Manufacturing security reports

A

Automationstechnik

automationstechnik.pl

33

Automationstechnik is a well-established Polish company specializing in industrial automation and robotics solutions with over 25 years of experience. The company designs and builds advanced machines and assembly lines, focusing on optimizing production processes, intralogistics, and traceability systems. Their market position is strong within Poland's manufacturing sector, supported by multiple certifications and a portfolio of satisfied clients. Technically, the website is built on WordPress with modern frameworks and includes essential security and privacy features such as HTTPS, cookie consent, and Google reCAPTCHA. Security posture is good, though explicit security headers and published security policies could enhance it further. Overall, the company demonstrates a professional digital presence with strong business credibility and compliance with GDPR.

S

SGK

schawk.com

50

SGK is a global packaging and brand experience company specializing in brand creative, packaging, content production, and brand environments. The company operates globally with a strong market position supported by its parent company, Matthews International Corporation, and several subsidiaries. The website reflects a professional and consistent brand image with comprehensive content targeting enterprise clients seeking packaging and brand experience solutions. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, providing good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in security headers and explicit incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting SGK's market credibility.

B

Barilla Group

barillagroup.com

61

Barilla Group is a well-established Italian family-owned food company founded in 1877, specializing in the production and marketing of pasta, sauces, and bakery products globally. The website reflects a strong brand presence with a focus on sustainability, innovation, and corporate responsibility, targeting consumers and stakeholders interested in quality food products and ethical business practices. The company maintains a significant international footprint with operations in over 100 countries. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, and OneTrust for cookie consent, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response information are not prominently linked. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks a visible terms of service page and direct contact information on the homepage. The domain registration details are consistent with the company's identity, supporting high legitimacy and trustworthiness.

G

Gebr. Swinkels Grondwerken BV

swinkelsgrondwerken.nl

29

Gebr. Swinkels Grondwerken BV is a Dutch company specializing in groundworks and road construction, serving a diverse clientele including large construction firms, municipalities, holiday parks, and private individuals. The company offers a comprehensive range of services including earthworks, supply and processing of construction materials, and foundation laying. Their market position is that of a well-established regional player with a solid reputation and trusted partnerships. The website reflects a professional and consistent brand image with clear business information and legal documentation available for visitors. Technically, the website is built on WordPress using the Elementor page builder and Blocksy theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published. Overall, the website demonstrates a mature digital presence with good privacy compliance, including a privacy policy and cookie consent mechanism. Contact information is complete and clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing a dedicated security policy and incident response contact, enhancing accessibility, and considering a security.txt file for vulnerability disclosure to further strengthen trust and compliance.

Y

Yamaha Corporation

yamaha.com

49

Yamaha Corporation operates a comprehensive corporate website showcasing its global leadership in manufacturing musical instruments, audio equipment, and related business devices. The site targets consumers, investors, business users, and music education participants, providing detailed information on products, sustainability, investor relations, and corporate philosophy. The company is a well-established enterprise founded in 1887 with a consistent brand presence and multiple subsidiaries. Technically, the website employs modern JavaScript libraries such as Swiper.js and Google Tag Manager, hosted on Akamai infrastructure, ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with a clean and professional design. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, minimizing exposure to vulnerabilities. However, it lacks explicit cookie consent mechanisms and a published security policy or incident response contact, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Yamaha's website reflects a mature digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture.

H

HKG Embroderies

hkg.at

31

HKG Embroderies is a small manufacturing business specializing in embroidery products since 1956, based in Austria. The website serves as a digital presence showcasing their collections and company information primarily in German, with multilingual support. The business appears established with a consistent brand presence but lacks detailed contact and compliance information on the site. Technically, the website is built on WordPress with common plugins and Google services integration, including reCAPTCHA and Google Maps API. However, the site lacks HTTPS, which is a critical security deficiency. Security measures are minimal, with no advanced headers or policies visible. Privacy compliance is poor due to the absence of privacy and cookie policies. Overall, the site is functional but requires significant improvements in security and compliance to meet modern standards.

G

GLIEWE GmbH

gliewe.at

59

GLIEWE GmbH is a family-owned manufacturing company based in Austria specializing in drive technology products such as drive elements, cardan shafts, conveyor technology, and custom solutions. The company operates a B2B webshop targeting industrial and machinery sectors, leveraging over 30 years of industry experience. The website is professionally designed with clear navigation, multilingual support, and comprehensive content that reflects the company's expertise and market position. Technically, the site is built on WordPress with modern plugins and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, Wordfence protection, and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Overall, the site presents a trustworthy and credible business presence with transparent contact information and legal compliance.

V

Vandemoortele

vandemoortele.com

60

Vandemoortele is a well-established Belgian family-owned manufacturer specializing in bakery and plant-based food products, with a history dating back to 1899. The company positions itself as a leader in quality food production with a strong commitment to sustainability, innovation, and customer partnership. Their website reflects a mature digital presence with multilingual support and comprehensive product and corporate information. Technically, the site is built on Drupal 10, integrates modern marketing and analytics tools such as HubSpot and Google Tag Manager, and employs a robust cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and content security policies in place, although explicit security policies and incident response details are not publicly disclosed. Overall, Vandemoortele demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable business entity online.

Imperial Brands PLC is a leading multinational tobacco company positioned as the fourth largest globally, focusing on both traditional tobacco products and next generation smoke-free alternatives. The company targets adult consumers, investors, and job seekers, emphasizing its challenger role in the tobacco industry and commitment to ESG principles. The website reflects a mature business model with a strong investor relations presence and comprehensive corporate governance information. Technically, the website is built on Adobe Experience Manager, utilizing modern JavaScript libraries and APIs such as Vimeo Player, Google Tag Manager, and Microsoft Clarity for analytics and user engagement. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy. From a security perspective, the site enforces HTTPS and uses CSRF protection scripts, but lacks some advanced security headers and does not publish a dedicated security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is professional, trustworthy, and aligns well with the corporate identity of Imperial Brands. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

B

Bauwerk Group Schweiz AG

bauwerk-parkett.com

43

Bauwerk Group Schweiz AG operates a professional and comprehensive website focused on manufacturing and retailing high-quality parquet and wood flooring products. The company positions itself as a leading European parquet manufacturer with a strong Swiss heritage, offering a wide range of products, accessories, and digital tools to both end consumers and professionals. The website is well-structured, multilingual, and rich in content, emphasizing sustainability and certifications such as Cradle to Cradle GOLD. Technically, the site uses modern frameworks including Neos CMS and the Flow PHP framework, integrates Google reCAPTCHA, and employs analytics and marketing tools responsibly. Security posture is good with HTTPS enforced and standard best practices observed, though some security headers could be explicitly declared. Privacy compliance is strong with accessible policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

S

SIPRIN, s.r.o.

siprin.sk

46

SIPRIN, s.r.o. is a well-established Slovak subsidiary of Siemens, specializing in industrial automation, maintenance outsourcing, and technical training. Founded in 1999, the company leverages Siemens technologies to provide engineering, maintenance, and educational services primarily to industrial clients. The website reflects a mature digital presence with comprehensive service and training descriptions, clear contact channels, and strong compliance messaging. Technically, the site uses a modern tech stack including Bootstrap and jQuery, with good mobile responsiveness and user experience. Security posture is solid with HTTPS and a detailed compliance program, though some security headers could be improved. No blocking or WAF interference was detected, allowing full content access. Overall, the site projects professionalism, trustworthiness, and alignment with Siemens corporate standards.

RMIG Group is a globally recognized leader in the manufacturing of perforated metal products, serving diverse sectors including industrial, automotive, food processing, and agriculture. The company offers a broad product range from standard perforated sheets to premium custom solutions, supported by a strong European presence and over 600 employees. Their digital presence reflects a mature and professional infrastructure with modern technologies such as Alpine.js, Umbraco CMS, and integrated analytics via Google Tag Manager and Google Analytics. The website features a comprehensive cookie consent mechanism and a detailed privacy policy, indicating good privacy compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though there is room for improvement in security headers and explicit incident response documentation. Overall, RMIG Group presents a trustworthy and professional online presence aligned with their business stature.

R

Robert Bosch (Australia) Pty Ltd

bosch.com.au

58

Robert Bosch (Australia) Pty Ltd operates a comprehensive and professionally designed website representing the Bosch brand in Australia. The company offers a wide range of products and services across mobility, home, and industrial sectors, positioning itself as a large multinational enterprise with a strong market presence. The website targets both consumers and business clients in Australia, providing detailed product information, corporate news, and career opportunities. Technically, the site employs modern web technologies including Google Tag Manager, custom Bosch UI components, and a content API platform, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, uses a robust consent management system, and avoids exposing sensitive data, although it lacks explicit security headers and a public security policy. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital presence for Bosch in Australia.

F

Freudenberg Sealing Technologies

fst.com

51

Freudenberg Sealing Technologies is a global leader specializing in sealing solutions and applications, serving diverse industries including automotive and general manufacturing. With a rich history dating back to 1929 and a strong focus on engineering and material expertise, the company offers a broad range of high-quality products and services, including custom sealing system design and validation. The website reflects a mature enterprise with comprehensive content, clear navigation, and consistent branding. Technically, the site employs modern frameworks like Alpine.js, integrates Google Analytics and Tag Manager for tracking, and uses Usercentrics for cookie consent management, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive user experience and business credibility.

C

Crane Company

craneco.com

48

Crane Company is a long-established enterprise specializing in highly-engineered industrial products with a focus on aerospace, electronics, and process flow technologies. The company emphasizes proprietary technology, quality, reliability, and deep vertical expertise, serving a diverse industrial customer base including commercial, defense, and space sectors. The website reflects a mature digital presence with comprehensive business, investor, and career information, supporting its market position as a reputable NYSE-listed company. Technically, the site is built on WordPress with modern SEO and analytics tools, demonstrating good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response contacts are not found. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Crane Company's credibility and operational transparency.

U

Unior d.d.

unior.com

49

Unior d.d. is a well-established Slovenian manufacturing company specializing in metal processing, particularly forging and hand tools. Founded in 1919, it holds a strong market position as a global leader in its industry segments, serving automotive and other industrial clients worldwide. The website reflects a professional and consistent brand image, with clear navigation and multilingual support, targeting global buyers and industry partners. Technically, the site uses modern tracking tools such as Google Tag Manager and Google Analytics, with a custom CMS and responsive design ensuring good user experience across devices. Security posture is moderate, with HTTPS implied and cookie consent mechanisms implemented, but lacking explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy likely embedded in legal notices but no explicit GDPR statements or data protection officer contact. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and privacy compliance are recommended.

V

Vinzenz Harrer GmbH

harrer.at

11

Vinzenz Harrer GmbH is a well-established Austrian company specializing in wood construction solutions, operating for approximately 30 years. The company offers a comprehensive online shop with a wide range of products including insulation materials, system connectors, adhesives, and tools tailored for wood construction professionals and qualified craftsmen. Their market position is strong within Austria as a leading specialist, supported by a network of partner craftsmen and extensive customer service and training offerings. The website is professionally designed with clear navigation and good content quality, targeting primarily German-speaking users in Austria. Technically, the site uses ASP.NET WebForms with jQuery and modern tracking tools such as Google Analytics and Facebook Pixel, though some outdated libraries present minor security concerns. Security posture is good with HTTPS enforced and cookie consent implemented, but could be improved with updated libraries and additional security headers. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

O

objectflor

wir-leben-boden.de

10

objectflor operates as a specialized flooring partner focusing on design, rubber, and vinyl flooring products. The company targets both consumers and professionals seeking quality flooring solutions, positioning itself as an established player in the manufacturing sector within Germany. The website content is well-structured, professionally designed, and provides relevant information about products, trends, and sustainability, supporting a positive market presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome. It employs Usercentrics CMP for cookie consent and Matomo for privacy-conscious analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image with moderate to good technical and security posture. Strategic improvements in security headers, incident response transparency, and terms of service publication would further strengthen the site’s compliance and trustworthiness.

X

Xeikon

xeikon.com

20

Xeikon is a well-established manufacturer and provider of digital printing technology, specializing in high-quality dry toner and UV inkjet solutions. With over 30 years of experience and a strong market position as a pioneer in digital printing systems, Xeikon serves a B2B audience primarily in the manufacturing and packaging sectors. The company is a division of Flint Group, which adds corporate credibility and resources. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern frameworks and libraries such as Bootstrap, Livewire, and Font Awesome, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers like Content-Security-Policy could be enhanced. No critical vulnerabilities or WAF blocks were detected, indicating a solid security posture. Overall, Xeikon's online presence is professional, trustworthy, and compliant with privacy regulations, supporting its business credibility and customer engagement.

GÜNTHER Heisskanaltechnik GmbH is a medium-sized German manufacturer specializing in hot runner and cold runner systems for injection molding applications, serving plastics and silicone processing industries globally. The company positions itself as a technology leader with over 40 years of expertise, offering innovative, energy-efficient, and reliable solutions. Their website reflects a professional and comprehensive digital presence, featuring detailed product information, technical services, and customer support including augmented reality assistance and seminars. The technical infrastructure is based on the Contao CMS with modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. Business credibility is high, supported by certifications such as ISO 9001 and ISO 14001, and consistent domain registration data. Overall, the website is trustworthy, well-maintained, and aligned with the company's business objectives.

S

STAMAG Stadlauer Malzfabrik GesmbH

stamag.at

7

STAMAG Stadlauer Malzfabrik GesmbH is a well-established Austrian company specializing in the production and supply of high-quality malt and baking ingredients, with a tradition spanning over 140 years. The company serves primarily B2B customers in the baking and brewing industries, offering a broad portfolio including base and specialty malts, baking ingredients for bread, fine bakery, and sweets, as well as sourdoughs. STAMAG is part of the IREKS Group, enhancing its market position and operational capabilities. The website reflects a professional and consistent brand image, targeting German-speaking markets with comprehensive product and company information. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Slick Slider for interactive elements. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses Matomo analytics for privacy-respecting visitor tracking. However, explicit security headers could be more visible or documented, and no dedicated security or incident response policies are published. Overall, the website and business demonstrate a mature digital presence with strong compliance and trust indicators. There are no signs of blocking or WAF interference, and the domain registration details align well with the company's identity and history, supporting legitimacy. The company maintains active social media channels and provides clear contact information, enhancing user trust and engagement.

E

Exel Composites

exelcomposites.com

19

Exel Composites is a global leader in composite design and manufacturing with over 60 years of experience. The company specializes in producing high-performance composite materials using continuous manufacturing methods such as pultrusion and pull-winding. Their business model focuses on B2B industrial clients across sectors including transportation, energy, infrastructure, and manufacturing. The website reflects a mature corporate presence with multilingual support, investor relations, and comprehensive product and case study information. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility considerations. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, formal security policies and incident response information are not published, representing an area for improvement. Overall, the website is professional, trustworthy, and aligned with the company's market position and business objectives.

B

BANDEX

bandex.com

8

BANDEX is a well-established Austrian manufacturing company specializing in curtain and decorative bands, with a history dating back to 1955. The company offers a range of textile products including curtain tapes and technical textiles, supported by an online shop and innovative digital tools such as configurators and a virtual showroom. Their target audience includes retail customers, interior decorators, and textile professionals. The website is primarily in German and reflects a medium-sized enterprise with consistent branding and a good level of content quality. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, with additional tools for user interaction and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, some technical details such as hosting provider and CMS are not explicitly identified. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. While no explicit security policies or incident response contacts are found, the site does not exhibit obvious vulnerabilities or exposed sensitive data. The use of third-party tracking services is moderate, and privacy compliance appears adequate. Security headers and advanced security practices could be improved. Overall, BANDEX presents a trustworthy and professional online presence with moderate risk. Strategic improvements in security policy transparency, incident response readiness, and security header implementation would enhance their security posture and compliance standing.

Kennametal Inc. is a leading enterprise in the manufacturing sector, specializing in productivity solutions for metalworking, earth cutting, and wear components. The company serves industrial manufacturers and mining and construction industries with a broad portfolio of products including metalworking tools, carbide wear parts, and additive manufacturing components. The website reflects a strong market position with comprehensive product catalogs, collaboration tools, and extensive customer support options. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates advanced monitoring and analytics tools such as New Relic and Adobe Launch. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent security improvements to protect user data and maintain credibility.

RUD Gruppe is a well-established German manufacturing company specializing in chain systems and components for diverse industrial applications including lifting, securing, and transportation. With a history spanning approximately 140 years, the company operates globally and offers a broad product portfolio including lifting chains, securing devices, conveyor and drive technology, and specialized military and forestry chains. The website reflects a mature digital presence with multilingual support and structured navigation, powered by TYPO3 CMS and enhanced with caching and Google Tag Manager for analytics. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, exposing users to potential risks. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance, though cookie consent mechanisms are lacking. Social media integration is robust, enhancing brand trust and engagement.

Stepan Company operates as a global specialty and intermediate chemical supplier, providing chemical ingredients and formulations tailored to consumer and industrial markets. The company emphasizes innovation, sustainability, and extensive R&D capabilities, positioning itself as a large, reputable player in the manufacturing sector. Their website reflects a professional and comprehensive digital presence with clear navigation and rich content targeting B2B customers seeking chemical solutions. Technically, the website leverages Adobe Experience Manager as its CMS, integrates Salesforce platforms, and uses modern marketing and analytics tools such as Pardot, Adobe DTM, and Google Tag Manager. The site is hosted on Microsoft Azure DNS infrastructure and employs standard security headers and content security policies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. From a security perspective, while some best practices like CSP and secure cookies are implemented, the lack of HTTPS and modern TLS protocols exposes the site to risks and undermines user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is primarily available via web forms, with no direct emails or phone numbers published. Overall, the site is trustworthy and professionally managed but requires urgent remediation of its SSL/TLS configuration to meet modern security standards and improve user confidence.

S

SW Umwelttechnik Stoiser & Wolschner AG

sw-umwelttechnik.com

34

SW Umwelttechnik Stoiser & Wolschner AG is a well-established manufacturer specializing in precast concrete products for infrastructure development, including civil engineering, traffic, and building sectors. The company operates across multiple Central and Eastern European countries with subsidiaries in Austria, Hungary, Romania, and Slovakia, positioning itself as a regional leader in sustainable construction materials. Their website reflects a professional and comprehensive digital presence, targeting infrastructure developers and construction companies. Technically, the site is built on TYPO3 CMS with PHP 8.1 and Bootstrap, offering good mobile optimization and accessibility, though performance is moderate due to lack of SSL and modern protocols. Security posture is weak, with no HTTPS enabled and missing critical SSL configurations, exposing the site to risks. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the business credibility is high, supported by detailed contact information, investor relations, and trust signals such as LinkedIn presence. Strategic improvements in security infrastructure are recommended to enhance trust and protect user data.

E

ELIX Polymers, S.L.U.

elix-polymers.com

40

ELIX Polymers, a member of Sinochem International, is a leading European manufacturer of ABS resins and derivatives, serving diverse industrial sectors including automotive, healthcare, and consumer goods. The company emphasizes innovation, sustainability, and customer service, operating globally with business relations in 40 countries. Their website reflects a professional and comprehensive digital presence with detailed corporate, product, and sustainability information. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted behind Cloudflare, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts security posture. Privacy and cookie policies are well implemented with GDPR compliance and active consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

B

BFW

bfwindia.com

33

BFW is a well-established Indian machine tool manufacturer with a history dating back to 1961. The company specializes in high-precision machinery and custom manufacturing solutions, serving industries such as automotive, aerospace, electronics, and agriculture. Their website reflects a mature digital presence built on WordPress with Elementor and related plugins, offering rich content including product details, case studies, blogs, and event information. However, the site lacks a valid SSL certificate, which is a critical security gap. Contact information is comprehensive, including email, phone, and social media channels, but privacy and cookie policies are absent, indicating compliance gaps. Overall, BFW demonstrates strong business credibility and branding consistency but needs to improve its security posture and privacy compliance to meet modern standards.

Maillis Group is a well-established manufacturing company specializing in secondary packaging systems, including strapping, wrapping, and box handling solutions. With over 50 years of experience, the company serves industrial and manufacturing sectors, providing integrated packaging machines, consumables, and services. The website reflects a professional and consistent brand presence targeting industrial clients. Technically, the site is built on Drupal 8 with PHP 7.2 backend and hosted likely on AWS infrastructure. It employs modern tracking and marketing tools such as Google Analytics, Google Tag Manager, and Albacross, alongside a comprehensive cookie consent mechanism. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Security headers are well implemented but weakened by unsafe CSP directives. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Z

Zell Materials GmbH

zellamid.com

33

Zell Materials GmbH is a medium-sized manufacturing company specializing in engineering plastics, offering a range of products including general purpose materials, special performance materials, and high performance materials. The company operates primarily in the manufacturing sector and serves industrial and engineering clients. Their website provides product finders, material comparison tools, and a B2B webshop, indicating a mature digital presence tailored to professional customers. Technically, the website uses Apache server technology, ezPublish CMS, and includes JavaScript libraries such as jQuery and YUI. However, the absence of SSL/TLS encryption and DNS records significantly undermines the security posture and operational reliability of the domain. The site includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good privacy compliance practices. Security headers are minimal, and no explicit security or incident response policies are published. Overall, the website is professionally designed with consistent branding but requires urgent security improvements to protect users and enhance trust.

P

Permapack AG

permapack.ch

26

Permapack AG is a Swiss family-owned manufacturing and trading company specializing in high-quality products such as labels, adhesive tapes, films, sealants, and garden articles. The company serves various sectors including food, cosmetics, industry, construction, and retail, offering both standard products and customized solutions. Their business model combines B2B sales with an online shop and extensive production services. The website reflects a medium-sized enterprise with a consistent brand presence and strong trust indicators such as awards and social media engagement. Technically, the site uses a custom e-commerce platform with modern JavaScript libraries and tracking tools, hosted by IP-Plus AG. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to risks and limiting secure communications. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is professional and trustworthy but requires urgent security improvements.

Schlüsselbauer Technology GmbH & Co KG is a medium-sized Austrian manufacturing company specializing in the development and construction of machinery for producing concrete infrastructure components such as pipes and shafts. Established in 1964, the company positions itself as an innovation leader in machine building with a global presence including subsidiaries like Schlüsselbauer North America. Their website provides multi-language support and detailed information about their products and services targeting industrial and infrastructure sectors. Technically, the website uses Apache server with standard HTML5, CSS3, and JavaScript, likely leveraging Bootstrap for responsive design. However, the site lacks HTTPS encryption, which is a critical security gap. The absence of SSL/TLS certificates and modern security headers exposes the site to risks and reduces trustworthiness. Privacy compliance is addressed with a cookie consent manager and a privacy policy, but no explicit security or incident response policies are published. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance credibility.

K

Kverneland Group

kvernelandgroup.com

28

Kverneland Group is a prominent international enterprise specializing in the development, manufacturing, and distribution of agricultural implements, electronic solutions, and digital farming services. The website reflects a well-established brand with a clear focus on agricultural professionals and partners, offering extensive content about products, news, and events. The company maintains multiple regional subdomains and partner portals, indicating a broad market presence. Technically, the site is built on a legacy CMS (eZ Publish) and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel, alongside a robust cookie consent mechanism. However, the absence of a valid SSL certificate and lack of DNS records represent significant security and configuration gaps. Security headers are partially implemented, but the lack of HTTPS severely impacts the site's security posture. Privacy compliance is well addressed with clear policies and consent management. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security infrastructure to align with enterprise standards.

W

Wartenberg & Co · Großhandel: Hydrokolloide, Lecithine, Stärke, Zucker

wartenberg.at

26

Wartenberg & Co is a well-established Austrian family-owned business specializing in the wholesale distribution of sugar and food raw materials, with over 100 years of market presence. Their product portfolio includes various types of sugar, starch and derivatives, hydrocolloids, lecithins, and other food additives, with a strong emphasis on sustainability, bio and fair trade certifications, and personalized customer service. The website is built on WordPress with Elementor and includes modern SEO and GDPR compliance features. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. The company demonstrates good business credibility and compliance with industry standards such as the IFS Broker certification. Strategic improvements in security infrastructure are recommended to enhance the overall security posture and trustworthiness.

E

Envases Öhringen GmbH

huber-packaging.com

40

Envases Öhringen GmbH is a well-established German manufacturer specializing in metal and plastic packaging solutions, with a strong global presence and leadership in the beverage packaging sector, particularly 5-liter party kegs. The company operates multiple sites worldwide and emphasizes sustainability and quality, supported by ISO certifications and a whistleblower system. The website is built on the Jimdo CMS platform, featuring good content quality, clear navigation, and a professional design tailored to industrial clients. However, the technical infrastructure shows weaknesses in SSL implementation, lacking a valid HTTPS certificate, which poses a significant security risk. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility is high, supported by consistent WHOIS data and comprehensive contact information.

4

4DESIGN

4design.co

28

4DESIGN is a New Zealand-based industrial design and product development consultancy specializing in creating innovative and award-winning products for a diverse clientele including companies, startups, and individuals. The company offers a broad range of services such as industrial design, engineering, prototyping, UI/UX design, manufacturing, and 3D printing. Their market position is strong within the manufacturing and technology sectors, supported by multiple awards and recognized certifications. The website reflects a professional and consistent brand image with excellent content quality and clear navigation, targeting clients seeking high-quality design consultancy services. Technically, the website is built on WordPress and leverages common technologies including Apache server, jQuery, Google Analytics, and various plugins for SEO and social media integration. Hosting is provided by InMotion Hosting. However, the website lacks HTTPS, which is a critical security shortfall. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with comprehensive metadata and structured data. From a security perspective, the absence of a valid SSL certificate and HTTPS support significantly lowers the security posture. No advanced security headers or incident response policies are evident. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service found. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and credible but requires urgent security improvements, particularly enabling HTTPS and enhancing privacy compliance to meet modern standards. Strategic recommendations include installing SSL, enabling security headers, and implementing cookie consent mechanisms to improve trust and compliance.

P

planlicht GmbH&Co. KG

planlicht.com

40

PLANLICHT GmbH&Co. KG is an Austrian company specializing in architectural LED lighting solutions, serving sectors such as office, public, hospitality, and retail. Their website offers a comprehensive product catalog, customization options, and detailed technical documentation, targeting architects and lighting professionals. The company maintains a professional online presence with multilingual support and active social media channels. Technically, the website is built on WordPress with popular plugins and frameworks, providing a good user experience and moderate performance. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Business credibility is supported by clear contact information, job listings, and consistent branding. Overall, the site is functional and professional but requires urgent security improvements.

Visiativ Austria GmbH is a well-established digital transformation partner specializing in CAD and Product Lifecycle Management (PLM) solutions for manufacturing companies. With over 30 years of experience, the company offers a comprehensive portfolio including consulting, software sales, and training services. Their market position is strong within the manufacturing and technology sectors, supported by partnerships with Dassault Systèmes and a broad regional presence across Europe. The website reflects a professional and consistent brand image with high-quality content and effective SEO practices. Technically, the website is built on WordPress with modern plugins for SEO, caching, and cookie consent management. The infrastructure includes Apache hosting with DNS managed via Google Domains. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Other security best practices such as SPF records for email and vulnerability scanning show positive signs, but the lack of HTTPS is a major concern. The security posture is currently basic, with no detected vulnerabilities but missing essential HTTPS protections and security headers. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Contact information is clearly provided, including phone numbers and social media links, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols. Strategic recommendations include installing a valid SSL certificate, enabling HSTS, and improving server security headers to enhance trust and protect user data.

SPX FLOW, Inc. is a well-established global manufacturer specializing in engineered industrial equipment and solutions primarily serving the Food & Beverage, Industrial, and Power & Energy sectors. The company operates multiple specialized brands and maintains a comprehensive website showcasing products, solutions, industries served, and corporate information. The website demonstrates good content quality, professional design, and clear navigation targeting industrial manufacturers and related sectors. Technically, the site uses a Microsoft IIS server with ASP.NET framework and modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. However, the website critically lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts security posture and user trust. Security headers are partially implemented but ineffective without proper SSL. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Business credibility is strong with consistent WHOIS data, a mature domain, and multiple trust indicators such as social media presence and detailed corporate content. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance trust.

Smurfit Kappa is a globally recognized FTSE 100 company specializing in paper-based packaging solutions with operations in over 30 countries. The website reflects a mature business with a strong emphasis on sustainability, innovation, and customer-centric packaging services across multiple sectors. The digital infrastructure leverages modern technologies such as React and Sitecore CMS, supported by marketing and analytics tools including Google Tag Manager, Cookiebot, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which undermines the site's security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS issues to ensure secure user interactions.

S

STAPPERT

stappert.biz

18

STAPPERT is a leading European stockholder and supplier of stainless steel long products and fittings, targeting industrial and business customers. The company emphasizes a comprehensive product range, quality, and customer-oriented service. The website is built on WordPress with professional SEO and multilingual support, indicating a mature digital presence. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. Cookie consent is managed via a third-party tool, and contact forms are protected with reCAPTCHA, showing some privacy awareness. Overall, the site is functional and professional but requires urgent security improvements to protect data and build trust.

S

S. Spitz GmbH

spitz.at

31

S. Spitz GmbH is a well-established Austrian food and beverage manufacturer with over 160 years of tradition, specializing in beverages, sweets, baked goods, and delicatessen products. The company operates multiple production sites in Austria and emphasizes quality, sustainability, and customer-specific private label solutions. Their website reflects a professional and comprehensive digital presence targeting B2B customers, job seekers, and sustainability-conscious consumers. Technically, the site is built on WordPress with common plugins and libraries, offering good mobile optimization and SEO features. However, the absence of a valid SSL/TLS certificate and missing DNS records represent significant security and technical weaknesses. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect user data and enhance trust.

P

Peter Ofner GmbH

dirak.at

31

Peter Ofner GmbH is a specialized Austrian company providing innovative and tailored locking technology, hinges, and connection solutions primarily for industrial clients. The company positions itself as an expert in the manufacturing sector with a focus on quality products and personalized consulting. The website reflects a professional and well-structured digital presence, leveraging modern consent management and analytics tools, but lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. DNS records are notably missing or incomplete, which raises concerns about domain configuration consistency. Overall, the site offers comprehensive contact information and basic privacy compliance but lacks explicit security policies and incident response details.

B

Beontag

beontag.com

40

Beontag is a global manufacturing and technology company specializing in identification and digital transformation solutions, including graphics and label materials as well as RFID and IoT enablers. The company has a strong market presence with over 16 facilities worldwide and operations in more than 60 countries. Their website reflects a professional and comprehensive digital presence targeting businesses requiring advanced labeling and IoT solutions. Technically, the site is built on modern frameworks such as Next.js and hosted on AWS CloudFront, ensuring scalability and performance. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, which significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance and consent mechanisms. The site integrates analytics and marketing tools like Google Analytics and HubSpot, balancing user tracking with privacy considerations. Overall, while the business and technical maturity are strong, immediate attention to SSL/TLS implementation is necessary to enhance security and trust.

Alupress AG is a medium-sized manufacturing company specializing in automotive aluminum die casting components and full-service system solutions. Founded in 1965 and headquartered in Brixen, Italy, the company offers a comprehensive range of services from in-house development to aftermarket support. The website reflects a professional B2B focus with detailed service descriptions and multilingual support. Technically, the site is built on TYPO3 CMS and uses Matomo and Facebook Pixel for analytics and marketing. However, the absence of a valid SSL certificate and HTTPS is a critical security shortfall that undermines user trust and data protection. The cookie consent mechanism and privacy policy indicate good GDPR compliance. Overall, the site is well-structured and content-rich but requires urgent security improvements.

F

Frankenberg-Metallrecycling GmbH

fmr.ag

39

Frankenberg-Metallrecycling GmbH is a well-established family-owned metal recycling company based in Germany, specializing in the recycling and trading of zinc, tin, lead, and other metals. With over 65 years of experience and a certified waste disposal status, the company serves industrial and commercial clients across Europe, offering sustainable recycling solutions and related services. The website reflects a medium-sized business with a clear focus on metal recycling and environmental compliance. Technically, the website runs on an Apache server with legacy JavaScript libraries such as jQuery 1.10.2 and includes Google Analytics for tracking. However, the absence of HTTPS and modern security headers significantly weakens the site's security posture. The site is basic in mobile optimization and accessibility, with no CMS or advanced frameworks detected. Performance metrics are unavailable, indicating potential monitoring gaps. From a security perspective, the lack of SSL/TLS encryption is a critical vulnerability, exposing users to data interception risks. No advanced security policies or incident response contacts are published, and cookie consent mechanisms are missing despite cookie usage. The domain registration data is consistent with the business claims, supporting legitimacy. Privacy policies exist but are basic, and GDPR compliance is implied but not explicitly detailed. Overall, the website is functional and professional but requires urgent security improvements, especially HTTPS implementation and enhanced privacy compliance. Strategic recommendations include upgrading security infrastructure, implementing cookie consent, modernizing the tech stack, and publishing clear security and incident response policies to build trust and compliance.

Royal TenCate is a large multinational manufacturing group specializing in technical textiles and composite materials. The company operates through five independent subsidiaries, each focusing on niche markets such as protective fabrics, sports surfaces, outdoor textiles, survivability solutions, and advanced composites. The website serves as a portal directing visitors to these subsidiaries' individual sites. Technically, the website is built on the HubSpot CMS platform and hosted behind Cloudflare, but it lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. The site has basic SEO and accessibility features but lacks privacy and cookie policies, contact information, and security best practices such as vulnerability disclosure mechanisms. Overall, the security posture is weak due to missing HTTPS and modern TLS protocols, which significantly impacts trust and compliance. Strategic improvements in SSL deployment, privacy compliance, and security policies are recommended to enhance the website's credibility and user trust.

M

Mark Metallwarenfabrik GmbH

mark.at

27

Mark Metallwarenfabrik GmbH is a medium-sized manufacturing company based in Austria specializing in metal products. The company maintains a professional website showcasing its global footprint, technologies, sustainability efforts, and career opportunities. The site targets industry professionals, potential employees, and partners. Technically, the website is built on WordPress with modern plugins such as Elementor and Jet Engine, but lacks a valid SSL certificate, which is a critical security shortfall. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Social media presence is active, enhancing brand visibility. However, the absence of HTTPS and proper TLS configuration significantly impacts the security posture and overall trustworthiness of the site.

U

Uponor Suomi Oy

uponor.com

38

Uponor Suomi Oy is a leading international company specializing in building and infrastructure water transport solutions. The company offers a wide range of products and services including building technology, infrastructure products, project services, and customer support. It operates under the parent company Georg Fischer (GF) Group and targets professionals in construction, infrastructure planning, and homeowners. The website is well-designed, content-rich, and provides comprehensive information about products, services, and corporate policies. Technically, the site uses modern frameworks like React and Kentico CMS, with integrations for analytics and marketing tools. However, a critical security issue is the absence of a valid SSL/TLS certificate, exposing users to risks. Security headers are well implemented, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to ensure secure user interactions.