Manufacturing security reports

Lenze is a large manufacturing and technology company specializing in automation solutions for industrial machinery and systems. Their website targets industrial manufacturers and automation professionals, offering a broad portfolio of products, software, and services including training and aftersales support. The company maintains a strong global presence with localized content for Austria and other regions. Technically, the website is built on TYPO3 CMS with modern frontend technologies and good SEO and accessibility practices. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support despite HSTS headers being present. Security headers and content security policies are well implemented, but the lack of SSL significantly reduces the security posture. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Contact information is primarily via contact forms and social media channels, with no explicit emails or phone numbers visible. Overall, the website is professional and trustworthy but requires urgent SSL implementation to improve security and user trust.

N

Novellini S.p.A

novellini.com

28

Novellini S.p.A is a well-established Italian manufacturer specializing in bathroom products such as shower cubicles, whirlpool baths, and shower trays. The company maintains a strong international presence with localized websites for many countries, targeting consumers and businesses in the bathroom fixtures market. The website is professionally designed using Adobe Experience Manager CMS and includes modern JavaScript libraries and Google Tag Manager for analytics. However, the site lacks HTTPS, which is a critical security vulnerability, and does not provide visible privacy or cookie policies, impacting privacy compliance. Social media presence is active and official, enhancing brand trust. Overall, the website demonstrates good business credibility but requires urgent security improvements.

Z

Zeus Petruzalek

petruzalek.com

26

Zeus Petruzalek is a well-established B2B manufacturer and distributor specializing in food packaging products and packaging machines. As part of the Zeus Group, it operates across multiple countries with a strong market presence in the manufacturing sector. The website demonstrates a professional and comprehensive digital presence with multilingual support and extensive product catalogs. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, though performance metrics are not optimal. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, exposing the site to risks and reducing trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is credible and professional but requires urgent security improvements to protect user data and enhance trust.

T

TCG UNITECH GmbH

unitech.at

35

TCG UNITECH GmbH is a well-established manufacturing company based in Austria, specializing in lightweight metal and plastic components for the automotive industry. The company operates as part of the Gnutti Carlo Group and offers a range of services including die casting, injection molding, and engineering solutions. Their website reflects a professional corporate presence with detailed information about their products, services, and corporate values. Technically, the site is built on WordPress with modern SEO practices and multilingual support, but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS impacts the overall security posture and trustworthiness of the site. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

M

MM Group

mm-packaging.com

40

MM Packaging, a division of MM Group, is a leading global manufacturer of consumer packaging solutions specializing in pharmaceuticals, food, beauty, and consumer goods sectors. The company operates a network of 56 packaging sites worldwide, emphasizing innovation and sustainability in its product offerings. The website reflects a mature digital presence with comprehensive content, multilingual support, and strong branding consistent with an enterprise-level organization. Technically, the site is built on WordPress with modern marketing and analytics integrations, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility and content quality are high, but the security deficiencies pose a risk to user trust and data protection.

S

Semperit AG Holding

semperitgroup.com

38

Semperit AG Holding is a well-established global manufacturer specializing in industrial polymer products and solutions, with a history dating back to 1824. The company operates multiple business divisions including hoses, profiles, form, conveyor belts, and Rico products, targeting industrial clients and investors. The website reflects a mature and professional digital presence, leveraging TYPO3 CMS and modern web design principles to provide a rich user experience. However, the absence of HTTPS and valid SSL certificates represents a significant security vulnerability that undermines user trust and data protection. While privacy and cookie policies are comprehensive and GDPR compliant, the lack of explicit security and incident response information suggests room for improvement in transparency and preparedness. Overall, the domain registration and WHOIS data confirm the legitimacy and maturity of the business, supporting a high trustworthiness rating despite technical security shortcomings.

D

DS Smith

dssmith.com

40

DS Smith is a leading international manufacturer specializing in sustainable packaging solutions, paper products, and recycling services. The company positions itself as a global leader in sustainability within the packaging industry, targeting businesses seeking eco-friendly and innovative packaging and recycling options. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistency. Technically, the site uses modern web technologies including React, Google Tag Manager, Google Analytics, and Microsoft Application Insights, hosted behind Cloudflare for performance and security. However, the SSL certificate is currently invalid or missing, which undermines the security posture. The site implements strong security headers and content security policies but has a notable subdomain takeover vulnerability on shop.dssmith.com. Privacy and cookie policies are present with consent mechanisms, indicating good GDPR compliance. Contact information is primarily via forms and physical address, with no explicit emails or phone numbers on the homepage. Social media presence is robust and consistent with corporate branding.

RHI Magnesita is a global leader in the refractory industry, providing high-grade refractory products, systems, and services primarily for steel, cement, glass, and non-ferrous metals industries. The company emphasizes sustainability and innovation, targeting industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, structured data, and multi-language support. Technically, the site is built on WordPress with modern plugins and libraries, but suffers from critical security shortcomings due to an invalid SSL certificate and lack of HTTPS enforcement. Security headers are present but insufficient without proper TLS. Privacy compliance is well addressed with Cookiebot consent management and a detailed privacy policy. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security posture and user trust.

dsm-firmenich Animal Nutrition & Health is a global business focused on providing sustainable animal nutrition and health solutions. Their offerings include essential products, performance solutions branded as Biomin®, and precision services leveraging data analytics. The company targets professionals in animal nutrition, farming, and veterinary sectors, emphasizing sustainability and innovation. Technically, the website is built on Adobe Experience Manager, uses Akamai CDN, and integrates marketing tools like Adobe DTM and Marketo. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are well implemented, indicating good compliance practices. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and trust.

voestalpine BÖHLER Edelstahl GmbH & Co KG is a leading manufacturer of special high-performance steels serving advanced industrial sectors including aerospace, automotive, and oil & gas. The company operates a state-of-the-art steel plant with a focus on innovation, quality, and environmental standards. The website reflects a mature digital presence with multilingual support, detailed product and application information, and strong branding aligned with its parent company voestalpine AG. Technically, the site is built on WordPress with modern plugins for SEO, multilingual content, and user interaction. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

software4production GmbH is a specialized provider of innovative factory software solutions focused on Industry 4.0 and automation for medium-sized manufacturing enterprises. Their offerings include advanced manufacturing execution systems (MES), production planning and scheduling (PPS), and modules for data acquisition and intralogistics, all built on a robust Java/Jakarta IT architecture. The company holds a strong market position, evidenced by multiple industry awards and a comprehensive portfolio of services including consulting, training, and support. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted on infrastructure associated with udag.de. While the site demonstrates good design and navigation, it lacks a valid SSL certificate and proper HTTPS implementation, which is a significant security concern. Performance metrics are not available, indicating potential areas for improvement in loading speed and optimization. From a security perspective, the absence of HTTPS and modern TLS protocols, along with missing advanced security features like OCSP stapling and session resumption, lowers the site's security posture. However, the presence of some security headers and a comprehensive privacy policy indicates a baseline commitment to security and compliance. Overall, the website is professional and trustworthy in content and business representation but requires urgent security enhancements to protect user data and improve trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and implementing cookie consent mechanisms to enhance privacy compliance.

M

Mayer & Co Beschläge GmbH

maco.at

35

Mayer & Co Beschläge GmbH operates the website maco.at, presenting itself as a leading manufacturer of window, door, and sliding door hardware, including intelligent sensor solutions for smart homes. The company targets B2B customers such as manufacturers and distributors, offering a comprehensive portfolio of products and digital services including partner portals and technical support. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site uses Kentico CMS, jQuery, and integrates Matomo analytics with a consent-based tracking approach, demonstrating a commitment to privacy compliance. However, a critical security gap exists as the maco.at domain lacks a valid SSL certificate and HTTPS support, exposing users to potential risks. The site includes comprehensive privacy and cookie policies, terms of service, and clear contact information, enhancing business credibility. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain compliance.

S

StepChange Consulting GmbH

stepchange.com

34

StepChange Consulting GmbH is a specialized management consultancy based in Austria, focusing on the forestry, wood, pulp, paper, packaging, and tissue industries. The company offers a broad range of consulting services including strategy development, operational improvements, turnaround management, mergers and acquisitions, supply chain transformation, and digitalization. Their market position is that of an independent, industry-focused consultancy with a strong emphasis on delivering measurable business results through an experienced international team. Technically, the website is built on the Tilda CMS platform, utilizing nginx as the web server and jQuery for client-side scripting. The site is mobile optimized with good navigation and professional design. However, performance metrics are not available, and accessibility features are basic. From a security perspective, the website lacks HTTPS, which is a critical vulnerability. No SSL/TLS certificate is installed, and no modern security headers beyond X-Frame-Options are present. There is no evidence of privacy or cookie policies, nor incident response or security policies published. This exposes users to risks and reduces trustworthiness. Overall, the website presents a professional business front but suffers from significant security and privacy compliance gaps. Immediate attention to SSL/TLS implementation and privacy policy publication is recommended to improve security posture and user trust.

Titan Machinery is a large, established full-service dealer specializing in agriculture and construction equipment, operating over 100 dealerships across multiple countries. The company offers new and used equipment sales, rentals, parts, service, and financing solutions, representing major CNH Industrial brands. The website is professionally designed using modern technologies such as ASP.NET and Vue.js, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, exposing users to potential risks. Privacy and cookie policies are present but basic, and no direct contact information is visible on the homepage. Social media presence is strong, supporting brand trust. The domain is mature and well-protected, indicating a legitimate business. Overall, the website demonstrates good business credibility and technical implementation but requires urgent security improvements.

Meusburger Georg GmbH & Co KG is a market leader in manufacturing high-precision standard parts, serving global customers in mould, die, and jig & fixture construction. The company offers a comprehensive product portfolio including standard parts, workshop equipment, hot runner systems, and control systems. Their website reflects a mature digital presence with extensive product categorization and multi-language support. However, the absence of a valid SSL/TLS certificate significantly impacts the security posture, exposing users to potential risks. Security headers are well configured, but the lack of HTTPS is a critical vulnerability. Privacy compliance is moderate with a privacy policy present but no visible cookie consent mechanism. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

Z

ZETA

zeta.com

39

ZETA is a large, established engineering and consulting company specializing in the pharmaceutical and biotech industries. They provide comprehensive services including process engineering, automation, food engineering, lifecycle management, and digitalization solutions. The company operates globally with multiple locations and a strong market presence in Austria and beyond. Their website reflects a professional and content-rich digital presence targeting industry clients seeking advanced technological solutions. Technically, the website is built on the Contao CMS platform, served by Apache, and uses common web technologies such as jQuery and Google Tag Manager. While the site is well-structured and optimized for mobile devices, performance metrics indicate slow loading times, and accessibility features are basic. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability. Security headers are partially implemented, but important features like HSTS, OCSP stapling, and session resumption are missing. The extensive use of tracking and marketing tools is managed with a clear cookie consent mechanism, indicating good privacy compliance. Overall, the website presents a trustworthy and professional business front but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include immediate SSL certificate installation, enabling modern security protocols, and enhancing security headers to meet industry best practices.

T

Tetra Pak International S.A.

tetrapak.com

40

Tetra Pak International S.A. operates a comprehensive global website showcasing its leadership in food processing and packaging solutions. The company targets food and beverage industry professionals, offering a broad range of services including packaging, integrated equipment, product innovation, and digital automation. The website is well-structured, professionally designed, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, the site is built on Adobe Experience Manager and hosted on IBM PWS, leveraging modern web technologies and third-party tools for analytics and cookie consent. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses risks to data confidentiality and user trust. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates high business credibility and professionalism but requires urgent remediation of SSL and TLS issues to improve security and trust.

D

DuPont

dupont.com

40

DuPont is a globally recognized enterprise specializing in manufacturing essential innovations across multiple sectors including automotive, electronics, healthcare, and water management. The company leverages science and innovation to deliver products such as protective equipment, clean water solutions, and advanced materials. The website reflects a professional and consistent brand presence targeting industrial and commercial clients. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates analytics and marketing tools such as Adobe Launch and Pingdom. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are well implemented, indicating good compliance with GDPR and related regulations. Overall, the site demonstrates strong business credibility but requires urgent security improvements.

M

Mayr-Melnhof Holz Holding AG

mm-holz.com

40

Mayr-Melnhof Holz is a leading European manufacturer in the wood industry, specializing in engineered wood products such as glued laminated timber and cross-laminated timber. With a history spanning over 170 years, the company holds a strong market position and offers a comprehensive range of wood construction solutions. The website reflects a mature digital presence with detailed product information, references, and a multilingual interface targeting architects, planners, and industry professionals. Technically, the site is built on TYPO3 CMS and employs modern JavaScript libraries like Owl Carousel and Google Analytics for user tracking. However, the site suffers from slow load times and lacks a valid SSL certificate, which significantly impacts its security posture. The absence of HTTPS and modern TLS protocols is a critical vulnerability that needs immediate remediation. Security-wise, the company has implemented SPF records and avoids subdomain takeover risks, but the lack of DNSSEC, HSTS, and OCSP stapling reduces its overall security maturity. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website is professional and content-rich but requires urgent security improvements, especially regarding SSL/TLS configuration, to enhance trust and protect user data.

SIGEL is a medium-sized manufacturing company specializing in innovative office equipment and smart procurement solutions tailored for modern, agile work environments. The company positions itself as a trusted partner for businesses seeking high-quality office products, supported by multiple international design awards and ISO certification. The website is professionally designed using Drupal 11, with strong SEO, accessibility, and multi-language support, reflecting a mature digital presence. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture. While security headers and cookie consent mechanisms are well implemented, the lack of incident response and vulnerability disclosure policies indicates room for improvement in security governance. Overall, the website is trustworthy and professional but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

P

Pankl SHW Industries AG

pankl.com

40

Pankl SHW Industries AG operates as a leading Austrian manufacturing group specializing in high-technology mechanical systems for niche markets including motorsport, luxury automotive, and aerospace. The company is majority-owned by Pierer Industrie AG and maintains a strong international presence with 21 locations and over 4,200 employees. Their product portfolio spans engine and turbo systems, drivetrain components, forged parts, aerospace components, and advanced powder metallurgy products. The website reflects a professional corporate identity with comprehensive content and clear navigation, targeting industrial clients and partners. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens the security posture, exposing users to potential risks. Privacy and cookie policies are well implemented, indicating GDPR compliance. The domain registration is mature and consistent with the business claims, enhancing trustworthiness. Strategic security improvements are recommended to elevate the site's protection and user trust.

Z

ZKW Group

zkw-group.com

40

ZKW Group is a leading global supplier specializing in innovative premium lighting systems and electronics for the automotive industry. The company positions itself as a strategic partner to automotive manufacturers worldwide, focusing on delivering advanced lighting solutions. The website reflects a professional corporate presence with multilingual support and strong branding aligned with its parent company, LG. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on WP Engine with Google Cloud infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. The site implements cookie consent mechanisms compliant with GDPR via Usercentrics, but lacks visible contact information and detailed security or incident response policies. Overall, while the business and technical maturity are solid, urgent remediation of SSL/TLS issues is necessary to ensure secure user interactions and maintain trust.

A

Arbonia AG

arbonia.com

34

Arbonia AG is a large Swiss manufacturing company specializing in interior architectural products such as doors, showers, and room partition systems. The company operates through 15 specialized subsidiaries producing in Central Europe and serves architects, interior designers, and construction industry professionals globally. The website is built on TYPO3 CMS and features a modern design with good navigation and mobile optimization. It includes a GDPR-compliant cookie consent mechanism and links to comprehensive privacy policies. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which significantly impacts its security posture. Security headers are well configured, but the absence of TLS protocols and OCSP stapling are notable vulnerabilities. Contact information is present but lacks direct emails or phone numbers on the site. Social media presence is active on YouTube, Instagram, and LinkedIn. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS implementation to enhance security and user trust.

The domain parker.com appears to represent a large manufacturing business, likely Parker Hannifin or a related entity, based on DNS and domain data. However, the website content is currently inaccessible due to an access denial page, likely caused by a Web Application Firewall or other security mechanism. This prevents direct analysis of business content, policies, or contact information. The technical infrastructure includes Akamai CDN services and multiple MX mail servers, indicating enterprise-grade hosting and email setup. Security posture is weak on the web server side, with no valid SSL certificate or HTTPS support detected, which is a critical issue. The domain's DNS and WHOIS data show a consistent and legitimate registration with appropriate email security policies such as DMARC with reject policy and reporting enabled. Overall, the site is currently not accessible for normal users, limiting content and privacy compliance analysis.

F

FWT Composites & Rolls GmbH

fwt.at

20

FWT Composites & Rolls GmbH is a medium-sized Austrian manufacturing company specializing in composite rollers, tubes, drive shafts, and related services primarily for industrial sectors such as paper, film, and non-woven industries. Founded in 1996, the company has established itself as a leading manufacturer with a strong focus on product quality, customer service, and technical expertise. Their website reflects a professional business presence with detailed product and service descriptions, multilingual support, and active social media engagement via Facebook. Technically, the website is built on WordPress with common plugins and includes structured data for SEO benefits. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Privacy compliance is addressed through a cookie consent mechanism and a comprehensive privacy policy. Overall, the company demonstrates a solid market position but should urgently address its security posture to protect user data and improve trust.

H

Holcim

lafargeholcim.com

40

Holcim is a globally recognized enterprise specializing in innovative and sustainable building materials and solutions. The company positions itself as a leader in decarbonizing construction with a broad portfolio including low-carbon cement, concrete, roofing, and insulation products. Their website reflects a mature, well-established business with a strong emphasis on sustainability, innovation, and corporate responsibility. The target audience includes construction professionals, architects, investors, and sustainability advocates worldwide. Technically, the site is built on Drupal CMS, hosted on AWS infrastructure, and employs modern web technologies and SEO best practices. However, a critical security gap exists due to the absence of HTTPS/SSL, which severely impacts the site's security posture. While security headers are properly configured, the lack of encryption exposes users to risks. Privacy and cookie policies are comprehensive and GDPR compliant, indicating good privacy governance. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

V

VTU Top GmbH

vtu.com

34

VTU Top GmbH is a medium-sized Austrian engineering company specializing in the planning and implementation of modern, sustainable process plants primarily serving the Life Sciences, Chemistry, and Process Industry sectors. The company offers a broad range of services including general planning (EPCMv), process engineering, electrical engineering, automation, GMP services, and manufacturing science & technology. The website is built on TYPO3 CMS with modern frontend technologies and provides comprehensive business and contact information, including a contact form and social media presence on LinkedIn. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy and cookie policies are well implemented with a consent mechanism, reflecting good GDPR compliance. Overall, the website presents a professional image but requires urgent security improvements to protect user data and enhance trust.

Alukoenigstahl appears to be a manufacturing company specializing in steel or metal products, operating primarily in Austria. The root domain alukoenigstahl.com serves only as a redirect to the main website hosted at alukoenigstahl.at, indicating a possible multi-domain strategy or regional targeting. The website infrastructure is based on Microsoft IIS and ASP.NET technologies, but the root domain lacks meaningful content and does not have an SSL certificate installed, exposing it to security risks and reducing user trust. DNS and email configurations are properly set up with SPF and DMARC policies, indicating some level of email security awareness. However, the absence of HTTPS and minimal website content significantly impact the overall digital maturity and security posture.

B

BECOM Electronics GmbH

becom.at

40

BECOM Electronics GmbH is a medium-sized Austrian company specializing in electronic manufacturing services (EMS) and embedded solutions, serving industries such as automotive, medical technology, and industrial electronics. The company operates internationally with subsidiaries in Germany, Hungary, China, and the USA, positioning itself as a reliable partner for end-to-end electronic product development and production. Their website reflects a professional and comprehensive digital presence with detailed service offerings and strong branding consistency. Technically, the website is built on TYPO3 CMS and hosted likely via Kabelplus infrastructure. It features modern web design, good mobile optimization, and accessibility. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, despite the presence of some security headers and HSTS configuration. The site uses Google Analytics for user tracking and implements a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the lack of HTTPS and TLS support significantly lowers the security posture, exposing users to potential risks. The DNS configuration is mostly sound but lacks DMARC and DNSSEC, which are recommended for enhanced email and DNS security. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, while the business and website demonstrate professionalism and strong market positioning, addressing the critical security issues and enhancing compliance documentation would improve trustworthiness and reduce risk exposure.

S

SSI SCHAEFER Group

ssi-schaefer.co.uk

40

SSI SCHAEFER Group operates as a global leader in intralogistics, providing modular warehouse and logistics systems to a broad range of industries. The company targets businesses seeking advanced intralogistics solutions, offering products, software, and consulting services. The website reflects a mature enterprise with comprehensive content, multilingual support, and strong branding consistency. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics. However, the lack of a valid SSL/TLS certificate and absence of HTTPS significantly weaken the security posture. Security headers are well configured, but the missing HTTPS is a critical vulnerability. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism is present. Contact information is available primarily through forms and phone links, though no explicit emails or phone numbers are listed in the content. Overall, the domain registration data aligns well with the business claims, indicating legitimacy. Strategic improvements in SSL deployment and privacy mechanisms are recommended to enhance trust and security.

The website roquette.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any meaningful content or business information. The site presents a Cloudflare block page indicating that the visitor has been blocked due to triggered security rules, likely related to suspicious activity or automated requests. Consequently, no privacy policies, cookie policies, terms of service, contact information, or business descriptions are available for analysis. The DNS setup shows standard configurations with Microsoft Outlook for email and multiple TXT records for domain verification and SPF, indicating legitimate domain management. However, the SSL/TLS configuration is invalid or missing, resulting in no HTTPS support, which is a critical security issue. The site uses Cloudflare for hosting and analytics, but the lack of accessible content and security misconfigurations significantly reduce the overall trust and usability of the website.

S

Sandvik AB

home.sandvik

40

Sandvik AB operates a comprehensive global website presenting itself as a leading high-tech engineering group specializing in mining, manufacturing, and infrastructure solutions. The site targets industrial customers, investors, and job seekers with detailed business and investor information, sustainability commitments, and career opportunities. The technical infrastructure leverages modern JavaScript frameworks, Azure Application Insights for telemetry, and OneTrust for cookie consent, hosted behind Cloudflare CDN. However, the website suffers from a critical security flaw: the SSL certificate is invalid or missing, and no TLS protocols are enabled, severely impacting the security posture. Despite this, the site implements strong security headers and privacy mechanisms, including GDPR-compliant policies and cookie consent banners. The domain registration is consistent with the business identity, mature, and trustworthy. Overall, the website is professionally designed, content-rich, and well-branded but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

E

EGGER

egger.com

36

EGGER is a well-established global family-owned manufacturing company specializing in wood-based materials for furniture, interior design, wood construction, and flooring. Founded in 1961 and headquartered in Austria, EGGER holds a strong market position as an internationally leading manufacturer. The website reflects a professional and content-rich digital presence targeting industry professionals and retailers. Technically, the site uses modern JavaScript frameworks and custom CMS templates hosted on AWS infrastructure, but lacks performance metrics and has room for improvement in accessibility and SEO. Security posture is weak due to the absence of a valid SSL certificate, lack of modern TLS protocols, and missing security headers, exposing users to risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and social media presence are well established, enhancing business credibility. Overall, the site is trustworthy but requires urgent security enhancements to protect users and improve compliance.

Cargill is a large multinational enterprise operating primarily in the manufacturing and agriculture sectors, providing agricultural commodities, food ingredients, and energy solutions. The company has a mature domain age consistent with its long-standing market presence. The website is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page, which blocks access to actual content and metadata, limiting the ability to perform a full analysis. The technical infrastructure includes Cloudflare protection and AWS DNS hosting, but the SSL/TLS configuration is currently invalid or missing, resulting in no HTTPS support. Security headers are present but cannot compensate for the lack of a valid certificate. No privacy, cookie, or terms of service policies are detectable on the challenge page, and no contact information or forms are available for review. The WHOIS data confirms the domain's legitimacy and strong protection status. Overall, the website's security posture is weak due to missing HTTPS and blocked content, and the user experience is poor due to inaccessibility.

A

AUSTROPLAN Austrian Engineering GmbH

austroplan.at

21

AUSTROPLAN Austrian Engineering GmbH is a small, specialized consulting and engineering company focused on industries such as cement, medical engineering, pharmaceuticals, iron & steel, waste processing, and LPG cylinder manufacturing. The company offers a range of services including business development, consulting, contracting, inspection, and spare parts procurement. The website reflects a niche industrial service provider with international project references but lacks modern digital maturity. Technically, the website is built on an outdated Joomla! 1.5 CMS platform and includes deprecated Flash content, which negatively impacts user experience and security. Performance is slow, and mobile optimization is poor. Security posture is weak due to the absence of HTTPS and a valid SSL certificate, lack of modern TLS protocols, and missing security headers. No privacy or cookie policies are present, indicating poor privacy compliance. Overall, the website is accessible but requires significant modernization and security improvements to meet current standards and enhance trustworthiness.

P

ProChema GmbH

prochema.com

40

ProChema GmbH is a Vienna-based company specializing in the representation and distribution of chemical raw materials and intermediate products across Europe and Asia. Established in 1981, it operates a pan-European sales and logistics network with multiple stock points and a liaison office in China. The company emphasizes close partnerships, quality assurance, financing, and reliable supply services. Technically, the website is built on WordPress with Elementor and related plugins, but suffers from slow load times and lacks HTTPS security. Security posture is weak due to absence of SSL, security headers, and cookie consent mechanisms, posing risks to user data and trust. Overall, the business is credible and mature, but the website requires urgent security improvements to meet modern standards and compliance requirements.

D

Doka GmbH

doka.com

40

Doka GmbH is a global leader in formwork and scaffolding solutions, serving the construction industry with a broad portfolio of products and digital services. The company operates worldwide with a strong presence in Finland and is part of the Umdasch Group. The website reflects a mature business with comprehensive content, multiple language support, and customer engagement portals. Technically, the site uses modern web technologies and frameworks but lacks a valid SSL certificate, which is a significant security concern. Privacy compliance is well addressed with clear policies and consent mechanisms. The overall security posture is weak due to missing HTTPS, which impacts trust and user safety. Strategic improvements in SSL deployment and security hardening are recommended to enhance the site's credibility and protect user data.

L

Leica Microsystems

leica-microsystems.com

40

Leica Microsystems is a well-established global leader in microscopy and imaging solutions, serving diverse sectors including life sciences, industrial manufacturing, medical specialties, and education. The company offers a broad portfolio of products ranging from light and confocal microscopes to software and consumables, supported by comprehensive service and application support. The website reflects a mature digital presence with rich, professional content and consistent branding, targeting scientific and industrial professionals worldwide. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the current lack of a valid SSL certificate and absence of HTTPS significantly undermines the security posture, despite the presence of several security headers and policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. WHOIS data confirms the domain's maturity and legitimacy, registered under Network Solutions without privacy protection, consistent with the company's profile. Strategic improvements in SSL/TLS configuration and enhanced security practices are recommended to elevate trust and protect user data.

Europapier International AG is a large, well-established paper merchant headquartered in Vienna, Austria, with a strong presence across Central and Eastern Europe. The company offers a broad portfolio of paper and paper-related products, supported by extensive warehousing and distribution infrastructure. As part of the Heinzel Group since 2010, Europapier serves a diverse B2B customer base including commercial printers and specialty market businesses. The website reflects a mature digital presence with comprehensive business and product information, professional design, and good user experience. However, the absence of HTTPS and SSL/TLS encryption represents a significant security risk, undermining user trust and data protection. The site employs modern technologies such as Pimcore CMS and Google Tag Manager for analytics, but performance data suggests potential loading delays. Legal and privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Europapier demonstrates strong business credibility but requires urgent security improvements to align with best practices.

B

BWT Holding GmbH

bwt.fr

37

BWT Holding GmbH operates a comprehensive website focused on water treatment solutions, targeting private consumers and professional sectors in France. The site offers detailed product and service information, supported by a consistent brand presence and multiple customer contact channels. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and performance optimization tools, hosted behind Cloudflare. However, a critical security weakness is the invalid SSL certificate and lack of TLS protocol support, which significantly undermines the site's security posture. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. Overall, the site is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

E

EVVA Sicherheitstechnologie GmbH

evva.com

31

EVVA Sicherheitstechnologie GmbH is a well-established Austrian company specializing in the development and manufacturing of mechanical, electronic, and mechatronic locking and access control systems. Positioned as a leading provider in Europe, EVVA serves a diverse range of sectors including residential, commercial, healthcare, education, and infrastructure. Their website reflects a mature business with comprehensive product offerings, detailed project references, and strong branding consistency. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates privacy tools such as TRUENDO and Google reCAPTCHA. However, a critical security shortfall is the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are well implemented, indicating good GDPR compliance. Contact information is clearly presented with multiple channels including forms, phone, and email. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent security improvements to protect user data and maintain trust.

R

Robert Bosch GmbH

bosch.us

40

Robert Bosch GmbH operates the bosch.us website as a mature, enterprise-level digital presence focused on delivering comprehensive product and service information across multiple sectors including mobility, consumer goods, and energy solutions. The website targets both consumers and business clients in the USA, providing detailed navigation, corporate information, and career opportunities. Technically, the site uses a custom Bosch CMS with integrations for privacy management and analytics, hosted on Azure infrastructure. While the site is well-designed, mobile-optimized, and SEO-friendly, it suffers from a critical security issue: the SSL certificate is invalid and no TLS protocols are enabled, severely impacting the security posture. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy corporate brand but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

CERATIZIT S.A. is a leading high-technology engineering group specializing in cutting tools and hard material solutions, serving industrial and manufacturing sectors globally. The company is part of the Plansee Group and maintains a strong market position supported by innovation, patents, and sustainability certifications such as the EcoVadis Gold Rating. The website reflects a professional and well-branded digital presence with comprehensive content and multilingual support. Technically, the site uses modern frameworks including Next.js and Adobe Experience Manager, supported by Akamai CDN for content delivery. However, the security posture is currently weak due to the absence of a valid SSL certificate and HTTPS support, exposing the site to potential risks. Privacy and legal compliance are well addressed with clear policies and consent mechanisms. Overall, CERATIZIT demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS security to protect users and enhance trust.

M

Melecs EWS GmbH

melecs.com

39

Melecs EWS GmbH is a well-established electronics manufacturing services (EMS) provider headquartered in Austria with over 25 years of industry experience. The company offers comprehensive services ranging from electronics development, validation, industrialization, production, to logistics, serving multiple sectors including automotive, home appliances, intralogistics, and industrial electronics. Their global production footprint and strong customer focus position them as a reliable partner in the EMS market. The website is professionally designed, content-rich, and targets industrial clients seeking end-to-end EMS solutions. Technically, the site is built on WordPress with Elementor and uses Cloudflare for hosting and CDN services. However, the site currently lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Contact information is clearly presented, including email, phone, physical address, and a contact form. Overall, the business credibility and website professionalism are high, but the security posture requires urgent improvement to protect user data and enhance trust.

C

Cargill, Incorporated

delacon.com

23

Delacon.com is the online presence of Delacon, a global leader in phytogenic solutions for animal nutrition, operating under the parent company Cargill, Incorporated. The website offers comprehensive information about their products, research, and career opportunities, targeting professionals in the animal nutrition and agriculture sectors. The site is built on TYPO3 CMS and hosted on AWS infrastructure, featuring a professional design and good content quality. However, the absence of a valid SSL certificate and HTTPS significantly impacts the security posture. While security headers are partially implemented, critical improvements are needed to secure data transmission and user privacy. The site lacks explicit cookie consent mechanisms despite using Google Analytics and other tracking tools, indicating partial privacy compliance. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

A

Applied Chemicals International AG

acat.com

30

Applied Chemicals International AG operates as a medium-sized international chemical supplier specializing in innovative chemical products and technologies for wastewater treatment, paper production, and specialty industrial chemicals. The company maintains multiple offices across Europe and Africa, serving industrial clients with a B2B business model. Their website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. However, the absence of a valid SSL certificate and HTTPS support significantly undermines their security posture. While security headers and content security policies are implemented, they are weakened by permissive settings and lack of modern TLS protocols. Privacy compliance is addressed with clear privacy and cookie policies, and contact information is readily available. Overall, the company presents a credible business front but must urgently address critical security gaps to protect user data and maintain trust.

Hagleitner Hygiene International GmbH is a well-established Austrian family-owned company specializing in innovative hygiene solutions, including cleaning and disinfectant products, cosmetics, dispensers, dosing devices, and digital hygiene applications. Founded in 1971 and headquartered in Zell am See, Austria, the company operates internationally with 27 locations across 12 countries and a broad distribution network. Their market position is strong, particularly in dispenser systems and hygiene technology, supported by numerous certifications and a commitment to sustainability. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. Hosting is managed via Cloudflare CDN with Apache on Rocky Linux. However, the website suffers from a critical security flaw: the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Security-wise, while the company demonstrates compliance with multiple ISO standards and environmental certifications, the website's SSL/TLS misconfiguration is a significant vulnerability. Security headers are minimal, and no advanced protections like OCSP stapling or session resumption are implemented. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the business is credible and professionally presented online, but the lack of HTTPS is a critical risk that must be addressed immediately to protect user data and maintain trust. Strategic improvements in SSL configuration and enhanced security headers are recommended to elevate the security posture and align with best practices.

K

Kellner & Kunz AG

reca.co.at

33

Kellner & Kunz AG, part of the RECA Group, is a leading specialist in C-parts management with a strong presence across Europe. The company offers a comprehensive range of over 140,000 quality products and services tailored to industry and trade sectors, supporting customers in optimizing their work processes and gaining competitive advantages. Their business model focuses on B2B supply and service, leveraging an extensive network of subsidiaries and partners across multiple countries. Technically, the website is built on WordPress with modern technologies such as Vue.js for search, Algolia, and Factfinder integrations, providing a good user experience with responsive design and SEO optimization. However, the site suffers from a critical security issue due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts its security posture. Security headers are well implemented, and privacy policies are comprehensive and GDPR compliant, but the lack of proper SSL/TLS encryption is a major vulnerability. The site uses standard tracking tools like Google Analytics and Facebook Pixel with moderate user tracking levels and appropriate consent mechanisms. Overall, the website is professional and trustworthy in content and business representation but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL/TLS certificate installation, enabling HSTS, and improving security configurations.

E

ENGEL

engelglobal.com

40

ENGEL is a large, established manufacturing company specializing in injection moulding solutions, including machines, automation, and digital process optimization. The website reflects a professional B2B business model targeting manufacturing industries globally, with multi-language support and a comprehensive content offering. Technically, the site uses modern technologies such as Vue.js and Storyblok CMS, hosted on AWS CloudFront, with good SEO and mobile optimization. However, the lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses. The site implements strong security headers and a content security policy but lacks incident response and security policy disclosures. Privacy compliance is addressed with GDPR-consent mechanisms and a detailed data protection page. Overall, the site is functional and professional but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

T

TROTEC LASER INC.

troteclaser.com

39

Trotec Laser GmbH is a well-established manufacturer of professional laser machines and materials, serving a global market including manufacturers, engravers, schools, and print shops. With over 25 years of experience, the company offers a comprehensive product portfolio including laser cutters, engravers, markers, software, and consumables, supported by a worldwide network and strong customer base. The website is professionally designed, content-rich, and supports multiple languages and regions, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS and Nuxt.js, hosted behind Cloudflare CDN, but lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented, but modern TLS protocols and HSTS are missing, reducing the overall security posture. Privacy compliance is moderate with a clear privacy policy and terms of service, but no cookie consent mechanism is detected. Contact information is comprehensive and clearly presented. Overall, the site demonstrates strong business credibility and user experience but requires urgent security improvements to protect users and maintain trust.