Manufacturing security reports

S

STAMAG Stadlauer Malzfabrik GesmbH

stamag.at

7

STAMAG Stadlauer Malzfabrik GesmbH is a well-established Austrian company specializing in the production and supply of high-quality malt and baking ingredients, with a tradition spanning over 140 years. The company serves primarily B2B customers in the baking and brewing industries, offering a broad portfolio including base and specialty malts, baking ingredients for bread, fine bakery, and sweets, as well as sourdoughs. STAMAG is part of the IREKS Group, enhancing its market position and operational capabilities. The website reflects a professional and consistent brand image, targeting German-speaking markets with comprehensive product and company information. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Slick Slider for interactive elements. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses Matomo analytics for privacy-respecting visitor tracking. However, explicit security headers could be more visible or documented, and no dedicated security or incident response policies are published. Overall, the website and business demonstrate a mature digital presence with strong compliance and trust indicators. There are no signs of blocking or WAF interference, and the domain registration details align well with the company's identity and history, supporting legitimacy. The company maintains active social media channels and provides clear contact information, enhancing user trust and engagement.

E

Exel Composites

exelcomposites.com

19

Exel Composites is a global leader in composite design and manufacturing with over 60 years of experience. The company specializes in producing high-performance composite materials using continuous manufacturing methods such as pultrusion and pull-winding. Their business model focuses on B2B industrial clients across sectors including transportation, energy, infrastructure, and manufacturing. The website reflects a mature corporate presence with multilingual support, investor relations, and comprehensive product and case study information. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility considerations. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, formal security policies and incident response information are not published, representing an area for improvement. Overall, the website is professional, trustworthy, and aligned with the company's market position and business objectives.

B

BANDEX

bandex.com

8

BANDEX is a well-established Austrian manufacturing company specializing in curtain and decorative bands, with a history dating back to 1955. The company offers a range of textile products including curtain tapes and technical textiles, supported by an online shop and innovative digital tools such as configurators and a virtual showroom. Their target audience includes retail customers, interior decorators, and textile professionals. The website is primarily in German and reflects a medium-sized enterprise with consistent branding and a good level of content quality. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, with additional tools for user interaction and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, some technical details such as hosting provider and CMS are not explicitly identified. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. While no explicit security policies or incident response contacts are found, the site does not exhibit obvious vulnerabilities or exposed sensitive data. The use of third-party tracking services is moderate, and privacy compliance appears adequate. Security headers and advanced security practices could be improved. Overall, BANDEX presents a trustworthy and professional online presence with moderate risk. Strategic improvements in security policy transparency, incident response readiness, and security header implementation would enhance their security posture and compliance standing.

Kennametal Inc. is a leading enterprise in the manufacturing sector, specializing in productivity solutions for metalworking, earth cutting, and wear components. The company serves industrial manufacturers and mining and construction industries with a broad portfolio of products including metalworking tools, carbide wear parts, and additive manufacturing components. The website reflects a strong market position with comprehensive product catalogs, collaboration tools, and extensive customer support options. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates advanced monitoring and analytics tools such as New Relic and Adobe Launch. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent security improvements to protect user data and maintain credibility.

RUD Gruppe is a well-established German manufacturing company specializing in chain systems and components for diverse industrial applications including lifting, securing, and transportation. With a history spanning approximately 140 years, the company operates globally and offers a broad product portfolio including lifting chains, securing devices, conveyor and drive technology, and specialized military and forestry chains. The website reflects a mature digital presence with multilingual support and structured navigation, powered by TYPO3 CMS and enhanced with caching and Google Tag Manager for analytics. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, exposing users to potential risks. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance, though cookie consent mechanisms are lacking. Social media integration is robust, enhancing brand trust and engagement.

Stepan Company operates as a global specialty and intermediate chemical supplier, providing chemical ingredients and formulations tailored to consumer and industrial markets. The company emphasizes innovation, sustainability, and extensive R&D capabilities, positioning itself as a large, reputable player in the manufacturing sector. Their website reflects a professional and comprehensive digital presence with clear navigation and rich content targeting B2B customers seeking chemical solutions. Technically, the website leverages Adobe Experience Manager as its CMS, integrates Salesforce platforms, and uses modern marketing and analytics tools such as Pardot, Adobe DTM, and Google Tag Manager. The site is hosted on Microsoft Azure DNS infrastructure and employs standard security headers and content security policies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. From a security perspective, while some best practices like CSP and secure cookies are implemented, the lack of HTTPS and modern TLS protocols exposes the site to risks and undermines user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is primarily available via web forms, with no direct emails or phone numbers published. Overall, the site is trustworthy and professionally managed but requires urgent remediation of its SSL/TLS configuration to meet modern security standards and improve user confidence.

S

SW Umwelttechnik Stoiser & Wolschner AG

sw-umwelttechnik.com

34

SW Umwelttechnik Stoiser & Wolschner AG is a well-established manufacturer specializing in precast concrete products for infrastructure development, including civil engineering, traffic, and building sectors. The company operates across multiple Central and Eastern European countries with subsidiaries in Austria, Hungary, Romania, and Slovakia, positioning itself as a regional leader in sustainable construction materials. Their website reflects a professional and comprehensive digital presence, targeting infrastructure developers and construction companies. Technically, the site is built on TYPO3 CMS with PHP 8.1 and Bootstrap, offering good mobile optimization and accessibility, though performance is moderate due to lack of SSL and modern protocols. Security posture is weak, with no HTTPS enabled and missing critical SSL configurations, exposing the site to risks. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the business credibility is high, supported by detailed contact information, investor relations, and trust signals such as LinkedIn presence. Strategic improvements in security infrastructure are recommended to enhance trust and protect user data.

E

ELIX Polymers, S.L.U.

elix-polymers.com

40

ELIX Polymers, a member of Sinochem International, is a leading European manufacturer of ABS resins and derivatives, serving diverse industrial sectors including automotive, healthcare, and consumer goods. The company emphasizes innovation, sustainability, and customer service, operating globally with business relations in 40 countries. Their website reflects a professional and comprehensive digital presence with detailed corporate, product, and sustainability information. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted behind Cloudflare, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts security posture. Privacy and cookie policies are well implemented with GDPR compliance and active consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

B

BFW

bfwindia.com

33

BFW is a well-established Indian machine tool manufacturer with a history dating back to 1961. The company specializes in high-precision machinery and custom manufacturing solutions, serving industries such as automotive, aerospace, electronics, and agriculture. Their website reflects a mature digital presence built on WordPress with Elementor and related plugins, offering rich content including product details, case studies, blogs, and event information. However, the site lacks a valid SSL certificate, which is a critical security gap. Contact information is comprehensive, including email, phone, and social media channels, but privacy and cookie policies are absent, indicating compliance gaps. Overall, BFW demonstrates strong business credibility and branding consistency but needs to improve its security posture and privacy compliance to meet modern standards.

Maillis Group is a well-established manufacturing company specializing in secondary packaging systems, including strapping, wrapping, and box handling solutions. With over 50 years of experience, the company serves industrial and manufacturing sectors, providing integrated packaging machines, consumables, and services. The website reflects a professional and consistent brand presence targeting industrial clients. Technically, the site is built on Drupal 8 with PHP 7.2 backend and hosted likely on AWS infrastructure. It employs modern tracking and marketing tools such as Google Analytics, Google Tag Manager, and Albacross, alongside a comprehensive cookie consent mechanism. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Security headers are well implemented but weakened by unsafe CSP directives. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Z

Zell Materials GmbH

zellamid.com

33

Zell Materials GmbH is a medium-sized manufacturing company specializing in engineering plastics, offering a range of products including general purpose materials, special performance materials, and high performance materials. The company operates primarily in the manufacturing sector and serves industrial and engineering clients. Their website provides product finders, material comparison tools, and a B2B webshop, indicating a mature digital presence tailored to professional customers. Technically, the website uses Apache server technology, ezPublish CMS, and includes JavaScript libraries such as jQuery and YUI. However, the absence of SSL/TLS encryption and DNS records significantly undermines the security posture and operational reliability of the domain. The site includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good privacy compliance practices. Security headers are minimal, and no explicit security or incident response policies are published. Overall, the website is professionally designed with consistent branding but requires urgent security improvements to protect users and enhance trust.

P

Permapack AG

permapack.ch

26

Permapack AG is a Swiss family-owned manufacturing and trading company specializing in high-quality products such as labels, adhesive tapes, films, sealants, and garden articles. The company serves various sectors including food, cosmetics, industry, construction, and retail, offering both standard products and customized solutions. Their business model combines B2B sales with an online shop and extensive production services. The website reflects a medium-sized enterprise with a consistent brand presence and strong trust indicators such as awards and social media engagement. Technically, the site uses a custom e-commerce platform with modern JavaScript libraries and tracking tools, hosted by IP-Plus AG. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to risks and limiting secure communications. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is professional and trustworthy but requires urgent security improvements.

Schlüsselbauer Technology GmbH & Co KG is a medium-sized Austrian manufacturing company specializing in the development and construction of machinery for producing concrete infrastructure components such as pipes and shafts. Established in 1964, the company positions itself as an innovation leader in machine building with a global presence including subsidiaries like Schlüsselbauer North America. Their website provides multi-language support and detailed information about their products and services targeting industrial and infrastructure sectors. Technically, the website uses Apache server with standard HTML5, CSS3, and JavaScript, likely leveraging Bootstrap for responsive design. However, the site lacks HTTPS encryption, which is a critical security gap. The absence of SSL/TLS certificates and modern security headers exposes the site to risks and reduces trustworthiness. Privacy compliance is addressed with a cookie consent manager and a privacy policy, but no explicit security or incident response policies are published. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance credibility.

K

Kverneland Group

kvernelandgroup.com

28

Kverneland Group is a prominent international enterprise specializing in the development, manufacturing, and distribution of agricultural implements, electronic solutions, and digital farming services. The website reflects a well-established brand with a clear focus on agricultural professionals and partners, offering extensive content about products, news, and events. The company maintains multiple regional subdomains and partner portals, indicating a broad market presence. Technically, the site is built on a legacy CMS (eZ Publish) and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel, alongside a robust cookie consent mechanism. However, the absence of a valid SSL certificate and lack of DNS records represent significant security and configuration gaps. Security headers are partially implemented, but the lack of HTTPS severely impacts the site's security posture. Privacy compliance is well addressed with clear policies and consent management. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security infrastructure to align with enterprise standards.

W

Wartenberg & Co · Großhandel: Hydrokolloide, Lecithine, Stärke, Zucker

wartenberg.at

26

Wartenberg & Co is a well-established Austrian family-owned business specializing in the wholesale distribution of sugar and food raw materials, with over 100 years of market presence. Their product portfolio includes various types of sugar, starch and derivatives, hydrocolloids, lecithins, and other food additives, with a strong emphasis on sustainability, bio and fair trade certifications, and personalized customer service. The website is built on WordPress with Elementor and includes modern SEO and GDPR compliance features. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. The company demonstrates good business credibility and compliance with industry standards such as the IFS Broker certification. Strategic improvements in security infrastructure are recommended to enhance the overall security posture and trustworthiness.

E

Envases Öhringen GmbH

huber-packaging.com

40

Envases Öhringen GmbH is a well-established German manufacturer specializing in metal and plastic packaging solutions, with a strong global presence and leadership in the beverage packaging sector, particularly 5-liter party kegs. The company operates multiple sites worldwide and emphasizes sustainability and quality, supported by ISO certifications and a whistleblower system. The website is built on the Jimdo CMS platform, featuring good content quality, clear navigation, and a professional design tailored to industrial clients. However, the technical infrastructure shows weaknesses in SSL implementation, lacking a valid HTTPS certificate, which poses a significant security risk. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility is high, supported by consistent WHOIS data and comprehensive contact information.

4

4DESIGN

4design.co

28

4DESIGN is a New Zealand-based industrial design and product development consultancy specializing in creating innovative and award-winning products for a diverse clientele including companies, startups, and individuals. The company offers a broad range of services such as industrial design, engineering, prototyping, UI/UX design, manufacturing, and 3D printing. Their market position is strong within the manufacturing and technology sectors, supported by multiple awards and recognized certifications. The website reflects a professional and consistent brand image with excellent content quality and clear navigation, targeting clients seeking high-quality design consultancy services. Technically, the website is built on WordPress and leverages common technologies including Apache server, jQuery, Google Analytics, and various plugins for SEO and social media integration. Hosting is provided by InMotion Hosting. However, the website lacks HTTPS, which is a critical security shortfall. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with comprehensive metadata and structured data. From a security perspective, the absence of a valid SSL certificate and HTTPS support significantly lowers the security posture. No advanced security headers or incident response policies are evident. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service found. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and credible but requires urgent security improvements, particularly enabling HTTPS and enhancing privacy compliance to meet modern standards. Strategic recommendations include installing SSL, enabling security headers, and implementing cookie consent mechanisms to improve trust and compliance.

P

planlicht GmbH&Co. KG

planlicht.com

40

PLANLICHT GmbH&Co. KG is an Austrian company specializing in architectural LED lighting solutions, serving sectors such as office, public, hospitality, and retail. Their website offers a comprehensive product catalog, customization options, and detailed technical documentation, targeting architects and lighting professionals. The company maintains a professional online presence with multilingual support and active social media channels. Technically, the website is built on WordPress with popular plugins and frameworks, providing a good user experience and moderate performance. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Business credibility is supported by clear contact information, job listings, and consistent branding. Overall, the site is functional and professional but requires urgent security improvements.

Visiativ Austria GmbH is a well-established digital transformation partner specializing in CAD and Product Lifecycle Management (PLM) solutions for manufacturing companies. With over 30 years of experience, the company offers a comprehensive portfolio including consulting, software sales, and training services. Their market position is strong within the manufacturing and technology sectors, supported by partnerships with Dassault Systèmes and a broad regional presence across Europe. The website reflects a professional and consistent brand image with high-quality content and effective SEO practices. Technically, the website is built on WordPress with modern plugins for SEO, caching, and cookie consent management. The infrastructure includes Apache hosting with DNS managed via Google Domains. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Other security best practices such as SPF records for email and vulnerability scanning show positive signs, but the lack of HTTPS is a major concern. The security posture is currently basic, with no detected vulnerabilities but missing essential HTTPS protections and security headers. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Contact information is clearly provided, including phone numbers and social media links, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols. Strategic recommendations include installing a valid SSL certificate, enabling HSTS, and improving server security headers to enhance trust and protect user data.

SPX FLOW, Inc. is a well-established global manufacturer specializing in engineered industrial equipment and solutions primarily serving the Food & Beverage, Industrial, and Power & Energy sectors. The company operates multiple specialized brands and maintains a comprehensive website showcasing products, solutions, industries served, and corporate information. The website demonstrates good content quality, professional design, and clear navigation targeting industrial manufacturers and related sectors. Technically, the site uses a Microsoft IIS server with ASP.NET framework and modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. However, the website critically lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts security posture and user trust. Security headers are partially implemented but ineffective without proper SSL. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Business credibility is strong with consistent WHOIS data, a mature domain, and multiple trust indicators such as social media presence and detailed corporate content. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance trust.

Smurfit Kappa is a globally recognized FTSE 100 company specializing in paper-based packaging solutions with operations in over 30 countries. The website reflects a mature business with a strong emphasis on sustainability, innovation, and customer-centric packaging services across multiple sectors. The digital infrastructure leverages modern technologies such as React and Sitecore CMS, supported by marketing and analytics tools including Google Tag Manager, Cookiebot, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which undermines the site's security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS issues to ensure secure user interactions.

S

STAPPERT

stappert.biz

18

STAPPERT is a leading European stockholder and supplier of stainless steel long products and fittings, targeting industrial and business customers. The company emphasizes a comprehensive product range, quality, and customer-oriented service. The website is built on WordPress with professional SEO and multilingual support, indicating a mature digital presence. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. Cookie consent is managed via a third-party tool, and contact forms are protected with reCAPTCHA, showing some privacy awareness. Overall, the site is functional and professional but requires urgent security improvements to protect data and build trust.

S

S. Spitz GmbH

spitz.at

31

S. Spitz GmbH is a well-established Austrian food and beverage manufacturer with over 160 years of tradition, specializing in beverages, sweets, baked goods, and delicatessen products. The company operates multiple production sites in Austria and emphasizes quality, sustainability, and customer-specific private label solutions. Their website reflects a professional and comprehensive digital presence targeting B2B customers, job seekers, and sustainability-conscious consumers. Technically, the site is built on WordPress with common plugins and libraries, offering good mobile optimization and SEO features. However, the absence of a valid SSL/TLS certificate and missing DNS records represent significant security and technical weaknesses. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect user data and enhance trust.

P

Peter Ofner GmbH

dirak.at

31

Peter Ofner GmbH is a specialized Austrian company providing innovative and tailored locking technology, hinges, and connection solutions primarily for industrial clients. The company positions itself as an expert in the manufacturing sector with a focus on quality products and personalized consulting. The website reflects a professional and well-structured digital presence, leveraging modern consent management and analytics tools, but lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. DNS records are notably missing or incomplete, which raises concerns about domain configuration consistency. Overall, the site offers comprehensive contact information and basic privacy compliance but lacks explicit security policies and incident response details.

B

Beontag

beontag.com

40

Beontag is a global manufacturing and technology company specializing in identification and digital transformation solutions, including graphics and label materials as well as RFID and IoT enablers. The company has a strong market presence with over 16 facilities worldwide and operations in more than 60 countries. Their website reflects a professional and comprehensive digital presence targeting businesses requiring advanced labeling and IoT solutions. Technically, the site is built on modern frameworks such as Next.js and hosted on AWS CloudFront, ensuring scalability and performance. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, which significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance and consent mechanisms. The site integrates analytics and marketing tools like Google Analytics and HubSpot, balancing user tracking with privacy considerations. Overall, while the business and technical maturity are strong, immediate attention to SSL/TLS implementation is necessary to enhance security and trust.

Alupress AG is a medium-sized manufacturing company specializing in automotive aluminum die casting components and full-service system solutions. Founded in 1965 and headquartered in Brixen, Italy, the company offers a comprehensive range of services from in-house development to aftermarket support. The website reflects a professional B2B focus with detailed service descriptions and multilingual support. Technically, the site is built on TYPO3 CMS and uses Matomo and Facebook Pixel for analytics and marketing. However, the absence of a valid SSL certificate and HTTPS is a critical security shortfall that undermines user trust and data protection. The cookie consent mechanism and privacy policy indicate good GDPR compliance. Overall, the site is well-structured and content-rich but requires urgent security improvements.

F

Frankenberg-Metallrecycling GmbH

fmr.ag

39

Frankenberg-Metallrecycling GmbH is a well-established family-owned metal recycling company based in Germany, specializing in the recycling and trading of zinc, tin, lead, and other metals. With over 65 years of experience and a certified waste disposal status, the company serves industrial and commercial clients across Europe, offering sustainable recycling solutions and related services. The website reflects a medium-sized business with a clear focus on metal recycling and environmental compliance. Technically, the website runs on an Apache server with legacy JavaScript libraries such as jQuery 1.10.2 and includes Google Analytics for tracking. However, the absence of HTTPS and modern security headers significantly weakens the site's security posture. The site is basic in mobile optimization and accessibility, with no CMS or advanced frameworks detected. Performance metrics are unavailable, indicating potential monitoring gaps. From a security perspective, the lack of SSL/TLS encryption is a critical vulnerability, exposing users to data interception risks. No advanced security policies or incident response contacts are published, and cookie consent mechanisms are missing despite cookie usage. The domain registration data is consistent with the business claims, supporting legitimacy. Privacy policies exist but are basic, and GDPR compliance is implied but not explicitly detailed. Overall, the website is functional and professional but requires urgent security improvements, especially HTTPS implementation and enhanced privacy compliance. Strategic recommendations include upgrading security infrastructure, implementing cookie consent, modernizing the tech stack, and publishing clear security and incident response policies to build trust and compliance.

Royal TenCate is a large multinational manufacturing group specializing in technical textiles and composite materials. The company operates through five independent subsidiaries, each focusing on niche markets such as protective fabrics, sports surfaces, outdoor textiles, survivability solutions, and advanced composites. The website serves as a portal directing visitors to these subsidiaries' individual sites. Technically, the website is built on the HubSpot CMS platform and hosted behind Cloudflare, but it lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. The site has basic SEO and accessibility features but lacks privacy and cookie policies, contact information, and security best practices such as vulnerability disclosure mechanisms. Overall, the security posture is weak due to missing HTTPS and modern TLS protocols, which significantly impacts trust and compliance. Strategic improvements in SSL deployment, privacy compliance, and security policies are recommended to enhance the website's credibility and user trust.

M

Mark Metallwarenfabrik GmbH

mark.at

27

Mark Metallwarenfabrik GmbH is a medium-sized manufacturing company based in Austria specializing in metal products. The company maintains a professional website showcasing its global footprint, technologies, sustainability efforts, and career opportunities. The site targets industry professionals, potential employees, and partners. Technically, the website is built on WordPress with modern plugins such as Elementor and Jet Engine, but lacks a valid SSL certificate, which is a critical security shortfall. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Social media presence is active, enhancing brand visibility. However, the absence of HTTPS and proper TLS configuration significantly impacts the security posture and overall trustworthiness of the site.

U

Uponor Suomi Oy

uponor.com

38

Uponor Suomi Oy is a leading international company specializing in building and infrastructure water transport solutions. The company offers a wide range of products and services including building technology, infrastructure products, project services, and customer support. It operates under the parent company Georg Fischer (GF) Group and targets professionals in construction, infrastructure planning, and homeowners. The website is well-designed, content-rich, and provides comprehensive information about products, services, and corporate policies. Technically, the site uses modern frameworks like React and Kentico CMS, with integrations for analytics and marketing tools. However, a critical security issue is the absence of a valid SSL/TLS certificate, exposing users to risks. Security headers are well implemented, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to ensure secure user interactions.

L

Linz Textil Holding AG

linz-textil.at

27

Linz Textil Holding AG is a leading European manufacturer specializing in yarns, fabrics, and terry products, serving the textile industry with a strong presence across multiple European countries through its subsidiaries. The company’s website reflects a professional and consistent brand image, targeting textile industry customers and partners. The business model focuses on manufacturing and distribution with a clear emphasis on innovation, tradition, and sustainability. Technically, the website is built on TYPO3 CMS with standard web technologies including jQuery, and it incorporates modern consent management and analytics tools such as Usercentrics and Google Analytics 4. However, the website suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture and trustworthiness. Despite this, the site includes comprehensive legal and privacy documentation, indicating good privacy compliance. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Roll4You, s.r.o. is a Czech Republic-based manufacturer and distributor specializing in cigarette papers, filters, and tubes. As a member of the delfort group, a global leader in special and functional papers, Roll4You offers customized paper solutions and brand partnership services. The company targets rolling paper brands and distributors, operating primarily in the manufacturing sector with a B2B business model. The website reflects a professional presence with good content quality and consistent branding, supporting their market position and business operations. Technically, the site is built on WordPress with Bootstrap and jQuery, incorporating GDPR-compliant cookie consent and age verification mechanisms. However, the absence of HTTPS/SSL is a critical security gap that undermines user trust and data protection. Security headers and advanced security policies are also lacking, exposing the site to potential risks. Privacy policies are comprehensive and GDPR compliant, but incident response and security policy disclosures are missing. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to align with best practices and protect its users. Strategic recommendations include implementing SSL/TLS, enhancing security headers, and maintaining up-to-date software and plugins to mitigate vulnerabilities.

F

Flexprint (part of delfortgroup AG)

delfortflexibles.com

30

Flexprint is a medium-sized, family-owned manufacturing company specializing in flexible packaging solutions for food, non-food, and tobacco products primarily in Eastern Europe. The company is part of the larger delfortgroup AG and has over 14 years of experience with a strong market presence in 40 countries and 200 clients. The website is built on WordPress using the Salient theme and WPBakery page builder, with a moderate level of technical sophistication but lacks a valid SSL certificate, which is a critical security concern. The site implements a cookie consent mechanism compliant with GDPR and links to a comprehensive privacy policy hosted on the parent company's domain. However, there is no visible terms of service or incident response policy. Security posture is weak due to missing HTTPS and modern TLS protocols, no HSTS, and lack of security headers. Business credibility is supported by multiple certifications and positive customer testimonials. Strategic improvements in security infrastructure and transparency policies are recommended to enhance trust and compliance.

A

Aug. RATH jun. Gmbh

rath.at

25

RATH Austria is a well-established manufacturer specializing in high-quality chamotte stones and related refractory products for heating and stove systems, with a history spanning over 130 years. The company targets stove builders, dealers, and industrial clients primarily in Austria and Europe. Their website is built on TYPO3 CMS and provides comprehensive product and service information, including planning services for stove builders. However, the technical infrastructure shows critical security gaps, notably the absence of HTTPS, which exposes users to significant risks. The site employs some security headers but lacks modern SSL/TLS protocols and DNS records, indicating potential configuration issues. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the business credibility is solid, but the security posture requires urgent improvement to protect user data and maintain trust.

G

GLATZ Gruppe

glatz.at

24

GLATZ Gruppe is a medium-sized family-owned manufacturing and service business based in Austria, specializing in stamps, printing plates, and packaging management solutions. The company operates multiple subsidiaries and maintains a professional online presence with detailed contact information and active social media channels. Technically, the website is built on Contao CMS and uses modern JavaScript libraries, but suffers from critical security shortcomings such as lack of HTTPS and valid SSL certificates. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. The absence of a valid SSL certificate and missing DNS records reduce the overall trust and security posture, posing risks to user data confidentiality and site integrity. Strategic improvements in SSL deployment and DNS configuration are essential to enhance security and trust.

A

Aumayr GmbH

aumayr.com

27

Aumayr GmbH is a well-established Austrian manufacturing company specializing in ventilation and metal technology solutions with over 50 years of experience. The company offers a broad range of products and services including custom ventilation components, metal fabrication, installation, and maintenance. Their market position is strong regionally, supported by certifications such as ISO and the Austria Gütezeichen. The website reflects a professional digital presence with good content quality and clear navigation targeting industrial clients and business customers. Technically, the site is built on WordPress with modern plugins but lacks a valid SSL certificate, which is a critical security gap. Privacy compliance is well addressed through the use of a consent management platform and clear privacy and cookie policies. Overall, the business credibility is high, but the lack of HTTPS significantly impacts the security posture and overall risk profile.

Georg Fischer Ltd is a well-established Swiss enterprise specializing in manufacturing and providing flow solutions across industrial, infrastructure, and building sectors. The company operates through four main divisions offering piping systems, casting solutions, machining solutions, and building flow solutions. The website reflects a mature digital presence with comprehensive content targeting industrial clients, investors, and job seekers. Technically, the site leverages Adobe Experience Manager, integrates modern analytics and marketing tools, and provides a good user experience with mobile optimization and accessibility features. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which is a critical issue that significantly impacts the overall security score. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by detailed investor relations and trust indicators. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

P

PolyQuest, Inc.

polyquest.com

40

PolyQuest, Inc. is a medium-sized manufacturing company specializing in the distribution and production of virgin and recycled thermoplastic resins including PET, rPET, PP, PE, and PS. Positioned as the largest distributor of PET resins in North America and a leading manufacturer of recycled PET products, the company serves manufacturers and converters across multiple applications such as bottles, films, textiles, and injection molding. The website reflects a professional business model with clear product and application information, targeting industry customers and suppliers. Technically, the site is built on WordPress with Elementor and uses Cloudflare for hosting and CDN services, but lacks a valid SSL certificate, which is a critical security shortfall. The site includes a Salesforce-integrated contact form collecting detailed lead information, and uses Google Analytics for user tracking without a visible cookie consent mechanism, indicating limited privacy compliance. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

A

Akras Flavours GmbH

akras.at

37

Akras Flavours GmbH is an established Austrian manufacturer specializing in flavors and ingredients for the food and beverage industry. Founded in 1938, the company has evolved into an international leader offering a broad portfolio of aroma and beverage base products. Their website reflects a mature digital presence with comprehensive content, multilingual support, and active engagement through news and trend analytics. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though performance is moderate and accessibility is basic. Security posture is a concern due to the absence of a valid SSL certificate and lack of HTTPS, which exposes the site to risks and undermines user trust. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the business demonstrates strong credibility and trust signals but must urgently address its SSL/TLS configuration to improve security and user confidence.

A

Angst+Pfister

angst-pfister.com

39

Angst+Pfister is a large Swiss-based engineering and manufacturing company specializing in custom materials design and engineering solutions. With over 300 engineers and a global presence across 24 locations, the company serves diverse industries including food & beverage, pharma, automotive, and energy. Their business model focuses on B2B partnerships delivering tailored solutions from design to production and distribution. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. However, the absence of a valid SSL/TLS certificate is a critical security gap that undermines trust and data protection. Privacy policies and cookie consent mechanisms are in place, indicating GDPR compliance. The company maintains active social media channels and an online shop partner domain, supporting their market reach and customer engagement.

P

pewag International GmbH

pewag.com

26

pewag International GmbH is a historic Austrian manufacturer specializing in chains and lifting solutions with a global market presence. The company offers a broad portfolio including snow chains, forestry technique, conveyor systems, and DIY products, supported by digital configurators and advisory tools. The website reflects a mature digital infrastructure built on WordPress with multilingual support and integrated analytics and consent management tools. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability, undermining user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, pewag demonstrates strong business credibility and content quality but must urgently address its security posture to align with industry best practices.

EREMA Engineering Recycling Maschinen und Anlagen Ges.m.b.H. is a leading Austrian manufacturer specializing in plastic recycling machinery and systems. Founded in 1983, the company has established itself as a global market leader with over 7000 systems deployed worldwide, producing millions of tons of recycled granulate annually. Their business model focuses on manufacturing innovative recycling machines, providing customer testing centers, and offering digital solutions to optimize recycling processes. The website reflects a professional and comprehensive digital presence targeting industrial clients and businesses in the recycling sector. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, GSAP, and various UI libraries, hosted likely via A1 Telekom Austria infrastructure. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. Performance data is missing, and while mobile optimization and SEO are good, accessibility is basic. Privacy and cookie policies are well implemented with consent mechanisms, indicating good GDPR compliance. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture, exposing users to potential risks. Other security headers and best practices are missing, and no incident response or vulnerability disclosure information is provided. The domain registration details align well with the company's claims, supporting legitimacy. Overall, while the business and content quality are excellent, the critical lack of HTTPS and SSL significantly lowers the security score and overall trustworthiness. Strategic improvements in security infrastructure are essential to protect users and maintain the company's reputable market position.

Coveris is a large manufacturing company specializing in sustainable, high-performance packaging solutions across multiple sectors including food, medical, pet food, agriculture, and industrial markets. The company operates extensively in the EMEA region with over 4,000 employees and 28 sites, emphasizing sustainability and innovation through initiatives like their No Waste strategy and ReCover recycling program. The website reflects a professional corporate presence with comprehensive content and legal compliance documentation. Technically, the site uses Apache on Ubuntu, with Enhavo CMS and integrates Cookiebot for consent management and Google Maps API for location services. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security shortfall, significantly impacting the site's security posture. Despite this, no WAF or blocking mechanisms are detected, and the site is fully accessible. The WHOIS data aligns with the business claims, showing consistent registration without privacy protection, supporting legitimacy. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.

S

SST Steuerungstechnik GmbH

sst.at

23

SST Steuerungstechnik GmbH is a small Austrian manufacturing company specializing in control technology for industrial machinery. Their services include control system engineering, project consulting, commissioning, prototyping, and series production, targeting industrial sectors such as automotive and warehouse technology. The website content is professionally presented in German, with clear navigation and relevant business information, although it lacks privacy and cookie policies. Technically, the website runs on PHP 8.1.32 with nginx and is likely hosted by Liwest ISP in Austria. However, the site lacks HTTPS support and a valid SSL certificate, which severely impacts its security posture. No modern security headers or protocols are implemented, and performance data suggests slow loading. The site does not use analytics or marketing tools, indicating minimal user tracking. From a security perspective, the absence of HTTPS and security headers exposes visitors to risks such as data interception. The lack of privacy and cookie policies also indicates non-compliance with GDPR requirements. No incident response or vulnerability disclosure information is provided, limiting transparency. Overall, the website is functional and provides essential business contact details but requires urgent improvements in security and privacy compliance to enhance trustworthiness and protect users.

LiSEC is a well-established Austrian manufacturer specializing in flat glass processing machinery and related software solutions. With over six decades of experience and a strong global export presence, LiSEC positions itself as a technology leader in the manufacturing sector, offering robust, innovative, and high-quality products. The company supports its customers with comprehensive after-sales services, training, and digital tools, emphasizing long-term partnerships and trust. Technically, the website is built on the TYPO3 CMS platform, hosted behind Amazon CloudFront CDN, and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are present and appear GDPR compliant, supporting responsible data handling practices. Overall, the website demonstrates strong business credibility and professional presentation but requires urgent security improvements to protect user data and maintain trust.

K

Katun Corporation

katun.com

37

Katun Corporation is a well-established global provider of OEM-compatible imaging supplies, photoreceptors, and parts for copiers, printers, and multifunction printers (MFPs). With over 45 years in the industry, Katun serves a broad B2B audience including distributors and businesses worldwide. The company emphasizes quality, cost savings, and service levels, supported by a professional and content-rich website that highlights its global reach and product offerings. Technically, the website is built on WordPress with modern SEO and marketing tools such as Yoast SEO and Visual Website Optimizer, and supports multiple languages via WPML. However, the site suffers from a critical security deficiency: the absence of a valid SSL/TLS certificate and HTTPS support, which severely impacts its security posture and trustworthiness. Additionally, no cookie consent mechanism is present despite the use of tracking scripts, indicating partial privacy compliance. Overall, the business credibility and content quality are strong, but the security shortcomings require urgent remediation.

Eckes-Granini Group GmbH is a leading European manufacturer and provider of fruit juices and fruit-based beverages, operating as a family-owned business with a strong market position in Europe. The company emphasizes product quality, sustainability, and innovation in its offerings. The website reflects a professional digital presence with clear branding and comprehensive business information, targeting European consumers interested in healthy fruit beverages. Technically, the site uses modern frameworks such as Astro and a headless CMS (Storyblok), hosted on Microsoft Azure, with integration of Google Tag Manager for analytics and marketing. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Security headers are partially implemented but some important protections like X-XSS-Protection are disabled. Privacy and legal compliance are well addressed with dedicated pages and a cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

ش

شرکت مهندسی صنعت و تولید جمع‌ساز

jamsaz.com

20

شرکت مهندسی صنعت و تولید جمع‌ساز یک شرکت تولیدی متوسط در ایران است که در زمینه طراحی و تولید سیستم‌های روشنایی خودرو فعالیت می‌کند. این شرکت با سابقه بیش از 30 سال، محصولات متنوعی از چراغ‌های خودرو را ارائه می‌دهد و دارای آزمایشگاه تخصصی با گواهینامه‌های معتبر است. سایت شرکت به زبان فارسی و با استفاده از وردپرس و افزونه‌های رایج ساخته شده است. از نظر فنی، سایت از تکنولوژی‌های مدرن بهره می‌برد اما فاقد گواهی SSL معتبر است که یک ضعف امنیتی مهم محسوب می‌شود. همچنین سیاست‌های حفظ حریم خصوصی و کوکی‌ها در سایت به صورت آشکار وجود ندارد که می‌تواند ریسک‌های قانونی ایجاد کند. به طور کلی، شرکت موقعیت خوبی در بازار روشنایی خودرو ایران دارد اما نیازمند بهبودهای امنیتی و انطباق با مقررات حفظ حریم خصوصی است.

A

AutomationX GmbH

automationx.com

30

AutomationX GmbH is a mature, medium-sized Austrian company specializing in automation solutions for manufacturing, food, construction, and infrastructure sectors. Their business model focuses on consulting, system integration, service, and development of automation software and hardware, targeting industrial clients. The website reflects a professional and consistent brand presence with clear service offerings and international project experience. Technically, the site is built on the Contao CMS with Apache server hosting by graz4u.at, using common web technologies like jQuery and Google Tag Manager. However, the site lacks a valid SSL certificate and modern TLS support, which significantly impacts security posture. Cookie consent mechanisms and privacy policies are present but basic. Overall, the site is functional but requires critical security improvements to meet modern standards.

S

Softsolution GmbH

softsolution.at

21

Softsolution GmbH, in partnership with LiteSentry LLC, operates as a leading provider of automated quality assurance systems for the glass industry. Their solutions focus on precision inspection technologies that detect defects in glass manufacturing, enhancing production efficiency and product quality. The company maintains a strong global presence with over 3,000 systems installed worldwide and offices in Austria and the USA. Their website reflects a professional and comprehensive digital presence, supporting multiple languages and showcasing extensive product and project information. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Slick Slider, and Borlabs Cookie for privacy management. Hosting is provided via Cloudways with Cloudflare CDN integration. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing the site to potential risks. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Security evaluation reveals critical issues including no HTTPS support, no HSTS, and no OCSP stapling, which are essential for secure communications. Despite these, the site employs some best practices like HttpOnly and Secure cookie flags and uses a reputable CDN. The overall risk is moderate but requires urgent remediation of SSL/TLS issues to protect user data and maintain trust. Strategically, the company should prioritize implementing a valid SSL certificate and modern security protocols, enhance incident response visibility, and continue leveraging their strong market position and trust indicators to maintain competitive advantage.