Energy security reports

S

Sentinel Marine -

sentinel-marine.com

51

Sentinel Marine Aberdeen operates as a provider of offshore support vessels (OSVs) and emergency response and rescue vessels (ERRVs), serving clients primarily in the North Sea and related energy, marine, and government sectors. The company emphasizes a modern fleet of 14 high-specification vessels and focuses on safety, sustainability, and long-term partnerships. The website is built on WordPress with common plugins for SEO and user experience, showing a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA but lacks advanced security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include improving transparency with privacy and security policies and verifying domain registration details.

L

Laflora

laflora.lv

51

Laflora is a major Latvian company specializing in the extraction and processing of peat products, targeting professional gardeners and related industries. The website presents a comprehensive product catalog, sustainability initiatives, and ongoing projects in renewable energy, positioning Laflora as a leader in its sector within Latvia. The digital infrastructure includes modern web technologies and a cookie consent mechanism aligned with GDPR requirements. Security posture is moderate with room for improvement in headers and explicit policies. The absence of WHOIS data limits domain trust verification, but the presence of multiple certifications and partner organizations supports legitimacy. Overall, the website is professional, content-rich, and user-friendly, with minimal tracking and good privacy compliance.

SIA "O3FM inženieru birojs" is a Latvian engineering firm specializing in quality design solutions for heating, ventilation, and climate control systems. The company targets businesses and organizations requiring HVAC engineering services, positioning itself as a local expert in the energy sector. The website presents a professional image with clear contact information and consistent branding, supporting its credibility as a small but established service provider. Technically, the website employs common web technologies such as Google Analytics, FontAwesome, and Slick Carousel. It uses HTTPS for secure communication but lacks advanced security headers and privacy compliance mechanisms. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. No CMS or hosting provider details were identified. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible exposed sensitive data. However, the absence of security headers, privacy and cookie policies, and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and incident response readiness would strengthen the site's security posture and trustworthiness.

G

Grindex

grindex.com

66

Grindex is an established manufacturer specializing in industrial quality submersible dewatering pumps, including sludge, slurry, drainage, and stainless steel (inox) pumps. The company targets industrial sectors requiring robust pumping solutions for challenging fluids and environments. The website presents a professional and consistent brand image with comprehensive product information, case studies, and news updates, supporting its market position as a reliable pump manufacturer. Technically, the website employs modern JavaScript frameworks and analytics tools such as Google Tag Manager and Microsoft Application Insights, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with asynchronous script loading and responsive design elements. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, but direct contact information like emails or phone numbers is absent, relying solely on contact forms. Overall, the website is professional and trustworthy, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Strategic improvements in security headers, incident response visibility, and direct contact information would enhance trust and compliance.

S

Sia VEK

termoauditi.lv

49

Sia VEK operates as a specialized Latvian company providing thermography inspections, energy audits, and related training services. Positioned as a leading local provider, they emphasize expert commentary and certified personnel, including official distribution of FLIR infrared cameras. The website content supports their market position and service offerings, targeting building owners and professionals in the energy sector. Technically, the site uses legacy JavaScript libraries alongside Google Analytics and Tag Manager for tracking, with basic SEO and accessibility features. Security posture is moderate but lacks visible security headers and privacy compliance mechanisms. No WHOIS data was retrievable due to query limits, limiting domain trust verification. Overall, the site is functional and informative but would benefit from modernization and enhanced security and privacy practices.

E

EA2 Energy

ea2energy.com

59

EA2 Energy is a small-sized company operating in the energy sector, specializing in the supply and manufacturing of electrical components and accessories. The company claims over 10 years of experience and offers products made in Turkey with competitive pricing. The website is professionally designed using the Wix platform and targets businesses and professionals seeking electrical components globally. Technically, the website uses Wix hosting and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized with moderate performance but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. No critical vulnerabilities or malicious content were detected. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended.

Enefit Latvija is an established energy company operating in Latvia, specializing in the supply of green electricity and renewable energy solutions such as solar panels, batteries, and electric vehicle charging infrastructure. The company positions itself as a trusted provider with a strong customer base exceeding 100,000 users and emphasizes environmental responsibility and customer care. The website reflects a mature digital presence with modern technologies including React and Next.js, and integrates advanced cookie consent and analytics tools to ensure compliance and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be further verified. The absence of WHOIS data limits domain trust analysis, but the professional presentation and comprehensive content suggest a legitimate and credible business. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and maintaining up-to-date privacy practices.

A

Artelektro

artelektro.lv

41

Artelektro is a Latvian-based company specializing in electrical design solutions and manufacturing of electrotechnical and automation equipment. The company targets clients in Europe and Asia, offering services including manufacturing, technical services, design, and sales. With over 15 years of experience and ISO 9001:2015 certification, Artelektro positions itself as a reliable and quality-focused provider in the energy sector. The website presents a professional image with clear service descriptions and client engagement features such as consultation forms and contact options. Technically, the site employs a modern but somewhat outdated technology stack including jQuery, Bootstrap, Vue.js, and various JavaScript libraries. However, the site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. Privacy and cookie policies are absent, indicating gaps in compliance with data protection regulations. Overall, the security posture is moderate but requires significant improvements to meet best practices. The WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. The site is accessible without WAF or blocking mechanisms, enabling full content analysis.

U

Unimar, Inc.

unimar.com

68

Unimar, Inc. is a well-established company specializing in FAA obstruction lighting and tower lighting solutions, serving industries such as energy and transportation. The company offers a range of products and services including custom FAA obstruction lighting design, certified lighting system installation, hazardous location controls, and IoT-based obstruction light monitoring. Their market position is strong, supported by certifications such as UL, ATEX, GOST, and FAA, and a long domain history dating back to 1997. The website is professionally designed on the Shopify platform, providing a good user experience with clear navigation and mobile optimization. Technically, the site uses modern e-commerce technologies and integrates analytics and marketing tools effectively. Security posture is solid with HTTPS and domain transfer lock, though DNSSEC is not enabled and privacy compliance mechanisms like cookie consent are lacking. Contact information is available primarily via phone and contact forms, with active social media presence on Twitter and LinkedIn. Overall, the site reflects a credible and trustworthy business with room for improvement in privacy compliance and security transparency.

B

Baltic Scientific Instruments

bsi.lv

46

Baltic Scientific Instruments (BSI) is a specialized company established in 1994 with historical roots dating back to 1966. The company focuses on the development and manufacturing of spectrometric devices and detectors used in nuclear energy, ecology, geology, medicine, and security. Their product portfolio includes HPGe detectors, scintillation detectors, nuclear electronics, and analytical software, serving a niche market with technical expertise. The website reflects a professional and consistent brand image with clear product and application information, targeting scientific and industrial customers. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Fonts, Google Analytics for tracking, and Google reCAPTCHA for form security. The site is mobile-optimized and offers good navigation and content relevance. However, some security best practices such as security headers are missing, and there is no explicit cookie consent mechanism despite having a cookie policy page. From a security perspective, the site uses HTTPS and standard bot protection, but lacks visible security policies or incident response information. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid security posture with room for improvement in transparency and compliance. The overall risk is moderate with no critical vulnerabilities detected. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing security and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

S

SIA Rīgas ūdens

rigasudens.lv

53

SIA Rīgas ūdens is the largest water supply and sewage service provider in the Baltic region, serving residents and businesses primarily in Riga, Latvia. The company offers a comprehensive range of water-related utility services including water supply, sewage management, water quality testing, and connection services. Their market position is strong as a key municipal utility provider with a large customer base. The website is professionally designed using Drupal CMS and modern JavaScript libraries, providing good user experience and mobile optimization. The technical infrastructure includes integration with mapping services and analytics tools such as ContentSquare and Facebook Pixel, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. Overall, the website and business information reflect a legitimate and professional utility provider with good privacy compliance and user trust indicators.

F

Firnas Shuman

ercc-carbon.com

51

Firnas Shuman is a consulting and technical services company specializing in power generation and transmission infrastructure across Africa, the Middle East, and Central Asia. The company has a significant footprint, having contributed to over 10,000 MW of power generation capacity in more than twenty-five countries. The website reflects a professional corporate presence with clear business focus and geographic reach. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Mailchimp integration, indicating a moderate level of digital maturity. However, the site lacks advanced security configurations such as DNSSEC and security headers, and does not disclose privacy or cookie policies, which are critical for compliance and user trust. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The domain registration is consistent with the business history, showing legitimacy and stability. Strategic recommendations include enhancing security practices, publishing comprehensive privacy and cookie policies, and improving incident response transparency.

A

Antaris Consulting

antarisconsulting.com

68

Antaris Consulting is a well-established Irish consultancy specializing in sustainability, ISO management systems, environmental, energy, occupational health & safety, quality, and training services. The company positions itself as a leading partner for organizations aiming to elevate their sustainability standards, serving a diverse client base including notable organizations. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators. Technically, the site is built on WordPress using Elementor and Gravity Forms, with integrations for Google Analytics and Tag Manager, and a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and domain registration consistent with business claims, though improvements can be made by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website demonstrates good digital maturity and business credibility, supporting its market position effectively.

AxFlow is a leading industrial supplier in Latvia specializing in fluid control and metering systems, offering a full service cycle from solution selection to maintenance. The website is professionally designed, localized in Latvian, and targets industrial clients in energy and manufacturing sectors. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, Azure Application Insights, and Cookiebot for consent management, running on Episerver CMS. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and published incident response information. WHOIS data is missing, which is unusual but the site’s professional appearance and parent company affiliation support legitimacy. Overall, the site is functional, secure, and compliant with privacy regulations, though improvements in security headers and contact transparency are recommended.

O

OLIMPS

olimps.lv

44

OLIMPS is a well-established multidisciplinary engineering company based in Latvia, operating since 1991 with a strong presence in the Baltic, European, and CIS markets. The company specializes in project design, industrial automation systems, and construction services primarily in the energy and transport sectors. Their portfolio includes over 1000 projects and ISO certifications, reflecting a reputable market position. The website is professionally designed using WordPress CMS, featuring modern technologies such as Google Analytics and Typekit fonts, with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and email obfuscation implemented, though lacking advanced security headers and explicit privacy/cookie policies. The absence of WHOIS data limits domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, OLIMPS demonstrates a mature digital presence aligned with its business operations.

E

Elsana SIA

elsana.lv

43

Elsana SIA is a Latvian company specializing in the construction and reconstruction of energy infrastructure, including electric power transmission lines, cable networks, transformer substations, and KTP installations. The company also offers services related to solar panel installation and helicopter services, positioning itself as a regional player in the energy sector. The website is professionally designed, built on WordPress, and incorporates modern technologies such as Bootstrap and Swiper.js, with SEO optimization via Yoast and user tracking through Google Analytics. Contact information is clearly provided, enhancing business credibility. However, the absence of privacy and cookie policies, as well as security headers, indicates areas for compliance and security improvement. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a legitimate and professional business presence with moderate technical and security maturity.

E

Enlit Europe

enlit-europe.com

73

Enlit Europe is a leading event organizer specializing in sustainable energy, energy transition, and decarbonization sectors. The website promotes the 2025 event in Bilbao, Spain, targeting industry professionals, exhibitors, and visitors interested in energy transition. The platform offers exhibition opportunities, conferences, and multimedia engagement, positioning itself as a premier European event in this sector. Technically, the website uses a modern JavaScript stack with jQuery, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, HTTPS is enforced, and cookie consent is implemented, but there is a lack of visible security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain is a concern, as it reduces trust in domain legitimacy despite the professional website presence. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

S

Solar Heat Europe

solarheateurope.eu

55

Solar Heat Europe is a European industry association dedicated to promoting solar thermal technologies to decarbonise heat. The organization serves industry stakeholders, policymakers, and the public by providing policy advocacy, market data, certification, and a resource center with news and publications. The website reflects a medium-sized, professional non-profit entity focused on renewable energy within the European market. Technically, the site is built on WordPress using modern plugins such as Elementor and Yoast SEO, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent, though no explicit security or incident response policies are published. Overall, the website is trustworthy, professional, and compliant, with room for improvement in publishing security policies and enhancing accessibility.

E

Eurelectric

eurelectric.org

51

Eurelectric is a prominent sector association representing the European electricity industry, advocating for a carbon-neutral and energy-independent future. The organization serves over 3500 utilities across Europe, providing policy advocacy, publications, events, and data services to accelerate the energy transition. The website reflects a mature digital presence with comprehensive content tailored to industry stakeholders and policymakers. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager and Algolia Search. The site is well-optimized for SEO, mobile responsiveness, and accessibility, ensuring a positive user experience. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS, employs security headers, and includes a cookie consent mechanism compliant with GDPR. No exposed sensitive data or vulnerabilities were found. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, Eurelectric's website demonstrates a strong business and technical foundation with good security and privacy practices. Strategic enhancements in security transparency and direct contact information could further strengthen its posture and stakeholder confidence.

E

European Heat Pump Association

ehpa.org

58

The European Heat Pump Association (EHPA) is a well-established industry association focused on promoting renewable, efficient heating and cooling solutions across Europe, primarily through heat pump technology. The organization provides advocacy, certification programs, market data, and hosts events to engage stakeholders and policymakers. Their website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement through news and events. Technically, the site is built on WordPress with modern plugins and integrates analytics and consent mechanisms, indicating a good level of digital maturity. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy and professional, supporting EHPA's role as a key player in the European renewable energy sector.

E

European Federation of Intelligent Energy Efficiency Services (EFIEES)

efiees.eu

53

The European Federation of Intelligent Energy Efficiency Services (EFIEES) is a professional federation focused on representing and promoting the interests of energy efficiency service providers within the European Union. Their core mission is to advocate for Energy Efficiency Services Companies (EESCs) by influencing European policies and providing a platform for member engagement. The website reflects a well-structured and professional presence with relevant content about their activities, events, and projects, targeting stakeholders in the energy efficiency sector. Technically, the website is built on WordPress using the Astra theme, incorporating modern JavaScript libraries such as Swiper.js for interactive elements. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS, ensuring encrypted communication. However, it lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of contact information and incident response details limits transparency. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response and vulnerability disclosure information, and enhancing accessibility features.

E

EGEC - European Geothermal Energy Council

egec.org

57

EGEC - European Geothermal Energy Council is a well-established non-profit organization founded in 1998 that promotes the geothermal energy sector across Europe and globally. It serves as a key industry voice, providing policy advocacy, research support, event organization, and member networking services. The website reflects a mature digital presence with comprehensive content including news, policy documents, events, and membership information targeted at industry professionals, policymakers, and researchers. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis, but the professional content and EU transparency registration support legitimacy. Overall, the site is a credible and authoritative platform in the geothermal energy sector.

E

Efficient Buildings Europe

efficientbuildings.eu

60

Efficient Buildings Europe is a prominent European industry association focused on advancing energy efficiency in buildings across Europe. The organization collaborates with stakeholders and industry leaders to promote zero emission buildings and supports EU initiatives such as the BUILD UP portal. Their website reflects a professional and consistent brand image, targeting industry professionals and policymakers in the energy efficiency sector. Technically, the website is built on WordPress using popular plugins like LayerSlider and Visual Composer, with Google Analytics and Tag Manager integrated for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks security headers and formal incident response or vulnerability disclosure information. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Overall, the website is credible and functional but would benefit from enhanced privacy and security practices.

D

DBDH - Danish Board of District Heating

dbdh.org

59

DBDH (Danish Board of District Heating) is an organization focused on supporting and promoting district energy development worldwide. The website positions itself as a go-to partner for knowledge sharing, engagement creation, and support within the district energy sector. The organization appears to be recently established in 2024, with a small-sized operational scope targeting stakeholders in the energy industry. Technically, the website is built on WordPress with Elementor and integrates Google Analytics and Cookiebot for analytics and cookie consent management. The site is hosted by GoDaddy and uses HTTPS, but lacks DNSSEC and visible security headers, indicating room for security enhancements. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Contact information is not explicitly provided, which may affect user trust and compliance. Overall, the website demonstrates a moderate level of professionalism and technical maturity but would benefit from improved transparency and security practices.

C

Cool Heating Coalition

coolheatingcoalition.eu

48

Cool Heating Coalition is an EU-focused advocacy group dedicated to promoting decarbonised, renewable, and affordable heating and cooling solutions by 2040. The coalition targets policymakers, industry stakeholders, and EU citizens to advance climate action and energy security. Their website reflects a professional and consistent brand presence with clear messaging and calls to action, including open letters and statements to the European Commission. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, supported by Google Analytics for traffic insights. Security posture is solid with HTTPS and cookie consent mechanisms, though additional HTTP security headers and published policies could enhance trust. Privacy compliance is partially addressed via cookie consent but lacks explicit privacy and terms of service documents. Contact is primarily through a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and well-positioned as an important player in the EU energy advocacy space.

COGEN Europe is a well-established European association dedicated to promoting cogeneration technologies and policies across Europe. The organization collaborates with EU institutions and industry stakeholders to advocate for energy efficiency and emission reduction through cogeneration. The website reflects a medium-sized association with a solid membership base of national associations and corporate members, positioning itself as a key player in the energy sector focused on cogeneration. Technically, the website is built on WordPress using popular page builders and plugins, indicating a moderate level of digital maturity. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO enhancement. However, some technical improvements are possible, such as adding security headers and fully configuring analytics tools. From a security perspective, the site benefits from HTTPS and does not expose sensitive data. However, it lacks visible security headers and formal privacy and cookie policies, which are important for GDPR compliance and user trust. The absence of incident response and vulnerability disclosure information suggests room for improvement in security governance. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

A

Armstrong Fluid Technology

armstrongfluidtechnology.com

64

Armstrong Fluid Technology is a well-established manufacturer specializing in intelligent fluid flow equipment such as pumps, valves, and heat exchangers, targeting commercial and industrial HVAC markets globally. The company emphasizes energy efficiency and sustainability, supported by a comprehensive website offering detailed product information, case studies, and resources. The technical infrastructure is modern, leveraging ASP.NET, Bootstrap, and various JavaScript libraries, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website projects a professional and trustworthy image aligned with its business objectives.

G

Gradyent

gradyent.ai

66

Gradyent is a technology company specializing in providing a real-time Digital Twin platform for district heating grids. Their solution enables optimization, decarbonisation, and transformation of heating systems, targeting cities and heating companies primarily in Europe. The company positions itself as a leader in the energy sector with a focus on sustainability and smart grid management. Technically, the website is built on a modern stack including Next.js and React, integrated with marketing and analytics tools such as HubSpot and LinkedIn Insight Tag. The site is well-designed, mobile-optimized, and provides comprehensive content with clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies could enhance their stance. WHOIS data is privacy protected, which is typical for tech companies, and no suspicious indicators were found. Overall, the website reflects a professional and trustworthy business with a strong digital presence.

S

Steady Energy

steadyenergy.com

62

Steady Energy is a company focused on designing, constructing, and operating compact advanced nuclear heating plants that provide scalable, cost-effective, zero-carbon district heating solutions. Their market position is that of an innovator in nuclear heating technology, targeting municipalities and energy providers seeking sustainable heating alternatives. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as Webflow CMS, jQuery, GSAP animations, and embedded Vimeo videos, delivering a fast, mobile-optimized, and accessible user experience. Security posture is generally strong with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and published security policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy in content and design but requires enhancements in security transparency and domain legitimacy verification.

T

Turboden S.p.A.

turboden.com

70

Turboden S.p.A. is an Italian company specializing in the design, manufacture, and maintenance of Organic Rankine Cycle (ORC) systems, large heat pumps, and gas expanders. Positioned as a global leader in energy efficiency and renewable energy technologies, Turboden serves industrial clients seeking sustainable and clean energy solutions. The company is affiliated with Mitsubishi Heavy Industries, enhancing its market credibility and reach. Their product portfolio targets decarbonization and electrification of heat, addressing critical global energy challenges. The website demonstrates a mature technical infrastructure utilizing modern web technologies such as Bootstrap, jQuery, Google Analytics, and Google Tag Manager. It features responsive design, multilingual support, and interactive elements like carousels and video content. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms implemented. However, some security best practices such as explicit Content-Security-Policy headers and public incident response information are lacking. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the website content and corporate affiliations mitigate this concern. Overall, the site is professional, trustworthy, and well-optimized for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and verifying domain registration details to improve trustworthiness and compliance.

TCA is a French company specializing in the manufacturing and distribution of ventilation and air conditioning equipment, with physical locations in Nice, Marseille, and Montpellier. The company offers a comprehensive range of HVAC products and services including fabrication, assembly, logistics, and after-sales support. Their market position is strong regionally, supported by partnerships such as with HYDRONIC. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to industry professionals. Technically, the site is built on WordPress with modern libraries and includes security features like HTTPS and Google reCAPTCHA. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trustworthiness. Security posture is good but could be improved with additional HTTP security headers and a published security policy. Overall, the site reflects a mature business with solid digital presence but requires domain registration verification to enhance credibility.

E

EAURKA

eaurka.fr

56

EAURKA is a French commercial agency specializing in multi-brand representation within the energy sectors of HVAC (génie climatique), plumbing, and sanitary services, focusing on the Centre, Auvergne, and Limousin regions. The website presents a professional and regionally targeted business with clear service offerings and a consistent brand identity. The technical infrastructure is based on the Squarespace platform, leveraging its CMS and hosting capabilities, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS enabled, though it lacks some advanced security headers and explicit privacy and terms policies. The absence of WHOIS registrant data reduces domain trustworthiness and suggests a need for improved transparency. Overall, the site is functional and professional but would benefit from enhanced compliance and security disclosures.

S

Sigma Energy & Marine

sigmaenergyandmarine.se

45

Sigma Energy & Marine AB is a Swedish-based engineering consulting company specializing in technology development across marine, renewable energy, subsea, process & plant, and industry simulations. The company serves international clients with complex projects and environmentally friendly solutions. It is part of the larger Sigma Group owned by Danir. The website is professionally designed, content-rich, and targets engineering professionals and companies seeking specialized consulting services. Technically, the site is built on WordPress with modern frontend libraries and includes Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit privacy policies. WHOIS data for the domain is missing, which reduces domain trustworthiness from a registration perspective. Contact information is comprehensive and includes multiple company emails, phone numbers, and a physical address in Gothenburg, Sweden.

S

Sigma Industry Power & Energy

sigmaindustrype.se

47

Sigma Industry Power & Energy is a consulting company specializing in industrial electricity, automation, electrical power, and energy solutions. It operates under the larger Sigma Group umbrella, which has a significant presence across 13 countries with 5000 employees, owned by Danir AB. The company targets industrial and energy sector clients primarily in Sweden, offering expert consulting services to address complex challenges in these fields. The website reflects a professional and consistent brand image aligned with its parent group. Technically, the website is built on Drupal 10, leveraging modern libraries such as jQuery and Bootstrap for responsive design and user experience. It employs Google Analytics for visitor tracking but lacks a cookie consent mechanism, which is a privacy compliance gap. The site is mobile-optimized and has good SEO practices but could improve accessibility features. Hosting details suggest a reliable provider, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but the absence of cookie consent and security.txt files indicates room for improvement in compliance and transparency. The domain registration is consistent with the business profile, showing legitimacy and appropriate age. Overall, the website presents a solid business and technical foundation with moderate security and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and policy disclosures would enhance trust and compliance posture.

H

HC-Engineering Oy

itufloor.fi

43

HC-Engineering Oy operates the ItuFloor brand, providing floor heating and cooling solutions across Finland. The company offers both material delivery and turnkey installation services, targeting residential and commercial building sectors. The website is professionally designed, localized in Finnish, and demonstrates a clear market position with over a million square meters of installed floor heating. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain registration details align well with the business identity, supporting legitimacy and trustworthiness.

A

Aermec

aermec.co.uk

49

Aermec UK Ltd. is a well-established company specializing in Heating, Ventilation, and Air Conditioning (HVAC) solutions for industrial and commercial sectors. With over 60 years of market presence in Europe, they position themselves as market leaders in systems engineering, offering a broad range of HVAC products, servicing, repairs, and comprehensive system testing. Their website reflects a professional and detailed presentation of their products and services, targeting industry and commercial enterprises requiring HVAC solutions. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes SEO best practices such as structured data and meta tags. Performance is moderate, with standard use of JavaScript libraries and tracking tools like Google Analytics and Tag Manager. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and security posture. Overall, the website is professional and credible, but the domain WHOIS data is unavailable and flagged as invalid by the registry, which raises concerns about domain legitimacy or configuration. This discrepancy should be addressed to ensure full trustworthiness and compliance.

A

Airlan

airlan.es

45

Airlan is a Spanish manufacturer specializing in climate control equipment, emphasizing technological innovation, energy efficiency, and comprehensive product offerings for centralized water installations. The company targets installers and businesses primarily in Spain and Latin America, offering products adapted to different electrical frequencies (50 Hz and 60 Hz). The website reflects a medium-sized enterprise with a professional online presence, including clear contact information and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as Slider Revolution and Google reCAPTCHA for security. While HTTPS is enforced and cookie consent mechanisms are in place, the absence of explicit security headers suggests room for improvement in security hardening. The WHOIS data is not publicly accessible due to Red.es restrictions, but the website content and business details appear consistent and trustworthy. Overall, the site scores well in content quality, business credibility, and privacy compliance, with moderate technical and security posture scores.

AERMEC Deutschland GmbH operates in the energy sector, likely focusing on HVAC solutions, serving customers and business partners primarily in Germany. The website is currently under construction and undergoing modernization, limiting available online services and content. The company provides direct contact channels via phone and email, indicating a traditional business communication approach. Technically, the website is simple, built with basic HTML and CSS without advanced frameworks or CMS. It is hosted on UI-DNS nameservers, suggesting a standard hosting environment. Mobile optimization and accessibility are basic, and SEO practices are minimal. No analytics or tracking technologies are detected, reflecting a low digital maturity level. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The email contact link is malformed, which could impact usability and security. HTTPS status is unknown but assumed necessary. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is basic with room for improvement. The overall risk is moderate due to limited content and security features. Strategic recommendations include implementing HTTPS, fixing contact link issues, adding security headers, and introducing privacy and cookie policies to improve compliance and trust.

A

AERMEC

aermec.fr

50

AERMEC is a well-established French company specializing in HVAC solutions, particularly terminal units and chillers. With over 55 years of experience and a strong market position, it serves diverse sectors including residential, commercial, industrial, and data centers. The website reflects a mature digital presence with detailed regional contacts and product information. Technically, the site uses Joomla CMS with modern front-end frameworks and includes standard security measures such as HTTPS and CAPTCHA-protected forms. However, there is room for improvement in security headers and explicit security policies. Privacy compliance is addressed with cookie consent and a privacy policy accessible via legal mentions. Overall, the site demonstrates good business credibility and technical implementation, suitable for its industry and audience.

I

Itula Oy

itula.fi

59

Itula Oy is a Finnish company specializing in energy-efficient heating and cooling systems, including innovative ceiling radiant panels and floor heating solutions. Established in 1999, Itula holds a strong market position as a pioneer in its sector within Finland, offering both products and expert consulting services from project planning to implementation. The company emphasizes energy efficiency and indoor climate quality, targeting business clients in construction, industrial, and residential markets. Technically, the website is built on WordPress with modern SEO and analytics tools, demonstrating a mature digital presence. Security measures include HTTPS, reCAPTCHA, and a comprehensive cookie consent mechanism, though additional security headers and policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a credible and established business.

A

Aermec S.p.A.

aermec.com

60

Aermec S.p.A. is a well-established international company specializing in air conditioning solutions and green technologies. The company positions itself as a leading global brand with a broad international presence, supported by multiple subsidiaries across Europe, North America, and Latin America. The website reflects a professional corporate identity with multilingual support and clear business information, targeting international customers and partners in the energy and HVAC sectors. Technically, the website is built on WordPress with common plugins and libraries, offering a moderate performance and good mobile optimization. However, there is room for improvement in accessibility and security headers implementation. Security posture is adequate with HTTPS implied, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and functional but would benefit from enhanced security and privacy transparency.

R

Refrion

refrion.com

70

Refrion is a leading company specializing in industrial refrigeration and ventilated equipment for industrial use worldwide. As part of the LU-VE Group, it holds a strong market position in the energy and manufacturing sectors, offering a range of products including dry coolers, condensers, and batteries. The website reflects a professional B2B business model targeting industrial clients requiring advanced cooling solutions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates key marketing and analytics tools such as Google Analytics and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, supporting a good user experience and trustworthiness. The lack of WHOIS data for the subdomain is consistent with it being a subdomain of luvegroup.com, which aligns with the corporate structure. Strategic recommendations include enhancing security headers, expanding contact information visibility, and maintaining compliance with evolving privacy regulations.

N

NürnbergMesse GmbH

chillventa.de

70

Chillventa is a globally recognized exhibition specializing in refrigeration technology, organized by NürnbergMesse GmbH in Germany. The website serves as a comprehensive platform for industry experts, exhibitors, and visitors to connect, showcasing the latest innovations and providing detailed event information. The company holds a leading market position in the energy sector, particularly in refrigeration and related technologies. Technically, the website is built on modern frameworks such as Next.js and Sitecore CMS, hosted on Microsoft Azure infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

E

Euroheat & Power

ehpcongress.org

50

Euroheat & Power operates the EHP Congress, the largest European event dedicated to district heating and cooling, focusing on the heating transition and decarbonisation. The event attracts over 450 participants, 80+ speakers, and 30+ exhibitors, providing industry insights, networking, and technology showcases. The website is well-branded and professionally designed, targeting industry professionals and stakeholders in the energy sector. Technically, the site is built on WordPress, uses modern JS libraries, and is hosted behind Cloudflare with HTTPS enabled, ensuring good performance and security. However, it lacks explicit privacy and cookie policies, and no security headers were detected, indicating room for improvement in privacy compliance and security hardening. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

R

Rebelcreations AG

epeeglobal.org

45

EPEE is a European industry association representing the refrigeration, air conditioning, and heat pump sectors. The organization focuses on policy advocacy, sustainable heating and cooling solutions, and industry representation. The website reflects an established presence with a domain registered since 2000 and hosted by OVH in Germany. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices.

Belimo is a global market leader specializing in the development, manufacturing, and marketing of field devices for heating, ventilation, and air conditioning (HVAC) systems. Their core business revolves around actuators, control valves, and sensors, targeting professionals and companies in the HVAC sector. The website is professionally designed, localized in Finnish, and demonstrates a strong brand presence consistent with a large enterprise in the energy sector. Technically, the site uses Magnolia CMS, integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, and is hosted on a robust infrastructure likely leveraging Akamai CDN. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain is a notable gap, potentially impacting trust but not necessarily indicating illegitimacy. Overall, the site presents a credible and professional digital presence with room for improvement in privacy transparency and security disclosures.

C

Chiller Oy

chiller.eu

74

Chiller Oy is a Finnish company specializing in innovative cooling, heating, and energy solutions tailored to various applications. The company aims to provide thermal comfort and optimal indoor air quality, positioning itself as a specialized B2B provider in the energy sector. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress CMS and modern SEO and analytics tools. The technical infrastructure is sound, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the website presents a trustworthy and professional image consistent with its business claims.

F

FläktGroup

flaktgroup.com

68

FläktGroup is a company specializing in air technology systems aimed at maintaining clean and healthy indoor air for improved living and professional environments. The website presents a professional and consistent brand image, targeting businesses and professionals in need of air quality solutions. The company appears to be a large entity within the energy sector, offering B2B technology and manufacturing services related to HVAC and air systems. Technically, the website employs modern technologies such as React and .NET, integrates Google Tag Manager and Cookiebot for analytics and consent management, and is served over HTTPS with a valid SSL certificate. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content supports legitimacy. Privacy compliance is moderate, with a cookie banner present but no explicit privacy or terms of service pages detected. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

1

1Kelvin

kelvin.ee

50

1Kelvin is an Estonian-based company specializing in technical system planning, design, and installation with a strong focus on energy efficiency and related services. With over 20 years of experience, the company positions itself as a reliable partner for large and complex projects in Estonia, targeting primarily business clients requiring engineering and energy consultancy services. The website reflects a professional and consistent brand image, offering clear information about services and company expertise. Technically, the site is built on WordPress with modern front-end technologies and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Privacy compliance is partially addressed with references to cookie and privacy policies but lacks an explicit consent mechanism. Overall, the site is trustworthy and credible with room for improvement in security and privacy transparency.

Airwave OÜ is a well-established Estonian company specializing in the import and wholesale of heating, ventilation, and air conditioning (HVAC) equipment, serving primarily the Baltic region and Finland since 1999. The company positions itself as one of the largest HVAC importers and wholesalers in the Baltics, offering a broad range of products including heat pumps, ventilation systems, and climate control devices. Their business model focuses on wholesale distribution supported by professional sales and after-sales services, catering to both commercial and residential customers. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome for UI components. The site demonstrates good mobile optimization and SEO practices, with a clear navigation structure and professional design. Performance is moderate, and accessibility is basic but functional. The absence of advanced analytics or tracking scripts suggests a minimal user tracking approach. From a security perspective, the website enforces HTTPS with a valid SSL configuration and includes CSRF tokens in its scripts, indicating awareness of basic web security practices. However, it lacks several security headers and does not publicly disclose security policies or incident response procedures. There is no visible cookie consent mechanism, which may impact GDPR compliance. The presence of a privacy policy and terms of service pages indicates some level of compliance and transparency. Overall, Airwave OÜ's website reflects a credible and professional business with a solid market presence in the HVAC sector. Security posture is adequate but could be improved with enhanced headers, explicit policies, and cookie consent. The site is trustworthy with consistent WHOIS data and clear contact information. Strategic improvements in privacy compliance and security transparency would further strengthen their digital maturity and customer trust.