Manufacturing security reports

K

Kaskipuu Oy

kaski.fi

58

Kaskipuu Oy is a well-established Finnish family-owned manufacturing company specializing in high-quality windows and doors. Founded in 1978, it has grown into the largest domestic window and door family business in Finland and operates internationally. The website reflects a professional corporate presence with clear branding and a focus on quality products. The company targets both professional customers and consumers interested in premium construction materials. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and tools such as FontAwesome, jQuery, and Cookiebot for GDPR compliance. Hosting and domain registration are managed by Cloud City Oy, a Finnish provider, ensuring local infrastructure support. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The site uses extensive tracking and advertising technologies including Google Analytics, Facebook Pixel, and LinkedIn cookies, but maintains good privacy compliance through Cookiebot. Overall, the website is trustworthy, well-maintained, and aligned with the company's business profile.

P

Podravka d.d.

podravka.com

53

Podravka d.d. is a well-established Croatian food processing and pharmaceutical company with a strong international presence in over 60 markets and a portfolio of more than 1000 products. The company emphasizes sustainable development and social responsibility, targeting consumers seeking high-quality food and pharmaceutical products. The website reflects a mature digital presence with multiple language options and comprehensive content about products, corporate responsibility, and investor relations. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. The WHOIS data for the domain is missing or unavailable, which is unusual but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve trust and compliance.

K

Karavela SIA

karavela.lv

63

Karavela SIA is a Latvian-based medium-sized company specializing in fish processing and canned fish production, including private label manufacturing. The company positions itself as a leading fish processing and canned goods manufacturer in the Baltic region, offering a wide product range and private label services. The website is professionally designed with clear navigation and good content quality, targeting retail and wholesale customers interested in fish products. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery and UIkit, integrates Google Analytics and Tag Manager for marketing and analytics, and employs a cookie consent mechanism compliant with GDPR. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit security policies. WHOIS data was unavailable due to query limits, limiting domain legitimacy verification, but the website content and contact information appear consistent and trustworthy. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance.

W

We Do Spaces S.r.l.

sitland.com

62

Sitland, operated by We Do Spaces S.r.l., is a well-established Italian manufacturer specializing in ergonomic office and contract furniture. Founded in 1998, the company has a strong market presence with a focus on innovative seating solutions and workspace design. Their website reflects a professional and consistent brand image, targeting businesses and organizations seeking quality office furniture. The company maintains active social media channels and showcases numerous international projects, reinforcing its market position. Technically, the website is built on the ProcessWire CMS and utilizes modern frontend technologies including UIkit, Typekit fonts, and integrates tracking and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Cookie consent is managed through Iubenda, indicating attention to privacy compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, it lacks visible security headers which could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-term registration, consistent with the company's history. Overall, Sitland's digital presence is solid with good content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and explicit security policies could further strengthen their security posture and trustworthiness.

Q

Quadrifoglio Sistemi d’Arredo S.P.A

quadrifoglio.com

52

Quadrifoglio Sistemi d’Arredo S.P.A is an established Italian manufacturer specializing in office, living, and lighting furniture, founded in 1991. The company targets professional and hospitality sectors with a diversified product portfolio and global sales network. Their website reflects a mature digital presence with multi-language support, comprehensive product catalogs, and a focus on design and comfort. Technically, the site is built on WordPress with modern frameworks like Bootstrap 5 and integrates SEO and marketing tools such as Yoast SEO and Google Tag Manager. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a detailed privacy and cookie policy and consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts trust. Overall, the site is professional, secure, and user-friendly, supporting the company's market position as a reputable furniture manufacturer.

M

Moroso s.p.a.

moroso.it

62

Moroso s.p.a. is an established Italian manufacturer specializing in contemporary furniture for both home and contract markets. With a domain registered since 1997 and a strong international presence, the company offers a wide range of products including sofas, chairs, tables, and accessories. The website reflects a mature digital presence with multilingual support, rich content, and clear navigation aimed at consumers and business clients interested in design furniture. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPML, optimized for performance and SEO. Security posture is strong with HTTPS, DNSSEC, and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Overall, the website demonstrates high professionalism and trustworthiness.

I

ICF S.p.A.

icf-office.it

46

ICF S.p.A. is an established Italian manufacturer specializing in office and contract furniture, with a strong emphasis on high-quality, distinctive design. Founded in 2004, the company maintains a medium-sized business profile with an international footprint. Their website reflects a professional and consistent brand image, targeting business customers seeking elegant and functional office furnishings. The site supports multiple languages and offers rich content including product catalogs, news, and downloadable resources. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though there is room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the website demonstrates a mature digital presence aligned with the company's business model and market position.

B

Bontempi Casa

bontempi.it

61

Bontempi Casa is a well-established Italian furniture manufacturer specializing in high-end design furniture for residential, contract, and hospitality markets. The company emphasizes Italian craftsmanship and contemporary aesthetics, supported by a strong brand presence and multiple international design awards. Their digital infrastructure is built on WordPress with modern front-end technologies, ensuring a responsive and user-friendly experience. The website demonstrates good SEO and privacy compliance, including GDPR adherence and cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and no evident vulnerabilities, though some security headers could be improved. Overall, the company presents a professional and trustworthy online presence aligned with its market position.

S

SIA SAFIN NES

safinnes.lv

64

SAFIN NES is a Latvian company specializing in the sale and distribution of high-quality steel and metal products, targeting both large and small businesses across Latvia and Europe. Their business model centers on an e-commerce platform offering a wide range of metal materials with flexible payment and delivery options. The company emphasizes professional service, competitive pricing, and customized client solutions. Technically, the website employs modern web technologies including Laravel Livewire, Bootstrap, and Google Tag Manager, providing a responsive and user-friendly experience. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements a comprehensive cookie consent mechanism, though it lacks advanced security headers and published security policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

O

Open Pack

openpack.eu

45

Open Pack is a Latvia-based manufacturing company specializing in the production of cardboard packaging and point of sales (POS) materials. The company offers a broad range of packaging solutions including rigid cardboard, corrugated cardboard, and individual custom solutions, targeting businesses that require specialized packaging and POS materials. Their market position is that of an established small manufacturer with a focus on combining production expertise with sales specialization to deliver tailored solutions. Technically, the website employs modern web technologies including Google Analytics for tracking, Google reCAPTCHA v3 for form security, and a responsive design framework that ensures good mobile optimization. The site is hosted under a reputable registrar, GoDaddy.com, LLC, and uses HTTPS to secure communications. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site demonstrates basic best practices such as HTTPS and CSRF protection on forms, but lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. The absence of these elements suggests a moderate security posture with opportunities to enhance compliance and user trust. Overall, the website is professional and functional with clear contact information and social media presence, but would benefit from improved privacy compliance and enhanced security measures to strengthen its trustworthiness and regulatory adherence.

F

Farm Frites

farmfrites.com

76

Farm Frites is a global manufacturer specializing in fries, potato specialties, and appetizers. The company collaborates closely with farmers to produce high-quality potato products distributed worldwide. Their website reflects a professional presence with clear branding and a focus on sustainability, as evidenced by their Sustainability Report 2024. The digital infrastructure is modern, leveraging Next.js and React frameworks, with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and provides a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and structure suggest a legitimate business. Overall, the site is well-designed and functional, but could improve in security transparency and contact information availability.

S

Sintec Group

sintecmena.ae

55

Sintec Group operates as a specialized provider of mechanical and electrical installation services with a strong presence in the Middle East and North Africa (MENA) region, supported by offices in the UK, USA, Latvia, and Russia. The company focuses on delivering high-quality installation services tailored to customer-specific requirements across various industries including manufacturing, transportation, and energy. Their service portfolio includes electrical installation, design, procurement, commissioning, and project management, supported by a skilled in-house workforce and certified quality assurance processes. Technically, the website is built on a modern WordPress CMS platform, leveraging popular libraries and frameworks such as jQuery and Bootstrap, and is hosted behind Cloudflare for performance and security. The site demonstrates good mobile optimization, SEO practices, and user experience design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved and formal security policies are absent. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party components to maintain security and compliance.

O

Orkla ASA

orkla.com

68

Orkla ASA is a leading industrial investment company specializing in brands and consumer-oriented companies, with a strong presence in Europe and ambitions for international growth. Their portfolio spans ten market-leading companies across sectors such as food, health, home care, and paints. The website reflects a professional and consistent brand image, targeting investors, partners, and consumers interested in their business. Technically, the site uses modern tools like Google Tag Manager and Cloudflare Stream, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data is a notable anomaly.

Top Choice Poultry is an established poultry farming and production company with over 50 years of experience, focusing on export markets in Sweden, Finland, Denmark, and other countries. The company offers a range of poultry products including roasted, IQF frozen, chilled, and natural products. The website reflects a medium-sized manufacturing business with consistent branding and a professional online presence. Technically, the site is built on WordPress with modern libraries and plugins, optimized for SEO and mobile devices, though performance is moderate. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. Overall, the site is trustworthy and compliant with privacy regulations, though contact information is not explicitly provided on the main pages.

T

Thrive Freeze Dry

thrivefoods.com

56

Thrive Freeze Dry operates as a global freeze dry food manufacturing company, providing a range of freeze drying services and products including fruits, vegetables, proteins, meals, confections, and pet foods. The company positions itself as a reliable partner with capabilities spanning research and development to full-scale production, emphasizing product quality and traceability. The website is built on WordPress using Elementor, featuring modern web technologies and multimedia content such as embedded videos and image carousels. The technical infrastructure supports good performance and mobile optimization, with HTTPS enforced and integration of Google Analytics and Freshchat for analytics and customer support. Security posture is generally good with secure forms and no obvious vulnerabilities, though security headers and incident response policies are not published. Privacy compliance is basic, with a privacy policy page present but no cookie consent mechanism detected. The absence of WHOIS data for the domain is a notable concern, as it raises questions about domain registration legitimacy despite the active and professional website presence. Overall, the site demonstrates moderate to good digital maturity and business credibility but would benefit from enhanced transparency and compliance features.

B

Barentz North America

barentz-na.com

68

Barentz North America is a large-scale distributor specializing in life-science ingredients and specialty chemicals, serving diverse markets such as human and animal nutrition, pharmaceuticals, personal care, and industrial cleaning. The company operates as a B2B distributor with a strong regional presence in North America and is part of the global Barentz group. Their website reflects a professional and consistent brand image with a focus on product search and customer engagement through user accounts and support forms. Technically, the website leverages a modern but somewhat dated tech stack including AngularJS, jQuery, Bootstrap, and Sitecore CMS. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. However, some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or blocking WAFs were detected, indicating a stable security baseline but room for improvement in compliance and transparency. Overall, the website presents a credible and professional business front with moderate technical maturity and a solid security foundation. Strategic enhancements in security headers, DNS security, and privacy compliance would further strengthen trust and resilience.

M

Meira Oy

meira.fi

48

Meira Oy is a well-established Finnish company specializing in the manufacturing and retail of coffee and seasoning products. With over a century of history, the company operates from its own factory in Helsinki and targets Finnish consumers who appreciate quality coffee and culinary spices. The website reflects a mature market position with a focus on sustainability and responsibility. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the website employs HTTPS with good SSL configuration and security headers, and no critical vulnerabilities were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration details align well with the business identity, supporting the legitimacy and trustworthiness of the site.

B

Beynon Sports

beynonsports.com

68

Beynon Sports is a well-established manufacturer and supplier of sports surfaces, specializing in track and field facilities across North America. The company has a strong market presence with a history dating back to 2002, serving prestigious athletic venues, educational institutions, and city parks. Their website reflects a professional and comprehensive digital presence, targeting sports facility managers and organizations seeking high-quality athletic surfaces. Technically, the website employs modern JavaScript libraries, Google Analytics, and a robust cookie consent mechanism, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enforced, Google reCAPTCHA integration, and no exposed sensitive data, although DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear cookie consent and GDPR-aligned policies. Contact is primarily via web forms, with no direct email or phone numbers publicly listed. Overall, the site demonstrates a mature digital infrastructure and trustworthy business representation.

G

GrassMaster Solutions

grassmastersolutions.com

57

GrassMaster Solutions is a well-established company specializing in hybrid grass technology for sports pitches, with a history dating back to 1989. They hold a market-leading position and are part of Tarkett Sports, offering innovative hybrid turf solutions globally. The website demonstrates a professional digital presence with multilingual support, modern CMS usage, and integration of privacy and security features such as cookie consent and reCAPTCHA. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Security posture is moderate with room for improvement in security headers and explicit security policies. Overall, the website is functional, user-friendly, and compliant with privacy regulations, but business credibility is slightly impacted by domain registration inconsistencies.

F

FieldTurf

fieldturf.com

67

FieldTurf is a globally recognized leader in the manufacturing and supply of artificial turf for sports fields, boasting over 25,000 installations worldwide. As a division of Tarkett, FieldTurf offers innovative synthetic turf solutions tailored for football, rugby, hockey, tennis, and padel, targeting sports organizations, municipalities, and commercial clients. The website reflects a mature and professional business with consistent branding and a clear market position as an industry innovator and trusted provider. Technically, the website leverages modern technologies including Cloudflare for DNS and CDN, Google Analytics and Hotjar for analytics, and Shopify components for e-commerce functionalities. The site is well-optimized for mobile and accessibility, with good SEO practices and a comprehensive cookie consent mechanism ensuring privacy compliance. The use of reCAPTCHA and Cloudflare enhances security against bots and malicious traffic. Security posture is strong with HTTPS enforced, no visible vulnerabilities, and good security practices observed. However, the absence of explicit privacy policy and terms of service pages, as well as lack of a published security policy or vulnerability disclosure, represent areas for improvement. WHOIS data confirms the domain's legitimacy and long-standing presence, supporting trustworthiness. Overall, FieldTurf's digital presence is professional and secure, with minor gaps in compliance documentation. Strategic enhancements in privacy and security transparency would further strengthen trust and regulatory adherence.

T

Tarkett

tarkett-group.com

74

Tarkett Group is a globally recognized leader in the manufacturing and supply of innovative and sustainable flooring and sports surface solutions. The company targets a diverse audience including hospitals, schools, housing, hotels, offices, stores, and sports fields, emphasizing health, wellbeing, and environmental responsibility. Their business model integrates circular economy principles and eco-innovation strategies aligned with their Tarkett Human-Conscious Design® approach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on sustainability and corporate responsibility. Technically, the site is built on WordPress with modern analytics and cookie consent tools, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and branding strongly indicate a legitimate enterprise. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security documentation.

Tarkett is a well-established flooring expert specializing in solutions for both residential and public spaces in Finland. The company offers a wide range of flooring products including parquet, vinyl, laminate, linoleum, and sports flooring, targeting both consumers and professionals. As part of the international Tarkett Group, the Finnish site reflects a strong market position with clear segmentation for B2B and B2C customers. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies with a robust consent mechanism.

U

Unitronics

unitronics.it

55

Unitronics is an established Italian manufacturer specializing in Programmable Logic Controllers (PLC) with integrated Human-Machine Interface (HMI) panels. The company offers a comprehensive range of award-winning all-in-one PLC + HMI products, complemented by programming software and strong technical support. Their target audience includes industrial automation professionals, manufacturing companies, and system integrators. The website reflects a medium-sized manufacturing business with a consistent brand presence and good content quality in Italian language. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Marketo Munchkin. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. Performance is moderate, and hosting details are not explicitly identified. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and does not provide visible security policies, incident response contacts, or vulnerability disclosure mechanisms. No sensitive data exposure or vulnerable libraries were detected in the provided content. The domain registration data is consistent with the business claims, indicating high legitimacy. Overall, the website demonstrates a solid business and technical foundation but requires improvements in privacy compliance, security headers, and transparency regarding security policies to enhance trust and compliance posture.

H

HMS Networks

anybus.com

67

HMS Networks is a well-established company specializing in industrial communication solutions, offering a broad portfolio of wired and wireless products under the Anybus brand. The company targets industrial automation sectors, system integrators, and manufacturers globally, positioning itself as a key player in enabling safe and fast industrial communication. The website reflects a professional and consistent brand image with comprehensive product information and clear contact channels. Technically, the site employs modern JavaScript libraries, video players, and analytics tools, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data introduces some uncertainty about domain registration transparency but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Overall, HMS Networks demonstrates a mature digital presence aligned with its business objectives and industry standards.

U

UAB Rivona

rivona.lt

45

UAB Rivona is a large Lithuanian company established in 1993, operating in manufacturing, real estate rental, warehousing, logistics, and import/export. It is part of the Norfos įmonių grupė and manages multiple private brands. The website is professionally designed using Silverstripe CMS and modern JavaScript libraries, with good mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site reflects a mature business with a strong market position and compliance with GDPR requirements.

The website bookprinting.eu provides an online price calculator focused on hardcover and softcover book printing services. It targets publishers, authors, and printing customers seeking detailed pricing based on book dimensions, paper types, printing colors, binding, and delivery options. The business operates in the manufacturing sector with a niche focus on book production pricing and ordering. The site integrates standard web analytics and tag management tools but lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Technically, the site uses jQuery and Google services for analytics and tag management. The design and content quality are basic, with moderate navigation clarity and mobile optimization. No advanced CMS or hosting details are evident. Security posture is moderate with HTTPS assumed but no detected security headers or advanced protections. Forms collect book printing parameters but do not appear to collect personal data. Security-wise, the site lacks explicit security policies, incident response contacts, and vulnerability disclosures. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data indicates a consistent and legitimate domain registration with a European registrar, supporting the site's credibility. Overall, the site is functional for its purpose but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

S

SIA Gaujas koks

pine-lux.com

58

Pine Lux is a Latvian small manufacturing company specializing in the production of environment-friendly pine wood panels primarily used in furniture and interior design. Founded in 2020, the company emphasizes quality and sustainability, offering various panel types and finishes to meet customer needs. Their market position is niche, targeting furniture manufacturers, interior designers, and the DIY market. The website is built on WordPress with standard SEO optimizations and moderate performance. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks advanced security headers and formal privacy or security policies. Cookie consent is implemented, but privacy compliance could be improved. Overall, the site presents a professional image with clear contact information and trust certifications such as FSC and PEFC.

S

SIA "CTC HOLDINGS"

ctc-holdings.com

45

CTC HOLDINGS is a well-established European manufacturer specializing in casino and gaming equipment since 1991, serving a broad international customer base across Europe, Africa, South America, and Asia. The company positions itself as a leading provider in its niche market, offering casino equipment and studio solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting casino operators and related businesses. Technically, the website is built on WordPress with modern frontend technologies such as Bootstrap 5 and jQuery, hosted by a reputable registrar. It is mobile optimized and performs moderately well. However, some technical improvements could be made, including the addition of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers. There is no evidence of privacy or cookie policies, nor incident response or vulnerability disclosure mechanisms, which are important for compliance and trust. Google Analytics is used without a visible consent mechanism, indicating potential privacy compliance gaps. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

L

Lauma

lauma.com

51

Lauma is a well-established European manufacturer specializing in textile and medical materials, with a strong market position supported by a long heritage since 1969. The company operates multiple subsidiaries including Lauma Fabrics, Lauma Medical, and Tele Textile Latvia, focusing on quality products and environmental certifications. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting partners and customers in the textile and medical sectors. Technically, the site is built on WordPress with WooCommerce and Elementor, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain registration protections, though improvements are recommended in DNS security and security headers. Privacy compliance is partial, with privacy and terms of service pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy and credible but could enhance security and privacy transparency to align with best practices.

R

ROSE Systemtechnik GmbH

rose-systemtechnik.com

54

ROSE Systemtechnik GmbH is a German-based manufacturer specializing in the development and production of high-quality enclosure systems and system solutions for various industries. The company targets industrial clients requiring robust and customized enclosure solutions. Their website reflects a professional and consistent brand image, supported by comprehensive privacy and cookie policies, and active social media presence. Technically, the site is built on WordPress using the Enfold theme, integrating modern marketing and analytics tools such as HubSpot Forms, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS and implements essential security headers, but lacks a publicly available security policy or incident response information, which could be improved. The absence of WHOIS data for the domain is a notable concern, suggesting the need for further verification of domain registration legitimacy. Overall, the website presents a solid business and technical foundation with room for enhanced transparency in security practices.

L

Loxam

loxam.dk

65

Loxam is a leading equipment rental company operating primarily in Denmark and Europe, specializing in construction and related sectors. The company offers a wide range of machinery and tools for rent, supported by 37 local branches and online booking capabilities. Their market position is strong, being the largest in their sector in Denmark and Europe, with a focus on sustainability through their LoxGreen initiative. Technically, the website is built on a modern SAP Hybris Commerce platform with integrations for search and customer engagement, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie consent and GDPR-aligned privacy policies. Overall, the website and business demonstrate professionalism and trustworthiness, though the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

S

STABILA Messgeräte Gustav Ullrich GmbH

stabila.com

56

STABILA Messgeräte Gustav Ullrich GmbH operates a professional website focused on precision measuring instruments such as spirit levels, lasers, and tape measures. The company targets professional tradespeople and industries requiring high-quality measuring tools, maintaining a consistent and professional brand presence with multilingual support. The website is built on the Contao CMS platform, utilizing modern JavaScript libraries like jQuery and AOS for enhanced user experience. It features a cookie consent mechanism and uses Matomo for analytics, indicating a commitment to privacy compliance. However, the absence of WHOIS data for the domain www.stabila.com raises questions about domain registration transparency, although the website content and structure suggest legitimacy. Security posture is strong with HTTPS and CSRF protection, but lacks some security headers and explicit incident response information. Overall, the site is well-designed and functional, with room for improvement in contact transparency and security header implementation.

F

Festool

festool.com

74

Festool is a globally recognized manufacturer and retailer of high-quality power tools and accessories, targeting professional tradespeople and serious DIY enthusiasts. The company offers a broad range of products including plunge-cut saws, circular saws, jigsaws, cordless drills, joining machines, and routers. The website reflects a strong brand presence with consistent design and comprehensive product information, supporting its market position as a premium tool provider. Technical infrastructure leverages modern JavaScript frameworks such as Vue.js, along with Google Tag Manager and Analytics for marketing and performance tracking. The site is well-optimized for mobile and SEO, with good accessibility features. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes security headers such as Content Security Policy. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism via Usercentrics. However, the absence of WHOIS registration data and lack of explicit security policies or incident response contacts present gaps in transparency and trustworthiness. No vulnerability disclosure or security.txt files were found, which could be improved to enhance security posture. Overall, the website is professional, secure, and privacy-conscious, but the missing domain registration details and limited security policy disclosures suggest areas for improvement. Strategic recommendations include publishing a security policy, establishing incident response contacts, and implementing vulnerability disclosure mechanisms to strengthen trust and compliance.

Lincoln Electric is a global leader in the manufacturing of arc welding products, automated joining, assembly and cutting systems, and related safety equipment. The company targets industrial manufacturers, welding professionals, and fabrication sectors with a comprehensive product portfolio including welding equipment, filler metals, automation solutions, and personal protective equipment. The website reflects a mature enterprise with a strong market position and extensive product offerings. Technically, the website is built on the Sitecore CMS platform, utilizing modern JavaScript libraries such as jQuery and integrates marketing and analytics tools like Google Tag Manager and OneTrust for cookie consent. The site is mobile optimized with good SEO practices and a well-structured navigation system, providing a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, the absence of visible security headers and lack of explicit security or incident response contact information are areas for improvement. The missing WHOIS data for the domain is unusual for a large enterprise and slightly impacts the trustworthiness assessment. Overall, Lincoln Electric's website demonstrates strong business credibility and technical maturity with minor security and transparency gaps. Strategic enhancements in security headers, incident response visibility, and WHOIS transparency would further strengthen the site's trust and compliance posture.

N

NuernbergMesse India Pvt Ltd

indiawood.com

50

INDIAWOOD is a well-established international trade fair focused on woodworking and furniture manufacturing technologies, organized by NuernbergMesse India Pvt Ltd. The website reflects a mature business with a strong market position in Asia, targeting industry professionals and exhibitors. The technical infrastructure is based on ASP.NET WebForms with modern frontend libraries and is hosted behind Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS and security headers, though improvements can be made by enabling DNSSEC and adding visible cookie consent mechanisms. Contact information and social media presence are clear, supporting business credibility. Overall, the site is professional, content-rich, and trustworthy.

N

NuernbergMesse India Pvt Ltd

indiamattresstechexpo.com

62

IndiaMattresstech & Upholstery Supplies Expo is a specialized B2B trade fair platform focused on the mattress and upholstery manufacturing industry in India. It serves as a key event for manufacturers, suppliers, and buyers to network, showcase products, and explore market opportunities, with expansion into East India via the IME Pavilion at KOLKATAWOOD. The website is professionally designed using ASP.NET WebForms and modern frontend libraries, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and domain locking, though improvements are recommended in cookie consent and security headers. Privacy policy is present but basic, and no terms of service or incident response policies are found. Overall, the site reflects a credible and established business with strong industry presence and trust indicators.

The website w-a-d.in represents the Wood+ In Architecture And Design (WAD) event platform, organized by NürnbergMesse India Pvt Ltd. It serves as a specialized event focusing on the use of wood and mass timber in architecture and design, co-located with the flagship INDIAWOOD event. The platform targets professionals such as architects, engineers, government officials, and manufacturers, providing sessions, networking, and industry insights. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized event organizer in the manufacturing and real estate sectors in India. Technically, the site is built on ASP.NET WebForms with modern front-end libraries like Bootstrap and OwlCarousel. It uses HTTPS and Google Analytics for tracking but lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The site is mobile optimized and performs moderately well but could improve accessibility and SEO features. From a security perspective, the site enforces HTTPS and does not expose sensitive data, but the absence of security headers and privacy policies indicates room for improvement. No vulnerabilities or malicious content were detected. WHOIS data confirms the legitimacy of the domain and its alignment with the business entity. Overall, the website is a credible and professional event platform with good business credibility but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

N

NürnbergMesse India

nm-india.com

57

NürnbergMesse India is a medium-sized event organization company specializing in trade fairs and exhibitions across various sectors including manufacturing, retail, and media within India. It operates as a subsidiary of the global NürnbergMesse Group, leveraging international expertise and local market knowledge to facilitate business growth and market entry. The website is professionally designed with a clear event portfolio and integrates social media channels effectively. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and is hosted with a reputable registrar and DNS provider. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and explicit policies are recommended. Overall, the site is accessible, trustworthy, and aligns well with the business's market positioning.

A

AUER Packaging

auer-packaging.com

51

AUER Packaging is a German-based manufacturer specializing in high-quality plastic storage and transport products, serving a broad range of industries with a focus on business customers. The company emphasizes its 'Made in Germany' quality, ISO 9001:2008 certification, and offers extensive customization options. The website reflects a mature digital presence with a comprehensive product catalog, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries, consent management tools, and integrates third-party services like Google Tag Manager and Trustpilot for analytics and customer reviews. Security posture is good with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain is a notable gap, slightly reducing trust but not undermining the overall legitimacy given the detailed business information and certifications presented. Strategic recommendations include enhancing security headers, publishing a security.txt file, and verifying domain registration details to improve trust.

L

Loxam

loxam-access.com

65

Loxam Access is a professional equipment rental subsidiary of Groupe LOXAM, serving sectors such as construction, industry, and services primarily in France. The website offers a comprehensive catalog of rental equipment including aerial platforms, handling machinery, and environmentally friendly options, supported by expert advice and local agency presence. The company holds certifications such as Qualiopi, reinforcing its professional standing. Technically, the website is built on SAP Hybris Commerce platform with modern JavaScript libraries and features like Algolia search and slick carousels. It is mobile optimized and includes accessibility features, though some improvements could be made. Security posture is strong with HTTPS and secure forms, but lacks explicit security headers and incident response information. The WHOIS data is missing or unavailable for the domain www.loxam-access.com, which is unusual for a commercial site and lowers trust slightly. However, the website content, branding, and external references strongly indicate legitimacy and association with Groupe LOXAM. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, functional, and trustworthy with minor technical and transparency improvements recommended.

N

NürnbergMesse China Co., Ltd.

ipbexpo.com

43

The IPB Expo website represents a well-established exhibition platform focused on powder, bulk solids, and fluid processing industries in China. Jointly organized by NürnbergMesse China and the Chinese Society of Particuology, it serves as a leading one-stop purchasing and networking platform for exhibitors and trade visitors across multiple industrial sectors including chemicals, energy, pharmaceuticals, and food. The website provides comprehensive information about the event, exhibitors, product ranges, and related conferences, reflecting a mature business model with a strong market position in China. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Swiper.js for UI components and Baidu Analytics for tracking. Hosting is provided by Alibaba Cloud, consistent with the domain registration data. The site is mobile optimized and offers a good user experience, though some SEO and accessibility features could be improved. Performance is moderate, with deferred loading of scripts and optimized images. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC is not enabled. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are gaps in compliance and security posture. The WHOIS data confirms the domain is legitimate, long-standing, and consistent with the business claims, enhancing trustworthiness. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, security hardening, and transparency regarding data protection and incident response to improve trust and regulatory adherence.

Mitsubishi Heavy Industries operates a dedicated career website providing job search and talent acquisition services globally. The company is a large multinational enterprise with over 130 years of history, offering products and services in sectors including commercial aviation, energy, transportation, machinery, defense, and space systems. The website leverages the SAP SuccessFactors platform for career management, ensuring a professional and functional user experience. The site is well-branded, mobile-optimized, and includes cookie consent mechanisms and links to comprehensive privacy and terms policies. Security posture is solid with HTTPS enforced and anti-clickjacking measures, though some security headers and explicit security policies are absent. Overall, the site is trustworthy and professionally maintained, supporting MHI's global recruitment efforts.

M

Mitsubishi Heavy Industries, Ltd.

mhi.com

74

Mitsubishi Heavy Industries, Ltd. is a large multinational manufacturing and engineering conglomerate headquartered in Japan, with a global presence and diversified business sectors including energy, transportation, aerospace, and defense. The company provides a wide range of industrial products and solutions targeting global industrial customers, investors, and partners. The website reflects a mature digital presence built on Drupal 10, featuring comprehensive navigation, social media integration, and consent management mechanisms. Security posture is strong with HTTPS and consent tools, though explicit security policies and vulnerability disclosure programs are not evident. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include enhancing transparency with published privacy and security policies and adding security headers to improve defense-in-depth.

S

SIA EVEKO

eveko.lv

55

SIA EVEKO is a Latvian-based full-service offset printing house with over 20 years of experience serving local and export markets, particularly in the Baltics and Scandinavia. The company emphasizes quality, speed, and excellent customer service, offering a range of printing services including offset, digital, silk screen printing, hot foil stamping, embossing, and environmentally friendly products under FSC certification. Their website is professionally designed on the Squarespace platform, featuring clear navigation and responsive design. However, the site lacks key compliance documents such as privacy policy, cookie policy, and terms of service, which are critical for GDPR compliance and user trust. Contact information is clearly provided, enhancing business credibility. The technical infrastructure is modern and secure, with HTTPS and HSTS enabled, but there is room for improvement in accessibility and privacy compliance. WHOIS data is unavailable due to query limits, but no suspicious indicators were found in the website content or linked domains.

M

Mass Portal SIA

massportal.com

58

Mass Portal SIA is a specialized manufacturer and service provider in the precision 3D printing industry, offering a range of products including desktop and standalone 3D printers, filament dryers, and automated printfarm solutions. Their services extend to printing services and custom solution development, targeting innovators, engineers, and manufacturing professionals. The company positions itself as a niche player focusing on high-quality, flexible 3D printing technologies. Technically, the website is built on the Mozello CMS platform, leveraging Amazon Cloudfront for content delivery and using common JavaScript libraries such as jQuery and Fancybox. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site is mobile-optimized with good navigation and professional design, though some SEO and accessibility features could be improved. From a security perspective, the site uses HTTPS but lacks several important security headers, and no explicit privacy or cookie policies are present, which impacts compliance posture. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration issues or privacy protection that is not disclosed. Social media presence and professional branding support legitimacy, but the missing WHOIS data warrants caution. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance improvements, and verification of domain registration status to strengthen trust and reduce risk.

F

Food Union

rpk.lv

71

Food Union is a well-established Latvian dairy and food manufacturing company with a leading market position since 1909. The company operates a professional website primarily targeting consumers and business partners in the Baltic region. The site provides comprehensive information about their products, brands, sustainability efforts, and corporate details. Technically, the website is built on a modern React framework, integrating Google Analytics and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and explicit security policy disclosures. The absence of WHOIS data due to query limits restricts full domain trust verification, though the website content and external links suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security policy transparency and incident response readiness.

J

JSJ Corp

jsjcorp.com

58

JSJ Corporation is a well-established growth firm and holding company specializing in manufacturing, distribution, and service businesses with a global footprint. The company emphasizes long-term investment and partnership with innovative companies aligned with its core values. The website reflects a professional corporate presence with clear business descriptions, portfolio highlights, and community impact initiatives. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though no explicit security policy or incident response information is published. The absence of WHOIS registration data is a notable concern for domain legitimacy, warranting further verification. Overall, the website presents a credible and professional image with minor gaps in security transparency and legal documentation.

MX Group Limited is a UK-based manufacturer specializing in showers, shower trays, and shower accessories. Established in 2000, the company positions itself as a leading manufacturer in its sector, targeting trade customers and local stockists. The website provides comprehensive product support, environmental policies, and trade account services, reflecting a medium-sized manufacturing business with consistent branding and good content quality. Technically, the website uses basic JavaScript and CSS technologies hosted on Pickaweb servers, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and ISO 27001 certification referenced, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite use of Google Analytics tracking. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

L

Loja dos Macacos

sptac.com.br

49

Loja dos Macacos is a Brazilian company specializing in the rental of hydraulic jacks, serving industrial, mechanical, and construction sectors. The company positions itself as a market leader in Brazil, offering high-quality equipment and maintaining an active blog to educate customers. The website is built on WordPress using modern tools such as Elementor and Yoast SEO, indicating a mature digital presence. The technical infrastructure includes Cloudflare DNS and standard performance optimizations, with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some advanced security headers and incident response contact information. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

G

Gelagri

gelagri.com

63

Gelagri is a French manufacturer specializing in frozen vegetables and prepared frozen meals, operating primarily in the Brittany region. The company appears to be associated with the cooperative Triskalia, indicating a cooperative business model focused on agricultural products. The website is professionally designed using the Wix platform, featuring structured data for local business information and multilingual support. However, the domain WHOIS data is missing, raising concerns about domain registration legitimacy. The technical infrastructure relies on Wix's hosting and JavaScript frameworks, providing moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but requires improvements in domain legitimacy verification, privacy compliance, and security transparency.