Manufacturing security reports

C

Cemix

cemix.hr

63

Cemix is a medium-sized manufacturing company specializing in construction materials such as mortars, plasters, insulation, and related products. The company operates primarily in Croatia with a strong regional presence across Central and Eastern Europe, supported by multiple country-specific websites. Their business model focuses on product manufacturing, technical support, and distribution services targeting construction professionals and contractors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern JavaScript libraries including jQuery and Moment.js, integrates a consent management platform (Usercentrics), and uses Google Tag Manager for analytics and marketing. The hosting provider is a Croatian registrar and hosting company, cyber_Folks d.o.o., which aligns with the regional focus. The site is mobile optimized and performs moderately well, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses consent-based script loading, including Google reCaptcha v3. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and should be implemented for enhanced protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a comprehensive cookie policy and GDPR-aligned consent mechanisms. Overall, Cemix presents a trustworthy and professional online presence with a solid security posture and compliance framework. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen their digital maturity and risk management.

C

Cemix

cemix.hu

63

Cemix is a medium-sized Hungarian company specializing in manufacturing and retailing premium construction materials and solutions for building and renovation. The company maintains a strong regional presence with localized websites for several Central and Eastern European countries, indicating a well-established market position. Their website offers comprehensive product information, technical knowledge bases, and customer support resources, targeting construction professionals and end consumers alike. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Moment.js, and Bootstrap, along with a consent management platform (Usercentrics) and Google Tag Manager for analytics and marketing. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent blocking scripts but lacks explicit security headers and an incident response policy. No critical vulnerabilities or suspicious elements were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

C

Cemix, s.r.o.

cemix.sk

61

Cemix, s.r.o. is a medium-sized Slovak manufacturer and supplier of construction materials, specializing in insulation, facades, mortars, plasters, and related products. The company maintains a strong regional presence with multilingual support for neighboring countries and offers a comprehensive range of products and services including technical consultation and equipment rental. The website is professionally designed with good navigation, mobile optimization, and relevant content targeting construction professionals and retailers. Technically, the site uses modern JavaScript libraries, a consent management platform, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and consent-based tracking, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels, though no direct company emails are exposed in the HTML. The domain registration data aligns well with the business claims, supporting legitimacy.

L

LASSELSBERGER Group GmbH

cemix.global

62

Cemix is a prominent European building materials brand under the Austrian LASSELSBERGER Group, specializing in facade plasters, floor solutions, adhesives, and related construction products. The website targets professionals and private builders, offering comprehensive product information and career opportunities. The digital infrastructure employs modern JavaScript libraries and a consent management platform to ensure privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and incident response details could enhance trust. Overall, the site is professional, content-rich, and well-structured, supporting a strong market presence in Central and Eastern Europe.

A

Advance AT

advanceat.lv

60

Advance AT is a Latvian small business specializing in the sale, installation, and servicing of grain drying and pre-processing equipment tailored to agricultural enterprises. Established in 2012, the company positions itself as a trusted provider of quality and economical grain processing solutions, representing notable partners in the industry. The website reflects a professional digital presence with clear business information, structured data, and compliance with privacy regulations. Technically, the site employs modern web technologies including jQuery, Skrollr, and CDN hosting, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and incident response details are absent. Overall, the site is safe, business-focused, and trustworthy with no signs of blocking or WAF interference.

REHAU is a large, family-run global enterprise specializing in polymer-based solutions across construction, automotive, and industrial sectors. The company operates through multiple subgroups and subsidiaries, offering a broad portfolio of engineering products and services. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site employs modern tracking and consent management technologies, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the domain WHOIS data is unavailable, which slightly impacts transparency but does not detract significantly from the site's legitimacy given the corporate context. Strategic recommendations include enhancing security disclosures and incident response readiness to further strengthen trust and compliance.

F

fischer

fischer-cz.cz

72

The website www.fischer-cz.cz represents a large manufacturing company specializing in fixing systems such as plastic anchors, steel and chemical anchors. The company targets DIY enthusiasts, craftsmen, and construction professionals, positioning itself as a reliable and qualified partner in the industry. The site is built on the Sitecore CMS platform and employs modern web technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance and tracking. The website demonstrates good content quality, professional design, and clear navigation, with mobile optimization and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and CSRF protection cookies, though the absence of security headers is noted as an area for improvement. WHOIS data is unavailable, which slightly impacts trustworthiness, but the website content and structure indicate a legitimate and professional business presence. Overall, the site scores well in content quality, technical implementation, security, privacy compliance, and business credibility.

Saint-Gobain Construction Products CZ a.s., operating the website www.cz.weber, is a leading manufacturer and supplier of building materials in the Czech Republic, specializing in facades, plasters, insulation, flooring, adhesives, and sealants. The website targets professionals such as architects, developers, investors, and end consumers, offering comprehensive product information, technical support, online tools, and educational resources. The company benefits from strong brand recognition as part of the Saint-Gobain group. Technically, the website is built on Drupal CMS with modern web technologies including Google Tag Manager, YouTube integration, and OneTrust for cookie consent, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published security policies are absent. WHOIS data is incomplete and malformed, limiting domain registration trust verification, but the website's professional content and official company information support legitimacy. Overall, the site is well-maintained, secure, and compliant with privacy regulations, serving as a reliable digital presence for the company.

P

PRIMALEX

primalex.cz

43

PRIMALEX is a well-established Czech brand specializing in the manufacturing and retail of high-quality paints and coatings. The company operates under the parent company PPG and offers a broad range of products including interior paints, facade paints, surface preparation materials, and specialty collections. The website targets general consumers and professionals interested in paint solutions, providing tools such as a color designer application and extensive product categories. The brand is recognized in the market, evidenced by its Superbrands 2025 accolade and active social media presence. Technically, the website employs a modern but somewhat dated technology stack including AngularJS and jQuery, supported by various third-party analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is hosted likely by Active24, consistent with the domain registration data. Performance and mobile optimization are moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, aligning with basic GDPR requirements. However, it lacks explicit privacy policies, terms of service, and security headers, which are important for comprehensive compliance and security posture. No critical vulnerabilities or suspicious content were detected, and the domain registration data supports the legitimacy and trustworthiness of the business. Overall, PRIMALEX's website is professional and trustworthy, with a solid business foundation and moderate technical maturity. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and user trust.

C

Caparol

caparol.cz

70

Caparol.cz is a professionally designed website representing a large manufacturing company specializing in paints, coatings, and building materials in the Czech Republic. The site targets a broad audience including construction professionals, architects, wholesalers, and private customers. The business model is primarily B2B and B2C with a strong market presence in the coatings industry. Technically, the website is built on TYPO3 CMS and integrates modern technologies such as Piwik PRO analytics and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and comprehensive cookie consent mechanisms, though some improvements are recommended such as adding security headers and publishing security policies. The absence of WHOIS data limits full trust assessment but the website content and technology usage indicate a legitimate and professional business. Overall, the site demonstrates good compliance with GDPR and privacy standards, with extensive use of analytics and advertising networks managed transparently through consent.

M

MULTICRAFT GROUP s.r.o.

multicraftgroup.cz

54

MULTICRAFT GROUP s.r.o. is a large industrial group based in the Czech Republic, comprising over 20 subsidiaries specializing in manufacturing, engineering, energy, logistics, automotive, and public sector services. The group offers comprehensive turnkey solutions, including technology deliveries, installation, maintenance, and engineering services, targeting industrial clients across multiple countries. The website presents detailed profiles of its subsidiaries, certifications, and references, indicating a well-established market presence. Technically, the website uses a mix of legacy and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but could be improved by updating outdated libraries and implementing stronger security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

Sacit is a well-established brand specializing in welding safety equipment and tools, operating under the Trafimet Group Spa. The company offers a comprehensive range of products designed for professional welders, emphasizing quality, safety, and Italian design. The website reflects a mature digital presence with clear business information, certifications, and compliance with privacy regulations. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, consent mechanisms, and CAPTCHA protections, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly that requires external verification to confirm domain legitimacy. Overall, the site presents a trustworthy and professional front for its business operations.

GM Approved Special Tools and Equipment operates an e-commerce platform specializing in the sale of GM approved special service tools and equipment targeted primarily at automotive dealers and service professionals. The website offers an online catalog, dealer services requiring login, promotions for authorized dealers, and additional resources such as software downloads and virtual tool crib access. The business appears to be newly established in 2024, focusing on a niche market within automotive manufacturing and retail sectors. The platform is designed to serve authorized dealers and professionals with specialized equipment needs.

K

KovoKrab

kovovyroba-kovokrab.cz

54

KovoKrab is a small Czech metal manufacturing company specializing in custom metal fabrication and locksmith services since 1993. Their offerings include bending, powder coating, blasting, welding, micro impact marking, and sheet metal bending, targeting industrial sectors such as electrotechnical, furniture, and agriculture. The website is professionally designed with clear navigation and relevant content, supporting their business model effectively. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for analytics and spam protection. However, the absence of privacy and cookie policies indicates GDPR compliance gaps. Security posture is moderate with some best practices observed but lacks explicit HTTP security headers and vulnerability disclosure mechanisms. WHOIS data is missing, which reduces domain trustworthiness despite the legitimate business presentation. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures.

V

Vicentia

vicentia.net

58

Vicentia is a small Italian manufacturing company specializing in professional and home-use pasta machines. The website presents a professional image with clear descriptions of their product offerings targeting both domestic and professional users. The technical infrastructure is based on WordPress with the Divi theme, enhanced by SEO tools and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and standard security headers present, although there is room for improvement in incident response transparency and vulnerability disclosure. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to improve trust. Overall, the website is functional, secure, and compliant with privacy regulations but lacks some business credibility signals such as explicit contact details and terms of service.

S

Spanvall

spanvall.fr

45

Spanvall is a medium-sized, family-owned business specializing in the manufacturing and global distribution of high-quality animal bedding products tailored for various livestock including poultry, cattle, horses, and pigs. With over five decades of industry experience, the company maintains a strong market position supported by patented products and a commitment to sustainability and animal welfare. The website is professionally designed, multilingual, and provides clear contact and product information, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and user experience. Security measures include HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and explicit incident response policies. Overall, Spanvall demonstrates a credible and trustworthy online presence aligned with its business operations.

S

Spanvall

spanvall.pl

48

Spanvall is a Denmark-based company specializing in the production and import of animal bedding products for various livestock, with a strong focus on poultry bedding. The company serves customers domestically and internationally, emphasizing flexible delivery options and quality assurance. The website is professionally designed, multilingual, and provides clear contact information, supporting its market presence and credibility. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent, though explicit security headers are not detected. The absence of WHOIS data slightly impacts trust but does not overshadow the overall legitimacy indicated by the website content and contact details.

S

Spanvall

spanvall.com

53

Spanvall is a Danish family-owned company specializing in manufacturing and supplying high-quality animal bedding products globally. With over 53 years of experience, they offer patented broiler bedding and cater to a wide range of livestock including poultry, pigs, cattle, and horses. Their business model focuses on product quality, sustainability, and flexible logistics solutions worldwide. The website reflects a mature digital presence built on WordPress with modern tracking and marketing tools integrated. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response information are absent. WHOIS data is unavailable, which slightly impacts transparency but the overall business credibility remains high due to professional content and clear contact information.

G

Gregor Ziegler GmbH

ziegler-erden.de

50

Gregor Ziegler GmbH is a well-established family-owned manufacturing company based in Germany, specializing in the production of high-quality potting soils, substrates, fertilizers, and sustainable fuels such as wood pellets and briquettes. With over 30 years of experience, the company serves both professional horticulturalists and amateur gardeners, positioning itself as a trusted provider in the horticulture and sustainable energy sectors. The website reflects a mature digital presence with multilingual support and detailed product and service information. Technically, the site is built on WordPress with modern SEO and privacy plugins, ensuring good performance and compliance with GDPR regulations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing formal security policies and incident response details. Overall, the company demonstrates high business credibility supported by ISO certifications and transparent contact information.

I

Imperia Pasta

imperia.com

70

Imperia Pasta is a well-established Italian manufacturer specializing in pasta machines and pasta products, with a history dating back to 1932. The company targets both consumers and businesses seeking quality pasta-making equipment and authentic Italian pasta. Their website reflects a medium-sized manufacturing business with a professional online presence, including e-commerce capabilities and multilingual support. Technically, the site is built on WordPress with WooCommerce and uses modern plugins for SEO and user engagement. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and performance could be made. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and published security policies or incident response contacts. Privacy compliance is basic, with a cookie consent banner but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Frontier Filtration International Limited is a small Irish company specializing in industrial filtration solutions including dust filtration, filter maintenance, emission monitoring, and filter design and supply. The company targets industrial clients requiring specialized filtration services, positioning itself as a one-stop filtration service provider with a focus on Irish and international markets. The website is built on an older WordPress platform with several plugins and uses jQuery 1.9.1, indicating a need for modernization. The site is accessible with clear navigation and professional design but lacks advanced mobile optimization and accessibility features. Security posture is moderate with no HTTPS issues detected but outdated software versions and missing security headers present risks. Privacy compliance is basic with a privacy policy and terms & conditions present but no cookie consent mechanism despite use of Google Analytics and Tag Manager. The absence of WHOIS registration data is a significant concern, reducing trustworthiness and suggesting further verification is needed. Overall, the website is functional and professional but requires updates to improve security, privacy compliance, and technical infrastructure.

C

Consumo SIA

turniketi.lv

41

Consumo SIA is a Latvian company specializing in gate automation and turnstile security solutions, established in 2012. The company offers a range of products including three-arm turnstiles, full-height turnstiles, and gate-type turnstiles aimed at security and flow control. Their market position is that of a local specialist with over a decade of experience, representing top European manufacturers to provide quality products tailored to client needs. The website targets businesses and organizations requiring security barriers and automated gates, operating primarily in the manufacturing and retail sectors. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and mapping libraries like Leaflet.js and Mapbox GL. It integrates Smartsupp Live Chat for customer engagement. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, no CMS or hosting provider details are evident, and some security best practices like security headers are missing. From a security perspective, the site uses HTTPS and has secure forms with required fields, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, though the website content and business information appear consistent and professional. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy business front with room for improvement in security policies, privacy compliance, and technical enhancements. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving accessibility and SEO.

N

Noliktavai.lv

noliktavai.lv

46

Noliktavai.lv is a Latvian company specializing in the sale and installation of metal shelving and warehouse storage solutions. With over ten years of experience, they cater to logistics companies, warehouses, workshops, retail stores, and private households. Their product range includes small item racks, pallet racks, mezzanine shelving, and store shelving, emphasizing quality galvanized metal constructions suitable for manual and forklift handling. The company also offers assembly and disassembly services to ease customer operations. Technically, the website is built using modern web technologies including React and Next.js, with integration of Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers are missing, and explicit privacy policy documentation is not clearly found in the provided content. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. The absence of visible security headers and limited WHOIS data restricts a full security assessment. Cookie consent mechanisms are implemented, indicating some level of privacy compliance. Overall, the website appears legitimate and professional but could improve transparency and security hardening. The overall risk is moderate with recommendations to enhance security headers, provide clear privacy policy documentation, and ensure WHOIS data availability for trust verification. These steps will strengthen the company's digital trustworthiness and compliance posture.

K

KovoKrab

kovokrab.cz

55

KovoKrab is a Czech manufacturer specializing in the production and sale of high-quality garden furniture including benches, swings, chairs, and tables. With over 20 years of tradition, the company targets customers seeking durable and aesthetically pleasing outdoor furniture primarily in the Czech market. Their business model combines manufacturing with direct e-commerce sales through a well-structured online shop. The website reflects a consistent brand image and provides comprehensive product information and customer references, enhancing trust and market positioning. Technically, the website employs a modern technology stack including jQuery, Bootstrap, OwlCarousel, and various UI libraries, supported by Google Analytics and Seznam retargeting for marketing insights. Hosting is provided by Hukot.cz, and the site is secured with HTTPS and uses Google reCAPTCHA to protect forms. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy compliance, but lacks explicit HTTP security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registration data is a notable gap, limiting full trust assessment of domain legitimacy. Overall, KovoKrab presents a professional and trustworthy online presence with solid privacy and marketing compliance. Strategic improvements in security headers and domain registration transparency would enhance their security posture and business credibility.

V

VNT electronics s.r.o.

vnte.cz

48

VNT electronics s.r.o. is a Czech electronics manufacturer based in Lanškroun, specializing in the development and production of electronic dog collars and electric fence generators. The company positions itself as a unique player in the Czech Republic with over 21 years of stable operation and a workforce of approximately 156 employees. Their products are distributed in about 60 countries worldwide, indicating a solid international presence. The website is professionally designed, mobile-optimized, and provides clear information about the company, job opportunities, and benefits for employees. Technically, the site uses modern web technologies including Google Fonts, Fancybox, and Google Tag Manager for analytics and consent management. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the website content and contact details appear legitimate and consistent with the business claims. Overall, the site demonstrates a good balance of business professionalism and technical implementation with room for improvement in privacy and security disclosures.

OEZ s.r.o. is a well-established Czech manufacturing company specializing in low voltage electrical protection devices with over 80 years of tradition. The company is a part of the Siemens group since 2007, positioning it as a modern and reputable player in the electrical manufacturing sector. Their website showcases a comprehensive product portfolio, technical and software support services, and training offerings, targeting electrical engineers, industrial clients, and distributors. The digital infrastructure employs common web technologies including jQuery, Google reCAPTCHA, and analytics tools like Hotjar and Facebook Pixel, indicating a mature digital presence. Security measures include HTTPS and bot protection, though some improvements in security headers and library updates are recommended. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the overall legitimacy given the strong branding and Siemens affiliation. Overall, OEZ presents a professional, secure, and user-friendly web presence aligned with its business stature.

G

Gregor Tools & Moulds

nastrojarna-gregor.cz

46

Gregor Tools & Moulds is a Czech family-owned manufacturing company specializing in engineering production, including the manufacture of moulds, jigs, fixtures, stamping, and bending tools. With over 30 years of experience and a stable customer base, the company positions itself as a reliable provider in the manufacturing sector. The website reflects a professional and consistent brand image, targeting industrial clients and businesses requiring precision tooling services. The business model is primarily B2B, focusing on quality and engineering expertise. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Analytics and cookie consent mechanisms shows awareness of digital marketing and privacy compliance, though explicit privacy and terms policies are missing. Security posture is adequate with HTTPS and some best practices but lacks explicit security policies or incident response information. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

A

ACARA PRAHA, s.r.o.

acara.cz

58

ACARA PRAHA, s.r.o. is a Czech manufacturer and retailer specializing in construction and flooring profiles, skirting boards, expansion joints, vinyl and floating floors, tiles, adhesives, and related construction chemicals. The company serves both B2C and B2B customers, offering a comprehensive e-commerce platform alongside a dedicated B2B portal. Their market position is that of an established local manufacturer with a strong online presence and certifications such as ISO 9001 and Czech product certification. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product offerings. Technically, the website uses a modern e-commerce platform (BSSHOP), integrates multiple marketing and tracking tools including Google Tag Manager, Cookiebot for consent management, Smartsupp live chat, and retargeting services. The site is HTTPS secured with good privacy compliance, including GDPR-aligned policies and cookie consent mechanisms. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided. The security posture is solid with encrypted communications and secure forms, but could be improved by adding security headers and incident response details. The lack of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a mature digital infrastructure suitable for its business model. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to maintain GDPR compliance and transparency to strengthen trust and security culture.

P

Protect Parts

protectparts.cz

44

Protect Parts is a Czech-based company specializing in the procurement and sale of armored steel plates and related products sourced from leading global manufacturers. Their offerings include armored plates, other steel plates, cut parts produced by various cutting technologies, and mechanically processed components. The company targets industrial and manufacturing clients primarily in Central and Eastern Europe, with ambitions to expand further. The website is professionally designed using WordPress and Elementor, supporting Czech and English languages, and includes GDPR-compliant cookie and privacy policies. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, limiting domain trust assessment, but the website content and business information appear legitimate and consistent with a manufacturing business.

U

UnionStal Sp. z o.o.

unionstal.pl

50

UnionStal Sp. z o.o. is a Polish industrial company specializing in the supply and sale of wear-resistant steel plates and related products, including CREUSABRO steel. Established in 2003, the company serves industrial sectors such as mining, heavy industry, recycling, and cement production. Their business model focuses on B2B sales, supported by a network of European partners and direct sourcing from manufacturers. The website reflects a professional presence with good content quality and consistent branding, targeting industrial clients primarily in Poland and Europe. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google services for analytics and security, with moderate performance and good mobile optimization. Security posture is adequate with use of reCAPTCHA and cookie consent mechanisms, but lacks visible HTTP security headers and a dedicated privacy policy page, which are areas for improvement. The domain registration data is consistent with the company's history, supporting legitimacy. Overall, the site is functional, trustworthy, and compliant with basic GDPR cookie requirements, though privacy policy and security enhancements are recommended.

U

UnionOtel s.r.l.

unionotel.ro

44

UnionOtel s.r.l. is a Romanian subsidiary of the Czech company UnionOcel s.r.o., specializing in the supply and processing of metallurgical materials such as alloyed and non-alloyed steel sheets for industrial and construction sectors. Established in 2008 with a domain dating back to 2006, the company operates service centers in Romania and Czechia, offering cutting and processing services including autogen, plasma, and laser cutting. The website reflects a professional B2B supplier with consistent branding and a clear market focus on industrial clients in Romania. Technically, the site uses a modern JavaScript stack with jQuery, Bootstrap, and Google reCAPTCHA for form security, hosted likely by websupport.sk. Security posture is moderate with room for improvement in DNSSEC and security headers. Privacy compliance is basic with cookie consent implemented but no explicit privacy policy page. Overall, the site is trustworthy and well-positioned in its niche.

T

Technistone

technistone.com

50

Technistone is a premium manufacturer of engineered quartz stone surfaces primarily targeting kitchen worktops, bathroom cladding, and tiles. The company positions itself as a high-quality European producer with an international distribution network. The website is professionally designed, mobile-optimized, and rich in content including product catalogs, resources for professionals, and a blog. Technically, the site uses modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but the domain registration inconsistency warrants further verification.

E

EKOL s.r.o.

ekol.cz

55

EKOL s.r.o. is a Czech manufacturing company specializing in the design, production, and supply of equipment for surface treatment processes including powder coating, galvanizing, and water treatment. Established since 1992, the company serves a broad international market including Europe, Asia, Africa, and North America. Their offerings include comprehensive project delivery from technology specification to installation, training, and after-sales service. The website reflects a professional industrial business with clear contact information and multilingual support. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, integrated with Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Security posture is moderate with HTTPS enforced and CSRF protections in forms, but additional security headers and incident response information are absent. Privacy compliance is well addressed with a detailed privacy policy and cookie consent. Overall, the website is trustworthy and professional but would benefit from improved domain transparency and enhanced security practices. The risk assessment indicates no critical vulnerabilities or blocking mechanisms, but the lack of WHOIS data and security policy pages suggests areas for improvement in trust and compliance documentation.

T

TriMas

trimas.com

63

TriMas is a well-established diversified manufacturer specializing in engineered products for industrial, commercial, and consumer markets. The company operates multiple business units including packaging, aerospace, and specialty products, serving a global customer base with approximately 3,900 employees. Publicly traded on NASDAQ, TriMas maintains a strong market position with recognized brands and a clear business model focused on innovation and quality. Technically, the website is built on Joomla CMS with modern JavaScript libraries and includes responsive design elements, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website reflects a credible and professional corporate presence with room for security enhancements.

T

TriMas

trimascorp.com

56

TriMas is a well-established diversified manufacturer specializing in engineered products for industrial, commercial, and consumer markets. The company operates through multiple business groups including Packaging, Aerospace, and Specialty Products, serving a global customer base with approximately 3,900 employees across 13 countries. Publicly traded on NASDAQ under the ticker TRS, TriMas maintains a strong market position with recognized brand names and a clear business model focused on innovation and quality. The website reflects a professional corporate presence with clear investor relations and sustainability information. Technically, the website is built on Joomla CMS with modern front-end technologies such as jQuery and Bootstrap, complemented by Smart Slider 3 for dynamic content presentation. Cookiebot is implemented for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are not explicitly detected. The domain registration is consistent with the company's history and business claims, with a long registration period and clientTransferProhibited status enhancing domain security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but there is room for improvement by enabling DNSSEC and publishing explicit security policies or incident response contacts. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is well addressed with clear policies and consent banners. Overall, TriMas presents a credible, professional, and secure online presence suitable for its corporate and investor audience. Strategic recommendations include enhancing DNS security, adding security headers, and publishing formal security and incident response policies to further strengthen trust and compliance.

T

TriMas Packaging

trimaspackaging.com

66

TriMas Packaging is a medium-sized manufacturing company specializing in innovative packaging systems including dispensers, closures, and flexible packaging solutions. The company emphasizes sustainability and e-commerce packaging needs, positioning itself as a reliable B2B provider in the packaging industry. The website is professionally designed with consistent branding and good content quality, targeting businesses requiring packaging solutions. Technically, the site is built on WordPress with common plugins such as WPBakery and RevSlider, and employs Cookiebot for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enabled and cookie consent implemented, though additional security headers and policies could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its market segment.

R

Rapak

rapak.com

68

Rapak is a medium-sized manufacturing company specializing in flexible packaging and filling solutions for liquids, including Bag-in-Box systems. As a subsidiary of TriMas, Rapak leverages continuous innovation to serve diverse industries such as dairy, beverage, and wine. The website reflects a professional and consistent brand presence with clear business focus and target audience in B2B sectors. Technically, the site uses Joomla CMS with modern JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong with a clear cookie consent mechanism and comprehensive privacy policy linked to the parent company. No incident response or vulnerability disclosure information is published, representing an area for improvement. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. The site is safe for general audiences with no adult or questionable content.

P

PATON INTERNATIONAL

paton.ua

62

PATON INTERNATIONAL operates a professional e-commerce website specializing in manufacturing and selling welding equipment and accessories primarily targeting the Ukrainian market. The website presents a comprehensive product catalog with detailed product images, pricing, and customer reviews, indicating a mature digital presence. The company positions itself as a leading Ukrainian manufacturer in the welding industry, offering reliable products and customer service. Technically, the website uses a modern tech stack including OpenCart CMS, jQuery, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

T

Telwin

telwin.it

65

Telwin is a well-established manufacturer specializing in welding machines, cutting systems, battery chargers, and starters, with a history spanning over 60 years. The website targets industrial professionals and customers seeking high-quality welding and battery equipment. The digital infrastructure employs modern technologies such as Google Tag Manager, Iubenda for privacy compliance, and various JavaScript libraries to enhance user experience and functionality. The site is well-optimized for mobile and SEO, providing a professional and trustworthy user interface. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers were found, with contact primarily via web forms. Overall, the site presents a professional front but would benefit from improved transparency in domain registration and enhanced security headers.

G

GYS

gys.fr

50

GYS is a well-established French family-owned manufacturing group specializing in arc welding, battery chargers, and body repair equipment. The company has a strong market position supported by numerous OEM homologations and certifications from major automotive manufacturers such as BMW, Toyota, Renault, and Volkswagen. Their business model includes manufacturing and direct sales supported by an extranet platform for clients and distributors, indicating a mature and professional operation. The website targets industrial and automotive professionals with a focus on quality and reliability. Technically, the website uses a modern tech stack including Algolia for search, Google Fonts, and Google Analytics for tracking. The CMS identified is SPIP, a French open-source CMS. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. The design is professional and consistent with the brand identity. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and explicit incident response or vulnerability disclosure information. No sensitive data is exposed, and forms appear secure, but cookie consent mechanisms are missing despite GDPR policy presence. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk is low with no signs of malicious activity or suspicious domains. Strategic recommendations include implementing security headers, adding cookie consent banners, publishing security policies, and establishing a vulnerability disclosure program to enhance trust and compliance.

T

Trafimet Group Spa a socio unico

trafimet.com

54

Trafimet Group Spa is a medium-sized Italian manufacturing company specializing in professional welding and plasma cutting torches, including MIG, TIG, and plasma cutting equipment. The company is part of the Kemppi Oy Group, indicating a strong parent company relationship and international market presence. Their website is well-structured, multilingual, and targets professional welders and industrial customers, offering a comprehensive product catalog and downloadable resources. The business model focuses on manufacturing and distributing high-quality welding equipment and accessories. Technically, the website is built on Joomla CMS with modern frameworks like UIkit and uses common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are implemented with a consent mechanism, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No WHOIS data was found for the domain, which raises some concerns about domain registration transparency, but the website content and business information appear legitimate and professional. No critical vulnerabilities or exposed sensitive data were detected. Overall, Trafimet's website demonstrates a solid digital presence with good content quality and privacy compliance. However, improvements in security headers, incident response documentation, and WHOIS transparency are recommended to enhance trust and security posture.

O

O.M.G. di Ghiotto Cav. Giuseppe & C. s.n.c.

omgonline.it

51

O.M.G. di Ghiotto Cav. Giuseppe & C. s.n.c. is a well-established Italian manufacturing company specializing in airbrushes, pistols, and compressed air accessories since 1978. The company positions itself as a leader in quality products within its niche market, targeting industrial and professional users. The website reflects a mature digital presence with multilingual support and a professional design that aligns with the company's market position. Technically, the site is built on WordPress using modern plugins and themes, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and anti-spam protections, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy and professional, with clear contact information and social media presence, but lacks explicit privacy and security policy documentation.

SIA Dovgil operates as the official representative of DRUTEX in Germany, specializing in the distribution and sales of high-quality windows, doors, terrace systems, facades, roller shutters, venetian blinds, building automation, and related accessories. The company targets both German and Latvian markets, focusing on customers seeking durable and modern building products. Their business model is primarily B2B and B2C, leveraging their official partnership with DRUTEX to maintain a competitive market position. The website reflects a professional and consistent brand image with clear product categorization and contact information.

D

DTF Factory

dtffactory.pro

49

DTF Factory is a newly established small business specializing in UV DTF printing technology, offering durable and vibrant stickers and transfers for various surfaces. The company targets businesses, artists, and creative projects, positioning itself as a quality-focused manufacturer in Latvia. The website is built on WordPress with Elementor and includes modern SEO and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA protection, but lacks advanced headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve security and compliance transparency.

WMT Baltic Ltd., operating under the uzlex.eu domain, is a small manufacturing and engineering company based in Latvia with over 20 years of experience. The company specializes in producing materials and technologies for visual communication, automotive, printing, design, and construction sectors. Their business model includes diversified product lines such as double sided tapes, 3D maps, vacuum forming machinery, doming equipment, and related tools, supported by multiple specialized subdomains and an online shop presence. The website content is well-structured and relevant, targeting business customers in manufacturing and design industries. Technically, the website uses a basic but modern tech stack including HTML5, CSS3, Bootstrap, and jQuery. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO is basic with meta tags present but no structured data or Open Graph tags detected. Hosting details are limited but the domain registrar is a reputable provider. Google Tag Manager is implemented for analytics and tracking, indicating moderate user tracking. From a security perspective, the site lacks visible security headers and published security policies. HTTPS status is unknown from the provided data, which is a critical gap. No privacy or cookie policies are present, reducing compliance with GDPR and other privacy regulations. No forms or data collection mechanisms were found on the main page, limiting attack surface but also indicating limited user interaction. The WHOIS data is consistent with the business claims and registrar information is transparent and reputable. Overall, the website presents a legitimate and professional business presence with moderate technical maturity. Key risks include lack of visible security best practices and privacy compliance documentation. Strategic improvements in HTTPS enforcement, security headers, and privacy policies would enhance trust and compliance.

E

ERLANDA STONE SIA

technistone.com.lv

30

Erlanda Stone SIA operates the website technistone.com.lv, presenting itself as a manufacturer and supplier of high-quality quartz surfaces for kitchens, bathrooms, and other interior and exterior applications. The company positions itself as an experienced European quartz surface producer with over 20 years in the industry, targeting both private households and commercial buildings. The website content is professionally presented, focusing on product offerings and applications without extraneous or unrelated content. Technically, the site uses SilverStripe CMS with common web technologies such as jQuery and Google Analytics for tracking. While the site is accessible and functional, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its compliance and security posture. No forms or data collection mechanisms are evident on the homepage, reducing immediate privacy concerns but also limiting user engagement options. The WHOIS data is privacy protected, which is common for small to medium businesses but reduces transparency. Overall, the site is moderately mature digitally but could improve in security and compliance areas.

F

Feropol s.r.o.

feropol.cz

48

Feropol s.r.o. is a Czech-based company specializing in the supply of copper, aluminum, bronze, and brass materials, complemented by custom manufacturing services such as CNC machining and material cutting. The company targets industrial and manufacturing clients requiring high-quality metal products and precision machining. Their website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on WordPress with Elementor and integrates modern tools like Google Tag Manager and CookieYes for compliance and analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content and compliance indicators.

F

FAVEX, s.r.o.

favex.cz

64

FAVEX, s.r.o. is a well-established Czech company specializing in the supply of steel and metallurgical materials supported by a fully digitalized warehouse and just-in-time logistics services. The company targets industrial manufacturers and logistics clients primarily in the Czech Republic and neighboring countries, offering over 1500 stock items and tailored business solutions. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is compliant with GDPR and provides clear contact information, enhancing business credibility.

F

Flexton ITP s.r.o.

flexton.cz

58

Flexton ITP s.r.o. is a Czech Republic-based company specializing in intelligent technical parts and custom manufacturing services since 2014. The company positions itself as a professional and experienced provider in the manufacturing sector, emphasizing quality, certifications, and customer-focused service. Their website reflects a modern digital presence built on WordPress with Elementor, optimized for desktop and mobile users, and includes clear contact information and business descriptions. However, the absence of WHOIS data limits external verification of domain legitimacy. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Overall, the website is professional and functional but could improve transparency and security compliance.