Manufacturing security reports

E

Erne Fittings GmbH

ernefittings.com

40

Erne Fittings GmbH is a well-established manufacturer of premium quality pipe fittings with over 100 years of experience, serving a global industrial clientele primarily in the manufacturing and energy sectors. The company offers a comprehensive range of products including stock and production programs as well as special-purpose solutions, supported by quality certifications and a dedicated test laboratory. Their website reflects a professional and consistent brand image with clear navigation and multilingual support, targeting industrial distributors and project businesses worldwide. Technically, the site is built on WordPress with modern plugins and hosted behind Cloudflare CDN, but suffers from critical SSL/TLS misconfigurations that undermine secure communications. Security headers are partially implemented, but the lack of a valid SSL certificate and modern TLS protocols significantly lowers the security posture. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, though no cookie consent mechanism is evident. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust.

M

MM Group

mm-karton.com

40

MM Group is a global leader in consumer packaging, specializing in cartonboard, folding cartons, kraft papers, uncoated fine papers, leaflets, and labels. The company targets businesses in the packaging and manufacturing sectors, emphasizing sustainability and innovation. Their website reflects a mature digital presence with multilingual support, comprehensive business information, and investor relations transparency. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and consent management tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS support, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security.

P

Precision Valve & Automation, Inc.

pva.net

39

Precision Valve & Automation, Inc. (PVA) is a medium-sized manufacturing company specializing in precision fluid dispensing, selective conformal coating, and custom automation equipment. The company positions itself as a leader in its niche, serving global manufacturers with a comprehensive product and service offering. Their website reflects a professional and well-structured digital presence, leveraging WordPress CMS with advanced plugins and integrations for marketing, analytics, and user engagement. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks and undermining trust. While privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy, the lack of HTTPS significantly impacts the overall security posture. Strategic improvements in SSL implementation and security policy transparency are recommended to enhance trust and compliance.

F

Felder Group

felder-group.com

36

Felder Group is a well-established manufacturer and distributor of woodworking machines with a global presence and multiple premium brands. The company offers a wide range of products including bandsaws, CNC machines, edgebanders, and automation solutions, targeting professional woodworking trade and industry sectors. The website is professionally designed, multilingual, and rich in content, supporting a strong brand image and customer engagement through testimonials and social media. Technically, the site uses Pimcore CMS, Cloudflare CDN, and integrates Usercentrics for consent management, but lacks a valid SSL certificate, which is a critical security gap. Security headers are minimal, and no advanced security policies or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is credible and trustworthy but requires urgent security improvements to enable HTTPS and strengthen its security posture.

N

Norske Skog ASA

norskeskog.com

38

Norske Skog ASA is a well-established Norwegian manufacturing company specializing in publication and packaging paper products, with a strong emphasis on sustainability and innovation. The company holds a significant market position as one of the largest suppliers of newsprint and recycled containerboard in Europe. Their website reflects a professional business with clear investor relations, product information, and sustainability commitments. Technically, the site uses a traditional tech stack including jQuery, Bootstrap, and Dynamicweb CMS, with Google Tag Manager for analytics. However, the absence of HTTPS and modern security protocols is a critical vulnerability that undermines user trust and data security. Privacy compliance is minimal, with a basic privacy policy but no cookie consent mechanism. Overall, the website is content-rich and professionally presented but requires urgent security improvements.

Primetals Technologies is a global leader in metallurgical plant solutions, offering a comprehensive portfolio of services and technologies across the steel production value chain. Their website reflects a mature enterprise-level business with a strong focus on innovation, digitalization, and sustainability, including green steel initiatives. The company targets industrial clients and professionals in the steel and metallurgical sectors, providing automation, lifecycle services, and integrated plant solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes multilingual support and professional design. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap that undermines data protection and user trust. Security headers are well implemented, but the lack of encryption and modern TLS protocols significantly lowers the security posture. Privacy compliance is well addressed with Cookiebot and Google Consent Mode integration, ensuring GDPR alignment. Overall, the site demonstrates high business credibility and professionalism but requires urgent security improvements to meet modern standards.

Silhouette International Schmied AG is a well-established manufacturer and market leader specializing in premium rimless eyewear. The company targets consumers and businesses seeking high-quality, innovative eyewear products. Their website reflects a professional brand image with consistent messaging and clear business focus. Technically, the website is built on modern technologies including Storyblok CMS and Vue.js, with content delivery optimized via Amazon CloudFront. However, the website lacks a valid SSL certificate and does not support HTTPS, which significantly undermines its security posture. Security headers are partially implemented but cannot compensate for the absence of proper encryption. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and related regulations. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

A

Alicona Imaging GmbH

alicona.com

33

Alicona Imaging GmbH operates as a global provider of optical 3D metrology and surface roughness measurement solutions, specializing in non-contact measurement technologies based on Focus-Variation. The company targets manufacturing sectors such as automotive, aerospace, medical technology, and precision manufacturing, offering devices and automation solutions to enhance quality assurance and production measurement. The website reflects a mature digital presence with professional design, comprehensive content, and active engagement through blogs and events. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. The technical infrastructure leverages modern frameworks and CMS platforms, but performance issues such as slow load times need addressing. Privacy compliance is well managed with cookie consent mechanisms and clear privacy policies. Overall, Alicona demonstrates strong business credibility but must urgently improve its security posture to align with best practices and regulatory requirements.

F

Flint Group

flintgrp.com

40

Flint Group is a global enterprise specializing in manufacturing print consumables for the packaging and printing industries. The company emphasizes sustainable innovation, customer support, and ethical business practices, positioning itself as a global leader in its sector. The website reflects a professional and comprehensive digital presence with extensive content, clear navigation, and a focus on sustainability and corporate responsibility. Technically, the site uses modern analytics and tracking tools but lacks HTTPS support due to an invalid or missing SSL certificate, which is a significant security concern. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, Flint Group demonstrates strong business credibility but must address its SSL/TLS configuration to improve security posture and user trust.

R

Rosendahl Nextrom GmbH

rosendahlnextrom.com

39

Rosendahl Nextrom GmbH is a well-established global leader in production technologies serving the battery, cable & wire, and optical fiber industries. The company offers sophisticated manufacturing equipment and tailor-made solutions, targeting industrial manufacturers worldwide. The website reflects a mature business with a professional digital presence, including multi-language support and structured data for SEO. Technically, the site uses WordPress with Elementor and performance optimizations like WP Rocket, hosted behind Cloudflare CDN. However, a critical security gap exists as the site lacks HTTPS/SSL encryption, exposing users to potential risks. Privacy compliance is addressed with a privacy policy and cookie consent via Cookiebot. Business credibility is strong with clear contact forms and parent company affiliation to KNILL Gruppe. Overall, the site is content-rich and professionally maintained but requires urgent security improvements.

PSI Software SE operates the website psimetals.com, providing specialized production management software solutions for the metals industry, including steel, aluminum, and copper manufacturing. Their flagship product, PSImetals, integrates SCM, APS, and MES functionalities to optimize production and logistics, with a strong emphasis on sustainability and decarbonization. The company targets industrial manufacturers seeking to improve operational efficiency and meet environmental standards. The website demonstrates a mature digital presence with comprehensive content, case studies, and customer references, reflecting a well-established market position. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as Vue.js, Axios, and Parsley.js for enhanced user experience and form validation. However, performance metrics are lacking, and the SSL/TLS configuration is critically deficient, with no valid certificate and no TLS protocols enabled, severely impacting security posture. The site includes privacy and cookie policies compliant with GDPR, and uses Google Analytics and Tag Manager for user tracking at a moderate level. Security-wise, while several security headers are implemented, the absence of a valid SSL certificate and HTTPS enforcement is a major vulnerability. DNS security features like DNSSEC and CAA are not enabled, and domain protection locks are missing, which could expose the domain to hijacking risks. No explicit incident response or security policy information is available on the site. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, enhancing DNS security, and publishing clear security and incident response policies.

S

Sony DADC Europe GmbH

sonydadc.com

40

Sony DADC Europe GmbH operates a professional and comprehensive website presenting itself as a leading end-to-end supply chain and manufacturing service provider primarily serving the entertainment industry. The company offers a broad range of services including micro optics, manufacturing, assembly and packaging, logistics, and global business services. The website is well-structured, professionally designed, and targets B2B clients requiring specialized supply chain solutions. Technically, the site is built on WordPress with common libraries such as jQuery and Swiper.js, and includes SEO optimizations and accessibility features. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS configuration, which severely impacts the security posture and user trust. Privacy and cookie policies are comprehensive and GDPR compliant, but no incident response or vulnerability disclosure information is provided. Overall, the site is credible and trustworthy but requires urgent security improvements to protect user data and ensure secure communications.

Ecolab Inc. is a global enterprise specializing in water, hygiene, and infection prevention solutions and services. The company serves a broad range of industries including manufacturing, healthcare, hospitality, food and beverage processing, and energy. With a strong market position as a leader in sustainability and operational efficiency, Ecolab offers science-based solutions and data-driven insights to help customers improve safety, reduce environmental impact, and optimize operations. The website reflects a mature digital presence with comprehensive content, clear navigation, and multi-channel contact options. Technically, the website is built on the Sitecore CMS platform, leveraging modern technologies such as Coveo for search, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is hosted via Akamai CDN and integrates multiple third-party marketing and analytics tools, indicating a sophisticated digital marketing strategy. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site implements strong HTTP security headers and content security policies. However, a critical issue is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly undermines the security posture. This gap exposes the site to risks and should be addressed promptly. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, Ecolab's website demonstrates high business credibility and professionalism but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic recommendations include fixing the SSL certificate, enabling modern TLS protocols, enhancing HSTS policies, and continuing to maintain strong privacy and security practices.

C

Chemetall GmbH

chemetall.com

34

Chemetall GmbH is a well-established global leader in surface treatment chemical solutions, operating as a subsidiary of BASF. The company serves industrial clients across multiple sectors including aerospace, automotive, and manufacturing, providing advanced chemical technologies and laboratory services. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B industrial customers. Technically, the site uses legacy JavaScript libraries and lacks modern performance optimizations, with slow loading times and basic mobile responsiveness. Security posture is weak due to the absence of HTTPS and minimal security headers, exposing users to potential risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data confirms a mature and legitimate domain with consistent registration details. Overall, the site demonstrates solid business credibility but requires urgent improvements in security and privacy to meet modern standards.

KTM AG is a well-established Austrian motorcycle manufacturer with a strong market presence and a focus on transparent communication with investors and the public. The website reflects a professional corporate image with clear navigation and relevant business content. Technically, the site is built on WordPress using the Divi theme and integrates modern marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the absence of a valid SSL certificate and HTTPS significantly undermines the site's security posture, exposing visitors to potential risks. No explicit security or incident response policies are published, which could be a concern for stakeholders. Overall, while the business credibility and content quality are good, the technical and security aspects require urgent improvement to meet modern standards.

D

Deisl-Beton Ges.m.b.H.

deisl-beton.at

23

Deisl-Beton Ges.m.b.H. is an Austrian company specializing in the manufacturing and distribution of concrete and related construction materials, including transport concrete, aggregates, dry spray concrete, recycling products, and natural stones. The company also provides logistics services such as fleet management and concrete pumps. The website serves as an informational portal for customers and partners, primarily targeting construction professionals and businesses within Austria. The market position appears regional with a focus on quality and service. Technically, the website is built on WordPress 6.1.7, hosted by Futureweb GmbH, and served via Apache. The site uses standard web technologies including jQuery but lacks modern performance optimizations and mobile responsiveness is basic. The absence of HTTPS and a valid SSL certificate is a significant technical and security deficiency, exposing users to risks. No advanced SEO or accessibility features are evident, and performance metrics are missing. From a security perspective, the site lacks HTTPS, HSTS, OCSP stapling, and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or terms of service policies are present, indicating poor compliance with GDPR and related regulations. Contact information is clearly provided, but no incident response or security policy details are available. The domain registration is consistent and legitimate, registered with a reputable Austrian registrar. Overall, the website presents moderate business credibility but suffers from critical security and privacy shortcomings. Strategic improvements in SSL implementation, security headers, and privacy compliance are urgently recommended to enhance trust and protect users. Technical modernization and performance optimization would also benefit user experience and SEO.

Pilz GmbH & Co. KG operates an international website focused on providing comprehensive automation technology solutions, emphasizing safety and industrial security. The company targets industrial automation professionals and machine builders, offering components, systems, and services to ensure safe automation worldwide. The website is professionally designed with clear navigation and multilingual support, reflecting a strong market position in manufacturing and technology sectors. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, but suffers from critical SSL/TLS misconfigurations that undermine its security posture. Security headers are well implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the site's security score. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Business credibility is high, supported by detailed contact information, social media presence, and consistent branding. Overall, the site is functional and professional but requires urgent remediation of its SSL/TLS issues to improve security and trust.

Glashütte Original is a prestigious German luxury watch manufacturer with a rich history dating back to 1845. The company operates under the Swatch Group umbrella and offers a range of technically sophisticated and iconic watch collections targeting discerning luxury consumers globally. The website reflects a mature digital presence with multilingual support, comprehensive product and brand information, and integrated e-commerce and customer service functionalities. Technically, the site is built on WordPress with WooCommerce and leverages modern JavaScript libraries and tracking technologies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the business demonstrates strong credibility and branding but must urgently address its SSL/TLS configuration to improve security posture and user confidence.

A

Anton Paar

anton-paar.com

40

Anton Paar is a globally recognized manufacturer of high-quality analytical and measuring instruments serving research and industrial sectors. The company holds a strong market position as a leader in density, concentration, CO2 measurement, and rheometry. Their website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive product information, regional office contacts, and support services. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens their security posture, exposing users to potential risks. The site employs modern analytics and marketing tools with appropriate privacy and cookie consent mechanisms, demonstrating good compliance with GDPR and user privacy standards. Strategic improvements in SSL/TLS deployment and security headers would enhance trust and security.

The website nufarm.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) blocking page, which prevents access to any substantive content. Nufarm is a well-established global agricultural chemical company with a mature domain registered since 1997. The domain registration details are consistent and indicate a legitimate business entity. However, the lack of a valid SSL/TLS certificate and the presence of a blocking WAF page severely limit the ability to assess the website's content, privacy, and security posture comprehensively. The technical infrastructure relies on Cloudflare for DNS and security services, but the absence of HTTPS and other modern security configurations is a critical vulnerability. Overall, the website's security posture is weak due to missing SSL and blocking mechanisms, and privacy compliance cannot be verified. Strategic improvements in SSL deployment and content accessibility are essential.

T

TEST-FUCHS GmbH

test-fuchs.com

40

TEST-FUCHS GmbH is a well-established manufacturing company specializing in test systems and aerospace systems, with a history dating back to 1946. The company has grown into a medium-sized enterprise with a global presence and over 600 employees. Their website reflects a professional corporate identity with clear navigation and relevant business content targeting industrial B2B clients. Technically, the website is built on Drupal CMS with modern JavaScript libraries, but lacks HTTPS security, which is a significant risk. The absence of a valid SSL certificate and modern TLS protocols exposes visitors to potential data interception and undermines trust. Privacy compliance is addressed with a cookie consent mechanism and a basic GDPR-compliant privacy policy. However, no explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are present. Overall, the website is functional and professional but requires urgent security improvements to protect users and enhance credibility.

D

delfortgroup AG

delfortgroup.com

40

delfortgroup AG is a mature, enterprise-level global manufacturer specializing in specialty and functional papers, serving industries such as packaging, tobacco, battery separators, and more. The company emphasizes sustainability and innovation, supported by a comprehensive digital presence including detailed product catalogs, sustainability reports, and career opportunities. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, leveraging various JavaScript libraries and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and lack of HTTPS enforcement represent critical security weaknesses. Security headers are present but insufficient without proper TLS configuration. The domain is well-established with consistent WHOIS data, supporting business legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

O

Ottakringer Getränke AG

ottakringerkonzern.com

40

Ottakringer Getränke AG is a well-established Austrian family-owned beverage group comprising key subsidiaries such as Ottakringer Brauerei, Vöslauer Mineralwasser, and Del Fabro Kolarik. The company focuses on manufacturing and distributing beer, mineral water, and beverage wholesale products, targeting both B2B and B2C markets primarily in Austria and neighboring countries. The website content is professionally presented in German, emphasizing sustainability and quality. Technically, the site is built on Joomla CMS with common web technologies like jQuery and Bootstrap, and it integrates Google Analytics for user tracking. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no functional HTTPS, which significantly impacts its security posture. Security headers are partially implemented, and cookie consent mechanisms are in place, indicating reasonable privacy compliance. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in SSL configuration and security practices to enhance trust and protect user data.

W

Würth Oy

wurth.fi

40

Würth Oy operates a comprehensive B2B e-commerce and service platform focused on tool and accessory logistics for industrial, construction, and maintenance sectors in Finland. The company has a strong market presence with nearly 50 years of history and a wide network of centers. The website supports multiple login methods and offers extensive product and service information tailored for business customers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, managed via the FirstSpirit CMS, and integrates analytics tools like Piwik PRO and Google Tag Manager. Security headers are implemented, but a critical issue exists with an invalid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and contact information is clearly provided. Overall, the site is professional and trustworthy but requires urgent SSL remediation to ensure secure communications.

G

GEZE GmbH

geze.at

38

GEZE GmbH is a globally recognized family-owned company specializing in manufacturing and providing innovative door, window, and safety technology solutions. The company has a strong market position with over 3,000 employees and 37 subsidiaries worldwide, focusing on digital connectivity and building automation. The website reflects a professional and comprehensive presentation of their products and services, targeting architects, planners, and building operators. Technically, the site uses TYPO3 CMS hosted on AWS CloudFront with modern content delivery but suffers from critical SSL/TLS misconfigurations, impacting security posture. Privacy compliance is well addressed with a clear privacy policy and consent management via Usercentrics. The site offers multiple contact channels and social media presence, enhancing business credibility. However, the invalid SSL certificate and lack of HTTPS protocols represent significant security risks that should be urgently addressed.

S

SOPREMA

soprema.com

29

SOPREMA is a well-established global manufacturer specializing in waterproofing, insulation, and roofing products with a broad international footprint. The company operates through numerous subsidiaries and sales offices worldwide, targeting construction professionals and distributors. The website reflects a multinational business model with a focus on manufacturing and distribution. Technically, the website runs on Apache with PHP backend and Magento CMS, integrating Google Maps for location display. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS, which severely impacts its security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is comprehensive and professional, supporting business credibility. Overall, the site requires urgent security improvements to protect user data and enhance trust.

S

SMB Machinery

smbsales.com

24

SMB Machinery is a well-established company specializing in the sale and service of used packaging and processing equipment, primarily serving consumer goods manufacturing operations. With over two decades of experience and a large facility in Metro-Atlanta, the company offers a comprehensive range of services including equipment sales, technical support, automation, rigging, and logistics. The website reflects a professional business with clear branding, industry affiliations, and a focus on transparency and customer assurance. Technically, the site is built on WordPress with modern plugins and tracking tools, but lacks a valid SSL certificate, which significantly impacts its security posture. The absence of HTTPS and security headers exposes the site to risks and reduces trustworthiness. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is clearly provided, including phone, physical address, and a contact form protected by reCAPTCHA v3. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

B

Bene GmbH

bene.com

26

Bene GmbH is a well-established Austrian manufacturer and international supplier of high-quality office furniture and workspace solutions, with a history dating back to 1790. The company positions itself as a leader in modern office design, combining Austrian quality with innovative and functional products. The website is built on TYPO3 CMS and uses modern web technologies, but lacks a valid SSL certificate, which is a critical security shortfall. The site includes comprehensive content, a contact form with CAPTCHA, and social media integration, but does not implement cookie consent mechanisms or advanced security headers. Overall, the business is credible and well-presented, but the lack of HTTPS significantly impacts the security posture.

B

Baustoffservice

baustoffservice.at

38

Baustoffservice is a small Austrian manufacturing business specializing in patented lightweight concrete products (VULKAN and LAVA). With over 30 years of industry experience, they serve architects, construction firms, and public space planners by providing half-finished concrete parts, furniture, and facade elements. Their website is built on the 1AND1/IONOS platform and uses standard web technologies including jQuery and Mapbox. While the site presents clear contact information and social media presence, it suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which severely impacts trust and security posture. Privacy compliance is basic, with a cookie notification but no detailed privacy or security policies. Overall, the site is functional and professionally designed but requires urgent security improvements.

S

Studio F. A. Porsche

studiofaporsche.com

24

Studio F. A. Porsche is a premium design agency originating the Porsche Design brand, offering product, mobility, space, and digital design services to a global clientele. The website presents a professional portfolio with extensive project showcases and clear contact information, targeting premium clients worldwide. Technically, the site runs on WordPress with common plugins and libraries but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. The site implements cookie consent mechanisms and minimal tracking compliant with GDPR. Security posture is weak due to missing HTTPS and security headers, though no active vulnerabilities were detected. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements.

B

Bufab International AB

bufab.com

40

Bufab International AB operates as a global supply chain partner specializing in C-parts for manufacturing industries. Their website presents a comprehensive portfolio of services including supplier management, logistics, quality assurance, and sustainability consulting. The company targets manufacturing purchasers seeking to optimize their C-parts supply chain. Technically, the website is built on HubSpot CMS with integrations for marketing and analytics, delivering a professional and content-rich user experience. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which is critical for secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained but requires urgent security improvements to protect user data and enhance trust.

W

Wolf Systems Ltd

wolfsystem.co.uk

39

Wolf Systems Ltd is a mature UK-based company specializing in software and products that simplify timber engineering. Their offerings include advanced software solutions, metal webs, nailplates, expert support, training, and machinery advice, targeting timber engineering professionals and manufacturers. The company maintains a strong market position supported by certifications such as BBA approval and CE marking, and operates a network of country-specific partner domains across Europe. Technically, the website is built on ASP.NET with modern frontend libraries like Bootstrap and jQuery, hosted on Microsoft IIS. However, the site lacks HTTPS, which is a critical security gap. Security headers are partially implemented, and cookie consent mechanisms are present, indicating some privacy awareness. The WHOIS data confirms a consistent and trustworthy domain registration with no privacy protection, aligning with the company's public identity.

Plansee SE is a globally recognized manufacturer specializing in refractory metals such as molybdenum, tungsten, and tantalum, serving high-tech industries including electronics, aerospace, and energy. With a century of experience and multiple production sites worldwide, Plansee positions itself as a leader in high-performance materials and sustainable manufacturing solutions. The website reflects a mature digital presence built on Adobe Experience Manager and Next.js, leveraging Akamai CDN and Google Tag Manager for performance and analytics. However, the current lack of a valid SSL certificate and disabled TLS protocols represent critical security vulnerabilities that undermine user trust and data protection. Despite these issues, the site maintains comprehensive privacy and cookie policies aligned with GDPR, and showcases certifications like EcoVadis Gold and ASML Sustainability Excellence Award, reinforcing its market credibility. Strategic improvements in SSL/TLS deployment and enhanced security configurations are recommended to elevate the overall security posture and user confidence.

Haimer GmbH is a well-established German manufacturing company specializing in precision tool holding products and related services for the machining industry. With over 23 years of domain presence and a global workforce exceeding 800 employees, Haimer offers comprehensive solutions including tool management, calibration, and training. The website reflects a mature digital presence with extensive product catalogs, service offerings, and customer engagement channels. Technically, the site uses modern technologies such as Pimcore CMS, Google Analytics, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. However, the absence of a valid SSL/TLS certificate significantly impacts the security posture, exposing users to risks and limiting trust. Security headers are properly configured, but the lack of HTTPS is a critical issue. Overall, the business credibility and privacy compliance are strong, but immediate remediation of SSL issues is recommended to enhance security and user trust.

S

Seco Tools

secotools.com

40

Seco Tools is a leading global manufacturer and provider of metal cutting solutions and tooling systems, positioned as one of the largest tooling companies worldwide. The website reflects a mature enterprise with a broad international market presence, supporting multiple languages and regional markets. Technically, the site is hosted on Microsoft Azure using IIS and ASP.NET technologies, with integrations for analytics and marketing tools such as Google Analytics, OneTrust, and BrightEdge. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks and undermining trust. The security posture is further weakened by permissive Content Security Policy settings and incomplete HSTS implementation. Privacy compliance is partially addressed through cookie consent mechanisms, but the lack of a visible privacy policy and contact information limits transparency. Overall, the site demonstrates good business credibility and technical maturity but requires urgent improvements in security and privacy compliance to align with best practices and regulatory expectations.

J

JanLa Oy

janla.fi

37

JanLa Oy is a Finnish wholesale and service center specializing in roofing and sheet metal products, including steel roofing, solar power solutions, rainwater systems, and safety equipment. The company serves construction industry professionals, sheet metal businesses, private customers, and housing companies, positioning itself as a leading player in its sector with a focus on quality and innovation. The website reflects a medium-sized enterprise with multiple physical locations across Finland and a comprehensive product offering.

U

UAB Toode

toode.lt

40

UAB Toode is a medium-sized Lithuanian company specializing in manufacturing and retailing steel roofing materials and accessories, with a strong presence in the Baltic region supported by factories in Estonia, Latvia, and Finland. The company holds recognized certifications such as ISO 9001 and CE marking, reinforcing its market position as a reputable supplier in the construction sector. Their website provides comprehensive product catalogs, customer testimonials, and multiple contact channels, targeting construction professionals and retail customers. Technically, the website is built on WordPress with WooCommerce, leveraging common web technologies and marketing tools like Google Analytics and Tag Manager. However, the site suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which critically undermines user trust and data protection. Privacy compliance is addressed through GDPR-aligned cookie consent and a privacy policy document, but terms of service and explicit security policies are missing. Overall, the website demonstrates good business credibility and content quality but requires urgent improvements in security infrastructure and performance optimization to enhance user trust and operational resilience.

S

SIA "Laba Sēta"

labaseta.lv

39

SIA "Laba Sēta" is a Latvian small manufacturing business specializing in the production and installation of concrete products, fences, gates, and related territory landscaping services. The company offers a comprehensive range of products including concrete fence posts, gates, PVC fences, and gate automation solutions. Their market position is that of a local specialized manufacturer and installer serving residential and commercial customers. The website is built on WordPress using common plugins and themes, with moderate digital maturity evidenced by the use of Google Analytics and Tag Manager. However, the site lacks a valid SSL certificate, which severely impacts security posture and user trust. No privacy or terms of service pages were found, though a cookie consent banner is present. Contact information is clearly provided, supporting business credibility. Overall, the website is functional and professionally designed but requires significant security improvements.

S

SIA Toode

toode.lv

40

SIA Toode is a medium-sized manufacturing company based in Latvia specializing in steel roofing and wall profiles, rainwater drainage systems, and related construction materials. The company has a regional presence with partner sites in Estonia, Lithuania, and Finland, positioning itself as a key player in the Baltic and Nordic construction materials market. Their website reflects a professional business with clear product offerings and a focus on construction professionals and building owners. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. However, performance is somewhat slow, and accessibility is basic. Security posture is adequate with HTTPS and SPF/DMARC records but lacks advanced SSL features such as HSTS and OCSP stapling, and no security headers are detected. Privacy compliance is supported by a privacy policy and cookie consent mechanism, though no incident response or security policy is visible. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security headers, SSL configuration, and incident response transparency would enhance the site's security and trustworthiness.

ETTINGER GmbH is a well-established German family-owned company specializing in fastening technology and electromechanical components, serving industrial and trade customers through a comprehensive B2B online shop. The company offers a wide range of over 25,000 products, including custom manufacturing and special procurement services, with a focus on quality and fast delivery. The website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to its target audience of manufacturers and industrial clients. Technically, the site is built on the Shopware CMS platform, leveraging modern technologies like Algolia for search and Google Tag Manager for analytics. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate, exposing users to potential risks and undermining trust. Security headers are partially implemented but ineffective without HTTPS. Privacy and cookie policies are present and compliant with GDPR, including consent mechanisms. The domain registration is consistent and legitimate, with no privacy protection or suspicious patterns, supporting the company's credibility. Overall, while the business and content aspects are strong, immediate attention is required to secure the website with HTTPS to protect user data and enhance trust.

Board24 is a UK-based manufacturer specializing in corrugated sheet board and cases, providing sustainable packaging solutions tailored to business needs. The company operates multiple sites across the UK, including Coalville, Preston, and Eurocentral, and offers tools such as sheet board and case calculators to assist customers. The website is built on WordPress using Elementor and is hosted on a LiteSpeed server, featuring modern web technologies and good mobile optimization. However, the site lacks a valid SSL certificate, which is a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are present but basic, with limited evidence of full GDPR compliance. Contact information is available, including a UK phone number and newsletter subscription, and social media presence is established on LinkedIn and YouTube. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to enhance trust and compliance.

Anheuser-Busch InBev is a global leader in beer brewing and marketing, operating an extensive portfolio of over 500 brands. The company leverages strong sponsorships, including FIFA events, to maintain market leadership and brand visibility. The website reflects a mature digital presence with modern technologies such as SvelteKit and Builder.io CMS, delivering rich content and a professional user experience. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy policies and compliance measures are well implemented, supporting GDPR adherence. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain credibility.

A

AgenturQ

agenturq.de

32

AgenturQ is a non-profit organization dedicated to promoting vocational training and continuing education within the metal and electrical industries in Baden-Württemberg, Germany. The organization provides consulting, software tools, and educational concepts to support workforce development and adaptation to technological changes. Their website reflects a well-established regional institution with a clear focus on education and industry collaboration. Technically, the website is built on WordPress with common plugins for SEO and cookie compliance but suffers from slow performance and lacks a valid SSL certificate, exposing it to security risks. The security posture is weak due to missing HTTPS, security headers, and DNS security features. Privacy compliance is strong with comprehensive policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance credibility.

REO AG is a well-established German family-run company with a 100-year history specializing in the development and production of inductive, resistive, and electronic components for various industrial sectors including energy, transportation, and manufacturing. The company operates internationally with subsidiaries across Europe, North America, Asia, and the Middle East, maintaining production primarily in Germany with a focus on quality and innovation. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, indicating a good level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness that undermines user trust and data protection. The site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. Business credibility is strong with clear contact information, social media presence, and detailed product and industry information. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect user data.

REO AG is a well-established German family-owned manufacturing company specializing in inductive, resistive, and electronic components with a history dating back to 1925. The company operates internationally with subsidiaries across Europe, North America, Asia, and the Middle East, serving diverse industrial sectors including transportation, energy, medical technology, and defense. Their business model focuses on B2B supply of customized and standard components, emphasizing innovation, quality, and sustainability. Technically, the website is built on WordPress with modern plugins and SEO tools, offering a professional and content-rich user experience. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, exposing the site to risks and reducing trust. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms are missing. Overall, the company demonstrates strong business credibility but needs urgent improvements in security infrastructure to align with best practices.

C

Colorificio Sammarinese SpA

samoline.com

34

Colorificio Sammarinese SpA operates the Samoline brand, specializing in manufacturing high-performance safety paints for motorsports racetracks globally. The company holds key certifications such as FIA, FIM, and ISO 9001:2015, positioning itself as a trusted supplier in the niche market of racetrack safety and marking paints. Their product portfolio includes antislip paints, low impact paints, and specialized marking solutions for starting grids and access points, targeting racetrack operators and motorsport event organizers. The website is professionally designed with good content quality and consistent branding, supporting their market position. Technically, the website runs on a modern WordPress CMS with popular plugins like Yoast SEO and Revolution Slider, hosted on SiteGround. While the site is mobile-optimized and SEO-friendly, performance is slow and accessibility is basic. Importantly, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Security headers are minimal, and domain registration shows a high expiry risk with no domain protection locks enabled. From a security perspective, the absence of HTTPS and HSTS, combined with missing DNSSEC and CAA records, exposes the site to potential risks. However, GDPR compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, including a contact form with explicit consent. Overall, the site demonstrates moderate security maturity but requires urgent improvements in SSL configuration and domain management to reduce risk. Strategically, the company should prioritize securing their domain and implementing HTTPS to protect user data and enhance trust. Enhancing security headers and publishing incident response information would further strengthen their security posture. The website effectively supports their business goals but can benefit from performance optimization and accessibility improvements to enhance user experience and compliance.

C

Colorificio Sammarinese SpA

rivalcolorificio.com

34

Colorificio Sammarinese SpA operates the Rival brand, specializing in the production of professional paints and coatings for interior and exterior building applications. With a history dating back to 1969 and a mature domain age of 11 years, the company is well-established in the manufacturing sector, targeting professional builders and contractors. The website reflects a professional and consistent brand image, providing comprehensive product information, brochures, and contact channels. Technically, the site is built on WordPress with WooCommerce and uses modern plugins for SEO and user interaction. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing users to potential risks. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the business credibility is strong, supported by ISO 9001 certification and active social media presence.

C

Colorificio Sammarinese SpA

colsampuretech.com

34

Colsam PureTech is a specialized manufacturing company focused on innovative and sustainable waterborne paint solutions, operating under Colorificio Sammarinese SpA. The company leverages Industry 4.0 technologies to deliver high-quality, low environmental impact products primarily targeting industrial and construction sectors. Their digital presence is supported by a WordPress-based website with modern SEO and marketing tools, including video content and multilingual support. However, the website's security posture is weakened by an invalid SSL certificate and lack of advanced security headers, which poses risks to user trust and data protection. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the company demonstrates a solid market position with clear business information and certifications, but should urgently address SSL and security improvements to enhance trust and compliance.

B

BAUER Group

bauer.de

40

The BAUER Group is a globally recognized enterprise specializing in specialist foundation engineering, manufacturing, and environmental services. With a history spanning over two centuries, the company maintains a strong market position as a leader in construction and mechanical engineering sectors. Their business model integrates manufacturing of specialized equipment and provision of geotechnical and resource-related services, targeting construction professionals, investors, and job seekers worldwide. Technically, the website is built on Drupal 10 with modern web technologies and demonstrates good mobile optimization, accessibility, and SEO practices. However, the absence of a valid SSL/TLS certificate and HTTPS support significantly undermines the security posture. Security headers and policies are well implemented, but the lack of encryption exposes users to risks. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site reflects a professional and trustworthy business presence but requires urgent security improvements to protect user data and maintain trust.

D

Detas SpA

detasultra.com

50

Detasultra, a division of Detas SpA, specializes in patented cable gland systems and related industrial products serving multiple sectors including manufacturing, energy, and transportation. The company maintains a mature online presence with a well-structured website offering detailed product categories and multilingual support. The technical infrastructure leverages modern web technologies such as Webflow CMS, Google Tag Manager, and Weglot for translation, but suffers from a critical lack of a valid SSL certificate, exposing the site to security risks. Privacy and cookie policies are present, indicating basic GDPR compliance, and contact information is clearly provided. However, the imminent domain expiry and absence of domain protection locks present operational risks.