Energy security reports

F

FAMILY OF POWER

familyofpower-mobility.com

64

FAMILY OF POWER operates a cooperative e-Carsharing service in Austria, focusing on sustainable and affordable electric vehicle sharing for municipalities, companies, housing communities, and private individuals. The business model integrates renewable energy communities and advertising partnerships to subsidize operational costs, positioning itself as a regional leader in eco-friendly mobility solutions. The website provides comprehensive information about services, pricing, partner networks, and community involvement, targeting environmentally conscious users and local stakeholders. Technically, the website employs modern frontend technologies including jQuery, Foundation framework, lazy loading, and Google Maps API with explicit user consent for privacy compliance. The site is well-structured, mobile-optimized, and offers a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, HTTPS is used, and privacy-conscious features like explicit consent for Google Maps are implemented. Nonetheless, the absence of visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms indicate room for improvement. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the website is functional and informative but should address privacy compliance and domain registration transparency to enhance trust and security posture. Strategic improvements in security headers, policy disclosures, and WHOIS registration would strengthen the site's credibility and compliance.

W

Weidmüller

weidmuller.fr

60

Weidmüller is a well-established enterprise specializing in industrial connectivity and automation solutions, serving primarily the energy and transport sectors. The company offers a broad portfolio of products including connection technology, electronics, automation software, and customized assembly services, supported by digital tools such as the Weidmüller Configurator. Their market position is strong with a clear focus on B2B industrial customers and international presence. The website is professionally designed, content-rich, and well-structured, targeting industrial professionals and manufacturers. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, the site enforces HTTPS, includes security headers, and implements privacy-compliant cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could be enhanced by publishing explicit security policies, incident response contacts, and vulnerability disclosure information. Privacy compliance is strong with clear policies and consent mechanisms, though a named Data Protection Officer contact is not found. Overall, the domain registration details align well with the business claims, supporting high legitimacy and trust. Strategically, Weidmüller should focus on enhancing transparency around security and incident response, maintaining up-to-date third-party script audits, and expanding digital trust signals to further strengthen customer confidence and compliance adherence.

INVT Network Power (Shenzhen) Co., Ltd. is a subsidiary of Shenzhen INVT Electric Co., Ltd., specializing in integrated data center solutions including micro-modules, environmental refrigeration, intelligent monitoring, power supply, and distribution systems. The company targets data center operators and enterprises requiring modular and rapid deployment solutions. Their market position is supported by a large parent company and a broad portfolio of subsidiaries focused on energy and technology sectors. Technically, the website uses a custom CMS with modern JavaScript libraries and is hosted on Alibaba Cloud, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie consent banner and privacy policy present but no explicit GDPR compliance. Overall, the website is professional and trustworthy with clear contact information and social media presence.

INVT Electric Vehicle Drive Technology (Shenzhen) Co., Ltd., operating under the brand INVT E-mobility, is a medium-sized Chinese company founded in 2014 and specializing in electric vehicle powertrain and charging solutions. The company is a subsidiary of Shenzhen INVT Electric Co., Ltd. and is recognized as a high-tech enterprise in China. Their product portfolio includes EV motor controllers, on-board power systems, and EV chargers, targeting global B2B clients in the sustainable transportation sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to industry stakeholders. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and WOW.js, alongside Google Tag Manager and Google Analytics for tracking. The hosting is provided by Alibaba Cloud, and the domain is well-established since 2014. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. Overall, the website demonstrates a mature digital presence with good privacy compliance including a privacy policy and cookie consent mechanism. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements could focus on enhancing security headers, publishing vulnerability disclosure policies, and adding incident response contacts to further strengthen trust and compliance.

I

INVT Solar Technology (Shenzhen) Co., Ltd.

invt-solar.com

37

INVT Solar Technology (Shenzhen) Co., Ltd. is a professional manufacturer and provider of solar inverters and energy storage solutions, serving commercial, industrial, and residential markets. The company is a wholly-owned subsidiary of INVT and has a strong market position supported by 22 years of experience, multiple R&D centers, and a large patent portfolio. Their website reflects a well-structured business with international reach, offering a wide range of hybrid, on-grid, off-grid inverters, and related accessories. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates analytics tools such as Google Tag Manager, Facebook Pixel, and Baidu Analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

F

FAMILY OF POWER

familyofpower.com

65

FAMILY OF POWER operates a regional e-Carsharing service in Austria, focusing on sustainable mobility solutions powered by 100% renewable energy. The company targets municipalities, businesses, residential communities, and private individuals, offering flexible and affordable electric car sharing with transparent pricing and cooperative business model elements. Their services include e-Carsharing vehicle rental, renewable energy communities, and investment opportunities through POWER participation. The website is professionally designed with good content quality and clear navigation, supporting user engagement and service promotion. Technically, the website employs modern frontend technologies such as jQuery, Foundation framework, lazy loading, and Google Maps API with privacy-conscious consent mechanisms. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the active and professional website presence. Privacy and cookie policies are not found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no social media presence or incident response details are published. Overall, the website presents a credible and professional business front for a small regional cooperative in the energy and transportation sectors, but improvements in privacy compliance, security transparency, and domain registration clarity are recommended to enhance trust and reduce risk.

E

ELKO EP, s.r.o

inels.cloud

55

ELKO EP, s.r.o operates the Inels Cloud platform, a cloud-based application focused on energy or smart home management solutions. The website serves as a login portal for users to access the Inels cloud app, indicating a business-to-business and business-to-consumer hybrid target audience. The company has maintained the domain since 2016, reflecting a stable presence in the energy technology sector. The platform leverages modern web technologies including React and is hosted on DigitalOcean, ensuring a scalable and reliable infrastructure. Technically, the website demonstrates moderate digital maturity with a modern tech stack, mobile optimization, and use of Google Tag Manager for analytics. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. The website enforces HTTPS, which is a critical security baseline. Privacy and cookie policies are not present on the login page, which may impact compliance with GDPR and other privacy regulations. From a security perspective, the site shows basic best practices but lacks advanced security headers and vulnerability disclosure mechanisms. No contact information or incident response channels are visible, which could hinder user trust and incident handling. The domain WHOIS data is consistent and transparent, registered to ELKO EP, s.r.o in the Czech Republic, with no privacy protection, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer user support/contact information to strengthen trust and regulatory adherence.

B

BENEDICT GmbH

benedict.at

56

BENEDICT GmbH is a well-established Austrian manufacturer specializing in low-voltage switching devices with over 100 years of industry experience. The company holds a market-leading position in capacitor contactors and serves industrial clients worldwide, particularly in the energy and manufacturing sectors. Their product portfolio includes contactors, motor starters, circuit breakers, isolators for photovoltaic applications, cam switches, and signaling devices. The website reflects a professional B2B business model with clear product information and distributor networks. Technically, the website employs a modern and responsive design using Bootstrap and standard web technologies, ensuring good user experience across devices. The presence of a cookie consent banner indicates GDPR awareness, although no advanced analytics or tracking services are detected, suggesting a privacy-conscious approach. The site is accessible without WAF or blocking mechanisms, and navigation is clear and structured. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and documented security policies or incident response contacts. WHOIS data confirms the domain's legitimacy and consistency with the company's Austrian roots and long history. No suspicious domains or vulnerabilities were detected in the provided content. Overall, BENEDICT GmbH's website demonstrates a solid digital presence with good content quality and business credibility. Security posture is adequate but could be improved by adding security headers and incident response information. Privacy compliance is well addressed with cookie consent mechanisms. The risk level is low, with recommendations focusing on enhancing security best practices and transparency.

P

Pfannenberg Group Holding

pfannenberg.com

51

Pfannenberg Group Holding operates a professional website focused on manufacturing products and solutions for thermal management, process cooling, and signaling technology. The company targets industrial and manufacturing sectors with a B2B business model and maintains a consistent brand presence across multiple international language versions. The website is built on TYPO3 CMS, leveraging modern web technologies and providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and clearer contact information.

Tele Haase operates a professional website focused on the development and production of industrial electrical components such as time relays, monitoring relays, load guards, and NA protection devices, primarily serving the industrial and renewable energy sectors. The company positions itself as a specialized manufacturer with a clear focus on quality and innovation in its niche market. The website is well-structured, uses modern web technologies including WordPress and Vue.js, and integrates multiple marketing and analytics tools to support business operations and customer engagement. Security measures such as HTTPS and Content Security Policy are properly implemented, enhancing the site's trustworthiness. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Additionally, the lack of explicit privacy policy and contact information represents compliance and transparency gaps that should be addressed to improve user trust and regulatory adherence.

A

ABL

abl.de

59

ABL is a well-established German family-owned company specializing in electrical connectivity products and e-mobility charging solutions. Founded in 1923, it holds a pioneering position in the industry, notably as the originator of the SCHUKO plug standard. The website reflects a professional and consistent brand image targeting private, semi-public, and public sectors interested in electrical and e-mobility products. Technically, the site employs modern frameworks such as Bootstrap and jQuery, with a cookie consent mechanism implemented via Klaro and analytics managed through Google Tag Manager. Security posture is moderate with HTTPS implied but lacks explicit security headers and published policies. No blocking or WAF mechanisms interfere with content access.

TECO Australia and New Zealand is a well-established business entity specializing in electric motors, variable speed drives, and home appliances, operating under the global TECO Electric & Machinery Group headquartered in Taiwan. The website reflects a mature digital presence with a focus on sustainability, energy conservation, and advanced technology solutions. The company targets industrial clients and consumers in Australia and New Zealand, emphasizing innovation and environmental responsibility. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern plugins for forms, spam protection, and chat support. Security posture is good with HTTPS and anti-spam measures, though improvements in security headers and privacy policies are recommended. Overall, the site is professional, trustworthy, and aligned with a large enterprise's standards.

S

Shenzhen INVT Electric Co., Ltd

invt.com

48

Shenzhen INVT Electric Co., Ltd is a large, established industrial automation and energy power company founded in 2002, specializing in variable frequency drives, motion control, renewable energy solutions, and UPS products. The company targets industrial clients and OEMs globally, with a presence in over 100 countries and multiple subsidiaries. The website reflects a mature digital presence with multilingual support, comprehensive product and solution offerings, and active social media engagement. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure form validation, though lacks some advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent and privacy policy present but no detailed GDPR compliance statements. WHOIS data is missing, reducing transparency but the overall business credibility remains high based on content and external references.

E

EATON

eaton-somerinca.com

60

EATON is a small business focused on residential electricity products and services, including surge protectors and electrical circuit protection, primarily targeting the Venezuelan market. The website is professionally designed using GoDaddy Website Builder and features multimedia content such as embedded Vimeo videos. The company maintains a social media presence on Instagram and LinkedIn, enhancing its market visibility. The business model centers on product distribution and electrical services for residential customers, positioning itself as a trusted local provider in the energy sector. Technically, the website employs modern JavaScript features and is hosted on GoDaddy infrastructure. While the site is mobile-optimized and offers a good user experience, it lacks advanced SEO and accessibility features. Performance is moderate, with no critical errors or broken elements detected. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. From a security perspective, the site uses HTTPS but does not implement key security headers such as Content-Security-Policy or HSTS. No privacy or cookie policies are present, which raises compliance concerns, especially regarding GDPR. Contact information is limited to an email address, with no phone or physical address provided. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional and professional but requires enhancements in privacy compliance and security best practices to reduce risk and build greater trust with users. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, enabling DNSSEC, and providing clearer contact and incident response information.

3

3BRO Ltd

threebro.com

42

3BRO Ltd is an independent trading company specializing in electrical, industrial, and mechanical products, serving clients primarily in Cyprus and Greece. The company collaborates with over 50 manufacturers, offering custom solutions and focusing on quality and competitive differentiation. Their website reflects a professional business presence with clear contact information and a focus on industrial sectors such as energy and marine equipment. Technically, the website is built on WordPress with common plugins and moderate performance and SEO optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain legitimacy, impacting overall trustworthiness. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance credibility and security.

V

ViV - Isomatic

viv-isomatic.com

63

ViV - Isomatic is a Bulgarian-based distributor specializing in electrical equipment and industrial automation products. The company represents multiple reputable manufacturers and offers a broad product portfolio including automation devices, protective apparatus, cables, connectors, and industrial enclosures. Their website is built on Drupal 10 with Commerce 2, providing e-commerce capabilities and a professional user experience tailored to industrial clients. The site is mobile-optimized and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not active. Google Analytics is used for user tracking at a moderate level.

L

Lapp Portugal

policabos.pt

50

Lapp Portugal is a medium-sized B2B company specializing in industrial cables, connectors, and related solutions primarily serving the energy and telecommunications sectors. As part of the Grupo Lapp, it maintains a consistent brand presence and offers a range of products designed for demanding industrial environments. The website reflects a professional digital presence with good content quality and clear navigation tailored to industrial clients. Technically, the site is built on WordPress with modern themes and plugins, including GDPR-compliant cookie consent mechanisms and tracking via Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

E

Energy Power Solution

eps.uz

57

Energy Power Solution is an engineering company and reliable distributor specializing in pump and electrical equipment, operating since 2014 in Uzbekistan. The company offers engineering services, equipment distribution, service center support, project implementation, and sub-factory operations. Their market position is supported by over 200 projects and partnerships with reputable brands such as Grundfos, Danfoss, ABB, WEG, and WIKA. The website reflects a medium-sized enterprise with a professional online presence built on the Tilda CMS platform, optimized for mobile and desktop users. Technical infrastructure leverages Tilda's CDN and form services, ensuring moderate performance and basic accessibility. Security posture is adequate with HTTPS and secure form handling but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvements. Overall, the site is trustworthy and business-focused with clear contact mechanisms but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence.

I

Insta LLC

insta.ge

59

Insta LLC operates the website www.insta.ge, providing electrical solutions primarily targeting residential and commercial industry clients. Their services include LV/MV electrical systems, low current installations, automation, and EV charger solutions. The company appears to be a medium-sized regional player founded around 2017. The website is built on WordPress with a modern technology stack including jQuery, Google Fonts, and Slider Revolution, indicating a moderate level of digital maturity. SEO practices are implemented via Yoast SEO, and tracking is done through Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit privacy/cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

L

Lapp Automaatio Oy

lappautomaatio.fi

59

Lapp Automaatio Oy is a leading Finnish company specializing in the sales and expert services of automation and electrical components for machine building and process industries. The company operates as part of the larger LAPP Group, headquartered in Switzerland, and targets industrial clients primarily in Finland. Their key services include product sales, packaging, electrical maintenance, calibration, enclosure machining, and storage services, supported by digital tools such as product selection aids. The website reflects a professional and consistent brand image with clear navigation and comprehensive business information. Technically, the website is built on an IBM Domino backend, utilizing legacy JavaScript libraries like jQuery 1.8.3, along with Bootstrap and other UI frameworks. While the site is functional and moderately optimized for mobile, it shows signs of technical debt and lacks modern security headers and DNSSEC. The presence of CookiePro for consent management and Econda for analytics indicates a reasonable level of digital maturity and privacy compliance. From a security perspective, the site lacks advanced security headers and uses outdated JavaScript libraries with known vulnerabilities, which could expose it to risks. DNSSEC is not enabled, and no incident response or security policy information is publicly available. However, the domain registration is transparent and consistent with the business, and no WAF or blocking mechanisms interfere with access. Overall, the website scores well on business credibility and privacy compliance but requires technical and security improvements to enhance its posture. Strategic recommendations include upgrading JavaScript libraries, implementing security headers, enabling DNSSEC, and conducting a security audit of the IBM Domino platform.

S

Somerinca C.A.

somerinca.com

49

Somerinca C.A. is a small-sized company operating in the energy sector, primarily acting as a distributor and representative of multiple industrial electrical brands. The website reflects a basic but consistent branding approach, targeting industrial clients and professionals in the electrical and energy industries. The technical infrastructure is based on GoDaddy's Website Builder platform, with embedded multimedia content and external links to partner brand websites. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with no privacy or terms of service pages detected, though a cookie consent banner is present. Overall, the website is functional but could benefit from enhanced security and compliance features.

Uruwire, operated by REPRINTER LTDA, is a specialized importer and distributor of electrical cables, fiber optic cables, and related accessories in Uruguay. The company holds exclusive representation agreements with several reputable international brands such as LAPP, MURRPLASTIK, and WEICON. Their website offers an intelligent cable search tool, product catalogs, and online purchasing options targeting industrial and commercial clients in Uruguay. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain registration locks in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with the business's market position.

T

Transmisiones S.A.S.

transmisiones.de

38

Transmisiones S.A.S. is a Colombian company specializing in the distribution and servicing of industrial automation, energy, and power transmission products. Their website showcases a broad portfolio including variadores, servomotores, cables, motorreductores, and related accessories, targeting industrial and manufacturing sectors. The company positions itself as an authorized distributor of LAPP products in Colombia, offering additional services such as equipment repair, training, and consultancy. The website is built on WordPress with WooCommerce, indicating a mature e-commerce platform for B2B sales and product catalog management. Technically, the site uses modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. Analytics is implemented via Google Tag Manager, reflecting moderate user tracking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Elvatron

elvatron.com

65

Elvatron is a Costa Rican company specializing in the sale, installation, and repair of medical equipment, alongside solutions in automation, instrumentation, electrical distribution, and telecommunications. The company targets professional and business clients primarily within the electrical and electromedical sectors. Their website reflects a medium-sized business with a consistent brand presence and a clear focus on B2B services in the regional market. Technically, the website is built on the HubSpot CMS platform, integrating various marketing and analytics tools such as Google Analytics, Google Tag Manager, AdRoll, and Facebook Pixel. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy compliance is well addressed with a cookie consent banner and a privacy policy page, indicating awareness of GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, which impacts the overall security posture and business credibility. Overall, Elvatron's website presents a professional and trustworthy front for its business operations, but the missing WHOIS data is a critical gap that should be addressed to improve domain legitimacy and trust signals.

A

Agnosys GmbH

agnosys.at

64

Agnosys GmbH is a specialized Austrian company providing advanced products and systems for preventive fire protection automation. Their offerings include bus-based fire safety systems, smart visualization tools, and automated self-monitoring protocols, targeting building planners and fire safety professionals. The company positions itself as a niche provider with scalable solutions for various building sizes. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive business and security profile.

I

Inels Wireless

smarthomebulgaria.bg

42

Inels Wireless is a Bulgaria-based company specializing in the design and implementation of smart home automation systems, targeting residential, office, warehouse, and industrial clients. The company leverages 30 years of professional experience and offers a broad portfolio of wireless smart devices including thermostats, lighting controls, blinds, security sensors, and complete smart home kits. The website reflects a mature business with a clear market position supported by professional branding and product presentation. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and privacy compliance documentation. Overall, the domain registration is privacy protected in line with GDPR, consistent with the company's EU presence. The website is accessible, well-structured, and trustworthy, with clear contact channels and social media presence.

ЕЛКО ЕП България ООД is a Bulgarian manufacturer specializing in electronic devices and intelligent wireless control systems for building automation. The company targets both end users and professional installers, offering a range of products including smart home automation, relays, switches, and configurators. Their market position is that of an established regional player with multiple international sites and a strong product portfolio. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery and Foundation, with integrations like Google Maps API and Smartsupp live chat, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements form protection and consent management for analytics and ads, but lacks visible security headers and published privacy or incident response policies, which are areas for improvement. Overall, the website is professional and trustworthy, with clear contact information and social media presence, but could enhance compliance and security transparency.

E

ELKO EP SLOVAKIA, s.r.o.

elkoep.sk

66

ELKO EP SLOVAKIA, s.r.o. operates a professional e-commerce platform specializing in electrical components, relay modules, and smart home devices under brands such as ELKO and iNELS. The company targets both wholesale and retail customers primarily in Slovakia, positioning itself as a leading supplier in the energy and smart home sector. The website offers a comprehensive product catalog, customer support, and educational resources, reflecting a mature business model with a medium-sized market presence. Technically, the website is built on the SiteJay 2.0 CMS platform, utilizing modern JavaScript libraries like jQuery, Fancybox, and Slick Carousel. It integrates Google Analytics and Smartsupp Live Chat for analytics and customer engagement. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with asynchronous loading of external scripts enhancing user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response information is provided. No vulnerabilities or malicious content were detected, but improvements in security headers and vulnerability disclosure are recommended. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its target audience effectively. Strategic enhancements in security posture and accessibility would further strengthen its digital maturity and risk management.

K

Kier Group plc

kier.co.uk

66

Kier Group plc is a leading UK-based provider of infrastructure services, construction, and property development. The company positions itself as a major player in the UK infrastructure sector, delivering sustainable projects and serving a diverse audience including investors, clients, and job seekers. The website reflects a professional corporate identity with clear navigation, comprehensive content, and strong branding consistency. Technically, the site leverages modern web technologies such as jQuery, Swiper.js, Google Tag Manager, and accessibility tools like UserWay, hosted likely on a robust CMS platform (Umbraco). Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and anti-forgery protections, although explicit security headers could be more visible. Privacy compliance is well addressed with detailed cookie and privacy policies, and GDPR adherence is evident. The WHOIS data for the subdomain 'www.kier.co.uk' is unavailable due to domain naming rules, but the overall legitimacy is supported by consistent branding and external references. Overall, the site demonstrates a mature digital presence suitable for an enterprise-level infrastructure company.

B

Berghof Umweltengineering

berghof-umweltengineering.com

49

Berghof Umweltengineering is a specialized environmental engineering company focused on the assessment, remediation, and revitalization of large land areas and industrial complexes. The company operates primarily in Germany and is part of the larger Berghof Gruppe. Their key services include contaminated site management, building demolition, land recycling, and soil-related construction supervision. The website is professionally designed, bilingual (German and English), and provides detailed service descriptions and contact information, indicating a medium-sized enterprise with a solid market position in the environmental sector. Technically, the website is built on TYPO3 CMS and uses Piwik (Matomo) for analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and structured for good user experience, although some improvements in accessibility and SEO could be made. Security-wise, the site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The WHOIS data is notably missing or inaccessible, which raises concerns about domain legitimacy despite the professional appearance and corporate contact details. This discrepancy suggests the need for further verification of domain registration status. Overall, the website presents a trustworthy business front but should address privacy compliance and security best practices to enhance trust and reduce risk.

The website www.evselect.cz operates as a specialized e-commerce platform focused on electric vehicle (EV) charging solutions, including AC and DC charging stations, cables, adapters, and photovoltaic components. It targets customers in the Czech Republic interested in electromobility products. The business model is a niche online retail store leveraging the Shoptet e-commerce platform, positioning itself as a dedicated supplier in the EV charging market segment. The site presents a professional and consistent brand image with clear navigation and relevant product offerings.

MYTECH s.r.o. is a specialized Czech company focused on the construction, repair, and manufacturing of cooling towers and their components. The company operates primarily in the energy and manufacturing sectors, serving both domestic and international markets. It benefits from a manufacturing partnership with its parent company MYPLAST s.r.o., which provides technological products for cooling towers. The website presents a professional image with clear contact information and multilingual support, targeting industrial clients requiring cooling tower solutions. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.1 and Modernizr 2.6.2, along with common plugins like Fancybox and Font Awesome. Google Analytics and Google Tag Manager are implemented for user tracking. The site shows moderate performance and basic mobile optimization but lacks modern security headers and updated libraries, which could expose it to vulnerabilities. From a security perspective, the site uses HTTPS but does not implement advanced security headers or privacy policies, indicating gaps in GDPR compliance and security best practices. The absence of WHOIS registration data reduces domain trustworthiness, although the website content and contact details appear legitimate. No signs of WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, MYTECH s.r.o. demonstrates a solid business presence with room for improvement in technical modernization, security posture, and privacy compliance to enhance trust and resilience in the digital environment.

E

EVMAPA

evmapa.cz

42

EVMAPA.cz operates a specialized platform focused on supporting the electric vehicle ecosystem in the Czech Republic by providing a comprehensive map of charging stations, payment, information, monitoring, and navigation services. The platform targets EV users and charging station operators, offering tools to facilitate immediate charging and station management. The website is well-structured with multilingual support and integrates mapping technology via OpenLayers. The business appears established since 2015, with a clear niche in the energy and transportation sectors within the Czech market. Technically, the site uses standard web technologies and Google Analytics for traffic analysis, with moderate performance and good mobile optimization. Security posture is moderate; while HTTPS is assumed, no explicit security headers or incident response policies are visible, and no direct contact emails or phone numbers are provided. Privacy compliance is basic with cookie consent and terms of service present but no detailed privacy policy or GDPR compliance statements. Overall, the site is professional and trustworthy but could improve security and compliance transparency.

U

UK Green Building Council

ukgbc.org

58

UK Green Building Council (UKGBC) is a well-established non-profit organization founded in 2006, dedicated to transforming the sustainability of the built environment in the UK. The website serves as a comprehensive resource hub for industry professionals, policymakers, and sustainability advocates, offering educational content, policy advocacy, and collaborative forums focused on net zero carbon buildings, circular economy, and climate resilience. The organization positions itself as a leading voice in the UK's sustainable building sector, supported by a membership-driven model and extensive industry engagement.

G

Global Alliance for Buildings and Construction (GlobalABC)

globalabc.org

65

GlobalABC is a well-established international alliance dedicated to promoting zero-emission, efficient, and resilient buildings and construction sectors worldwide. The organization serves as a collaborative platform for governments, private sector entities, civil society, research institutions, and intergovernmental organizations. Their website reflects a professional and content-rich platform offering resources, reports, and engagement opportunities to its diverse global audience. Technically, the site is built on Drupal 10, uses Cloudflare DNS services, and integrates Google Tag Manager for analytics, indicating a modern and maintainable infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are notably absent, which impacts compliance and user trust. Overall, the site is accessible, well-branded, and trustworthy, with room for improvement in privacy compliance and DNS security.

N

Nomitech

nomitech.com

70

Nomitech is a global enterprise software provider specializing in advanced cost estimating, benchmarking, and BIM collaboration solutions tailored for industries such as construction, oil & gas, mining, utilities, and nuclear sectors. The company serves a broad international client base with over 1500 satisfied customers across more than 60 countries, positioning itself as a key player in the energy and manufacturing technology markets. Their product suite integrates modern technologies including BIM, AI, VR, and big data analytics to enhance project precision and efficiency. Technically, the website is built on Webflow CMS with modern JavaScript frameworks and includes Google Tag Manager for analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal vulnerability disclosure mechanisms. The absence of WHOIS registration data reduces domain trustworthiness, though the professional website content and client testimonials support business credibility. Overall, the site demonstrates strong branding, excellent content quality, and good technical implementation, but would benefit from enhanced privacy compliance and security transparency.

Č

ČEZ, a. s.

elektromobilita.cz

65

The website futurego.cz represents a comprehensive digital platform operated by ČEZ, a leading Czech energy company, focused on providing electromobility solutions. It offers a wide range of services including public charging stations, solutions for businesses and municipalities, and tailored offerings for households. The platform supports users with a mobile app and advanced tools like a smart charging cable and fleet management modules. The company holds a strong market position in the Czech Republic with a large and growing network of charging infrastructure. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS, cookie consent, and analytics tools implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-aligned with the business objectives of promoting sustainable electromobility.

Š

ŠKO-ENERGO

sko-energo.cz

63

ŠKO-ENERGO is a financially stable energy company providing comprehensive energy solutions primarily for ŠKODA AUTO and the city of Mladá Boleslav. The company focuses on producing and distributing environmentally friendly energy using carbon-free technologies, offering industrial energy services and energy consumption reduction consulting. The website reflects a professional corporate presence with clear branding and a focus on compliance and privacy. Technically, the site employs modern tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for security, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, though WHOIS data is unavailable, likely due to privacy protection. The absence of direct contact emails or phone numbers on the main site suggests contact is managed via forms or dedicated pages.

C

CENTROTHERM Mladá Boleslav, a.s.

centrothermmb.cz

44

CENTROTHERM Mladá Boleslav, a.s. is a Czech energy company specializing in the supply and management of thermal energy, serving over 14,000 residential and commercial customers in Mladá Boleslav and Kosmonosy. The company operates a hot water distribution system with a total capacity of 152 MW, sourcing heat from the ŠKO-ENERGO plant. The website reflects a medium-sized local energy supplier with a focus on reliability, safety, and cost-effective energy delivery. Technically, the website is built on WordPress with a variety of plugins and frameworks such as Bootstrap and jQuery, offering a moderate level of performance and mobile optimization. Security posture is basic, with HTTPS enabled and a cookie consent mechanism in place, but lacking critical security headers and updated libraries. The absence of a privacy policy and WHOIS data reduces trust and compliance confidence. Overall, the website is functional and professional but would benefit from enhanced security measures and clearer compliance documentation.

E

ELEKTRO S.M.S., spol. s r.o.

elektrosms.cz

60

ELEKTRO S.M.S., spol. s r.o. operates a professional e-commerce platform specializing in electrical wholesale and retail products ranging from cables to lighting. With 28 branches across the Czech Republic and a strong B2B and B2C presence, the company positions itself as a comprehensive supplier in the energy sector. The website offers detailed product categories, guides, and customer support, reflecting a mature business model focused on quality and professionalism. Technically, the site leverages a modern tech stack including ASP.NET WebForms, jQuery, and various third-party analytics and marketing tools, ensuring a functional and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment but the website content and contact information indicate a legitimate and established business. Overall, the site is well-structured, compliant with GDPR, and suitable for its target audience.

V

Vodovody a kanalizace Kroměříž, a.s.

vak-km.cz

53

Vodovody a kanalizace Kroměříž, a.s. is a regional utility company in the Czech Republic specializing in water supply and sewage services. The company provides a range of services including water and sewage connections, water quality testing, and customer support through physical centers and an online portal. The website is professionally designed with clear navigation and relevant content targeting residential and commercial customers in the Kroměříž region. Technically, the site uses older JavaScript libraries such as jQuery 1.8.0 and several slider plugins, indicating some technical debt and potential security risks. The presence of a cookie consent banner and a comprehensive privacy policy indicates good GDPR compliance. However, the absence of WHOIS data and outdated libraries reduce the overall trust and security posture. Security headers are not visibly implemented, and no explicit security or incident response policies are published. Overall, the website is functional and trustworthy for its business purpose but would benefit from technical and security improvements.

I

Industria AC a.s.

industriaac.cz

48

Industria AC a.s. is a Czech company specializing in electrical installation and technical distribution services primarily for the industrial and energy sectors. Founded in 2005, the company offers a range of services including high and low voltage installations, project design, photovoltaic power plants, inspection activities, and reserved technical equipment for high voltage networks. The website presents a professional image with clear service offerings and contact information, targeting industrial and energy businesses in the Czech Republic. Technically, the website uses modern web technologies such as Bootstrap and Google Fonts, with a responsive design and cookie consent mechanisms in place. However, there is no evidence of advanced security headers or explicit privacy policies, and the WHOIS data for the domain is missing, which raises some concerns about domain transparency. The site is accessible without any WAF or blocking mechanisms detected. From a security perspective, the site demonstrates basic compliance with cookie consent but lacks visible security headers and privacy documentation. No forms or user input fields are present on the main page, reducing attack surface. The absence of WHOIS data and registrant information lowers trustworthiness but the professional presentation and contact details mitigate some risk. Overall, the site is moderately secure but could improve in transparency and security best practices. The overall risk is moderate with recommendations to enhance security headers, publish privacy and security policies, and clarify domain registration details to improve trust and compliance.

HARKO s.r.o. is a small Czech company specializing in plumbing, heating, and gas services with over 25 years of operational history. The company offers a range of services including installations, sales, consulting, and subsidy processing, targeting residential and commercial customers primarily in the Czech Republic. The website reflects a basic but functional online presence with clear contact information and references to relevant subsidy programs. Technically, the site uses older JavaScript libraries and a CMS called WebIdeal, with no evidence of modern frameworks or advanced SEO and accessibility features. Security posture is moderate but weakened by outdated libraries, lack of visible HTTPS enforcement, and missing security headers. Privacy and cookie policies are absent, indicating non-compliance with GDPR best practices. Overall, the website is legitimate and trustworthy but would benefit from technical and security improvements.

R

Rumpold

rumpold.cz

65

Rumpold.cz is a Czech Republic based company operating in the energy sector, likely specializing in waste management and related services. The website is professionally designed with good technical infrastructure, including modern JavaScript libraries and cookie consent management via Cookiebot. The domain is well-established, registered since 1998, and hosted on Forpsi servers. Security posture is moderate with HTTPS enabled and use of Google Tag Manager, but lacks visible security headers and explicit privacy or terms policies. Contact information is not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is functional and professional but could improve privacy compliance and security transparency.

A

Austrotherm

austrotherm.com

69

Austrotherm is a specialized Austrian manufacturer focused on high-quality, energy-saving insulation materials ranging from basement to roof applications. The company holds a leading market position in Central and Eastern Europe as a notable producer of EPS and XPS insulation products, facade profiles, and sanitary interior finishing materials. Their website reflects a professional and consistent brand image, targeting both B2B and B2C customers in the construction and insulation sectors. Technically, the site is built on TYPO3 CMS, employs standard web technologies including jQuery and Google Analytics, and integrates a robust cookie consent mechanism compliant with GDPR principles. Security posture is generally strong with HTTPS and consent management, though improvements are recommended in security headers and updating legacy libraries. The absence of WHOIS data due to privacy protection is common and does not detract significantly from the site's legitimacy. Overall, Austrotherm's digital presence is solid, supporting their business objectives effectively.

A

AK RENNER

rennerova.com

65

AK RENNER is a Czech Republic based law firm specializing in energy law, environmental law, and related legal services. The firm emphasizes an interdisciplinary approach, combining legal expertise with knowledge of energy and regulatory frameworks to provide comprehensive legal consulting and representation. Their market position is that of a niche expert in the energy sector with a small but professional operation. The website is well designed, content-rich, and professionally presented, targeting business clients in the energy and public sectors. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit policies could improve it. The absence of WHOIS data is a concern for domain legitimacy but the overall business credibility remains high based on website content and trust indicators. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust.

A

Autogas Opava s.r.o.

autogas-lpg.cz

39

Autogas Opava s.r.o. is a well-established Czech company specializing in LPG and CNG vehicle conversions, servicing, and fuel station operations. With over 22 years of market presence and authorization as a STAG service provider, the company targets vehicle owners seeking cost-effective and environmentally friendly fuel alternatives. Their website reflects a professional business model focused on automotive energy solutions within the Czech Republic. Technically, the site is built on Joomla CMS with common frameworks and plugins, offering moderate performance and good mobile optimization. Security posture is strong with HTTPS, CSRF protections, and comprehensive cookie consent mechanisms, though additional security headers could enhance protection. Privacy policies are detailed and GDPR compliant, reinforcing trust. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.

P

PB trans s.r.o.

pbtrans.cz

57

PB trans s.r.o. is a small Czech energy company specializing in the sale and distribution of propane-butane fuel and related LPG services. Their website highlights key offerings such as propane-butane bottles for cooking and heating, LPG filling stations, and industrial and agricultural fuel applications. The company targets both consumers and business clients within the Czech Republic, positioning itself as a local supplier of clean energy fuel solutions. The website is built on the Webnode platform and hosted via AWS Cloudfront CDN, reflecting a moderate level of digital maturity with basic SEO and mobile optimization. From a security perspective, the website uses HTTPS but lacks advanced security headers and visible privacy or terms of service policies, indicating room for improvement in compliance and security posture. No WHOIS registration data is publicly available, suggesting privacy protection or registration issues, which slightly reduces trustworthiness. Contact information is clearly provided, enhancing business credibility. Analytics are implemented via Google Tag Manager, with moderate user tracking. Overall, the website is functional, safe, and professionally presented but would benefit from enhanced security practices, transparent privacy policies, and improved WHOIS data availability to strengthen trust and compliance. The business appears legitimate and focused on its niche market with clear service offerings and contact channels.

DANSGAS s.r.o. is a Czech company specializing in the sale and distribution of liquefied petroleum gases (LPG) including propane, butane, and propane-butane mixtures. With over 20 years of market presence, the company has established a stable position emphasizing professionalism, quality service, and competitive pricing. Their offerings include LPG sales, technical gases, gas tanks, safety consulting, and equipment rental, targeting both businesses and individual consumers in the energy sector. Technically, the website employs modern frontend technologies such as jQuery, Materialize CSS, and FontAwesome, providing a responsive and user-friendly experience. The site includes a cookie consent mechanism compliant with EU regulations, though no explicit privacy policy or terms of service pages were found. Performance is moderate with good mobile optimization, but accessibility and SEO could be improved. From a security perspective, the site uses HTTPS and basic anti-spam measures on its contact form but lacks advanced security headers and visible incident response or security policies. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information appear legitimate and professional. Overall, the website is functional and professional but would benefit from enhanced security practices, clearer privacy documentation, and domain registration transparency to improve trust and compliance.

M

MyBox

mybox.eco

48

MyBox is a Czech-based company specializing in the design, manufacture, and servicing of AC and DC electric vehicle charging stations. Founded in 2020 and operating under the parent company ELEXIM, a.s., MyBox targets households, businesses, and the public sector with sustainable and reliable charging solutions. The company emphasizes European components, durable construction, and advanced technologies including cloud integration and mobile applications. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site is built on WordPress with modern frameworks and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC and explicit security policies could be improved. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, MyBox presents a trustworthy and professional brand in the energy and transportation sectors.