Manufacturing security reports

D

Digital Elektronik

de.at

25

Digital Elektronik is a well-established Austrian company specializing in mechatronic and electronic device manufacturing and development, with over 45 years of experience. The company serves industrial and healthcare sectors with a comprehensive range of services including device manufacturing, development, EMS production, metalworking, assembly, cable harness production, and box build solutions. Their market position is strong with international projects and certifications such as TÜV and Quality Austria. The website reflects a professional and content-rich digital presence, targeting B2B clients in manufacturing and technology sectors. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted on Conova infrastructure. While the site is well-structured and optimized for SEO and mobile devices, performance metrics are missing, and the site lacks a valid SSL certificate, which is a critical security flaw. The absence of HTTPS and modern TLS protocols significantly undermines the security posture. Cookie consent and privacy policies are implemented and GDPR compliant, indicating good privacy compliance. Security-wise, the site has no major vulnerabilities detected but lacks essential security headers and modern encryption protocols. The WHOIS data confirms domain legitimacy and consistency with the company's Austrian base and business history. Overall, the site is trustworthy but requires urgent security improvements to protect user data and enhance trust. Recommendations include immediate installation of a valid SSL certificate, enabling modern TLS protocols, adding security headers, and improving performance monitoring. These steps will elevate the security posture and align the website with best practices for enterprise-grade digital presence.

W

Wilfried Heinzel AG

heinzelsales.com

29

Wilfried Heinzel AG operates the heinzelsales.com website as a global sales network specializing in pulp and paper products. The company is headquartered in Vienna, Austria, and is recognized as a leading trading house in the forest products industry. Their business model focuses on connecting suppliers and customers worldwide, supported by local representation in 28 countries and invoicing centers in major global cities. The website content reflects a professional and consistent brand image targeting industry stakeholders seeking sustainable pulp, paper, and packaging solutions. Technically, the website employs a traditional stack including nginx, jQuery, Bootstrap, and FontAwesome. However, it lacks HTTPS support, which is a critical security deficiency. The site shows basic mobile optimization and accessibility but suffers from slow performance and missing modern security configurations. No advanced CMS or analytics tools are detected, indicating a relatively simple technical infrastructure. From a security perspective, the absence of SSL/TLS encryption severely undermines user trust and data protection. While cookie consent and privacy policies are present and GDPR compliant, the lack of HTTPS and security headers exposes the site to risks. No incident response or vulnerability disclosure mechanisms are evident, limiting transparency and preparedness. The WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website is functional and professionally presented but requires urgent security improvements, especially implementing HTTPS and enhancing server security headers. Strategic recommendations include upgrading SSL/TLS, enabling HSTS, and adopting security best practices to protect users and improve trustworthiness.

The Würth Group is a globally recognized leader in the manufacturing and distribution of assembly and fastening materials, operating over 400 companies in 80 countries with more than 2,800 branches. Their website reflects a mature digital presence with comprehensive corporate information, career opportunities, and sustainability initiatives targeting B2B customers and industrial partners. Technically, the site employs modern frameworks such as Bootstrap and integrates advanced analytics via Piwik PRO, ensuring a responsive and user-friendly experience. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses risks to data confidentiality and user trust. Privacy and cookie policies are well implemented, demonstrating GDPR compliance. Overall, the site is professional and trustworthy but requires urgent SSL remediation to enhance security.

Nalco Water, a subsidiary of Ecolab, is a global leader in water and process management solutions serving a broad range of industries including manufacturing, energy, transportation, and healthcare. The company emphasizes sustainability and operational efficiency, leveraging advanced digital platforms such as ECOLAB3D™ IIOT to deliver data-driven insights and innovative water management technologies. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on the Sitecore CMS platform, hosted via Akamai CDN and Azure, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and OneTrust for cookie consent. Security headers are well implemented; however, a critical issue exists with the SSL certificate being invalid or missing, and no TLS protocols enabled, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is clearly presented with phone numbers, physical addresses, and contact forms. Overall, the website is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure communications and maintain user trust.

K

Kraus & Naimer

krausnaimer.com

38

Kraus & Naimer is a globally recognized leader in the manufacturing of cam switches and industrial switchgear, offering a broad portfolio of products including main switches, control switches, and customized solutions. The company emphasizes mass customization and international certifications, serving a diverse industrial clientele worldwide. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to industrial customers. Technically, the website is built on TYPO3 CMS and served via Apache, incorporating modern JavaScript libraries and privacy-focused analytics (Matomo). However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Privacy compliance is well addressed with visible cookie consent mechanisms and comprehensive privacy policies. Security-wise, while some security headers are implemented, the lack of HTTPS and modern TLS protocols is a significant vulnerability. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the site is functional and professional but requires urgent security upgrades to meet modern standards and protect user data. Strategically, Kraus & Naimer should prioritize SSL certificate installation and TLS configuration, enhance security policy transparency, and continue leveraging privacy-compliant analytics to maintain regulatory compliance and customer trust.

Electro Terminal GmbH & Co KG is a medium-sized Austrian manufacturer specializing in connection technology for lighting, household appliances, and electrical installations. With over 60 years of experience and recognized innovation awards, the company serves OEMs and manufacturers with development, manufacturing, and distribution of connectors and related components. The website is built on TYPO3 CMS with modern frontend libraries and includes clear business and contact information, social media presence, and compliance-related pages such as privacy and cookie policies. However, the absence of HTTPS/SSL is a critical security vulnerability that significantly impacts the site's security posture. While cookie consent mechanisms and privacy policies are in place, no explicit security policy or incident response information is found. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements.

U

Unitedprint SE

unitedprint.com

38

Unitedprint SE operates as a major European web-to-print service provider, offering a range of print-related services including web-to-print shops, print material supply, and production partnerships. The company maintains multiple brands and portals targeting print industry professionals and businesses seeking print solutions. The website is built on WordPress with a modern theme and multilingual support, reflecting a mature digital presence. However, the technical infrastructure lacks a valid SSL certificate, which impacts security and user trust. Security posture is basic with no advanced headers or HTTPS enforcement, and privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires improvements in security and privacy to meet modern standards.

A

ASSA ABLOY

assaabloyentrance.com

40

ASSA ABLOY Entrance Systems is a global enterprise specializing in manufacturing and supplying advanced entrance solutions including automatic, commercial, industrial, and digital doors. The company positions itself as a leader in secure and efficient access solutions, targeting businesses and industries requiring high-quality entrance systems. The website reflects a mature digital presence with a professional design and comprehensive product information, supporting its market leadership claims. Technically, the site uses modern web technologies and a proprietary CMS platform, with good SEO and mobile optimization. However, the lack of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks. Security headers are well implemented, but the absence of encryption and privacy policies reduces trust and compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to align with best practices and regulatory requirements.

Hawle Beteiligungsgesellschaft m.b.H. is a well-established Austrian manufacturer specializing in water supply valves and related products, serving a global market with a strong European manufacturing base. The company emphasizes sustainability, quality, and innovation, with a broad product portfolio including gate valves, butterfly valves, and digital water management solutions. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site uses modern JavaScript frameworks (Vue.js), Pimcore CMS, and integrates analytics and consent management tools, indicating a good level of digital maturity. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the security posture and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears credible and trustworthy, but urgent improvements in SSL/TLS deployment are recommended to secure user interactions and data.

MS Design GmbH is a medium-sized manufacturing company based in Tirol, Austria, specializing as a system supplier to the automotive industry. Founded in 1983, the company offers comprehensive services from design and prototyping to production start, emphasizing quality, innovation, and customer satisfaction. Their market position is supported by multiple certifications including IATF 16949 and ISO standards, reflecting a strong commitment to quality and environmental management. Technically, the website is built on TYPO3 CMS with a modern but basic technology stack including jQuery and various UI libraries. While the site is well-structured, mobile-optimized, and SEO-friendly, it lacks HTTPS support and a valid SSL certificate, which is a critical security gap. The hosting environment appears to be a Plesk-managed Apache server without advanced security configurations such as HSTS or DNSSEC. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. Although some security headers are present and email obfuscation is implemented, the lack of encryption exposes users to risks. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but incident response and vulnerability disclosure information are missing. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate trust and compliance.

C

Corteva Commercial

pioneer.com

40

Pioneer.com represents the global seed brand of Corteva Commercial, a large agricultural manufacturing company. The website provides seed products, agronomic expertise, and local data support aimed at farmers and agricultural professionals worldwide. The site is built on Adobe Experience Manager and uses Adobe's digital marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy and terms pages exist but are basic, and no cookie consent mechanism is implemented, which may raise compliance concerns in regulated jurisdictions. Contact information is limited to a contact form without direct emails or phone numbers, reducing accessibility for users seeking support. Overall, the site is professional and content-rich but requires urgent security and privacy improvements.

T

TDK Electronics AG

epcos.com

40

TDK Electronics AG, formerly EPCOS, is a mature and established enterprise specializing in the manufacturing and sales of electronic components, primarily serving industrial, automotive, and energy sectors. The company operates under the TDK Group umbrella, with a strong European presence and a comprehensive product catalog that includes capacitors, sensors, inductors, transformers, and more. Their website reflects a professional and well-structured digital presence, targeting engineers, distributors, and industrial clients with detailed product information and design support resources. Technically, the website employs modern analytics and marketing tools such as Piwik PRO, Google Tag Manager, and OneTrust for cookie consent, indicating a good level of digital maturity. However, the absence of a valid SSL/TLS certificate and HTTPS implementation significantly undermines the security posture, exposing users to potential risks. Despite this, the domain is mature, well-registered, and consistent with the business claims, enhancing overall trustworthiness. Strategic improvements in security infrastructure are recommended to align with industry best practices and regulatory compliance.

B

BILTON LEDON Technology GmbH

biltongroup.com

40

BILTON LEDON Technology GmbH operates under the brand Better Light, specializing in high-quality LED lighting solutions manufactured in Austria. The company leverages its expertise from established LED brands BILTON and LEDON to offer a broad portfolio including LED strips, profiles, power supplies, and lighting management systems. Their market position is solidified by a mature domain and professional online presence targeting architects, industrial clients, and lighting professionals. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes Google Analytics for user tracking. However, performance is slow and security headers are minimal, indicating room for improvement in technical optimization and security hardening. The SSL certificate is valid but nearing expiration, and no advanced security features like HSTS or OCSP stapling are enabled. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site demonstrates good business credibility and trustworthiness but would benefit from enhanced security practices and performance optimization.

S

SHP Harmanec, a.s.

shpgroup.eu

26

SHP Harmanec, a.s. operates a corporate website focused on paper hygiene products for household and professional use, with a history dating back to 1829. The company positions itself as a trusted regional manufacturer with a consistent brand presence and active engagement through social media and newsletters. The website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, supported by SEO tools like Yoast and analytics via Google Analytics and Tag Manager. However, the absence of HTTPS/SSL is a critical security gap that exposes users to risks and undermines trust. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Contact information is clearly presented, including phone numbers, physical address, and contact forms. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements.

W

WILD GmbH

wild.at

40

WILD GmbH is a well-established Austrian technology partner specializing in contract development and manufacturing of optomechatronic systems, serving sectors such as medical technology, in-vitro diagnostics, optical metrology, laboratory, laser, and semiconductor technology. The company has a strong market position with decades of experience and multiple subsidiaries, offering comprehensive services including development, production, and supply chain management. Their website reflects a mature digital presence with multilingual support, professional design, and rich content tailored to their target audience of technology and healthcare companies. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, hosted on infrastructure associated with a1.net. The site demonstrates good performance, mobile optimization, and accessibility. Security headers and SSL configurations are robust, with HSTS, CSP, and XSS protections in place, although some improvements like enabling HSTS preload and DMARC records are recommended. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Borlabs Cookie consent mechanisms and a comprehensive privacy policy. Contact information is clear and detailed, supporting business credibility. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, indicating a trustworthy and professional online presence.

K

K.I.R.S.C.H. GmbH

kirsch-tec.at

21

K.I.R.S.C.H. GmbH is a specialized industrial company based in Austria, providing advanced air dehumidification systems and OEM solutions primarily for manufacturing sectors such as food, pharmaceutical, and wood industries. The company has a strong market position supported by over 15 years of experience and a reputation for quality and service. Their website is professionally designed with multilingual support and comprehensive product and service information, targeting industrial clients requiring customized dehumidification solutions. Technically, the website runs on WordPress with the Avada theme and uses several plugins for SEO and cookie management. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which undermines user trust and data security. The site implements cookie consent mechanisms and privacy policies aligned with GDPR requirements, but lacks explicit security or incident response policies. Overall, the business appears credible and well-established, but the website's security posture requires urgent improvement to meet modern standards.

G

Geberit Vertriebs GmbH

geberit.at

39

Geberit Vertriebs GmbH operates as a European market leader in sanitary products, offering a comprehensive range of bathroom and piping systems, along with digital tools and professional services. The company maintains a strong local presence in Austria and is part of the larger Geberit Group, as indicated by DNS records and authoritative nameservers. The website is professionally designed, with excellent content quality and clear navigation, targeting both professional installers and end customers. Technically, the site uses modern frameworks such as Next.js and React, hosted on Microsoft Azure, and integrates Usercentrics for cookie consent management. However, the absence of a valid SSL/TLS certificate and proper HTTPS configuration is a critical security concern. Security headers are present but insufficient without proper encryption. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators are evident. Overall, the website is trustworthy and credible but requires urgent improvements in SSL configuration to enhance security and user trust.

E

ECM Label Production GmbH / ECM Marking Solutions GmbH

ecm.at

36

ECM.at represents a medium-sized Austrian manufacturing business specializing in label production and marking solutions with approximately 40 years of industry experience. The company offers a comprehensive range of services including label printing, dispensing systems, coding technologies, and engineering solutions tailored to various industries such as food packaging, automotive, electronics, and pharmaceuticals. The website reflects a professional B2B business model targeting companies requiring marking and labeling services. Technically, the site is built on WordPress with modern plugins and SEO optimizations but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Security posture is weak due to missing HTTPS, absence of security headers, and no incident response or security policy disclosures. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

PÖTTINGER Landtechnik GmbH operates as a large manufacturing company specializing in agricultural machinery with a strong international presence, offering localized content and partner portal access. The website demonstrates a good level of content quality, multi-language support, and user engagement features such as cookie consent and partner login. Technically, the site uses ASP.NET with common frontend libraries like jQuery and Bootstrap, hosted on a provider indicated by DNS records. However, the absence of a valid SSL certificate and lack of modern TLS support represent critical security weaknesses. Privacy compliance is well addressed through detailed cookie policies and consent mechanisms, reflecting GDPR awareness. Overall, the site is professional but requires urgent security improvements to protect user data and maintain trust.

I

IFE Aufbereitungstechnik GmbH

ife-bulk.com

40

IFE Aufbereitungstechnik GmbH is a well-established Austrian manufacturer specializing in vibratory conveyors, screening machines, and magnetic separators for bulk material processing. With over 70 years of industry experience, IFE holds a strong market position as a leading global supplier offering customized and integrated machinery solutions. The company also embraces digital transformation through its i-STEP product line, providing smart tools and analytics for efficient processing. The website reflects a professional and comprehensive digital presence, supporting multiple languages and featuring extensive customer references and contact options. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap, Font Awesome, and Swiper.js. It uses Amazon CloudFront for content delivery and integrates marketing and analytics tools including HubSpot, Google Analytics, LinkedIn scripts, and Mailchimp. The site is mobile-optimized with good navigation and SEO practices, although performance metrics were not available. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability impacting user trust and data protection. While several security headers are implemented, the absence of TLS protocols and proper certificate management significantly lowers the security posture. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms in place. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates strong business credibility and content quality but requires urgent security improvements to protect visitors and maintain trust. Strategic recommendations include immediate SSL/TLS deployment, enabling modern security protocols, and enhancing security header configurations to align with best practices.

M

Montron GmbH - Montagepartner für Industrie und Gewerbe

montron.at

23

Montron GmbH is an established Austrian company specializing in industrial and commercial montage services with over 24 years of experience. Their service portfolio includes Werbemontage, Anlagenmontage, Industriemontage, Raffinerieservice, Spezialmontage, and Elektromontage, targeting industrial and commercial clients primarily in Austria. The company emphasizes professional project management and TÜV safety certifications, positioning itself as a trusted partner in the manufacturing and energy sectors. Technically, the website is built on WordPress with the Divi theme and uses caching and JavaScript libraries such as jQuery and Swiper for enhanced user experience. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to align with modern standards.

W

WINTERSTEIGER

wintersteiger.com

40

WINTERSTEIGER is a well-established Austrian machinery and plant engineering group with a strong international presence and leadership in niche markets such as sports equipment services, agricultural machinery, woodworking, and metal processing. The website reflects a mature business with clear division of products and services, multilingual support, and active social media engagement. Technically, the site uses Apache, Bootstrap, Cookiebot for consent management, Google Tag Manager, and Piwik PRO for analytics, indicating a modern digital infrastructure. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but urgently needs to address critical SSL/TLS issues to improve security and user trust.

V

vis vitalis gmbh

vis-vitalis.com

27

Vis Vitalis GmbH is an established contract manufacturer of nutritional supplements based in Austria, with a business history dating back to 1986. The company specializes in the development and production of capsules, powders, liquids, and proprietary PANMOL® raw materials, serving a diverse clientele with both small and large batch orders. Their market position is strengthened by nearly four decades of experience, a medium-sized workforce, and certifications such as IFS 8, underscoring their commitment to quality and food safety. Technically, the website is built on a modern WordPress platform utilizing PHP 8.2 and various contemporary JavaScript libraries and plugins, including WP Grid Builder and Contact Form 7. While the site demonstrates good mobile optimization, accessibility, and SEO practices, performance metrics indicate potential issues with load time measurement. The site employs cookie consent mechanisms compliant with GDPR, including Borlabs Cookie and conditional loading of Matomo Tag Manager. From a security perspective, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical vulnerability. No modern TLS protocols or strong cipher suites are enabled, and essential security headers like HSTS are missing. Although no active vulnerabilities such as Heartbleed or POODLE were detected, the absence of proper SSL/TLS configuration significantly lowers the security posture. Overall, Vis Vitalis presents a professional and trustworthy online presence with comprehensive business information and compliance with privacy regulations. However, the critical lack of HTTPS and proper SSL configuration poses a significant risk that should be addressed promptly to protect user data and maintain trust.

ArcelorMittal Construction is a large, established manufacturing company specializing in steel-based building solutions for architectural projects, with a strong presence in Austria and multiple European markets. The website reflects a professional and comprehensive business offering, targeting construction professionals and project developers with a broad portfolio of products and services emphasizing sustainability and innovation. Technically, the website uses modern JavaScript libraries and analytics tools, hosted behind Cloudflare, but suffers from a critical lack of valid SSL/TLS configuration, exposing users to security risks. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. The security posture is weak due to missing HTTPS, but other security headers and practices are present. Overall, the website is trustworthy and professional but requires urgent security improvements to protect users and maintain credibility.

W

Worthington Enterprises

worthingtonindustries.com

38

Worthington Enterprises is a publicly traded enterprise specializing in the acquisition, design, and manufacturing of innovative building and consumer products, as well as sustainable energy solutions. The company recently separated from Worthington Steel, forming two independent entities focused on differentiated growth strategies. The website reflects a professional corporate presence with clear branding and investor relations information. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics but suffers from a critical lack of valid SSL/TLS configuration, exposing users to security risks. Privacy and cookie policies are well implemented, supporting GDPR compliance. Overall, the site is content-rich and professionally maintained but requires urgent security improvements to protect visitors and maintain trust.

H

Hirsch Technology

hirsch-technology.com

40

HIRSCH Technology is a well-established manufacturer and technology leader in the EPS machine industry with over 35 years of experience. The company offers a comprehensive range of high-quality machines and turnkey plants for processing EPS, EPP, and molded pulp, serving multiple industrial sectors including construction, electrical, food, and packaging. Their market position is strong, supported by multiple locations across Europe and a parent group, HETech, which consolidates their industry presence. Technically, the website is built on a modern WordPress platform with various plugins for SEO, performance, and social media integration, but lacks a valid SSL certificate, which is a significant security concern. The security posture is basic with some security headers present but no active TLS protocols or strong cipher suites, exposing the site to potential risks. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism in place. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

V

Victaulic

victaulic.com

37

Victaulic is a globally recognized manufacturer specializing in mechanical pipe joining, flow control, and fire protection solutions tailored for complex piping applications. The company holds a strong market position as a leader in these sectors, serving commercial, industrial, and energy markets with a broad portfolio of products and services including customer training and virtual design tools. Their website reflects a professional and consistent brand image with comprehensive product information and clear contact details. Technically, the site is built on WordPress with modern SEO tools and interactive features, but suffers from slow load times and lacks advanced accessibility features. Security posture is weak due to the absence of a valid SSL/TLS certificate and missing security headers, exposing users to potential risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is functional and credible but requires urgent improvements in security and performance to enhance user trust and compliance.

M

Miraplast GmbH

miraplast.at

28

Miraplast GmbH is a medium-sized, family-owned manufacturing company based in Austria, specializing in plastic injection molding products and tooling. With over 50 years of experience, it operates two main brands, MiraHome and MiraTech, serving both consumer and industrial markets. The company maintains production sites in Austria and Hungary, emphasizing quality and sustainability. Technically, the website is built on WordPress with common plugins for SEO, multilingual support, and user management, hosted on Cloudways. However, the site lacks HTTPS, which is a critical security gap. Privacy and cookie policies are present and managed via Borlabs Cookie, but GDPR compliance is basic. Overall, the business is credible and well-positioned in its sector, but the website's security posture requires urgent improvement.

H

HARTING Technology Group

harting.com

40

HARTING Technology Group is a globally recognized leader in industrial connectivity solutions, serving sectors such as manufacturing, energy, transportation, and automation. The company offers a broad portfolio of connectors and related products, emphasizing innovation, quality, and regional manufacturing capabilities. Their website reflects a mature digital presence with comprehensive content and professional design, targeting industrial engineers and businesses. Technically, the site leverages modern frameworks like Angular and Contentful CMS, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with clear policies and consent management. Security posture is weak due to missing SSL and security headers, exposing the site to potential risks. Overall, the business credibility is high, supported by a long domain history and consistent WHOIS data. Strategic improvements in security and performance are recommended to enhance trust and compliance.

M

MIT

marmit.co.za

23

MIT is a specialized manufacturer and supplier of professional and calibrated light and UV meters in Africa, with a strong market position as the only manufacturer of such instruments on the continent. They also provide custom solutions for radiation measurement and imaging sourced from global manufacturers, including the Goldilux series of light meters and Tissuegnostics products. The website is built on WordPress with Elementor and includes detailed product information, staff profiles, and partner testimonials, indicating a professional digital presence. However, the lack of HTTPS and security headers represents a significant security risk. The site uses Google Analytics for user tracking but lacks comprehensive privacy and cookie policies, which may impact compliance. Overall, the business appears credible and focused on niche industrial and scientific markets in South Africa, but improvements in security and privacy compliance are recommended.

M

Medek & Schörner GmbH

medek.at

36

Medek & Schörner GmbH is a medium-sized Austrian manufacturing company specializing in high-tech cable printing machines and coating systems for optical fibers. The company positions itself as a world market leader in its niche, targeting industrial B2B customers requiring advanced cable marking and coating solutions. Their website reflects a professional and consistent brand image with clear navigation and relevant content focused on their products and industry events. Technically, the website uses a PHP backend with nginx server, Bootstrap for styling, and includes marketing and analytics tools such as HubSpot and Google Tag Manager. However, the site lacks HTTPS support, which is a significant security concern. The security posture is weak due to the absence of SSL/TLS, no HSTS, and no modern TLS protocols enabled. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no explicit GDPR compliance indicators or data protection officer contact. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

S

STUDEN & CO Holding

sco-group.com

23

STUDEN & CO Holding is an international agribusiness holding company specializing in the processing, trading, and distribution of agricultural commodities such as sugar, edible oils, oilseeds, and grains. The company operates through subsidiaries including AGRANA-STUDEN Group and BIMAL Group, targeting agribusiness stakeholders and investors. The website presents a professional corporate image with multilingual support and clear business descriptions. Technically, the site is built on WordPress with common plugins like Yoast SEO and Visual Composer, but suffers from outdated PHP and lack of HTTPS, impacting security and performance. Security posture is weak due to missing SSL, no modern TLS support, and absence of advanced security headers. Privacy compliance is minimal with no visible privacy policy but a cookie consent banner is present. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

A

asa technology Produktions- und Vertriebs GmbH

asahydraulik.com

21

asa technology Produktions- und Vertriebs GmbH is a mature Austrian manufacturing company specializing in hydraulic cooling and connection technologies. Their website showcases a broad portfolio of heat exchangers, pumps, valves, and connection solutions targeting industrial and mobile equipment manufacturers. The company positions itself as an innovative leader with over 40 years of experience and a global footprint. Technically, the website is built on Drupal 9 with modern front-end libraries but lacks HTTPS, which is a critical security flaw. The site includes a cookie consent mechanism but lacks explicit privacy and terms of service pages. Contact information is clearly provided, enhancing business credibility. Security headers are partially implemented, but the absence of SSL/TLS and other modern security features significantly lowers the security posture. Overall, the website is professional and content-rich but requires urgent security improvements.

The website for dow.com is currently inaccessible, returning an error page indicating a possible CDN or WAF blocking or server-side issue. Dow is a large multinational company operating primarily in the energy, manufacturing, and chemical sectors, serving industrial clients and business partners. The domain registration data is consistent with the company's identity and history, confirming legitimacy. However, the website lacks a valid SSL certificate and HTTPS support, which severely impacts its security posture. No privacy, cookie, or terms of service policies are detectable, and no contact information or social media links are present in the accessible content. The technical infrastructure appears to rely on Akamai CDN and Microsoft Outlook for email services, but the website performance is slow and minimal resources are loaded. Overall, the site is currently not usable for end users or business interactions due to the error page and lack of security features.

K

KEYENCE CORPORATION OF AMERICA

keyence.com

39

KEYENCE CORPORATION OF AMERICA operates a comprehensive and professionally designed website focused on industrial automation products including sensors, machine vision systems, and measuring instruments. The company is positioned as a leading enterprise in the manufacturing and technology sectors, targeting industrial and factory automation professionals. The website demonstrates strong branding, clear navigation, and extensive product information, supported by a mature domain and consistent WHOIS data. Technically, the site uses Apache server technology, jQuery, and Akamai CDN, with modern marketing and analytics tools such as Google Tag Manager and Cookiebot for privacy compliance. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, significantly impacting the security posture score. Privacy policies and cookie consent mechanisms are well implemented, reflecting good compliance with GDPR standards. Overall, the site is trustworthy and professional but urgently requires SSL implementation to enhance security and user trust.

L

Linz Center of Mechatronics GmbH

lcm.at

29

Linz Center of Mechatronics GmbH (LCM) is a medium-sized Austrian research and development service provider specializing in mechatronics and manufacturing technologies. The company supports medium and large enterprises in sectors such as machinery, automotive, and medical technology by integrating scientific research into practical, economically viable solutions. Their services include integrated hydraulic and electrical drive systems, vibration technology, Industrial IoT, measurement services, and transformation consulting. The website is professionally designed, multilingual, and targets industrial clients seeking innovation and sustainability improvements. Technically, the site runs on WordPress with the Divi theme and includes modern SEO and multilingual plugins, but suffers from slow load times and lacks a valid SSL certificate, which impacts security posture. Security measures include GDPR-compliant cookie consent and captcha-protected contact forms, but the absence of HTTPS and security headers are critical vulnerabilities. Overall, LCM presents a credible and professional digital presence aligned with its business objectives, but should urgently address SSL and security header issues to improve trust and compliance.

H

Hirtenberger Defence Systems

hirtenberger.com

29

Hirtenberger Defence Systems is a medium-sized manufacturing company specializing in the development and production of mortar systems and related defense technologies. The company operates globally, targeting military and defense sector customers with a comprehensive product range including mortar ammunitions, weapon systems, and auxiliary equipment. The website reflects a professional business presence with consistent branding and good content relevance, though it lacks some advanced features such as detailed contact information and comprehensive privacy compliance mechanisms. Technically, the website is built on WordPress using the Divi theme and incorporates SEO tools like Rank Math. However, the site suffers from slow load times and basic mobile optimization. The hosting provider is hosttech.at, and the DNS setup is standard without advanced security features like DNSSEC or CAA records. From a security perspective, the website has critical shortcomings including the absence of a valid SSL certificate, lack of HTTPS support, and missing security headers. These issues significantly reduce the security posture and expose the site to potential risks. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No incident response or vulnerability disclosure information is available, which may impact trust and security readiness. Overall, the website is functional and presents the business adequately but requires urgent improvements in security and privacy compliance to enhance trustworthiness and protect user data. Strategic recommendations include implementing HTTPS, enabling security headers, and establishing clear privacy and incident response policies.

P

prentner engineering & consulting

prentner-ec.com

25

Prentner engineering & consulting is a small German-based engineering consultancy specializing in product development, design, FEM/MKS calculations, tooling technology, automation, assembly technology, and project management services. The company targets businesses requiring specialized engineering and consulting support in manufacturing and product innovation. Their website is built on WordPress with common plugins and provides content primarily in German with English alternatives. The site includes a cookie consent mechanism and a privacy policy, demonstrating GDPR compliance awareness. However, the absence of HTTPS is a critical security shortfall that undermines user trust and data protection. Technically, the website uses PHP 7.2.34 on an nginx server hosted by tele.net. The site employs popular WordPress plugins such as WPBakery Page Builder, LayerSlider, Contact Form 7, and Complianz GDPR. Performance data is missing or indicates slow loading, and SEO and accessibility optimizations are basic. Mobile optimization is good, and navigation is clear and professional. From a security perspective, the lack of SSL/TLS encryption is the most significant vulnerability, exposing users to potential data interception. No advanced security headers or incident response policies are found. Cookie consent is implemented properly, but no explicit security or incident response contacts are provided. WHOIS data aligns well with the website's business claims, indicating legitimacy. Overall, the website is functional and professional in content and design but requires urgent security improvements, especially enabling HTTPS and enhancing security headers. Privacy compliance is adequate, but business credibility could be improved by adding direct contact information and certifications.

W

Weitzer Parkett Vertriebs GmbH

weitzer-parkett.com

40

Weitzer Parkett Vertriebs GmbH is a well-established Austrian family-owned manufacturer and distributor of parquet flooring and wooden stairs, with a history dating back to 1831. The company holds a leading market position in Austria and is recognized as one of the top parquet manufacturers in Europe. Their product portfolio includes innovative parquet solutions such as Pflegefrei-Parkett, Gesund-Parkett, and Flüster-Parkett, emphasizing sustainability and ecological responsibility. The website reflects a mature digital presence with comprehensive product information, multi-language support, and strong branding consistency. Technically, the website is built on WordPress with WooCommerce, utilizing modern libraries and plugins such as jQuery, Slick Slider, and Borlabs Cookie for cookie management. It is hosted behind Cloudflare, providing CDN and security services. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, impacting user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with explicit consent mechanisms. From a security perspective, while the site benefits from Cloudflare's protection and uses reCAPTCHA on forms, the lack of HTTPS and modern TLS protocols, as well as missing security headers like HSTS, reduce its security posture. No explicit security policy or incident response information is found, which could be improved to enhance transparency and readiness. Overall, the website is professional, content-rich, and business-credible but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include implementing a valid SSL certificate, enabling HTTPS, and enhancing security headers and protocols.

A

ANGER MACHINING GmbH

anger-machining.com

21

ANGER MACHINING GmbH is a medium-sized manufacturing company specializing in turnkey machining solutions for the automotive industry, focusing on battery trays, profiles, and structural components. The company has a mature online presence with a domain registered since 2007 and holds recognized certifications such as TÜV Süd. Their website is multilingual and professionally designed, targeting B2B clients in automotive manufacturing. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and cookie compliance. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site provides good business credibility and content quality but requires urgent security improvements.

N

Nederman Holding AB

nederman.com

37

Nederman Holding AB is a well-established global leader in industrial air filtration and environmental technology, with a history dating back to 1944. The company offers a comprehensive range of products and services focused on protecting people, the environment, and production processes from harmful industrial emissions. Their market position is strong, supported by multiple subsidiaries and a broad product portfolio including dust and fume extraction systems and connected IIoT solutions. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Sitecore CMS, hosted via Cloudflare, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Privacy compliance is partially addressed through OneTrust cookie consent, but no explicit GDPR or security policies are found. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

D

Donauchem GmbH

donauchem.at

36

Donauchem GmbH is a medium-sized chemical distributor operating primarily in Austria and Central/Eastern Europe. The company specializes in the distribution of chemical raw materials and offers tailored product development through its own research and development department. It serves diverse industries including food, pharma, cosmetics, agriculture, and manufacturing. The website reflects a professional business with clear branding and a comprehensive product portfolio. Technically, the site is built on ASP.NET Web Forms with Kentico CMS and hosted on Microsoft IIS. However, the absence of a valid SSL certificate and lack of HTTPS significantly undermine the security posture. Privacy compliance is well addressed with a privacy policy and cookie consent mechanism in place. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

L

Lorencic GmbH Nfg. & Co KG

lorencic.com

39

Lorencic GmbH Nfg. & Co KG operates as a medium-sized company specializing in construction services and products, including workwear, reinforcement fabrics, construction profiles, diamond cutting discs, and rental of construction machinery. The company targets construction professionals and contractors primarily in Austria and surrounding European countries, as evidenced by multiple country-specific domains. The website presents a professional design with clear navigation and relevant content, supporting its business model as a B2B supplier and rental service provider. Technically, the website runs on an Apache server with Ubuntu, utilizing common JavaScript libraries such as jQuery and Bootstrap for frontend functionality. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. Performance metrics are unavailable, and mobile optimization is basic but functional. The site includes cookie consent mechanisms and basic privacy policy compliance, though more advanced privacy and security policies are lacking. From a security perspective, the lack of HTTPS is a critical vulnerability, exposing users to potential data interception risks. No advanced security headers or incident response information is published, and session management could be improved. The site uses Matomo analytics with user consent, indicating moderate user tracking with some privacy compliance. Overall, the security posture is weak and requires urgent improvements. Strategically, the company should prioritize implementing HTTPS with a valid certificate, enhance security headers, and publish clear security and incident response policies. Improving privacy compliance and expanding trust indicators will also strengthen business credibility and user confidence.

M

MWS

mws.eu

21

MWS is an international market leader specializing in aluminum casting technologies including sand casting, permanent mold casting, and low-pressure casting. The company offers comprehensive services from development and prototyping to series production and mechanical processing, targeting industrial sectors such as automotive, electromobility, and transportation. The website is built on Concrete CMS and employs standard web technologies with Google Analytics for user tracking. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are well implemented and GDPR compliant, but no explicit terms of service or security policies are present. Overall, the site presents professional content and clear navigation but requires urgent security improvements.

S

SIG Combibloc Group Ltd.

sig.biz

62

SIG Combibloc Group Ltd. is a leading enterprise in the manufacturing sector specializing in innovative and sustainable packaging solutions including carton, bag-in-box, and spouted pouch packaging. The company holds a strong market position as an industry leader with a comprehensive portfolio and a global reach. Their website reflects a mature digital presence with professional design, clear navigation, and a focus on sustainability and innovation. Technically, the site uses modern frameworks such as Next.js and React, hosted on Microsoft Azure, with good mobile optimization and SEO practices. However, the security posture is impacted by an invalid or missing SSL certificate, which is a critical issue that should be addressed promptly. Privacy compliance is well managed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional but requires improvements in SSL configuration to enhance security.

P

PennWhite

pennwhite.co.uk

38

PennWhite is a mature, medium-sized global manufacturer specializing in foam control agents and chemical solutions, operating as a subsidiary of Manali Petrochemicals Limited. The company serves a broad industrial audience with over 35 years of experience and a presence in 40+ countries. The website is a modern Angular-based single-page application hosted on AWS infrastructure, demonstrating a good level of digital maturity with responsive design and professional branding. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy compliance is basic, with no cookie consent mechanism or explicit GDPR adherence visible. The company shows trustworthiness through certifications and corporate affiliations but should urgently address security shortcomings to improve its posture and compliance.

E

EBNER Industrieofenbau GmbH

ebner.cc

35

EBNER Industrieofenbau GmbH is a well-established global leader in manufacturing heat treatment furnace facilities for the steel, aluminum, and copper base metal industries. The company is family-owned, founded in 1948, and headquartered in Austria. Their website reflects a mature digital presence with multilingual support, professional content, and clear business information targeting industrial B2B customers. Technically, the site runs on WordPress with modern plugins and Cloudflare CDN, but suffers from critical SSL/TLS misconfiguration, lacking a valid HTTPS certificate and modern protocol support, which severely impacts security posture. Privacy compliance is well addressed with GDPR cookie consent and a comprehensive privacy policy. However, no explicit security policy or incident response information is publicly available, which could be improved to enhance trust. Overall, the site is professional and credible but requires urgent security upgrades to protect visitors and maintain reputation.

C

CCL Industries

cclind.com

39

CCL Industries is a global leader in specialty packaging and the largest label company worldwide, with headquarters in Canada and the USA. The company operates across multiple sectors including home & personal care, premium food & beverage, healthcare, automotive, and security, supported by subsidiaries such as Avery, Checkpoint, Innovia, CCL Design, and CCL Secure. Their website reflects a mature enterprise with comprehensive investor relations, sustainability initiatives, and corporate governance information. Technically, the site is built on WordPress with common plugins and libraries, hosted behind Cloudflare, but suffers from a lack of a valid SSL certificate, impacting security posture. The absence of HTTPS and security headers, along with no visible cookie consent mechanism, represents significant security and privacy compliance gaps. Overall, the site is professional and content-rich but requires urgent improvements in security configuration and privacy compliance to align with best practices.

B

BORBET GmbH

borbet-austria.at

30

BORBET GmbH is a large, internationally oriented family-owned manufacturer specializing in aluminum alloy wheels for the automotive industry and specialist trade. The company offers a comprehensive product range including a 3D wheel configurator and operates both B2B and B2C sales channels. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting automotive customers and partners. Technically, the site uses a custom CMS with common JavaScript libraries but lacks modern SSL/TLS security, which is a critical vulnerability. Privacy compliance is well addressed with a cookie consent mechanism and clear privacy policy. Contact information and social media presence enhance business credibility. However, the absence of a valid SSL certificate and TLS protocols significantly undermines the security posture, exposing users to risks. Strategic improvements in SSL deployment and security best practices are urgently recommended.

L

Leviton Manufacturing Co., Inc.

brand-rex.com

40

Leviton Manufacturing Co., Inc. operates a comprehensive and professionally designed website offering a wide range of electrical and lighting control products targeting residential, commercial, and industrial markets. The company positions itself as a leader in home electrical safety with over 115 years of history, providing products such as lighting controls, wiring devices, networking solutions, electric vehicle charging, and submetering. The website demonstrates a mature digital presence with extensive product catalogs, market segmentation, and partner integrations. Technically, the site is built on Adobe Experience Manager with modern marketing and analytics tools integrated, ensuring good user experience and SEO. However, a critical security gap exists due to the absence of a valid SSL certificate and disabled TLS protocols, significantly impacting the security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain credibility.