, and job seekers. Their market position is that of a large enterprise with a strong focus on sustainability and innovation. The website reflects a mature digital presence with modern technologies such as custom web components, Adobe Experience Manager CMS, and integrated consent management. Security posture is strong with HTTPS, security headers, and compliance frameworks like ISO 27001 evident. However, the absence of WHOIS data and a formal vulnerability disclosure policy slightly reduce trust. Overall, the site is professional, secure, and compliant, supporting E.ON's reputation as a trustworthy energy provider.

E.ON Hrvatska is a large energy company focused on providing sustainable energy solutions including electricity, gas, solar power, and electric vehicle charging for households and businesses in Croatia. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site uses modern web technologies such as Adobe Experience Manager, Usercentrics for consent management, and integrates multiple marketing and analytics tools while maintaining GDPR compliance. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy and well-positioned to support E.ON's business objectives in the Croatian energy market.

P

Proyecto SIMUSOL

simusol.org

47

SimuSol.org is a niche open-source project focused on providing software tools for simulating solar energy systems and thermal circuits. The project is community-driven and offers several related software packages under GPL licenses. The website serves as a hub for downloads, documentation, and community resources primarily targeting researchers and engineers interested in solar energy simulation. Technically, the site is built on the CMSimple_XH platform, hosted on DigitalOcean, and uses Perl-based backend tools with JavaScript and jQuery on the frontend. While the site is functional and contains relevant content, it lacks modern security practices such as DNSSEC, security headers, and privacy policies. The use of Google Analytics indicates moderate user tracking without clear privacy compliance. The domain registration is consistent with the project's timeline and shows no suspicious patterns, supporting the site's legitimacy. Overall, the website is safe, moderately professional, and serves its target audience adequately but would benefit from improved security and privacy compliance.

I

INA, d.d.

ina.hr

48

INA, d.d. is a leading Croatian integrated energy company specializing in oil and gas exploration, production, refining, marketing, and retail. The company maintains a strong market position in Croatia and the region, offering a broad range of petroleum products and customer services. The website reflects a mature digital presence with comprehensive corporate information, targeting customers, investors, and partners. Technically, the site is built on WordPress with modern SEO and analytics tools, providing good performance and mobile optimization. Security posture is strong with HTTPS enforcement, ISO 27001 certification, and cookie consent mechanisms, although public vulnerability disclosure and incident response contacts are not explicitly provided. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR.

S

Smart Water d.o.o.

smartwater.hr

44

Smart Water d.o.o. is a Croatian company specializing in products and services for water supply companies, construction firms, and design houses. The company represents renowned manufacturers of water supply equipment, positioning itself as a niche B2B provider in the energy sector focused on water management. The website is professionally designed using WordPress with the Divi theme and optimized for SEO with Yoast. It offers content primarily in Croatian with an English alternative, targeting regional business clients. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact information is not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website reflects a legitimate small business with room for improvement in security and privacy transparency.

P

Paul Scherrer Institute PSI

psi.ch

71

The Paul Scherrer Institute (PSI) is Switzerland's largest research center for natural and engineering sciences, focusing on Matter and Material, Energy and the Environment, and Human Health. It operates large-scale research facilities and provides proton therapy services, positioning itself as a leading institution in scientific research and healthcare. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting researchers, industry partners, patients, and the general public. Technically, the site is built on Drupal 10 with modern web technologies and integrates Matomo analytics with privacy-conscious configurations. Security posture is strong with HTTPS and privacy-respecting analytics, though explicit security policies and vulnerability disclosures are not evident. Overall, PSI demonstrates high business credibility and trustworthiness with transparent contact information and organizational details.

L

LF Energy

lfenergy.org

67

LF Energy is a community-driven organization focused on transforming the energy sector through shared digital investments and open source collaboration. The website positions itself as a leader in the energy transition, targeting utilities, vendors, and energy users globally. The business model centers on fostering collaboration and innovation in the energy industry. Technically, the website is built on WordPress with integrations of HubSpot, Google Analytics, and other marketing tools, reflecting a moderate level of digital maturity. The site is well-structured with good SEO practices and mobile optimization, though some accessibility features appear basic. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but could improve transparency and security practices.

O

OS-Climate

os-climate.org

62

OS-Climate is an open-source initiative under the Linux Foundation focused on developing data and analytics tools to support the transition to a net-zero economy, primarily targeting the energy and transportation sectors. The project leverages collaborative open-source development to provide climate-related data infrastructure and analytics, positioning itself as a key player in sustainability technology. The website reflects a professional and consistent brand aligned with its mission, though it lacks explicit privacy and cookie policies on the main page. Technically, the website is built on WordPress with standard web technologies including JavaScript, PHP, and integrates New Relic for performance monitoring. The site is hosted with a reputable registrar and DNS provider but lacks DNSSEC, which is a minor security gap. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and has domain transfer protections but does not publish explicit security policies or incident response contacts. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, OS-Climate presents a trustworthy and professional online presence with room for improvement in privacy compliance and DNS security. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, and adding security and incident response documentation to enhance trust and compliance.

A

agroVet GmbH

agrovet.at

60

agroVet GmbH operates as an independent control and certification body specializing in sustainability standards across agriculture, food processing, and renewable energy sectors. The company leverages a strong partnership with Austria Bio Garantie to offer centralized and combined audits for various quality standards, targeting businesses requiring certification in these domains. The website reflects a professional and service-oriented business model with clear communication of services and contact channels. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although explicit security policies and incident response information are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements, supporting agroVet's market position as a reputable certification partner.

A

Austria Bio Garantie GmbH

abg.at

62

Austria Bio Garantie GmbH is a market-leading certification and inspection body in Austria specializing in organic products and sustainability standards across agriculture, food processing, trade, cosmetics, aquaculture, and renewable energies. The company operates with subsidiaries including Austria Bio Garantie - Landwirtschaft GmbH and agroVet GmbH, offering comprehensive auditing and certification services supported by digital tools such as the EASY-CERT Cloud. The website reflects a professional and consistent brand image targeting agricultural businesses and companies seeking certification in Austria and neighboring regions. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and implements privacy and cookie consent mechanisms. Security posture is good with HTTPS, CSRF tokens, and email obfuscation, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

C

Climacrux GmbH

climacrux.com

59

Climacrux GmbH is a Swiss-based company specializing in carbon removal solutions aimed at improving quality of life and accelerating sustainability efforts. Their business model includes subscription services, API integration for CO₂ removal, and boutique carbon removal portfolios targeting individuals, family offices, and businesses. The company positions itself as a niche player in the energy and sustainability technology sector with a clear focus on environmental impact. Technically, the website is built on a modern Next.js framework, hosted via Cloudflare, and integrates third-party services such as Tally.so for forms and Plausible Analytics for privacy-focused tracking. The site demonstrates excellent mobile optimization, good SEO practices, and a professional design, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers, and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a privacy policy and terms of service present, but no cookie consent mechanism was found despite analytics usage. Overall, Climacrux presents a trustworthy and professional online presence with a strong business focus on sustainability. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their security posture and compliance standing.

E

EUREF-Event GmbH

euref-event.de

59

EUREF-Event GmbH operates sustainable and climate-neutral event locations primarily on the EUREF campuses in Berlin and Düsseldorf. The company targets event organizers and businesses focused on sustainability, offering innovative venues aligned with climate goals. The website is built on a modern WordPress infrastructure using Elementor and integrates privacy-compliant cookie consent and analytics via Matomo. Security posture is strong with HTTPS and privacy mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy digital presence with room for enhanced security documentation and direct contact information.

C

Cube Green Energy

cubegreenenergy.com

63

Cube Green Energy is a small business focused on providing energy solutions, likely in the green or renewable energy sector. The company’s website is built on the Wix platform, utilizing Wix’s Thunderbolt framework and standard web technologies including JavaScript and Google Analytics for tracking. The site content is basic and primarily serves informational purposes without extensive business or contact details. The technical infrastructure is typical for a Wix-hosted site, with moderate performance and mobile optimization. Security posture is average, with HTTPS implied but lacking explicit security headers and policies visible on the site. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the company to regulatory risks. Overall, the website presents a basic online presence with room for improvement in security, compliance, and business transparency.

E

EUREF AG

euref.de

65

EUREF AG operates the EUREF-Campus in Berlin-Schöneberg, a pioneering real-world laboratory focused on renewable energy, sustainable mobility, and smart urban development. The campus hosts over 150 companies, research institutions, and start-ups, employing around 7,000 people. It serves as a collaborative hub for innovation, research, and education in energy transition and sustainability, positioning itself uniquely in the European market. Technically, the website is built on WordPress with the Enfold theme and integrates modern SEO and analytics tools such as Yoast SEO and Matomo. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly detailed. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear cookie and privacy policies and GDPR adherence. The business credibility is high, supported by professional content, testimonials, and consistent branding. WHOIS data is minimal but does not raise concerns. Overall, the website and business present a trustworthy, professional, and well-maintained digital presence aligned with their sustainability mission.

<

< LA.IO >

la.io

47

LA.IO is a Louisiana-based innovation platform dedicated to fostering breakthrough ideas and connecting innovators with resources to transform concepts into impactful global solutions. The website positions LA.IO as a key player in promoting Louisiana's natural resources, industrial capabilities, and culture of ingenuity to establish the state as a global innovation leader. The platform is affiliated with Louisiana Economic Development, enhancing its credibility and regional influence. Technically, the website is built on WordPress using modern themes and plugins, hosted on Bluehost, and employs Google Analytics for user tracking. The site demonstrates good design quality, mobile optimization, and SEO practices but lacks some advanced security headers and cookie consent mechanisms. Security posture is solid with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and publishing security policies. Overall, the website is professional, trustworthy, and serves its business purpose effectively, though privacy compliance could be enhanced.

U

Umweltministerium Baden-Württemberg

klimalaend.de

60

KLIMA.LÄND is an official government platform by the Umweltministerium Baden-Württemberg focused on promoting climate-friendly initiatives and solutions within the region. The website serves as an information hub featuring videos, interviews, event calendars, and educational content aimed at engaging the general public and stakeholders in climate protection efforts. It positions itself as a trusted source for climate-related information in Baden-Württemberg. Technically, the website is built on the Liferay DXP content management system, leveraging React and Alloy UI frameworks. It employs Matomo analytics with cookies disabled to respect user privacy. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be improved. The infrastructure appears modern and well-maintained. From a security perspective, the site uses HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and formal security policies such as vulnerability disclosure or incident response contacts. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and serves its government communication purpose effectively. Strategic improvements in privacy compliance, security headers, and transparency around incident response would enhance its security posture and user trust.

O

Octavia Carbon

octaviacarbon.com

61

Octavia Carbon is a pioneering company specializing in Direct Air Capture (DAC) technology to remove carbon dioxide from the atmosphere, focusing on climate restoration in Kenya. It holds a unique market position as the Global South's first DAC company and operates the world's second DAC plus geological storage plant, leveraging Kenya's renewable energy and geology. The company targets climate-conscious stakeholders and aims to scale DAC technology affordably and effectively. Technically, the website is built on modern frameworks like React and Next.js, integrated with Prismic CMS, offering excellent performance and mobile optimization. Security posture is strong with HTTPS and security headers, though some improvements in privacy compliance and incident response transparency are recommended. The domain WHOIS data is unavailable, which slightly reduces trust from a registration perspective, but the company's strong media presence and partnerships support its legitimacy. Overall, the website is professional, secure, and well-positioned in the energy sector with a focus on climate justice and innovation.

S

SUNfarming GmbH

sunfarming.de

51

SUNfarming GmbH is a well-established renewable energy developer specializing in solar photovoltaic projects, with a strong focus on agri-photovoltaics and eco-solar solutions. As a member of the Cube Green Energy Group, SUNfarming has a significant market presence in Germany and Europe, having developed approximately 700 MW of solar projects. The company offers comprehensive services including project development, operation, maintenance, and asset management, targeting farmers, private customers, and commercial clients interested in sustainable energy solutions. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website is built on WordPress with modern plugins such as Slider Revolution and Borlabs Cookie for cookie management, ensuring GDPR compliance. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and incident response contacts. Privacy and cookie policies are comprehensive and consent mechanisms are implemented. Overall, SUNfarming demonstrates a mature digital presence with strong business credibility and trust indicators such as certifications and awards. The domain WHOIS data aligns with the business claims, supporting legitimacy. There are no signs of content blocking or WAF interference, allowing full content accessibility and analysis.

A

atmosfair

atmosfair.de

58

atmosfair is a reputable non-profit organization specializing in CO₂ compensation and climate protection projects, primarily targeting the global south and aviation sectors. The organization is recognized as a test winner in Germany for CO₂ compensation, emphasizing transparency, sustainability, and high-quality certified projects. Their services include CO₂ offsetting for flights and events, sustainable energy project funding, and climate consulting for businesses. The website reflects a mature digital presence built on WordPress with modern SEO and analytics tools, demonstrating good technical infrastructure and user experience. Security posture is solid with HTTPS and privacy-conscious analytics, though improvements in security headers and incident response disclosures are recommended. Overall, atmosfair presents a trustworthy and professional online presence aligned with its mission and audience.

V

Visa S.p.A. s.u.

nettuno-irrigazione.com

68

Nettuno Irrigazione, a division of Visa S.p.A. s.u., is a well-established Italian manufacturer specializing in irrigation motor pumps, hose reel irrigators, and water transfer pumps for agricultural, dewatering, and mining sectors. With over 40 years of experience, the company offers customizable, high-performance solutions emphasizing energy efficiency and reliability. The website reflects a mature digital presence with multilingual support and clear business communication. Technically, the site is built on Drupal 10, integrates Google Analytics and reCAPTCHA for security and tracking, and provides a user-friendly experience with good mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Overall, Nettuno presents a credible and professional business front with transparent contact channels and compliance with privacy regulations.

V

Visa S.p.A.

visarent.it

67

Visa Rent, a division of Visa S.p.A., is a well-established provider of rental power generation equipment and lighting towers in Italy. With a fleet exceeding 500 machines and four operational sites, the company offers comprehensive energy solutions tailored for temporary and emergency needs. Their services include advanced generator sets with parallel synchronization capabilities, accessories, and 24/7 technical support. The website demonstrates a mature digital presence built on Drupal 10, with good SEO, accessibility, and privacy compliance. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, Visa Rent presents a trustworthy and professional business with strong market positioning in the energy rental sector.

K

Klimaschutz- und Energieagentur Region Schwarzwald-Baar-Heuberg gGmbH

ea-sbh.de

63

Klimaschutz- und Energieagentur Region Schwarzwald-Baar-Heuberg gGmbH is a regional non-profit organization focused on energy consulting and climate protection services for private individuals, municipalities, and companies within the Schwarzwald-Baar-Heuberg region in Germany. The website serves as a comprehensive informational and advisory platform, offering services such as building energy consulting, funding advice, municipal energy management, and educational projects. The company positions itself as a trusted regional partner with a clear focus on sustainability and energy efficiency. Technically, the website is built on WordPress using Elementor as the page builder, enhanced with Yoast SEO for search optimization and Borlabs Cookie for cookie consent management. The site is well-structured, mobile-optimized, and uses modern web technologies including jQuery and Swiper.js for interactive elements. SEO and accessibility considerations are evident, with structured data (JSON-LD) implemented and ARIA attributes used for accessibility. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the business claims, supporting legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a solid digital presence with good content quality and technical implementation. However, improvements can be made in publishing privacy policies, terms of service, security policies, and vulnerability disclosure information to enhance compliance and trust further.

V

Viteos SA

viteos.ch

42

Viteos SA is a Swiss-based company specializing in sustainable and renewable energy solutions for both private individuals and professionals. Positioned as a partner in the energy transition, the company offers services that support sustainable energy adoption and renewable energy technologies. The website reflects a medium-sized enterprise with a clear focus on energy sector clients in Switzerland. Technically, the site is built on WordPress with modern SEO and cookie consent management tools, indicating a mature digital presence. The use of Google Tag Manager, Microsoft Clarity, and other analytics tools shows a commitment to data-driven insights while maintaining GDPR compliance through detailed cookie consent mechanisms. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though explicit security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and privacy compliance.

F

Firefly Lifesciences

fireflylifesciences.com

44

Firefly Lifesciences is a company focused on providing sustainable environmental solutions including regenerative agriculture, water treatment, clean energy, and green habitats. Their services include consulting, design, installation, and ongoing support, targeting businesses aiming for responsible growth and environmental impact. The website is built on WordPress with Elementor and features rich content, certifications, and R&D collaborations, indicating a mature digital presence. Security posture is generally good with HTTPS enabled, but lacks some security headers and privacy compliance documentation. WHOIS data is missing, which reduces trustworthiness but the website content and certifications support legitimacy. Overall, the site is professional and well-designed, serving a niche market in sustainability and environmental technologies.

V

Visa S.p.a. s.u.

visa.it

68

Visa S.p.a. s.u. is a well-established Italian manufacturer specializing in the design and production of generator sets, motopumps, and battery energy storage systems. With over 60 years of experience and a global distribution network spanning more than 100 countries, the company holds a strong market position in the energy sector. Their product range is comprehensive, covering industrial, mobile, and backup power solutions, supported by a robust after-sales service and rental subsidiary. The website reflects a mature digital presence built on Drupal 9, featuring modern web technologies and compliance with GDPR and cookie regulations. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

I

Interessenverband Supraleitung e.V.

ivsupra.de

46

Interessenverband Supraleitung e.V. (ivSupra) is a German industry association comprising mostly medium-sized companies focused on the development and marketing of superconducting technologies. The website serves as an information hub for members and interested parties, showcasing products, markets, news, and events related to superconductors. The association positions itself as a key player in promoting sustainable and efficient energy technologies, targeting businesses and professionals in energy, transport, and manufacturing sectors. Technically, the website is built on WordPress with modern plugins for SEO, user management, and search functionality, offering a responsive and well-structured user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-maintained, supporting the association's mission and business credibility.

S

Syneco

syneco.net

61

Syneco is a German energy sector company evolving from a trading house to a process service provider offering a broad range of services including energy procurement, market data, logistics, and risk management. It operates as part of the Thüga group ecosystem, targeting municipal utilities and energy suppliers. The website is professionally designed, mobile optimized, and uses modern web technologies such as WordPress, Bootstrap, and Google reCAPTCHA for security. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS and secure forms, but lacks explicit security policies or incident response information. Overall, the site is safe, business-focused, and trustworthy, but domain registration inconsistencies should be addressed.

T

Thüga SmartService

smartservice.de

62

Thüga SmartService is a medium-sized, Germany-based company specializing in digital transformation solutions tailored for municipal utilities, energy suppliers, and distribution network operators. As a 100% subsidiary of Thüga Aktiengesellschaft, it leverages deep energy sector expertise combined with advanced IT and software development capabilities. The company offers a broad portfolio including Energy Solutions such as smart metering, Business Solutions like S/4HANA platforms, customer and service portals, billing, and consulting services. The website reflects a professional and consistent brand presence with comprehensive content targeting B2B clients within and beyond the Thüga group. Technically, the site is built on WordPress with modern frameworks and libraries, featuring good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain and WHOIS data align with the business profile, supporting legitimacy and trustworthiness.

P

providata

providata.de

41

providata GmbH is a medium-sized German company specializing in process and data management solutions for the energy sector. With over 30 years of experience and strong partnerships with regional energy companies such as Thüga, badenova, and WEMAG, providata offers a comprehensive portfolio of services including billing, energy data management, customer service, and robotic process automation. The company positions itself as an innovative and reliable partner for energy providers and heat suppliers, emphasizing sustainable and efficient energy management solutions. The website reflects a professional and modern digital presence, optimized for SEO and mobile devices, and includes active news updates and certifications that enhance trust. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and a cookie management system from Digitale Werke, ensuring compliance with GDPR and user privacy. The site is fast, accessible, and well-structured, with no detected blocking or security challenges. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. Contact information is comprehensive, including multiple phone numbers, email, physical addresses, and social media channels. Overall, providata demonstrates a mature digital infrastructure and a strong market position in the energy sector. Security and privacy compliance are well addressed, though improvements could be made by publishing incident response and vulnerability disclosure policies. The domain registration data aligns well with the company's claims, supporting legitimacy and trustworthiness.

T

Thüga Solutions

thuega-solutions.de

39

Thüga Solutions is a well-established energy sector specialist group in Germany, offering integrated solutions by combining the expertise of multiple subsidiaries under the Thüga group umbrella. Their services span insurance, renewable energy projects, process and data management, digitalization of municipal utilities, and energy trading. The website reflects a professional and consistent brand image targeting energy companies, municipalities, and city utilities. Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and appointment booking, showing a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its market niche.

T

Thüga

thuega.de

60

Thüga is Germany's largest municipal utility group, comprising around 100 local and regional energy and water suppliers serving millions of customers nationwide. The company focuses on sustainable energy solutions, regional utility support, and digital transformation services. Their market position is strong within the German energy sector, emphasizing collaboration and innovation. Technically, the website is built on WordPress with modern frameworks and includes privacy-conscious analytics (Matomo) and cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though some HTTP security headers are missing and no explicit security policy is published. Overall, the site is professional, well-structured, and compliant with GDPR, reflecting a mature digital presence for a large enterprise energy group.

T

THEVA Dünnschichttechnik GmbH

theva.de

62

THEVA Dünnschichttechnik GmbH is a specialized German company founded in 1996, focusing on the production and supply of 2G high-temperature superconductors, notably the THEVA Pro-Line product. The company serves industrial sectors such as electrical engineering, power transmission, magnet technology, and manufacturing, offering innovative and efficient solutions that outperform traditional copper conductors. With a small but expert team and global presence through partners, THEVA positions itself as a niche leader in superconductivity technology. Technically, the website is built on WordPress with modern plugins for SEO and performance optimization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, THEVA demonstrates a solid digital presence aligned with its business goals, maintaining compliance with GDPR and providing essential legal and privacy information. The absence of direct contact emails or phone numbers suggests reliance on contact forms for communication. The WHOIS data supports the legitimacy and consistency of the domain with the company's history and operations. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing direct contact information to improve trust and compliance further.

A

Ampere AG

ampere.de

59

Ampere AG is a German energy company specializing in reducing energy costs for businesses through innovative electricity and gas pooling strategies. Established in 1998, the company leverages bulk purchasing power to secure favorable energy prices for its clients. The website reflects a mature digital presence built on WordPress, integrating modern technologies such as Usercentrics for consent management, Google Tag Manager, and Facebook Pixel for marketing and analytics. Security measures include HTTPS enforcement and standard security headers, with reCAPTCHA implemented to protect forms. However, the absence of explicit privacy policy and terms of service pages indicates room for improvement in compliance and transparency. Overall, the site is professional, well-branded, and targets business customers seeking energy cost optimization.

Z

ZUG ALLIANCE

zug-alliance.ch

37

ZUG ALLIANCE is a regional collaborative alliance based in Zug, Switzerland, focused on advancing energy and mobility sectors through knowledge sharing, framework development, and innovative projects. The alliance brings together business, science, and politics to accelerate decarbonization and sustainable development in the region. Their website reflects a professional and consistent brand image, targeting stakeholders interested in sustainable energy and mobility solutions. Technically, the site is built on WordPress with Elementor and integrates modern tools such as Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS, security headers, and spam protection on forms, though it lacks explicit security policies and cookie consent mechanisms. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

A

AMAG Group AG

amag-group.ch

72

AMAG Group AG is a leading Swiss company specializing in sustainable mobility, energy, and innovation solutions. The company holds a strong market position in Switzerland, offering services such as bidirectional charging, solar fuels, and comprehensive energy mobility solutions. Their website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure leverages Adobe Experience Manager, Google Tag Manager, and OneTrust for privacy compliance, indicating a modern and well-maintained platform. Security posture is robust with HTTPS enforcement, security headers, and bot protection mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and domain data indicate a legitimate, trustworthy, and professional business with a strong focus on sustainability and innovation.

C

CDR.fyi

cdr.fyi

62

CDR.fyi operates as a specialized reporting platform dedicated to the durable carbon removal market, providing transparency and accountability through detailed market data, analytics, and leaderboards. The platform targets stakeholders such as carbon removal suppliers, purchasers, and service providers, positioning itself as a leading source of market insights with a partner portal offering enhanced data access. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure policies are absent. Privacy compliance is supported by comprehensive privacy and data management policies, with GDPR considerations evident. Overall, the site presents a professional, trustworthy, and well-maintained digital presence in the energy sector focused on carbon removal.

A

Aral

aral.de

75

Aral is a prominent German energy and fuel retail company offering a comprehensive range of services including fuel sales, electric vehicle charging, car wash, and convenience shopping. The website reflects a mature digital presence with clear navigation, consistent branding, and integration of business customer solutions. The company targets both general consumers and business clients, positioning itself as a leading energy retail brand in Germany. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript frameworks, and integrates Google Analytics and Algolia for search and analytics. The site is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

G

Global Reporting Initiative

globalreporting.org

66

Global Reporting Initiative (GRI) is a well-established non-profit organization founded in 1999 that provides globally recognized sustainability reporting standards. The website serves as a professional platform targeting businesses, governments, NGOs, and sustainability professionals, offering standards, guidance, and training to support ESG reporting. The organization holds a leading market position in the sustainability reporting sector. Technically, the website employs modern analytics and consent management tools such as Google Analytics, Hotjar, and Cookiebot, hosted with Cloudflare DNS services, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and implementing security headers. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference.

S

Securitas ČR

securitas.cz

72

Securitas ČR is a well-established security agency operating in the Czech Republic since 1991, providing comprehensive security services including physical security, remote video surveillance, mobile patrols, security technology, and consulting. The company is part of the global Securitas Group, positioning it strongly in the security services market. The website reflects a professional business with clear branding and a focus on business clients requiring security solutions. Technically, the website uses modern technologies such as EPiServer CMS, Microsoft Application Insights, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile optimized, accessible, and SEO friendly, with a good user experience and clear navigation. Security-wise, the website enforces HTTPS, uses security headers, and implements cookie consent mechanisms compliant with GDPR. However, the absence of public vulnerability disclosure policies and incident response contacts suggests room for improvement in transparency and security communication. The lack of WHOIS data is a notable gap, reducing trustworthiness from a domain registration perspective. Overall, the site is safe, professional, and trustworthy, with moderate risk due to missing WHOIS and incident response information.

V

Vitol

vitol.com

71

Vitol is a global energy and commodities company with a strong market position in crude oil and product distribution, power trading, and sustainable energy investments. The website reflects a mature enterprise with a professional digital presence, leveraging WordPress CMS and modern web technologies. The company emphasizes safety, responsibility, and sustainability in its operations. Technically, the site is well-structured, mobile-optimized, and SEO-friendly, with integrated cookie consent mechanisms and analytics tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. WHOIS data is missing for the queried domain, which is unusual for a large enterprise, but the website's professionalism and external references support legitimacy. Overall, the site is trustworthy and business-focused, with no signs of adult or questionable content.