Manufacturing security reports

S

SILVERLINE

silverline24.de

35

Silverline24.de is a German-based manufacturer and retailer specializing in kitchen appliances, particularly kitchen ventilation products such as wall-mounted hoods, island hoods, cooktop extractors, and related accessories. The company holds a recognized market position supported by industry awards like the Plus X Award for Fachhandelsmarke des Jahres 2020 and membership in the Arbeitsgemeinschaft Die Moderne Küche e.V. (AMK). Their website targets kitchen appliance buyers, retailers, and partners primarily in Germany and Europe, offering detailed product information, customer service, and partner portals. Technically, the website is built on WordPress with WooCommerce and uses modern plugins for SEO, cookie consent, and performance optimization. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Other security best practices such as HSTS, DMARC, DNSSEC, and security headers are missing or not configured. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

T

TENTE International GmbH

tente.com

34

TENTE International GmbH is a well-established manufacturer of high-quality castors and wheels, with a history spanning over 100 years. The company serves a broad range of industries including automotive, healthcare, logistics, and retail, offering both standard and custom mobility solutions. Their global presence is supported by localized websites and a comprehensive product catalog. Technically, the website is built on Shopware 6, leveraging modern web technologies and third-party services such as Usercentrics for consent management and Google Analytics for tracking. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Despite this, the site implements several security headers and privacy policies that align with GDPR requirements. Overall, the business credibility and website quality are high, but immediate remediation of the SSL issue is essential to protect user data and maintain trust.

Indorama Ventures Schoeller Wool Austria GmbH is a well-established global supplier specializing in worsted yarns with a history dating back to 1849. The company focuses on providing a wide range of yarn products including flat knit, performance, technical, hosiery, and weaving yarns, emphasizing sustainability and certified processing. Their target audience primarily includes textile manufacturers and technical yarn users. The website reflects a professional B2B manufacturing business model with consistent branding and trust indicators such as sustainability certifications and social media presence. Technically, the website is built on the Contao CMS platform using PHP 8.2 and nginx, with frontend technologies including jQuery and Bootstrap 4. Analytics are handled via Matomo, indicating a moderate level of digital maturity. However, the site lacks HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security posture. Performance data is unavailable, but mobile optimization and navigation are assessed as good. Security-wise, the site implements several HTTP security headers but fails to provide a valid SSL certificate or enable modern TLS protocols, resulting in a low security score. No explicit security or incident response policies are found, and no vulnerability disclosure or security.txt files are present. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, aligning with GDPR requirements. Overall, while the business and website content are credible and professional, the lack of HTTPS is a critical security gap that must be addressed urgently. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and enhancing security configurations to improve trust and compliance.

S

Successfactory Consulting Group

successfactory.cc

39

Successfactory Consulting Group is a specialized consulting firm based in Austria focusing on organizational development, process optimization, product and system development, sustainability, agile transformation, and digitalization including artificial intelligence. The company offers a combination of consulting, training, coaching, and digital solutions targeting organizations seeking to improve productivity and adapt to modern trends. The website is built on WordPress with Elementor and Astra theme, showing a moderate level of digital maturity but lacking a valid SSL certificate, which is a critical security gap. The presence of GDPR-compliant cookie consent and privacy policy indicates attention to privacy compliance. Social media presence on major platforms supports business credibility. However, the absence of HTTPS and modern TLS protocols significantly impacts the security posture and overall trustworthiness of the site.

M

Montanwerke Brixlegg AG

montanwerke-brixlegg.com

40

Montanwerke Brixlegg AG is a mature manufacturing company specializing in copper recycling and upcycling solutions, with a strong emphasis on sustainability. The company operates primarily in Austria and targets industrial customers requiring high-quality copper products such as cathodes and round bolts. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with common plugins like Yoast SEO and Borlabs Cookie, but suffers from a lack of a valid SSL certificate, resulting in no HTTPS support and weak security posture. Security headers are partially implemented, but critical TLS protocols and cipher suites are missing, exposing the site to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, the site scores moderately due to security shortcomings and technical performance issues.

Royal Avebe is a well-established cooperative specializing in the production and supply of potato-based ingredients such as potato starch and protein. With a history dating back to 1919, the company serves diverse markets including food, industrial applications, and animal nutrition. The website reflects a mature business with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and tracking tools but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Privacy compliance is well addressed with detailed policies and a cookie consent mechanism. Contact information and social media presence are clearly provided, enhancing business credibility.

H

HAINZL Industriesysteme GmbH

hainzl.at

40

HAINZL Industriesysteme GmbH is a well-established Austrian industrial technology company specializing in system technology, testing technology, hydrogen technologies, process automation, embedded systems, and electrical engineering. With a history dating back to 1965, it holds a leading position in the European market, supported by multiple subsidiaries across Europe. The company targets industrial clients in machinery, vehicle manufacturing, metal industry, and construction sectors, offering comprehensive technological solutions and services. The website reflects a mature digital presence with professional design, multilingual support, and strong SEO practices. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact the security posture. While security headers are properly configured, the lack of HTTPS undermines trust and data protection. Privacy policies are present and GDPR compliant, but no explicit cookie consent mechanism is implemented. Overall, the site is professional and credible but requires urgent security improvements to align with best practices and protect user data.

V

VESCON GmbH (now SCIO Automation GmbH)

vescon.com

38

VESCON GmbH, now operating as SCIO Automation GmbH, is a medium-sized engineering and automation service provider founded in 1993 and based in Germany. The company specializes in delivering tailored Industry 4.0 solutions across sectors including manufacturing, energy, and water treatment. As part of the international SCIO Automation group, VESCON leverages extensive expertise and partnerships to support smart factory initiatives. The website is professionally designed, content-rich, and well-structured, targeting industrial clients and OEMs. Technically, the site uses TYPO3 CMS and includes modern web technologies but lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. Security posture is strengthened by TISAX certification, reflecting a commitment to information security, although the absence of HTTPS and modern TLS protocols significantly lowers the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional but urgently needs to address SSL/TLS issues to improve security and user trust.

Murexin GmbH is a medium-sized Austrian company specializing in manufacturing and distributing building materials and construction products. The company targets professional builders and tradespeople such as floor layers, tilers, painters, and masons, offering a broad product portfolio across six main categories. The website is well-structured, professionally designed, and optimized for SEO with multilingual support and social media integration. Technically, the site runs on WordPress with modern plugins and caching but critically lacks HTTPS, exposing users to security risks. The security posture is weak due to missing SSL/TLS and limited security headers, although privacy compliance is addressed with cookie consent mechanisms and a comprehensive privacy policy. Contact information is detailed with multiple physical locations and verified company emails and phone numbers. Overall, the site is credible and business-focused but requires urgent security improvements.

P

PROVA

prova.fr

22

PROVA is a French manufacturing company specializing in custom brown extracts and aromatic solutions for the food industry, with a strong heritage of 75 years. The company targets B2B clients in the food manufacturing sector, offering tailored flavor creation and innovation services. The website is professionally designed, SEO optimized, and provides multilingual support via Weglot. However, the technical infrastructure lacks a valid SSL certificate and HTTPS enforcement, which is a critical security gap. The absence of DNSSEC and CAA records further reduces domain security. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is available primarily via contact forms and social media links. Overall, the business appears legitimate and well-positioned, but the security posture requires urgent improvement to protect user data and enhance trust.

U

UNIVERSAL Eisen und Stahl GmbH

universal-stahl.com

39

UNIVERSAL Eisen und Stahl GmbH is a German medium-sized full-service steel trading company specializing in heavy plates and advanced processing services. It operates as part of the Salzgitter AG group, leveraging a large inventory and extensive logistics capabilities to serve industrial clients across Europe. The company emphasizes sustainability and quality, certified under ISO 9001, and promotes innovative green steel production initiatives such as SALCOS®. Technically, the website is built on TYPO3 CMS and uses Matomo for analytics, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. Security headers are partially implemented, but modern TLS protocols and HSTS are missing, exposing the site to risks. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, the business is credible and professionally presented, but the lack of HTTPS significantly undermines security posture.

P

PPG Industries, Inc.

ppg.com

40

PPG Industries, Inc. is a global leader in the manufacturing and distribution of paints, coatings, and specialty materials with a rich history spanning nearly 140 years. The company serves diverse markets including construction, automotive, industrial, and transportation, offering a broad portfolio of products and brands such as Comex, Sigma, Johnstone's, Dulux, and others. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern frameworks like Angular and Express, hosted on Microsoft Azure, with integrations for search and consent management. However, a critical security issue is the absence of a valid SSL certificate and lack of modern TLS protocols, which significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are well implemented, indicating good compliance with GDPR and related regulations. Overall, the site demonstrates high business credibility and professionalism but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

R

Regent AG

regent.ch

33

Regent AG is a Swiss-based lighting manufacturer with a heritage spanning over 100 years, specializing in high-quality, human-centric lighting solutions and bespoke designs. Their website reflects a mature business with a strong brand presence, targeting professional customers such as electrical installers and corporate clients. The company offers a broad portfolio including connected lighting and upcycling services, supported by digital tools like product finders and configurators. Technically, the website is built on TYPO3 CMS and employs modern web technologies and marketing tools, but suffers from a critical security weakness due to the absence of a valid SSL certificate and disabled TLS protocols, which undermines secure HTTPS access. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information and social media presence are comprehensive, enhancing business credibility.

G

Glanzer cosmetic engineering GmbH & Co KG

donau-kanol.com

37

Glanzer cosmetic engineering GmbH & Co KG is a well-established Austrian manufacturing company specializing in cosmetics, household cleaners, and biocides. With over 90 years of experience and 100% production in Austria, the company positions itself as a full-service partner for B2B clients seeking high-quality product development and manufacturing services. The website reflects this positioning with clear business descriptions, contact information, and a professional design. Technically, the site uses a modern technology stack centered around Craft CMS and popular JavaScript libraries, but suffers from poor performance metrics and lacks HTTPS security. Security posture is weak due to the absence of a valid SSL certificate and missing security headers, exposing the site to potential risks. Privacy compliance is also lacking, with no privacy or cookie policies present. Overall, the site is functional and professional but requires urgent improvements in security and compliance to reduce risk and enhance trust.

O

Ospelt Gruppe

ospelt.com

30

Ospelt Gruppe is a well-established international manufacturer specializing in private label food products including ready meals, fresh meals, convenience foods, and pet food. Founded in 1958 and headquartered in Liechtenstein, the company operates multiple production sites across Liechtenstein, Switzerland, and Germany. The website reflects a mature digital presence with multilingual support and professional branding, targeting both consumers and business clients in the food manufacturing sector. Technically, the site is built on WordPress with the Divi theme and incorporates modern web technologies and SEO best practices. However, a critical security gap exists due to the absence of a valid SSL certificate, which undermines HTTPS security and user trust. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent improvements in security infrastructure to protect user data and enhance trust.

S

SPS Technik Ges.m.b.H

sps.at

40

SPS Technik Ges.m.b.H is a well-established Austrian company specializing in turnkey automation solutions for various industries including manufacturing, transportation, and energy. The company operates internationally with subsidiaries in China and Poland, offering comprehensive services from electro planning, robot programming, mechanical construction, to service and maintenance. Their market position is strong, supported by over 70 years of experience and installations in more than 50 countries. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, featuring good mobile optimization and accessibility. Security-wise, the site uses a valid SSL certificate but lacks modern TLS protocols and some security headers, which lowers its security posture. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the website reflects a professional and credible business presence with room for security improvements.

H

HellermannTyton

hellermanntyton.at

40

HellermannTyton is a well-established manufacturer and provider of cable management and connectivity products, serving industrial sectors such as manufacturing, energy, and transportation. The website presents comprehensive product information, industry solutions, and sustainability initiatives, targeting professional and industrial customers primarily in Austria and surrounding regions. The company maintains a strong brand presence with consistent design and multiple social media channels. Technically, the website uses a modern tech stack including Apache, jQuery, Google Tag Manager, and Usercentrics for consent management, hosted behind Cloudflare DNS services. However, the SSL/TLS configuration is outdated, supporting only TLS 1.1 without TLS 1.2 or 1.3, which is a security concern. Security headers are well implemented, including a strict Content Security Policy and HSTS header, though HSTS is not fully enabled in SSL configuration. Privacy compliance is strong with clear privacy and cookie policies and active consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant, but would benefit from modernizing its TLS support and enhancing SSL configurations.

G

GIG Fassaden GmbH

gig.at

32

GIG Fassaden GmbH is a medium-sized Austrian company specializing in premium metal and glass facade solutions for international architecture projects. Their business model focuses on B2B services including design, engineering, prototyping, manufacturing, installation, maintenance, and renovation of building envelopes. The company maintains a strong market position with a consistent brand presence and comprehensive service offerings. Technically, the website is built on WordPress with modern libraries and plugins, optimized for SEO and mobile responsiveness. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing the site to risks and undermining user trust. Privacy policies and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

S

Sto SE & Co. KGaA

sto.com

33

Sto SE & Co. KGaA is a global enterprise specializing in facade systems, insulation, acoustic surfaces, and floor coatings with over 50 years of industry experience. The company targets architects, builders, and developers seeking sustainable and aesthetic building solutions. Their website reflects a mature digital presence with comprehensive content, localized contacts, and professional branding. Technically, the site uses a custom Sto framework with modern JavaScript and CSS but lacks a valid SSL certificate, resulting in insecure HTTP connections and a weak security posture. Privacy and cookie policies are well implemented with consent mechanisms, and marketing tools like Salesforce Marketing Cloud and Usercentrics CMP are integrated. Security headers are configured but undermined by missing HTTPS. Overall, the site is professional and trustworthy but requires urgent SSL/TLS implementation to improve security and user trust.

N

NovaTaste

frutaromsavory.com

40

NovaTaste is a globally recognized leader in taste innovation, specializing in providing customized and sustainable food ingredient solutions to food manufacturers, butchers, and foodservice players. With a strong global presence spanning 19 sites and over 2,200 employees, the company offers a broad portfolio including herbs, spices, seasonings, marinades, and functional ingredients. Their business model focuses on tailored solutions and turnkey R&D projects, positioning them as a key player in the manufacturing sector of the food industry. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Amazon CloudFront, delivering a professional and responsive user experience with good SEO and accessibility standards. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses risks to user trust and data security. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

U

UPM Raflatac

upmraflatac.com

65

UPM Raflatac is a global leader in manufacturing high-performance labeling materials, serving brands, designers, and printers worldwide. The company operates a mature and well-established business with a strong emphasis on sustainability and innovation in packaging solutions. Their digital presence reflects a professional and comprehensive approach, offering extensive customer tools and multilingual support. Technically, the website leverages modern frameworks such as Vue.js, integrates advanced analytics and marketing tools, and is hosted securely via Cloudflare with robust security headers and HTTPS enforcement. The security posture is strong, though improvements like enabling HSTS could enhance protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain registration and WHOIS data confirm the legitimacy and consistency of the business identity.

S

SPAX International GmbH & Co. KG

spax.com

40

SPAX International GmbH & Co. KG is a well-established German manufacturer specializing in screws and fastening technology, producing large volumes daily for a global market. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and digital tools for professionals in construction and woodworking. The company demonstrates strong branding consistency and trust indicators including certifications and detailed contact information. Technically, the site is built on Adobe Experience Manager with modern marketing and consent management tools, offering good user experience and SEO optimization. However, a critical security issue exists due to an invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility and content quality are high, but urgent remediation of SSL/TLS issues is recommended to ensure secure user interactions and maintain trust.

S

STIWA Holding GmbH

stiwa.com

40

STIWA Holding GmbH is a well-established Austrian company specializing in automation technology, manufacturing, and software solutions. With over 50 years of experience and a global presence spanning 11 locations across three continents, STIWA serves diverse industries including automotive, electronics, medical technology, and building automation. The company offers comprehensive services from engineering and automated series production to production optimization, positioning itself as a leader in digital, fully automated production solutions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating marketing and analytics tools such as HubSpot and Google Analytics. However, the absence of a valid SSL certificate and HTTPS support significantly impacts the security posture. While security headers and content security policies are well implemented, the lack of proper SSL/TLS encryption is a critical vulnerability. Privacy and cookie policies are present and GDPR compliant, and contact information is comprehensive and clearly presented. Overall, the website reflects a professional and trustworthy business but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

M

M. M. Newman

mmnewman.com

40

M.M. Newman Corporation is a specialized manufacturer and distributor of Heli-Tube® spiral cable wrap and related specialty tubing and hot tool products. Established in 1956, the company holds a strong market position as a leading supplier in the manufacturing sector, targeting industrial and commercial customers requiring cable management solutions. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, offering clear navigation and relevant product information. The company demonstrates trustworthiness through certifications such as ISO 9001:2015 and provides comprehensive contact information and social media presence. However, the technical infrastructure shows gaps in security, notably the absence of a valid SSL certificate and incomplete HTTPS implementation, which poses risks to user data and trust. The site uses multiple analytics and marketing tools but lacks a cookie consent mechanism, indicating partial privacy compliance.

H

Habich GmbH

habich.com

37

Habich GmbH is a well-established Austrian manufacturer specializing in inorganic specialty pigments for various industrial applications including coatings, construction chemicals, ceramics, printing inks, and plastics. The company has a long tradition dating back to 1846 and serves a global B2B market with a broad product portfolio including corrosion protection pigments, organic colorants, pigment preparations, and aqueous binder dispersions. Their website reflects a consistent and professional brand image with detailed product information and clear contact details. Technically, the site uses modern front-end libraries and the SilverStripe CMS, but lacks a valid SSL certificate, which is a critical security gap. The cookie consent mechanism is implemented and GDPR compliant, supporting privacy best practices. However, no explicit security policies or incident response information is provided. Overall, the website is functional and professional but requires urgent security improvements to enable HTTPS and enhance trust.

Xella International GmbH operates in the manufacturing and construction sectors, specializing in building materials and solutions. The company targets construction professionals and distributors, positioning itself as an established player in the industry. The website is built using Angular and hosted on Amazon Web Services, leveraging CloudFront and S3 for content delivery. However, the website content is minimal, primarily showing a loading preloader with no substantive content or metadata. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, exposing the site to potential risks. Although security headers like Content Security Policy and HSTS are present, they are insufficient without proper SSL configuration. The site uses extensive third-party analytics and marketing tools, indicating a focus on user tracking and advertising, but lacks visible privacy or cookie policies, raising compliance concerns. Overall, the website's digital maturity is low, with significant gaps in security and privacy compliance.

T

TRUMPF SE + Co. KG

trumpf.com

40

TRUMPF SE + Co. KG is a leading high-tech manufacturing company specializing in machine tools, laser technology, electronics, and Industry 4.0 solutions. Established in 1923 and headquartered in Germany, the company serves industrial clients globally with a comprehensive portfolio of products and services including machines, lasers, software, and financial services. The website reflects a mature enterprise with professional design, clear navigation, and rich content targeting manufacturing professionals and technology buyers. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks and lazy loading techniques, hosted likely on Microsoft Azure infrastructure. It demonstrates good mobile optimization, accessibility, and SEO practices. However, the absence of a valid SSL certificate and HTTPS support is a significant security gap despite the presence of security headers and HSTS directives. Security posture is moderate with key headers implemented but critical issues due to lack of SSL/TLS encryption, which exposes users to risks and undermines trust. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Business credibility is high with verified contact information, corporate transparency, and trust signals such as customer success stories and social media presence. Overall, the website is professional and content-rich but requires urgent remediation of SSL/TLS to improve security and user trust.

A

AGS

ags-engineering.at

27

AGS is a medium-sized Austrian company specializing in high-end automated special machines, robotics, and industrial data solutions. The company emphasizes quality, innovation, and long-standing experience, positioning itself as a regional leader in manufacturing automation. Their website reflects a professional and consistent brand image with clear service offerings and active social media presence. Technically, the site is built on WordPress with Elementor and uses modern plugins for enhanced functionality, though performance metrics are moderate. Security-wise, while several security headers are implemented, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the website is trustworthy but requires urgent improvements in security and privacy compliance to meet modern standards.

U

Umdasch Group

umdaschgroup-ventures.com

35

Umdasch Group is a large Austrian manufacturing and retail company specializing in comprehensive lifecycle solutions for building projects. Their subsidiaries include Doka, a global leader in formwork and scaffolding, umdasch The Store Makers focusing on retail space planning, and Industrial Solutions providing specialized industrial scaffolding and safety services. The company emphasizes sustainability and digital innovation as core drivers of their business model. Technically, the website is built on WordPress with modern plugins and multilingual support, hosted on Azure DNS. However, a critical security weakness is the invalid SSL certificate and lack of TLS protocol support, which undermines secure communications. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional and content-rich, but the security posture requires urgent improvement to protect user data and maintain trust.

W

Wolfram Bergbau und Hütten AG

wolfram.at

39

Wolfram Bergbau und Hütten AG is a medium-sized Austrian company specializing in the mining, refining, and recycling of tungsten-based products. It holds a strong market position as a leading global supplier of high-quality tungsten powders. The company operates multiple sites including mining in Mittersill, refining in St. Martin, and recycling centers in Austria and India. The website is professionally designed using WordPress with the Divi theme and includes comprehensive content in German and English, targeting industrial clients and potential employees. Technically, the site uses modern SEO and analytics tools but suffers from a critical lack of valid SSL/TLS configuration, impacting security posture. Privacy compliance is well implemented with GDPR-aligned cookie consent mechanisms and a detailed privacy policy. Business credibility is supported by ISO certifications and transparent contact information. Overall, the website is trustworthy and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols.

D

Digital Elektronik

de.at

25

Digital Elektronik is a well-established Austrian company specializing in mechatronic and electronic device manufacturing and development, with over 45 years of experience. The company serves industrial and healthcare sectors with a comprehensive range of services including device manufacturing, development, EMS production, metalworking, assembly, cable harness production, and box build solutions. Their market position is strong with international projects and certifications such as TÜV and Quality Austria. The website reflects a professional and content-rich digital presence, targeting B2B clients in manufacturing and technology sectors. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted on Conova infrastructure. While the site is well-structured and optimized for SEO and mobile devices, performance metrics are missing, and the site lacks a valid SSL certificate, which is a critical security flaw. The absence of HTTPS and modern TLS protocols significantly undermines the security posture. Cookie consent and privacy policies are implemented and GDPR compliant, indicating good privacy compliance. Security-wise, the site has no major vulnerabilities detected but lacks essential security headers and modern encryption protocols. The WHOIS data confirms domain legitimacy and consistency with the company's Austrian base and business history. Overall, the site is trustworthy but requires urgent security improvements to protect user data and enhance trust. Recommendations include immediate installation of a valid SSL certificate, enabling modern TLS protocols, adding security headers, and improving performance monitoring. These steps will elevate the security posture and align the website with best practices for enterprise-grade digital presence.

W

Wilfried Heinzel AG

heinzelsales.com

29

Wilfried Heinzel AG operates the heinzelsales.com website as a global sales network specializing in pulp and paper products. The company is headquartered in Vienna, Austria, and is recognized as a leading trading house in the forest products industry. Their business model focuses on connecting suppliers and customers worldwide, supported by local representation in 28 countries and invoicing centers in major global cities. The website content reflects a professional and consistent brand image targeting industry stakeholders seeking sustainable pulp, paper, and packaging solutions. Technically, the website employs a traditional stack including nginx, jQuery, Bootstrap, and FontAwesome. However, it lacks HTTPS support, which is a critical security deficiency. The site shows basic mobile optimization and accessibility but suffers from slow performance and missing modern security configurations. No advanced CMS or analytics tools are detected, indicating a relatively simple technical infrastructure. From a security perspective, the absence of SSL/TLS encryption severely undermines user trust and data protection. While cookie consent and privacy policies are present and GDPR compliant, the lack of HTTPS and security headers exposes the site to risks. No incident response or vulnerability disclosure mechanisms are evident, limiting transparency and preparedness. The WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website is functional and professionally presented but requires urgent security improvements, especially implementing HTTPS and enhancing server security headers. Strategic recommendations include upgrading SSL/TLS, enabling HSTS, and adopting security best practices to protect users and improve trustworthiness.

The Würth Group is a globally recognized leader in the manufacturing and distribution of assembly and fastening materials, operating over 400 companies in 80 countries with more than 2,800 branches. Their website reflects a mature digital presence with comprehensive corporate information, career opportunities, and sustainability initiatives targeting B2B customers and industrial partners. Technically, the site employs modern frameworks such as Bootstrap and integrates advanced analytics via Piwik PRO, ensuring a responsive and user-friendly experience. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses risks to data confidentiality and user trust. Privacy and cookie policies are well implemented, demonstrating GDPR compliance. Overall, the site is professional and trustworthy but requires urgent SSL remediation to enhance security.

Nalco Water, a subsidiary of Ecolab, is a global leader in water and process management solutions serving a broad range of industries including manufacturing, energy, transportation, and healthcare. The company emphasizes sustainability and operational efficiency, leveraging advanced digital platforms such as ECOLAB3D™ IIOT to deliver data-driven insights and innovative water management technologies. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on the Sitecore CMS platform, hosted via Akamai CDN and Azure, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and OneTrust for cookie consent. Security headers are well implemented; however, a critical issue exists with the SSL certificate being invalid or missing, and no TLS protocols enabled, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is clearly presented with phone numbers, physical addresses, and contact forms. Overall, the website is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure communications and maintain user trust.

K

Kraus & Naimer

krausnaimer.com

38

Kraus & Naimer is a globally recognized leader in the manufacturing of cam switches and industrial switchgear, offering a broad portfolio of products including main switches, control switches, and customized solutions. The company emphasizes mass customization and international certifications, serving a diverse industrial clientele worldwide. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to industrial customers. Technically, the website is built on TYPO3 CMS and served via Apache, incorporating modern JavaScript libraries and privacy-focused analytics (Matomo). However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Privacy compliance is well addressed with visible cookie consent mechanisms and comprehensive privacy policies. Security-wise, while some security headers are implemented, the lack of HTTPS and modern TLS protocols is a significant vulnerability. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the site is functional and professional but requires urgent security upgrades to meet modern standards and protect user data. Strategically, Kraus & Naimer should prioritize SSL certificate installation and TLS configuration, enhance security policy transparency, and continue leveraging privacy-compliant analytics to maintain regulatory compliance and customer trust.

Electro Terminal GmbH & Co KG is a medium-sized Austrian manufacturer specializing in connection technology for lighting, household appliances, and electrical installations. With over 60 years of experience and recognized innovation awards, the company serves OEMs and manufacturers with development, manufacturing, and distribution of connectors and related components. The website is built on TYPO3 CMS with modern frontend libraries and includes clear business and contact information, social media presence, and compliance-related pages such as privacy and cookie policies. However, the absence of HTTPS/SSL is a critical security vulnerability that significantly impacts the site's security posture. While cookie consent mechanisms and privacy policies are in place, no explicit security policy or incident response information is found. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements.

U

Unitedprint SE

unitedprint.com

38

Unitedprint SE operates as a major European web-to-print service provider, offering a range of print-related services including web-to-print shops, print material supply, and production partnerships. The company maintains multiple brands and portals targeting print industry professionals and businesses seeking print solutions. The website is built on WordPress with a modern theme and multilingual support, reflecting a mature digital presence. However, the technical infrastructure lacks a valid SSL certificate, which impacts security and user trust. Security posture is basic with no advanced headers or HTTPS enforcement, and privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires improvements in security and privacy to meet modern standards.

A

ASSA ABLOY

assaabloyentrance.com

40

ASSA ABLOY Entrance Systems is a global enterprise specializing in manufacturing and supplying advanced entrance solutions including automatic, commercial, industrial, and digital doors. The company positions itself as a leader in secure and efficient access solutions, targeting businesses and industries requiring high-quality entrance systems. The website reflects a mature digital presence with a professional design and comprehensive product information, supporting its market leadership claims. Technically, the site uses modern web technologies and a proprietary CMS platform, with good SEO and mobile optimization. However, the lack of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks. Security headers are well implemented, but the absence of encryption and privacy policies reduces trust and compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to align with best practices and regulatory requirements.

Hawle Beteiligungsgesellschaft m.b.H. is a well-established Austrian manufacturer specializing in water supply valves and related products, serving a global market with a strong European manufacturing base. The company emphasizes sustainability, quality, and innovation, with a broad product portfolio including gate valves, butterfly valves, and digital water management solutions. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site uses modern JavaScript frameworks (Vue.js), Pimcore CMS, and integrates analytics and consent management tools, indicating a good level of digital maturity. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the security posture and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business appears credible and trustworthy, but urgent improvements in SSL/TLS deployment are recommended to secure user interactions and data.

MS Design GmbH is a medium-sized manufacturing company based in Tirol, Austria, specializing as a system supplier to the automotive industry. Founded in 1983, the company offers comprehensive services from design and prototyping to production start, emphasizing quality, innovation, and customer satisfaction. Their market position is supported by multiple certifications including IATF 16949 and ISO standards, reflecting a strong commitment to quality and environmental management. Technically, the website is built on TYPO3 CMS with a modern but basic technology stack including jQuery and various UI libraries. While the site is well-structured, mobile-optimized, and SEO-friendly, it lacks HTTPS support and a valid SSL certificate, which is a critical security gap. The hosting environment appears to be a Plesk-managed Apache server without advanced security configurations such as HSTS or DNSSEC. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. Although some security headers are present and email obfuscation is implemented, the lack of encryption exposes users to risks. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but incident response and vulnerability disclosure information are missing. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate trust and compliance.

C

Corteva Commercial

pioneer.com

40

Pioneer.com represents the global seed brand of Corteva Commercial, a large agricultural manufacturing company. The website provides seed products, agronomic expertise, and local data support aimed at farmers and agricultural professionals worldwide. The site is built on Adobe Experience Manager and uses Adobe's digital marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy and terms pages exist but are basic, and no cookie consent mechanism is implemented, which may raise compliance concerns in regulated jurisdictions. Contact information is limited to a contact form without direct emails or phone numbers, reducing accessibility for users seeking support. Overall, the site is professional and content-rich but requires urgent security and privacy improvements.

T

TDK Electronics AG

epcos.com

40

TDK Electronics AG, formerly EPCOS, is a mature and established enterprise specializing in the manufacturing and sales of electronic components, primarily serving industrial, automotive, and energy sectors. The company operates under the TDK Group umbrella, with a strong European presence and a comprehensive product catalog that includes capacitors, sensors, inductors, transformers, and more. Their website reflects a professional and well-structured digital presence, targeting engineers, distributors, and industrial clients with detailed product information and design support resources. Technically, the website employs modern analytics and marketing tools such as Piwik PRO, Google Tag Manager, and OneTrust for cookie consent, indicating a good level of digital maturity. However, the absence of a valid SSL/TLS certificate and HTTPS implementation significantly undermines the security posture, exposing users to potential risks. Despite this, the domain is mature, well-registered, and consistent with the business claims, enhancing overall trustworthiness. Strategic improvements in security infrastructure are recommended to align with industry best practices and regulatory compliance.

B

BILTON LEDON Technology GmbH

biltongroup.com

40

BILTON LEDON Technology GmbH operates under the brand Better Light, specializing in high-quality LED lighting solutions manufactured in Austria. The company leverages its expertise from established LED brands BILTON and LEDON to offer a broad portfolio including LED strips, profiles, power supplies, and lighting management systems. Their market position is solidified by a mature domain and professional online presence targeting architects, industrial clients, and lighting professionals. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes Google Analytics for user tracking. However, performance is slow and security headers are minimal, indicating room for improvement in technical optimization and security hardening. The SSL certificate is valid but nearing expiration, and no advanced security features like HSTS or OCSP stapling are enabled. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site demonstrates good business credibility and trustworthiness but would benefit from enhanced security practices and performance optimization.

S

SHP Harmanec, a.s.

shpgroup.eu

26

SHP Harmanec, a.s. operates a corporate website focused on paper hygiene products for household and professional use, with a history dating back to 1829. The company positions itself as a trusted regional manufacturer with a consistent brand presence and active engagement through social media and newsletters. The website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, supported by SEO tools like Yoast and analytics via Google Analytics and Tag Manager. However, the absence of HTTPS/SSL is a critical security gap that exposes users to risks and undermines trust. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Contact information is clearly presented, including phone numbers, physical address, and contact forms. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements.

W

WILD GmbH

wild.at

40

WILD GmbH is a well-established Austrian technology partner specializing in contract development and manufacturing of optomechatronic systems, serving sectors such as medical technology, in-vitro diagnostics, optical metrology, laboratory, laser, and semiconductor technology. The company has a strong market position with decades of experience and multiple subsidiaries, offering comprehensive services including development, production, and supply chain management. Their website reflects a mature digital presence with multilingual support, professional design, and rich content tailored to their target audience of technology and healthcare companies. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, hosted on infrastructure associated with a1.net. The site demonstrates good performance, mobile optimization, and accessibility. Security headers and SSL configurations are robust, with HSTS, CSP, and XSS protections in place, although some improvements like enabling HSTS preload and DMARC records are recommended. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Borlabs Cookie consent mechanisms and a comprehensive privacy policy. Contact information is clear and detailed, supporting business credibility. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, indicating a trustworthy and professional online presence.

K

K.I.R.S.C.H. GmbH

kirsch-tec.at

21

K.I.R.S.C.H. GmbH is a specialized industrial company based in Austria, providing advanced air dehumidification systems and OEM solutions primarily for manufacturing sectors such as food, pharmaceutical, and wood industries. The company has a strong market position supported by over 15 years of experience and a reputation for quality and service. Their website is professionally designed with multilingual support and comprehensive product and service information, targeting industrial clients requiring customized dehumidification solutions. Technically, the website runs on WordPress with the Avada theme and uses several plugins for SEO and cookie management. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which undermines user trust and data security. The site implements cookie consent mechanisms and privacy policies aligned with GDPR requirements, but lacks explicit security or incident response policies. Overall, the business appears credible and well-established, but the website's security posture requires urgent improvement to meet modern standards.

G

Geberit Vertriebs GmbH

geberit.at

39

Geberit Vertriebs GmbH operates as a European market leader in sanitary products, offering a comprehensive range of bathroom and piping systems, along with digital tools and professional services. The company maintains a strong local presence in Austria and is part of the larger Geberit Group, as indicated by DNS records and authoritative nameservers. The website is professionally designed, with excellent content quality and clear navigation, targeting both professional installers and end customers. Technically, the site uses modern frameworks such as Next.js and React, hosted on Microsoft Azure, and integrates Usercentrics for cookie consent management. However, the absence of a valid SSL/TLS certificate and proper HTTPS configuration is a critical security concern. Security headers are present but insufficient without proper encryption. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators are evident. Overall, the website is trustworthy and credible but requires urgent improvements in SSL configuration to enhance security and user trust.

E

ECM Label Production GmbH / ECM Marking Solutions GmbH

ecm.at

36

ECM.at represents a medium-sized Austrian manufacturing business specializing in label production and marking solutions with approximately 40 years of industry experience. The company offers a comprehensive range of services including label printing, dispensing systems, coding technologies, and engineering solutions tailored to various industries such as food packaging, automotive, electronics, and pharmaceuticals. The website reflects a professional B2B business model targeting companies requiring marking and labeling services. Technically, the site is built on WordPress with modern plugins and SEO optimizations but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Security posture is weak due to missing HTTPS, absence of security headers, and no incident response or security policy disclosures. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

PÖTTINGER Landtechnik GmbH operates as a large manufacturing company specializing in agricultural machinery with a strong international presence, offering localized content and partner portal access. The website demonstrates a good level of content quality, multi-language support, and user engagement features such as cookie consent and partner login. Technically, the site uses ASP.NET with common frontend libraries like jQuery and Bootstrap, hosted on a provider indicated by DNS records. However, the absence of a valid SSL certificate and lack of modern TLS support represent critical security weaknesses. Privacy compliance is well addressed through detailed cookie policies and consent mechanisms, reflecting GDPR awareness. Overall, the site is professional but requires urgent security improvements to protect user data and maintain trust.

I

IFE Aufbereitungstechnik GmbH

ife-bulk.com

40

IFE Aufbereitungstechnik GmbH is a well-established Austrian manufacturer specializing in vibratory conveyors, screening machines, and magnetic separators for bulk material processing. With over 70 years of industry experience, IFE holds a strong market position as a leading global supplier offering customized and integrated machinery solutions. The company also embraces digital transformation through its i-STEP product line, providing smart tools and analytics for efficient processing. The website reflects a professional and comprehensive digital presence, supporting multiple languages and featuring extensive customer references and contact options. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap, Font Awesome, and Swiper.js. It uses Amazon CloudFront for content delivery and integrates marketing and analytics tools including HubSpot, Google Analytics, LinkedIn scripts, and Mailchimp. The site is mobile-optimized with good navigation and SEO practices, although performance metrics were not available. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability impacting user trust and data protection. While several security headers are implemented, the absence of TLS protocols and proper certificate management significantly lowers the security posture. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms in place. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates strong business credibility and content quality but requires urgent security improvements to protect visitors and maintain trust. Strategic recommendations include immediate SSL/TLS deployment, enabling modern security protocols, and enhancing security header configurations to align with best practices.