Manufacturing security reports

B

Breedveld Staal

breedveldstaal.nl

60

Breedveld Staal is a well-established steel and metal supplier based in the Netherlands, with a business history dating back to 1946 and an active domain since 2003. The company serves industrial and business clients requiring steel products, positioning itself as a trusted B2B supplier in the manufacturing sector. The website reflects a professional business presence with good content quality and clear navigation, targeting business customers in need of steel and metal materials. Technically, the site uses modern JavaScript libraries such as Swiper.js and Fancybox, along with Google reCAPTCHA for form security, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved or explicitly published. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its industry and audience.

Grünbauer BV is a small manufacturing company based in the Netherlands specializing in steel processing services including cambering, straightening, splitting, sawing, cold rolling, and production of various steel girders and beams. The company targets steel fabricators and steel traders with a niche B2B business model. The website provides multilingual content describing their services and contact information but lacks modern web technologies and advanced digital features. The technical infrastructure is basic, with no detected CMS or analytics tools, and the site appears static and somewhat outdated. Security posture is weak due to lack of HTTPS enforcement and missing security headers, although DNSSEC is enabled on the domain. Privacy compliance is minimal with no privacy or cookie policies present. Overall, the website is functional but requires improvements in security, privacy, and technical modernization to enhance trust and compliance.

M

Materials innovation institute (M2i)

m2i.nl

46

Materials innovation institute (M2i) is a well-established network organization specializing in materials research, connecting industry, academia, and research institutes primarily in The Netherlands and Europe. The website reflects a professional and focused business model aimed at facilitating collaboration and innovation in materials science. The organization targets industry professionals and academic researchers, providing support in product development and production processes. The site is built on a mature WordPress infrastructure using the Avada theme and integrates modern web technologies and analytics tools with privacy considerations.

K

Koninklijke Staalfederatie

staalfederatie.nl

51

Koninklijke Staalfederatie operates as a professional platform and representative body for steel and metal traders in the Netherlands, focusing on relationship management and knowledge exchange within the manufacturing sector. The website is built on WordPress using the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics with privacy features enabled. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enforced and tracking anonymization, but lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website presents a credible and professional image consistent with its business purpose.

K

Kersten Group

kerstengroup.com

62

Kersten Group is a global leader specializing in the production of custom curved components and constructions in steel and aluminium. Their website highlights their expertise in bending and processing metal tubes, sections, and plates, serving diverse industries such as offshore, energy, mobility, machinery, architecture, medical, and industrial equipment. The company positions itself as an innovator focused on creating what seems impossible by combining technology, skill, and partnerships to deliver strength, elegance, efficiency, and sustainability in their products. Technically, the website is built on Syveon CMS 4.2.0 and employs modern web technologies including Google Analytics, Google Tag Manager, Leadinfo tracking, and Vimeo for video content. The site is well-optimized for mobile devices, has good SEO practices, and provides a professional user experience with clear navigation and comprehensive content. Cookie consent mechanisms and a detailed privacy policy indicate attention to privacy compliance. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and social media presence support its legitimacy. Overall, the website demonstrates a strong digital presence and professional business operation with moderate security posture. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and improving domain registration transparency to strengthen trust and compliance.

S

Scomedica

scomedica.ma

33

Scomedica is a Moroccan company specializing in the sale and servicing of scientific and laboratory equipment, with over 30 years of experience since 1994. The company targets businesses in pharmaceutical, education, agro-food, petrochemical, environmental, and other industrial sectors. Their offerings include sales, after-sales service, specialized training, maintenance, and technical support. The website is professionally designed using WordPress with WooCommerce and Elementor, reflecting a medium-sized business with a solid market presence in Morocco. Technically, the site uses modern technologies and is hosted under a Moroccan registrar, consistent with its business claims. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

P

Primalab d.o.o.

primalab.si

44

Primalab d.o.o. is a Slovenian company established in 2006 specializing in the sale and support of laboratory and process equipment. The company offers a comprehensive range of products from reputable suppliers, alongside technical consulting, training, and maintenance services. Their market position is that of a trusted regional supplier with a focus on quality and customer service. Technically, the website is built on the DNN CMS platform, utilizing common JavaScript libraries and hosted behind Cloudflare, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and professional content. Security-wise, the site uses HTTPS and Cloudflare DNS but lacks some modern security headers and uses slightly outdated JavaScript libraries, which could be improved. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms, though incident response and vulnerability disclosure information are absent. Overall, the website is professional and trustworthy with room for security enhancements.

A

aliam S.A.

aliam.ch

48

aliam S.A. is a Swiss export company specializing in the distribution of laboratory equipment, representing world-leading manufacturers. The website presents a professional and consistent brand image, targeting businesses in the laboratory equipment sector. The company operates primarily as an exporter and distributor within the manufacturing industry in Switzerland. The digital infrastructure is based on WordPress with the Divi theme, leveraging WooCommerce assets, indicating a modern and flexible platform. The site demonstrates good SEO practices and moderate performance with mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.

StepLab Solutions is a Lithuanian company specializing in the sale and servicing of Metrohm laboratory products, including titrators, chromatographs, and spectrometers. The company targets laboratory and industrial clients seeking high-quality Swiss-made analytical instruments and related services such as calibration, maintenance, and technical support. The website reflects a professional business presence with clear product and service offerings, contact information, and a focus on quality and reliability. Technically, the site is built on Hostinger's Website Builder using the Astro framework, with modern fonts and Google Tag Manager for analytics. While the site is accessible and well-structured, it lacks critical privacy and cookie policies, and security headers are missing, which could impact compliance and security posture. The WHOIS data shows inconsistencies, including a domain creation date in the future and registrant information pointing to the hosting provider rather than the business itself, which may warrant further verification. Overall, the website presents a credible business front but should improve compliance and security transparency to enhance trust and regulatory adherence.

F

Faneks

faneks.lv

54

Faneks is a Latvian-based company specializing in providing scientific and analytical equipment for production, analysis, and research. Their offerings include chromatography, mass spectrometry, spectral apparatus, titrators, synthesis equipment, and metrology services. The company targets laboratories, research institutions, and manufacturing businesses, positioning itself as a trusted regional supplier with a diverse portfolio of scientific instruments and services. The website is multilingual, professionally designed, and provides clear navigation and relevant content to its audience. Technical infrastructure is based on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the company.

P

Primalab d.o.o.

primalab.eu

57

Primalab d.o.o. is a Slovenian company specializing in the sales and service of laboratory and process equipment. Their offerings include high precision instruments for chemical and physical analysis, complemented by calibration, validation, professional training, and maintenance services. The company targets laboratories, pilot plants, and production facilities, positioning itself as a trusted regional partner with established supplier relationships such as Metrohm and Lauda. The website reflects a professional business presence with clear contact information and GDPR compliance, supporting customer engagement through newsletters and service inquiries. Technically, the site is built on the DotNetNuke CMS platform, utilizing common JavaScript libraries and Bootstrap for responsive design, delivering moderate performance and good mobile optimization. Security posture is moderate, with HTTPS usage and cookie consent mechanisms in place, but lacking explicit security headers and containing hidden spammy links that could impact SEO and trust. WHOIS data is unavailable, limiting domain trust verification, but the overall business credibility remains intact based on website content and contact details. Strategic recommendations include enhancing security headers, removing suspicious hidden links, and improving transparency around domain registration.

R

RADKA Pardubice a.s.

radka-group.eu

41

RADKA Group is a medium-sized holding company based in Czechia with over 30 years of tradition. It operates multiple subsidiaries across Europe specializing in chemical production and distribution, industrial real estate rental and management, specialized industrial technology development, and water treatment solutions. The company targets B2B clients in the chemical and industrial sectors, leveraging a family-owned business model with strong local and international presence. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the website uses modern web technologies including jQuery and Google Fonts, with integration of Plausible Analytics for user tracking. The site is mobile optimized and loads with moderate performance. However, it lacks advanced security headers and comprehensive privacy or cookie policies, which limits its privacy compliance maturity. No CMS or hosting provider details are evident, and no forms or direct contact information are provided on the main site. From a security perspective, the site uses HTTPS and defers analytics scripts, but lacks visible security headers and incident response information. The WHOIS data is fully privacy protected under EURid, which is common for European businesses but limits transparency. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is moderate but could be improved with better policy disclosures and security headers. The overall risk is moderate with no blocking or WAF detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing contact and incident response information, and improving accessibility and compliance features to enhance trust and security culture.

SCHENK STAHL GmbH is a German company established in 1986 specializing in the trading of stainless, heat-resistant, and acid-resistant steel products including pipes, tubes, fittings, and special alloys. The company targets industrial clients requiring high-quality steel materials for demanding applications. The website reflects a traditional B2B business model with a focus on product range and technical specifications. The digital infrastructure is based on TYPO3 CMS version 4.4, with legacy Flash content still present, indicating a need for modernization. The site includes multiple language options, suggesting an international audience. Security posture is moderate but lacks modern security headers and visible HTTPS enforcement. Privacy compliance is weak, with no privacy or cookie policies detected and tracking scripts active without consent mechanisms. Overall, the site is functional but requires updates to improve security, privacy, and user experience.

V

Van Geenen

vangeenen-metallschleiferei.de

43

Van Geenen is a specialized B2B company offering comprehensive metal finishing and processing solutions targeting industrial, high-tech, and aesthetic sectors. The company positions itself as a one-stop-shop for metal refinement services including polishing, grinding, coating, and cleanroom packaging. The website reflects a professional and consistent brand image with clear service offerings and a project portfolio, catering primarily to industrial clients in the Netherlands and surrounding regions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks advanced security headers and published security policies. The domain is newly registered in 2025 with minimal WHOIS registrant information, which slightly reduces trust but is offset by the professional website presentation and clear contact details. Overall, the website is well-structured, user-friendly, and business-focused, with room for improvement in privacy and security transparency.

Rolf Kind GmbH is a medium-sized German manufacturing company specializing in the production of high-quality forged steel components, including rings, shafts, and custom shapes made from high-alloy stainless steels and special materials such as nickel and titanium alloys. Founded in 1969, the company has a strong market position as a family-owned business with over 50 years of experience, serving industrial clients requiring precision and customized forging solutions. Their website reflects a professional digital presence built on TYPO3 CMS, featuring multimedia content, a cookie consent mechanism, and multilingual support (German and English). Technically, the website employs modern web technologies including HTML5 video, jQuery, and Google Maps API integration. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, but security headers are not explicitly detected and no dedicated security or incident response policies are published. Overall, the website demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. Contact information is clearly presented, and social media channels are active, enhancing business credibility. No critical security or content safety issues were found, and the domain registration appears legitimate and consistent with the business profile. Strategic improvements could focus on enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance.

Böllinghaus Steel GmbH is a family-owned manufacturing company specializing in the production of high-quality stainless steel profiles, nickel alloys, and titanium products. Operating its own factory in Portugal, the company serves demanding industrial sectors including pharmaceutical, chemical, medical technology, aerospace, and energy. The website reflects a professional business with a clear focus on quality and customer-specific solutions. The company maintains a moderate digital maturity with a CMS-based website, cookie consent compliance, and integration of analytics and marketing tools. Security posture is adequate with use of CSRF tokens and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is well-structured, GDPR compliant, and targets industrial clients effectively.

S

Schoeller Werk GmbH & Co. KG

schoellerwerk.de

53

Schoeller Werk GmbH & Co. KG is a well-established German manufacturer specializing in premium longitudinally welded stainless steel tubes, serving industrial and automotive sectors globally. Founded in 1827, the company emphasizes quality, sustainability, and innovation, positioning itself as a leading European supplier with a strong reputation and certifications such as ISO 9001. The website reflects a professional digital presence built on WordPress with multilingual support and modern technologies, providing clear navigation, comprehensive product and company information, and active engagement through social media and news updates. Security posture is robust with HTTPS, cookie consent management, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is strong, with detailed policies and user consent mechanisms aligned with GDPR. Overall, the site demonstrates high business credibility and trustworthiness, supporting the company's market position and customer engagement.

PRECHEZA a.s. is a well-established large European manufacturer specializing in titanium dioxide and related chemical products. The company operates primarily in the manufacturing sector, serving industrial and commercial clients with a diverse product portfolio including pigments, ferrous sulfate, calcium sulfate, and sulfuric acid. It is part of the AGROFERT holding group, which enhances its market position and credibility. The website reflects a professional business presence with clear product offerings and legal disclosures. Technically, the website employs modern web technologies such as Google Tag Manager, Bootstrap, and slick carousel, and is built on the Kentico CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is addressed through a cookie consent mechanism and a dedicated privacy policy page. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not significantly detract from the overall trustworthiness given the professional presentation and business information. Overall, PRECHEZA a.s. demonstrates a solid digital presence with good security hygiene and compliance practices. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and security posture.

R

RADKA spol. s r.o.

radka.cz

45

RADKA spol. s r.o. is a Czech-based chemical distribution company with over 30 years of history, specializing in high-quality chemical products including plastics, elastomers, coatings, adhesives, and water treatment chemicals. As a member of the RADKA Group, it holds a solid market position in the manufacturing and chemical distribution sectors, targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 9001 and ISO 14001, enhancing trustworthiness. Technically, the website is built on WordPress 6.8.3 with modern performance optimizations including WP Rocket and Rank Math SEO. It uses Google Fonts and integrates Plausible Analytics for privacy-conscious tracking. The site is mobile-optimized and loads quickly, with good SEO practices and basic accessibility features. However, explicit privacy and cookie policies are not found, which is a gap in compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. No major vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly present, and there is no visible vulnerability disclosure or security.txt file, which could improve the security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, RADKA.cz presents a trustworthy and professional online presence with strong business credibility and technical implementation. To further enhance security and compliance, the company should publish clear privacy and cookie policies, implement security headers, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory compliance.

M

Metrohm

metrohm.cz

63

Metrohm is a well-established company specializing in chemical analysis systems for laboratories and industrial processes, with a strong presence in Germany and globally. The website reflects a mature digital infrastructure with professional design, multi-language support, and comprehensive product and service information. The technical stack includes modern JavaScript frameworks, Adobe Experience Manager CMS, and advanced analytics tools such as Adobe Analytics, Google Tag Manager, and New Relic, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site presents a trustworthy and professional image suitable for its B2B audience.

A

Asociación de Fabricantes Españoles de Paneles Sándwich

afepp.com

53

The Asociación de Fabricantes Españoles de Paneles Sándwich (AFEPP) is an industry association representing Spanish manufacturers of sandwich panels. The website serves as an informational and promotional platform targeting manufacturers and stakeholders within Spain's manufacturing sector. The site is built on WordPress using the Colibri page builder and integrates marketing and analytics tools such as HubSpot and Google Analytics. It features a cookie consent mechanism compliant with GDPR principles but lacks a dedicated privacy policy and terms of service pages. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Security posture is moderate with HTTPS enabled but no detected security headers or published security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

B

Bouwen met Staal

staalbouwdag.nl

41

Bouwen met Staal organizes the annual Staalbouwdag event, a leading Dutch trade fair and congress focused on steel construction. The event targets decision-makers across the steel and construction sectors, offering networking, knowledge sharing, and showcasing innovations. The website is professionally designed using WordPress and the Divi theme, with good SEO practices and structured data implementation. However, it lacks privacy and cookie policies, and the Google Analytics plugin is installed but not configured. Security posture is adequate with HTTPS but missing security headers and incident response information. Overall, the site is trustworthy and serves its business purpose well but should improve compliance and security transparency.

N

Nationale staalprijs

nationalestaalprijs.nl

46

Nationale staalprijs is a Dutch organization dedicated to promoting and awarding excellence in steel construction projects. The website serves as a platform to showcase nominations, winners, and project submissions related to steel construction within the Netherlands. It targets professionals and companies in the steel construction industry, providing information and recognition to encourage innovation and quality in this sector. The business model appears to be non-profit or industry promotional in nature, focusing on national recognition rather than commercial sales. Technically, the website is built on Drupal 10 CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, YouTube and Vimeo APIs, and Google reCAPTCHA for form security. The site is mobile optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on user registration and login forms to mitigate automated abuse. However, no explicit security headers were detected in the provided content, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is limited as no privacy or cookie policies were found on the homepage content, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and well-targeted to its audience. The main risks relate to privacy compliance and security policy transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance.

B

Bouwen met Staal

staalconserveren.nl

39

Bouwen met Staal operates the Conserveringsinformatiesysteem, a specialized digital information portal focused on the design and assessment of steel constructions for durability, particularly addressing corrosion protection in infrastructure projects such as bascule bridges. The website serves a niche audience of engineers and construction professionals by providing curated, phase-based technical content supported by industry partners. The business model centers on knowledge sharing and industry collaboration rather than direct commercial sales. Technically, the website employs legacy technologies including Prototype.js and Adobe GoLive for content management, with JavaScript-based UI elements such as slideshows and lightbox galleries. While HTTPS is used, there is a lack of modern security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The site performance is moderate with basic mobile optimization and accessibility features. From a security perspective, the site shows basic best practices such as HTTPS and form POST methods but lacks advanced protections like CSP or HSTS headers. No privacy or cookie policies are published, which is a compliance gap under GDPR. Contact information is clearly provided, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is a moderately professional and trustworthy resource within its niche but would benefit from enhanced security measures, privacy compliance, and modernization of its technical stack to improve user trust and regulatory adherence.

D

Duurzaam in Staal

duurzaaminstaal.nl

40

Duurzaam in Staal is a specialized information platform focused on promoting steel as a sustainable building material in the Netherlands. The website provides comprehensive content on sustainability themes such as energy use, light construction, recycling, and reuse, targeting professionals and stakeholders in the construction and steel industries. It maintains a niche authoritative position by offering access to publications, events, and tools related to sustainable steel construction. Technically, the site uses a traditional web stack including Bootstrap, jQuery, and common CSS/JS libraries, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance mechanisms such as cookie consent. Contact information is clearly presented, including phone and physical address, and social media presence is established on LinkedIn and Twitter. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

B

Bouwen met Staal

staalsupport.nl

40

Staalsupport.nl is a specialized digital information platform operated by Bouwen met Staal, focused on providing technical guidance and support for steel construction professionals in the Netherlands. The website serves as a knowledge base with over 300 questions and answers related to steel design, connections, fire safety, materials, sustainability, and execution. It is supported by the Koninklijke Staalfederatie, enhancing its credibility and industry relevance. The platform also offers direct helpdesk support for unanswered queries, positioning itself as a trusted resource in the niche market of steel construction. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and external libraries such as Font Awesome and Google Fonts. It uses HTTPS and includes analytics tools like Mtrack and MonkeyStats for user tracking. While the site is mobile responsive at a basic level and has good navigation and content structure, it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. From a security perspective, the site benefits from HTTPS encryption and absence of exposed sensitive data or vulnerable libraries. However, the lack of security headers and absence of privacy and cookie policies reduce its compliance posture. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website's business claims, indicating a trustworthy and legitimate online presence. Overall, Staalsupport.nl is a professionally maintained, niche informational website with good business credibility and moderate technical maturity. Enhancing privacy compliance and security best practices would further strengthen its risk profile and user trust.

SCI operates a specialized certification scheme focused on steel-based construction products and building design, providing assurance to manufacturers, specifiers, and warranty providers that products meet rigorous standards. The company leverages UKAS accreditation and ISO/IEC 17065 compliance to maintain credibility and trust in the construction industry. The website presents clear information about their schemes, contact details, and certification documentation, positioning SCI as a trusted independent certifier with over 30 years of expertise. Technically, the website uses a modern frontend stack including Bootstrap and jQuery, delivering a responsive and professional user experience. However, there is room for improvement in SEO, accessibility, and security best practices such as enabling DNSSEC and security headers. The absence of privacy and cookie policies indicates a compliance gap that should be addressed. From a security perspective, the domain is well-managed with clientTransferProhibited status and a long registration period, supporting legitimacy. No WAF or blocking mechanisms were detected, and no critical vulnerabilities or exposed sensitive data were found. However, the lack of security headers and incident response information suggests moderate security maturity. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

R

Rocket Espresso

rocket-espresso.com

62

Rocket Espresso is a premium Italian manufacturer specializing in handcrafted espresso machines and coffee grinders, targeting both domestic and commercial markets. The company emphasizes Italian craftsmanship and high performance, positioning itself as a leader in the specialty coffee equipment industry. Their business model includes direct online sales, dealer distribution, and a strong brand presence supported by social media channels. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with a responsive design and good SEO practices. The site integrates cookie consent management via Iubenda and uses Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks some advanced security headers and explicit security policies. The domain is well-established since 2007, with consistent WHOIS data supporting legitimacy. Overall, the website is professional, secure, and privacy-conscious, with room for improvement in security policy transparency and contact information availability.

M

Manifattura Falomo

manifatturafalomo.it

57

Manifattura Falomo is a well-established Italian manufacturer specializing in mattresses, pillows, and bed bases with over 60 years of experience. The company emphasizes quality and the 'Made in Italy' brand, targeting consumers seeking premium sleep products. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site uses WordPress CMS with modern JavaScript frameworks and integrates Google Analytics and Iubenda for privacy compliance. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

P

Park Tool

parktool.com

66

Park Tool is a well-established manufacturer and retailer of bicycle-specific tools, operating since 1963 and headquartered in St. Paul, Minnesota, USA. The company holds a strong market position as the world's largest bicycle tool manufacturer, targeting both professional and home bicycle mechanics. Their website reflects a professional brand image with clear regional targeting and social media presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager and Cookie Script, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and visible contact information slightly reduces trust. The missing WHOIS data for the domain www.parktool.com is a notable concern, impacting domain legitimacy assessment. Overall, the website is professional, safe, and compliant with privacy regulations, but could improve transparency and security practices.

S

Safety Jogger

safetyjogger.com

65

Safety Jogger is a well-established international brand specializing in safety footwear, workwear, and head protection, with additional lifestyle and adventure shoe lines. The company targets industrial and professional markets globally, supported by a strong dealer network and multiple regional offices. Their website reflects a mature digital presence with comprehensive product information, customer engagement, and multimedia content. Technically, the site leverages modern web technologies including HubSpot CMS, Google Tag Manager, and various analytics and tracking tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response details. The absence of WHOIS data is a minor concern but does not detract significantly from the overall legitimacy given the strong branding and business presence. Strategic recommendations include enhancing security transparency and vulnerability disclosure to further build trust.

B

Bouwen Met Staal

bouwenmetstaal.nl

50

Bouwen Met Staal is a Dutch knowledge and network organization dedicated to the application of steel in construction. The website serves professionals in the construction and infrastructure sectors by providing educational courses, research publications, events, and design tools. The platform is well-established with a consistent brand and a clear focus on steel construction knowledge dissemination. Technically, the site is built on Drupal 10, employs modern web technologies, and is optimized for mobile devices. Security posture is solid with HTTPS, security headers, and secure forms, though explicit privacy and security policies are lacking. The site uses Google Tag Manager for analytics and has a cookie compliance mechanism in place. Overall, the website is professional, trustworthy, and serves its target audience effectively.

I

Infosteel

infosteel.be

46

Infosteel is a well-established Belgian membership organization focused on the steel construction industry, providing information, training, networking, and publications to over 600 members across the steel supply chain. The website reflects a professional and consistent brand presence with a clear focus on steel building and related technical knowledge. The technical infrastructure is based on Joomla CMS with Yootheme and UIkit frameworks, supported by Google Analytics for user insights. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and CSRF protections, but lacks some security headers and explicit privacy compliance mechanisms. Overall, the domain age and WHOIS data support the legitimacy and trustworthiness of the organization.

H

Hiansa

hiansa.com

56

Hiansa is a Spanish manufacturing company specializing in the production and distribution of steel sandwich panels and profiled sheets, serving industrial, commercial, and architectural sectors. With over 40 years of experience, it holds a strong market position supported by technical expertise and a broad product catalog. The company is part of GRUPO HIEMESA and a member of the Asociación de Fabricantes Españoles de Paneles Sándwich, reinforcing its industry credibility. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business presence and content quality indicate a legitimate and professional operation.

S

SteelMed

steelmed.com

58

SteelMed is a medium-sized Spanish company specializing in the sale and distribution of industrial steel sheeting and coils, offering custom cutting services for various industrial sectors including automotive, construction, and renewable energies. It operates as part of the Hiemesa Group, a well-established steel sector conglomerate. The website demonstrates a professional digital presence with comprehensive product information, certifications, and contact details. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with responsive design and integration of Google services like Maps and reCAPTCHA. Security posture is moderate, with some best practices observed but lacking visible security headers and explicit incident response contacts. Privacy compliance is strong, with clear policies and cookie consent mechanisms. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the overall business credibility and trust indicators are high. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving incident response transparency.

B

Bellacer

bellacer.com

55

Bellacer is a medium-sized construction product distributor and service provider based in Andorra, operating under the parent company GRUPO HIEMESA S.L. The company specializes in steel distribution, transformation, industrial supplies, and renewable energy products, serving construction professionals and businesses in the region. Their website is professionally designed, multilingual, and provides comprehensive information about their services and projects. Technically, the site is built on WordPress with modern plugins and integrates social media and analytics tools effectively. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and incident response information. The absence of WHOIS registration data is a notable concern but does not detract significantly from the overall trustworthiness given the professional presentation and parent company association. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency.

N

new-hiemed

hiemed.com

55

Hierros del Mediterráneo (new-hiemed) is a medium-sized Spanish company specializing in steel sector services including distribution, transformation, panel sandwich supply, and industrial supplies. The company positions itself as a leader in the Mediterranean steel market, targeting business customers and professionals. The website is built on WordPress with Elementor and includes modern features such as structured data, cookie consent, and GDPR compliance. Security posture is generally good with HTTPS and reCAPTCHA in use, but lacks explicit security headers and a published security policy. WHOIS data is missing or unavailable, which slightly reduces trust but the website content and business presence appear professional and legitimate. Overall, the site demonstrates good digital maturity with room for improvement in security transparency and technical optimizations.

Grupo Hiemesa is a leading Spanish group specializing in the manufacturing, transformation, commercialization, and distribution of steel products. Established in 1962, it has grown to become a major player in the steel sector in Spain, serving various industrial markets with a comprehensive range of services including distribution, steel profiling, sandwich panel manufacturing, and export. The company operates multiple subsidiaries and maintains a strong presence in Iberia and neighboring regions. Technically, the website employs modern web technologies such as Bootstrap 3.0, jQuery, and Google Maps API, offering a responsive and content-rich user experience. Security posture is adequate with HTTPS enabled and secure forms, though improvements in security headers and incident response documentation are recommended. Privacy compliance is supported by clear privacy and cookie policies, though an active cookie consent mechanism is absent. Overall, the site reflects a professional and trustworthy business with room for enhanced security and compliance maturity.

R

REGARTIS

prague-chemicals-management-cruise.com

56

The website prague-chemicals-management-cruise.com serves as a professional landing page for the Prague Chemicals Management Cruise 2026, an event organized by REGARTIS and the Association of Chemical Industry of The Czech Republic. It targets chemical industry professionals and regulatory experts, focusing on global chemical regulations including REACH and sustainability strategies. The site provides detailed event information, pricing, and registration options, positioning itself as a niche conference organizer in the manufacturing sector. Technically, the site is built on the LeadPages platform, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Google Ads. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by adding security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

M

Messe München GmbH

analytica.de

60

analytica.de is the official website for the analytica trade fair, a world-leading event for laboratory technology, analytics, and biotechnology organized by Messe München GmbH. The site serves a large professional audience including market leaders and decision-makers in the industry, providing comprehensive information about upcoming events, exhibitor registration, and conference programs. The website demonstrates a high level of digital maturity with modern web technologies, strong privacy compliance via Usercentrics CMP, and integration of analytics and advertising tools. Security posture is robust with HTTPS, security headers, and no detected vulnerabilities. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

C

CHEMAGAZÍN s.r.o.

pigmentyapojiva.cz

43

The website pigmentyapojiva.cz represents a professional international conference focused on pigments and binders in the coatings industry. It serves as a platform for manufacturers, researchers, academia, and suppliers to collaborate and share knowledge. The event is organized by CHEMAGAZÍN s.r.o. in cooperation with academic and industry partners, positioning itself as a niche but reputable conference within the manufacturing sector in the Czech Republic. The site content is primarily in Czech with an English option, targeting industry professionals and researchers. Technically, the website employs a modern JavaScript stack including jQuery, Foundation framework, and various UI libraries such as SweetAlert2 and Slick Carousel. Google Analytics and Tag Manager are used for visitor tracking. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. No CMS or hosting provider details were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (implied by domain and scripts loaded from HTTPS sources), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy compliance efforts, but no privacy policy or terms of service are published. Contact information is limited to a phone number, with no email or incident response contacts. No forms or data collection beyond analytics scripts were found. Overall, the website is legitimate and trustworthy with a solid business foundation but could improve its security posture and privacy compliance by publishing relevant policies, enhancing security headers, and providing clearer contact channels for security incidents.

R

REGARTIS s.r.o.

regartis.com

44

REGARTIS s.r.o. is a specialized consulting company focused on providing compliance and advisory services primarily for the chemical industry. Their expertise includes navigating complex regulatory frameworks such as REACH, CLP, UK REACH, BPR, and RoHS, targeting businesses that require adherence to national and European legislation. The company maintains a professional online presence with multilingual support and offers educational resources like webinars and training courses, positioning itself as a niche expert in the Czech Republic and broader EU market. Technically, the website employs a modern technology stack including jQuery, Select2, PhotoSwipe, Google Analytics, and Drift chat for customer engagement. The site is built on a custom CMS platform, optimized for mobile devices, and includes GDPR-compliant consent mechanisms. While performance is moderate, the site demonstrates good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site uses HTTPS and implements GDPR consent banners, indicating a baseline of privacy compliance. However, the absence of WHOIS registration data for the domain www.regartis.com raises concerns about domain legitimacy and registration status, which impacts overall trust. No critical vulnerabilities or exposed sensitive data were detected, but security headers should be enhanced to improve protection. Overall, REGARTIS s.r.o. presents a credible and professional business front with solid technical implementation and privacy compliance. The primary risk lies in the unclear domain registration status, which should be addressed to strengthen trust and legitimacy. Strategic recommendations include verifying domain registration, enhancing security headers, and maintaining regular audits of third-party scripts and privacy policies.

Pragolab s.r.o. is a well-established Czech company specializing in the supply and servicing of laboratory instruments and equipment, primarily serving analytical chemistry and physical measurement sectors. Founded in 1998, it holds a strong market position as one of the leaders in laboratory equipment within the Czech Republic. The company targets scientific institutions and laboratories, offering a range of products and services including sales, maintenance, and application support. The website reflects a professional and consistent brand image with clear business focus and relevant content.

M

Metrohm AG

metrohm.com

62

Metrohm AG operates a professional website targeting the German market, specializing in chemical analysis instrumentation including titration, ion chromatography, electrochemistry, and spectroscopy. The company is positioned as a global leader in manufacturing and distributing laboratory and process analytical systems. The website demonstrates a mature digital presence with modern technologies such as Vue.js, Adobe Experience Manager CMS, and integrated analytics tools like Adobe Analytics and New Relic. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via OneTrust. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly disclosed. The domain WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and external partner references support legitimacy. Strategic recommendations include publishing explicit security and incident response policies and adding a vulnerability disclosure program to enhance trust and compliance.

B

British Constructional Steelwork Association Ltd.

steelconstruction.org

68

The British Constructional Steelwork Association (BCSA) is a well-established trade body representing UK and Irish steelwork contractors and the wider structural steelwork supply chain. With a domain age dating back to 1997 and a history spanning over a century, BCSA provides membership services, industry directories, technical resources, training programs, and organizes events to support its members. The website targets industry professionals and stakeholders, offering comprehensive information and tools relevant to the steel construction sector. The business model centers on membership and industry support, positioning BCSA as a key national organization within its sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome, Google reCAPTCHA, and a cookie consent management system. It is hosted via Cloudflare, ensuring robust performance and security. The site is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be considered. The technical infrastructure supports a professional and user-friendly experience. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The overall risk assessment is low, with the site demonstrating strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include implementing security headers, publishing security policies, enhancing accessibility, and maintaining up-to-date third-party libraries to further strengthen the security and compliance posture.

MEA Group GmbH is a well-established German manufacturing company specializing in building systems and water management products, including light wells, drainage channels, and related technical solutions. The company positions itself as a market leader with over 130 years of experience, targeting professional users such as architects and construction industry professionals. Their website offers comprehensive product catalogs, technical documentation, and digital services such as BIM and CAD data, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins and frameworks like Bootstrap, ensuring good mobile optimization and SEO. The presence of cookie consent mechanisms and Google Tag Manager indicates attention to privacy and analytics. However, some security headers and explicit security policies are not clearly visible, suggesting room for improvement in security posture. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the lack of published incident response or vulnerability disclosure policies limits transparency. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, though the professional website content mitigates concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration details.

O

Outokumpu

outokumpu.com

79

Outokumpu is a globally recognized leader in sustainable stainless steel manufacturing, offering a broad range of stainless steel products tailored for various industrial applications. The company positions itself strongly in the manufacturing sector with a clear focus on sustainability and innovation. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at industrial clients, investors, and sustainability-conscious businesses. Technically, the site employs modern marketing and analytics technologies such as Google Tag Manager, Cookiebot, Eloqua, and Hotjar, indicating a sophisticated digital marketing infrastructure. Security-wise, the website enforces HTTPS, employs cookie consent mechanisms, and uses CSRF protection tokens, reflecting good security hygiene. However, explicit security policies and incident response information are not publicly available, which could be improved. The WHOIS data is not publicly accessible, likely due to privacy protection, which is common for large enterprises but reduces transparency. Overall, the website is professional, secure, and compliant with privacy regulations, with minor areas for enhancement in security transparency and incident response readiness.

Focus Rostfrei is a specialized German trade magazine dedicated to stainless, acid-resistant, and heat-resistant steels. It serves industry professionals by providing news, technical articles, event information, and directories. The website is professionally designed using WordPress CMS and integrates multiple plugins for enhanced user experience, including e-paper subscriptions and event management. The site is GDPR compliant with a clear privacy and cookie policy, and it supports multilingual sister publications targeting broader European markets. Technically, the site uses modern web technologies and maintains good performance and mobile optimization. Security posture is solid with HTTPS and secure login forms, though improvements like implementing a Content-Security-Policy header and publishing incident response contacts are recommended. The domain WHOIS data is missing or not publicly available, which raises concerns about registration legitimacy despite the active and professional website presence. Overall, the site is a credible industry resource but should address WHOIS transparency and enhance security headers to improve trust and compliance.

M

Mechanical & Electrical Fixings Ltd

mef.co.uk

69

Mechanical & Electrical Fixings Ltd (MEF) is a UK-based company specializing in the supply of mechanical and electrical fixings with over 20 years of market presence. Their website serves as a Shopify-powered e-commerce platform offering a wide range of products tailored to trades professionals and contractors. The company emphasizes sourcing specialized and elusive products, supported by detailed datasheets and technical documentation. The business targets the manufacturing sector and operates primarily within the UK market. The website reflects a consistent brand identity and professional presentation, supporting its position as a trusted supplier in its niche.