Manufacturing security reports

S

Soprema AG

soprema.ch

55

Soprema AG is a well-established Swiss company specializing in sustainable building solutions, particularly waterproofing and insulation products for flat roofs and civil engineering. The company benefits from a strong market position supported by its parent French family-owned group, with a history dating back to 1908. The website reflects a mature digital presence with a comprehensive product catalog, customer support services, and active social media engagement. Technically, the site uses modern web technologies and enforces HTTPS with appropriate security headers, ensuring a secure browsing experience. Privacy compliance is well addressed with a forced-choice cookie consent mechanism and a detailed privacy policy. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with industry standards.

H

Hidroizolatii Soprema

soprema.ro

49

Soprema România is a medium-sized manufacturing business specializing in advanced waterproofing, thermal insulation, and durable roofing solutions tailored for the construction industry in Romania. Established in 2004, the company positions itself as a provider of superior protection for sustainable and efficient building projects. The website reflects a professional digital presence built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. The site includes a comprehensive cookie consent mechanism, demonstrating awareness of privacy regulations, although explicit privacy and terms of service policies are not found in the provided content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Overall, the domain registration data supports the legitimacy and consistency of the business identity.

S

Soprema Sweden

soprema.se

69

Soprema Sweden operates a professional e-commerce website focused on providing sustainable waterproofing and insulation solutions primarily for the Swedish market. The company positions itself as an established manufacturer with a focus on quality and environmental considerations. The website is built on a Magento platform, leveraging modern JavaScript frameworks and third-party services such as Algolia for search and Google Tag Manager for analytics. The technical infrastructure reflects a mature digital presence with asynchronous loading and performance optimizations. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit privacy policies, security headers, and WHOIS transparency slightly reduce trust. Overall, the website is professional and trustworthy, serving a B2B audience in the construction and manufacturing sector.

S

SOPREMA Polska Sp. z o.o.

soprema.pl

49

SOPREMA Polska Sp. z o.o. is a well-established manufacturer and distributor of advanced thermal and waterproofing insulation materials, operating since 1996 as part of the global SOPREMA Group. The company serves the construction sector in Poland with a broad product portfolio including bituminous membranes, synthetic membranes, green roof systems, and construction chemicals. Their market position is strong, supported by a modern production facility near Warsaw and presence in over 90 countries globally. Technically, the website is built on Joomla CMS with modern frontend libraries and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and provides comprehensive content and navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. WHOIS data is unavailable, which slightly impacts trust but is mitigated by clear business information and contact details on the site. Overall, the website reflects a professional and credible business with good digital maturity.

S

SOPREMA GmbH

soprema.de

72

SOPREMA GmbH is a leading German manufacturer specializing in sealing systems, insulation materials, and sustainable building solutions such as photovoltaic and green roof systems. The company targets construction professionals, architects, and planners, offering a broad portfolio of products and technical services. Their market position is strong within the manufacturing sector, emphasizing innovation and sustainability. The website is built on TYPO3 CMS and incorporates modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. Hosting is managed via Gandi.net, a reputable provider. Security posture is solid with HTTPS enforced, cookie consent mechanisms in place, and use of analytics tools respecting user privacy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and well-optimized for its audience.

S

Soprema

soprema.com.br

48

Soprema is a leading global waterproofing group with a strong presence in Brazil, specializing in manufacturing and distributing waterproofing and construction chemical products. Their website targets construction professionals, applicators, technical experts, and consumers seeking waterproofing solutions. The company emphasizes quality certifications and offers extensive product lines and technical content to support their customers. Technically, the website uses a modern JavaScript stack including jQuery and Google Analytics, hosted on Gandi.net infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and secure forms, though some security headers and incident response disclosures are missing. Overall, the website is professional, trustworthy, and compliant with basic privacy and cookie policies. No blocking or WAF mechanisms hinder access.

S

SOPREMA Belux

soprema.be

74

SOPREMA Belux is a well-established business specializing in manufacturing and supplying innovative and sustainable building materials, focusing on waterproofing, insulation, green roofs, and solar solutions for construction professionals. The website reflects a mature digital presence built on Magento 2, integrating modern technologies such as Algolia search and Google Tag Manager for enhanced user experience and analytics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. The domain WHOIS data is restricted, which is common for privacy but limits transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a B2B audience in Belgium and surrounding regions.

S

SOPREMA

soprema.us

76

SOPREMA is a well-established international manufacturer specializing in waterproofing, insulation, soundproofing, and vegetated roofing solutions. The company targets construction professionals, contractors, architects, and engineers, offering a broad portfolio of products and services. The website reflects a mature digital presence with a professional design, comprehensive content, and clear navigation, supporting its market position as a leading manufacturer in its sector. Technically, the site is built on Magento CMS, leveraging modern technologies such as RequireJS, Algolia Search, and Google Tag Manager, indicating a commitment to performance and user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and monitoring tools like New Relic, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness, with room for improvement in publishing security policies and enhancing accessibility. The absence of WHOIS data suggests privacy protection, which is justified for a company of this size and industry. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure policies, and improving accessibility features to further strengthen trust and compliance.

S

Soprema

soprema.ca

75

Soprema is an established international manufacturer specializing in roofing and building envelope solutions, including waterproofing, insulation, soundproofing, and vegetated roofing products. The company targets construction professionals and building owners, positioning itself as a trusted expert in the industry with a broad product portfolio. The website reflects a mature digital presence with a Magento-based eCommerce platform, integrated advanced search capabilities via Algolia, and comprehensive privacy compliance mechanisms including GDPR-aligned cookie consent. The technical infrastructure is modern and well-implemented, leveraging multiple analytics and monitoring tools such as New Relic and Maze Analytics to ensure performance and user experience. Security posture is solid with HTTPS enforced and captcha protections on login forms, though there is room for improvement in implementing additional security headers and explicit security policies. Overall, the domain appears legitimate and privacy protected, consistent with corporate best practices for a large manufacturer. The website is professional, trustworthy, and compliant with relevant privacy regulations.

S

Soprema France

soprema.fr

74

Soprema France operates as a leading provider of sustainable and innovative building solutions, specializing in waterproofing, insulation, and construction materials. The company targets construction professionals and architects, positioning itself as a key player in the European building materials market. The website reflects a mature digital presence with a Magento-based e-commerce platform, integrated advanced search capabilities via Algolia, and comprehensive analytics through Google Tag Manager and Maze. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain trust verification but does not detract from the professional appearance and operational maturity of the site.

S

Soprema Srl

soprema.it

55

Soprema Italia is a well-established company specializing in waterproofing and insulation solutions for the construction industry. The website reflects a mature digital presence with comprehensive product offerings, technical documentation, and training resources aimed at professionals such as architects and engineers. The company positions itself as a leader in sustainable building materials with a strong emphasis on innovation and environmental responsibility. Technically, the website uses modern web technologies and integrates marketing automation tools like Pardot and Google Tag Manager, hosted on AWS infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SOPREMA

soprema.com.au

59

SOPREMA is an international manufacturer specializing in innovative waterproofing, insulation, soundproofing, and vegetative solutions for the roofing, building envelope, and civil engineering sectors. The company targets construction professionals and operates primarily in the manufacturing and construction industries with a large-scale business presence in Australia and internationally. The website reflects a professional B2B business model with a focus on product documentation, warranties, and project showcases, supporting its market position as a trusted supplier. Technically, the website is built on WordPress with Elementor and uses modern JavaScript frameworks such as Vue.js and Axios for enhanced user experience. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Crazy Egg, and HubSpot, indicating a mature digital marketing infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data shows a legitimate domain registration without privacy protection, consistent with a professional business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

T

TECHNICOAT Bakeware s.r.o.

technicoat-bakeware.com

51

TECHNICOAT Bakeware s.r.o. is a Czech Republic based small manufacturing company specializing in high-quality coated and uncoated bakeware products and related coating services for industrial bakeries. The company emphasizes improving baking efficiency, hygiene, and safety through its non-stick coating technology. The website reflects a professional and consistent brand presence with clear product and service offerings, targeting industrial baking businesses. Technically, the website uses modern JavaScript libraries and Google services with GDPR-compliant cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and consent mode implemented, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. The site is free from adult or questionable content and provides clear contact information and business credentials. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from improved transparency on domain registration and enhanced security disclosures.

A

Adelhelm Unternehmensgruppe

adelhelm.de

50

Adelhelm Unternehmensgruppe is a medium-sized German company specializing in functional surface coatings for a wide range of industries worldwide. The company operates multiple subsidiaries and offers a broad portfolio of coating technologies including non-stick, chemical protection, and custom tailored solutions. Their market position is that of an established global supplier with a strong industrial B2B focus. The website is built on the Contao CMS platform and uses modern web technologies such as jQuery and Matomo analytics, hosted on Schlundtech infrastructure. Security posture is solid with HTTPS enforced and anti-spam measures in place, though visible cookie consent and explicit security policies are lacking. Overall, the site is professional, well-structured, and trustworthy, supporting the company’s business credibility effectively.

D

DEK a.s.

skupina-dek.cz

64

DEK a.s. is a large Czech enterprise operating as a group of companies specializing in the supply of building materials, construction services, manufacturing of construction products, and software solutions for the construction industry. The company holds a strong market position, ranked 6th in the Czech TOP 100 most admired companies in 2023, serving primarily the Czech and Slovak markets. Their business model integrates retail, manufacturing, and technology services tailored to construction professionals and customers. The website reflects a professional and consistent brand image with clear navigation and relevant content.

D

Dřevo UM s.r.o.

drevoum.cz

39

Dřevo UM s.r.o. is a traditional Czech manufacturer specializing in wooden doors, euro-windows, staircases, and solid wood furniture. With over 25 years of experience, the company operates two workshops in České Budějovice and Heřmaň, serving both local and national markets. Their product range includes entrance and interior doors, wooden gates, windows, staircases, and custom furniture, complemented by services such as tool sharpening, wood drying, and impregnation. The company targets carpenters, construction firms, and end customers seeking quality wooden products. Technically, the website employs common JavaScript libraries like jQuery and Google Analytics for tracking, but lacks modern CMS or advanced frameworks. The site is moderately optimized for mobile and SEO, with a professional design and clear navigation. Security posture is average, with no visible security headers and unknown SSL status, and no privacy or cookie policies are published, indicating compliance gaps. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

T

TECHNICOAT s.r.o.

technicoat.cz

53

TECHNICOAT s.r.o. is a well-established, family-owned company specializing in high-performance functional coatings based on fluoropolymer technology. Founded in 1999 and headquartered in the Czech Republic, it serves a broad range of industrial sectors including automotive, energy, food, semiconductor, chemical, and general engineering. The company is part of the ADELHELM group and operates subsidiaries such as TECHNICOAT Bakeware s.r.o. Their business model focuses on B2B service provision with a strong emphasis on quality, innovation, and customer responsiveness. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with integrated Google Analytics and Consent Mode for privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies could enhance protection. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from the legitimacy of the business, which is supported by certifications such as ISO 9001:2015 and multiple trust indicators including customer testimonials and industry awards. Overall, the website and business present a credible, professional, and secure digital presence suitable for their industrial clientele. Recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further strengthen trust and compliance.

Klöberfinder.com is a specialized configurator platform operated by BMI Deutschland GmbH, focusing on roofing accessories such as ventilation, roof penetrations, and drainage solutions for pitched and flat roofs. The site targets roofing professionals and end customers seeking tailored product solutions. The business operates in the manufacturing sector with a medium-sized profile and a relatively recent domain registration dating back to 2021. Technically, the website employs modern JavaScript technologies including jQuery and module scripts, with Google Tag Manager for analytics. The site is mobile optimized and presents a professional user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enforced and nonce usage in scripts, but lacks DNSSEC and visible security headers, which are recommended for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no privacy policy or terms of service found. No contact emails or phone numbers are explicitly provided on the analyzed page, which could be improved for better user trust and compliance. Overall, the website is safe, professional, and trustworthy with moderate technical and security maturity.

PORCELANOSA Grupo is a leading global manufacturer and retailer specializing in ceramic products, kitchen furniture, and bathroom elements. The company targets both professional and consumer markets with a broad portfolio of products and services, including construction systems and interior design configurators. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site leverages modern JavaScript libraries, CDN services, and analytics tools to ensure performance and user engagement. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. The absence of WHOIS data limits domain trust verification, but the overall professional presentation and related domains support legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving contact transparency.

M

Montáže Brož s.r.o.

montazebroz.com

67

Montáže Brož s.r.o. is a well-established company specializing in the installation of technologically advanced racking system solutions, operating globally across Europe, Australia, America, and Canada. Founded in the early 1990s, the company has grown to become a world leader in its niche, providing assembly services for automated storage equipment primarily targeting large distribution centers. Their market position is reinforced by certifications such as ISO 45001 and active engagement in health and safety and research and development initiatives. The website reflects a professional and consistent brand image with comprehensive content tailored to business clients seeking specialized installation services. Technically, the website is built on WordPress using modern plugins like Yoast SEO and WPBakery Page Builder, hosted on Wedos servers. It employs Google Analytics for traffic analysis and Cookiebot alongside Complianz GDPR plugin for privacy compliance. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility could be improved. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but additional HTTP security headers are absent, representing an area for enhancement. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for maturity in security governance. Privacy compliance is strong, with a clear privacy policy and cookie consent banner, aligning with GDPR requirements. Business credibility is high, supported by clear company information, certifications, and trust signals such as social media presence and professional content. Overall, Montáže Brož presents a trustworthy and professional online presence with a strong business foundation and good technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their digital maturity and risk posture.

K

KASI, spol. s.r.o.

kasi.cz

49

KASI, spol. s.r.o. is the largest Czech manufacturer specializing in cast iron sewer products, with a strong presence in the European market. The company operates its own development, foundries, concrete plant, and engineering production, positioning itself as a leader in innovation and quality within its niche. The website reflects a professional manufacturing business targeting industrial clients and infrastructure developers. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable digital infrastructure. The presence of cookie consent and privacy policies demonstrates compliance with GDPR regulations. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the website is trustworthy, well-structured, and provides clear contact information and business details, although WHOIS data is unavailable, likely due to privacy protection.

P

PANKREA s.r.o.

bazenymachov.cz

54

Bazény Machov, operated by PANKREA s.r.o., is a Czech-based manufacturer specializing in custom plastic pools, including foil, stainless steel, and ceramic pools, as well as related products such as septic tanks, rainwater tanks, laundry chutes, and plastic cellars. Established since 1995, the company has produced over 1500 pools, positioning itself as an experienced and trusted provider in the local market. The website is professionally designed, providing clear navigation and comprehensive product information targeted at residential and commercial customers seeking tailored pool solutions. Technically, the website uses a moderate technology stack including jQuery, Nivo Slider, Google Tag Manager, and Google Fonts, running on the Estofan CMS platform. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site employs HTTPS and a cookie consent banner with default denial of ad and analytics storage, indicating privacy-conscious design. However, no advanced security headers or explicit security policies are present, and WHOIS data is unavailable, which limits domain trust verification. No vulnerabilities or malicious content were detected. Overall, the website presents a trustworthy and professional business front with good content quality and privacy compliance. The main risk lies in the lack of WHOIS transparency and limited explicit security policies. Strategic improvements in security headers, incident response information, and domain registration transparency would enhance trust and security posture.

P

PANKREA s.r.o.

contpro.eu

52

CONT Proficontainers, operated by PANKREA s.r.o., is a Czech-based company specializing in manufacturing, renting, and selling modular containers and units for business use. Their offerings include residential, sanitary, storage, and technological containers, serving both individual entrepreneurs and large corporations. The website demonstrates a solid market position with references to notable clients such as Škoda and ArcelorMittal. The business model focuses on providing tailored container solutions, including self-storage services, with a clear emphasis on meeting diverse customer needs. Technically, the website employs a moderate technology stack including jQuery, NivoSlider, Google Tag Manager, and Google Analytics, hosted on the Estofan CMS platform. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although explicit privacy and security policies are limited. From a security perspective, the site uses HTTPS and standard Google tracking tools but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to EURid privacy policies, but the domain usage aligns with the business claims. Overall, the security posture is moderate with room for improvement in headers, policy transparency, and mobile optimization. The overall risk assessment indicates a legitimate, small business website with moderate technical and security maturity. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, improving mobile responsiveness, and conducting regular security audits to strengthen trust and compliance.

C

CNC-INAXES s.r.o.

cnc-inaxes.cz

51

CNC-INAXES s.r.o. is a Czech Republic based company specializing in the sale and servicing of CNC machining equipment since 2006. The company offers a range of CNC machinery including vertical and horizontal machining centers, lathes, and special machines under its own INAXES brand and represents selected manufacturers in the Czech and Slovak markets. Their target audience includes industrial manufacturers and businesses requiring CNC machining solutions. Technically, the website is built on the Estofan CMS platform, uses modern JavaScript libraries like jQuery and Nivo Slider, and integrates Google Tag Manager and analytics services. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms but could be improved by adding security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business model and market position.

M

METAL TRADE COMAX – Division COMAX Dach

comaxdach.de

57

COMAX Dach, a division of METAL TRADE COMAX, is a leading manufacturer specializing in metal roofing solutions primarily serving the German and Czech markets. The company offers a range of premium metal roofing products and related services, including custom painting and logistics. Their market position is strong, supported by decades of experience since 1973 and membership in the European Coil Coating Association (ECCA). The website reflects a professional and well-structured digital presence built on Drupal 10, with modern marketing and analytics integrations such as Google Tag Manager and CookieHub for GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and targets B2B customers in the construction and roofing sectors.

M

METAL TRADE COMAX – DIVISION COMAX ROOFS

comaxroofs.co.uk

67

COMAX ROOFS is a leading Czech manufacturer specializing in coated aluminium and metal roofing products, operating under the parent company METAL TRADE COMAX. The company offers a range of premium roofing products and services including custom painting and packaging, targeting roofing professionals and merchants primarily in the UK and Europe. The website demonstrates a mature digital presence with a modern Drupal 10 CMS, responsive design, and integrated privacy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data due to domain registration errors introduces some risk in domain legitimacy assessment, but the professional content and trust indicators mitigate this concern. Overall, the website is well-structured, trustworthy, and business-focused, supporting COMAX ROOFS' market position as a reputable manufacturer.

M

METAL TRADE COMAX, a.s.

mtcomax.cz

70

METAL TRADE COMAX, a.s. is a well-established Czech manufacturing company specializing in steel and aluminum sheet processing since 1973. They hold a leading position in the Czech Republic as the sole manufacturer and exporter of continuously coated steel and aluminum sheets, serving key industrial sectors such as construction, automotive, and machinery. Their product portfolio includes coated sheets, slitting and cutting services, profile manufacturing, and roofing materials. The company also engages in real estate development projects. Technically, the website is built on WordPress with modern SEO and multilingual support, featuring cookie consent and analytics tools. Security posture is good with HTTPS and no exposed sensitive data, but lacks advanced security headers and published security policies. The absence of WHOIS data is a concern for domain legitimacy but the website content and business information appear professional and trustworthy. Contact information and social media presence are comprehensive. Overall, the site demonstrates a mature digital presence aligned with business goals.

B

Bühler CZ s.r.o.

buhlercz.cz

54

Bühler CZ s.r.o. is a medium-sized manufacturing company based in Žamberk, Czech Republic, specializing in machinery for food processing and related industrial components. Since 2012, it has been part of the Bühler AG global group, which strengthens its market position and provides access to international markets. The company also emphasizes technical education and workforce development through partnerships with local schools. The website reflects a professional business presence with clear contact information and a focus on manufacturing and education sectors. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Tag Manager, and is built on the Estofan CMS platform. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks some advanced security headers and explicit security or incident response policies. WHOIS data is missing, which reduces transparency and trust slightly, but the overall business credibility remains high due to consistent branding and social media presence. Recommendations include improving security headers, adding explicit privacy and security policies, and enhancing incident response information to strengthen trust and compliance.

H

HPI-CZ spol. s r.o.

hpishop.sk

60

HPIshop.sk is an established e-commerce platform specializing in the distribution and sale of building accessories, particularly roofing materials, insulation systems, and related construction products. The company operates primarily in Slovakia and the Czech Republic, leveraging its parent company HPI-CZ spol. s r.o., which has been active since 1995. The website presents a professional and comprehensive catalog of products targeting construction professionals and retail customers. Technically, the site is built on the PrestaShop platform, utilizing modern web technologies including jQuery UI and Google Tag Manager for analytics and marketing. Security measures include HTTPS enforcement, cookie consent with GDPR compliance, and Google reCAPTCHA integration for form protection. However, security headers could be enhanced for improved protection. Overall, the site is well-maintained, trustworthy, and compliant with relevant privacy regulations.

K

Klober

klober.co.uk

61

Klober is a well-established UK-based manufacturer and supplier specializing in roofing ventilation products and roofing materials. As part of the BMI Group, Klober holds a leading market position in the roofing manufacturing sector, offering a comprehensive range of products including membranes, ventilation solutions, dry verge systems, and lead flashing alternatives. Their website targets installers, distributors, and roofing professionals, providing extensive product information, technical support, and training resources. The site is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper, and Bootstrap, ensuring a responsive and user-friendly experience across devices. The use of Google Tag Manager and reCAPTCHA indicates attention to marketing and security. While no explicit CMS is detected, the site demonstrates good SEO and accessibility practices. Performance is moderate, with opportunities for optimization. From a security perspective, the site enforces HTTPS and includes CSRF tokens, with a robust cookie consent mechanism supporting GDPR compliance. However, security headers are not explicitly detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms a long-standing domain registration consistent with the business claims, enhancing trustworthiness. Overall, Klober's website presents a secure, professional, and compliant platform supporting its business operations effectively. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and publishing explicit security and incident response policies to further strengthen trust and compliance.

K

Klöber GmbH

kloeber.de

59

Klöber GmbH is a well-established German manufacturer specializing in innovative roofing accessories for pitched and flat roofs, serving primarily B2B customers such as roofing professionals, architects, and distributors. The company boasts over 60 years of experience and holds recognized certifications like ISO 9001 and ISO 14001, reinforcing its market position as a leading specialist in Europe. The website reflects a mature digital presence with comprehensive product information, configurators, and resource centers, supporting customer engagement and technical support. Technically, the website employs modern web technologies including Bootstrap, jQuery, Swiper, and Google reCAPTCHA, ensuring responsive design and security against spam. The site is well-optimized for mobile devices and SEO, with clear navigation and professional design. Security practices include HTTPS enforcement and CSRF tokens, although some HTTP security headers could be improved. Privacy compliance is robust, featuring detailed cookie consent mechanisms and a comprehensive privacy policy. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response contact is noted. The domain WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the website is trustworthy, professional, and secure, with minor areas for enhancement in security headers and incident response transparency. Strategically, Klöber should focus on publishing a formal security policy and incident response contacts, enhancing HTTP security headers, and maintaining their strong privacy compliance to further build customer trust and meet evolving regulatory requirements.

E

espray

espray.gr

41

Espray.gr is a Greek-based company specializing in the sale and support of industrial spraying and coating machinery, including airless spray machines, polyurea systems, insulation, and laser cleaning equipment. The company positions itself as a leading provider in Greece with exclusive representation of several international brands and a strong focus on technical support, training, and service. The website is built on the PrestaShop platform, featuring a professional design with good navigation and mobile optimization. Structured data and Open Graph tags are properly implemented to enhance SEO and social media presence. Security posture is solid with HTTPS and security headers in place, though privacy compliance could be improved by adding explicit cookie consent and GDPR statements. No blocking or WAF challenges were detected, allowing full content access and analysis.

G

GRASPO CZ, a.s.

graspo.com

43

GRASPO CZ, a.s. is a well-established European printing company specializing in high-quality full-color printing and comprehensive bookbinding services. The company emphasizes its long tradition and expertise, serving clients from the Czech Republic to international markets. Their offerings include digital, offset, and rotary printing, along with custom diary and planner production and branding services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, along with Google Tag Manager and Analytics for tracking. It integrates reCAPTCHA for bot protection and uses a cookie consent mechanism, indicating awareness of privacy regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, HTTPS is enabled, and reCAPTCHA is implemented, but there is a lack of security headers and no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the website content and business information appear legitimate and professional. Overall, the website presents a solid business presence with moderate technical maturity and a good security posture, though improvements in transparency and security best practices are recommended to enhance trust and compliance.

W

Weber

weberpas-mixer.cz

41

The website 'Weberpas mixer' is a newly launched digital platform associated with the Weber brand, specializing in construction materials such as facades, plasters, coatings, insulation, flooring, and waterproofing. It serves primarily construction professionals and consumers in the Czech Republic, offering product-related tools and links to related Weber services. The site is part of the Saint-Gobain group, indicating a strong market position in the manufacturing sector. Technically, the site is built on Angular 10.1.6, with a modern frontend but limited backend or CMS indications. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced analytics or tracking.

S

STIHL Vertriebszentrale AG & Co. KG

stihl.com

79

STIHL Vertriebszentrale AG & Co. KG operates a professional and comprehensive website serving as the international portal for their power garden tools business. The company is a global leader in manufacturing battery-driven and motorized garden tools such as chainsaws and brush cutters. Their website reflects a mature digital presence with clear branding, extensive product information, and multiple social media channels. Technically, the site leverages modern web technologies including Adobe Experience Manager, Google Tag Manager, and various analytics tools, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and consent-based cookie management, although explicit security headers could be improved. The WHOIS data is unavailable or privacy protected, which is unusual but likely intentional for a brand of this size. Overall, the website is trustworthy, professional, and well-optimized for its audience.

M

METAL TRADE COMAX – DIVIZE STŘECHY COMAX

strechycomax.cz

63

Střechy COMAX is a leading Czech manufacturer specializing in metal roofing products, operating under the parent company METAL TRADE COMAX. The company emphasizes quality, reliability, and customer satisfaction, offering a broad range of metal roofing solutions with a strong focus on innovation and sustainability, including integrated photovoltaic roofing systems. Their market position is solidified by decades of experience since 1973 and membership in key industry associations. Technically, the website is built on Drupal 10, employs modern web technologies, and includes standard marketing and analytics tools such as Google Tag Manager and CookieHub for privacy compliance. Security posture is good with HTTPS, security headers, and cookie consent mechanisms, though the site lacks a publicly available security policy or incident response information. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data limits domain registration transparency.

S

SopremaGroup.cz

sopremagroup.cz

38

SopremaGroup.cz is a Czech-based company specializing in waterproofing and insulation products, serving primarily construction professionals and contractors. Their website offers a comprehensive catalog of products including asphalt sheets, PVC and TPO foils, thermal and sound insulation materials, and related accessories. The company positions itself as an expert in the field, providing technical documentation and customer support to its clients. The website is built on WordPress with WooCommerce, indicating a modern e-commerce infrastructure tailored for B2B sales. Technically, the website employs a standard WordPress stack with popular plugins and themes, including WooCommerce for product management and sales. It uses jQuery, Google Fonts, and Google Maps API for enhanced user experience. The site is mobile-optimized and has good SEO practices, though some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and includes some security-related scripts like reCAPTCHA, although the reCAPTCHA site key is not configured, which may reduce effectiveness. No explicit security headers were detected in the provided data, and no sensitive data exposure was found. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. WHOIS data is unavailable, limiting domain trust assessment, but the website content and social media presence suggest a legitimate business. Overall, SopremaGroup.cz presents a professional and functional online presence with moderate technical maturity and some compliance gaps. Strategic improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

R

ROOFIX®

roofix.cz

58

ROOFIX® is a Czech company specializing in manufacturing and supplying fall protection systems for roofs and ladders, with over 20 years of industry experience and a strong market presence in the Czech Republic. Their business model includes design, production, installation, training, and wholesale partnerships, targeting businesses and individuals requiring safety equipment for working at heights. The website is professionally designed, mobile-optimized, and provides comprehensive information about products, services, and certifications, reinforcing their credibility. Technically, the site uses modern web technologies including Google Tag Manager, analytics tools, and cookie consent mechanisms, hosted likely by a Czech hosting provider. Security posture is good with HTTPS enforced and secure forms, though some security headers and explicit incident response policies are missing. Privacy compliance is strong with clear GDPR policies and cookie consent. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the positive business signals. Overall, the site is trustworthy, professional, and well-maintained.

puren gmbh is a German manufacturing company specializing in high-performance polyurethane rigid foam insulation products. Their website showcases a broad product portfolio targeting architects, planners, trade professionals, industry OEMs, private builders, and the housing sector. The company emphasizes sustainability and energy efficiency in construction. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and includes GDPR-compliant privacy and cookie consent mechanisms. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and secure session management, though the absence of security headers and a public security policy are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency, but the website's comprehensive contact information and social media presence support its legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers and publish incident response information.

P

PREFA International

prefa.com

54

PREFA International is a well-established manufacturer specializing in high-quality aluminium products for roofing, facades, and flood protection, offering a 40-year material and color guarantee. The company targets construction professionals and building owners across multiple European countries, as evidenced by their extensive network of localized websites. The business model focuses on manufacturing and distributing durable aluminium building materials, positioning PREFA as a trusted international brand in the construction sector. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript and CSS technologies. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. The absence of visible analytics or tracking scripts suggests a minimal user tracking approach. However, the lack of cookie consent mechanisms indicates room for improvement in privacy compliance. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. Nonetheless, the absence of security headers such as Content-Security-Policy and X-Frame-Options reduces the overall security posture. The WHOIS data is notably missing or inaccessible, which raises some concerns about domain registration legitimacy, although the professional and consistent website presence mitigates these concerns to some extent. Overall, PREFA International's website is professional and trustworthy, with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security headers, along with clarifying domain registration details, would enhance the site's security and trustworthiness further.

H

Huntsman Building Solutions

huntsmanbuildingsolutions.com

65

Huntsman Building Solutions operates as a global manufacturer and distributor of building materials and solutions, targeting construction professionals and businesses worldwide. The website serves as a multilingual portal directing users to localized country-specific sites, indicating a broad international market presence. The business model relies on manufacturing and regional distribution partnerships, supported by localized content and language options to enhance customer engagement. Technically, the website employs modern marketing and analytics technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The website design is professional with consistent branding and clear navigation. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. No privacy policy, terms of service, or contact information are present on the landing page, which impacts privacy compliance and user trust. No forms or direct data collection mechanisms are visible, reducing immediate risk but also limiting user engagement options. Overall, the website is legitimate and professionally maintained with a moderate security posture. Strategic improvements in privacy compliance, security headers, and transparency of contact information would enhance trust and regulatory adherence.

H

HPI

hpi.cz

55

HPI-CZ is a leading Czech company specializing in the distribution and sale of building accessories, particularly for roofing and insulation systems. The company targets B2B customers in the construction sector, offering a wide range of products supported by technical advice and customer support. Their market position is strong within the Czech Republic, supported by a professional online presence including an online catalog and ordering system. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses standard web technologies such as jQuery and Font Awesome. The site is mobile optimized and includes SEO best practices. Security posture is good with HTTPS enforced and a Content-Security-Policy header, though additional headers could improve security further. Privacy compliance is well addressed with clear GDPR and cookie policies and consent mechanisms. The absence of WHOIS data is a concern for domain legitimacy verification, but the overall professional presentation and business information support the company's credibility. Recommendations include enhancing security headers and adding a vulnerability disclosure policy to improve trust and security culture.

F

Fleck GmbH

fleck-dach.de

65

Fleck GmbH operates as a specialized manufacturer and distributor of roofing accessories, serving primarily roofing professionals and trade partners in Germany. The company offers a broad and customizable product range for steep roofs, flat roofs, and solar roofs, supported by various configurators, calculation services, and trade partner resources. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast loading and good accessibility. Security posture is solid with HTTPS and privacy-focused cookie management, though additional security headers and incident response information could enhance protection. The domain registration data aligns with the business profile, showing no suspicious patterns or privacy protection that would undermine trust. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR requirements.

F

Fatra, a.s.

fatra.cz

62

Fatra, a.s. is a significant global player in the plastics manufacturing industry, providing a range of plastic processing services. The website is professionally designed with multilingual support, targeting industrial and commercial clients. The technical infrastructure is based on WordPress CMS with a modern tech stack including Google Analytics, Microsoft Clarity, and various advertising and tracking tools. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of WHOIS data and lack of explicit privacy policy and contact information slightly reduce trust and transparency. Overall, the website presents a credible business presence with room for improvement in compliance and contact transparency.

FAKRO is a well-established international manufacturer and retailer specializing in innovative roof windows, skylights, attic stairs, and related accessories primarily targeting consumers and professionals in the construction and roofing sectors. The website presents a professional and consistent brand image with comprehensive product information and customer support resources. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and CookieYes for consent management, hosted on a CMS named WebKameleon. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks visible security headers and detailed incident response information. WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly from the overall professional presentation. The site complies with GDPR and provides clear privacy and cookie policies. Overall, the website is a reliable digital presence for FAKRO with room for security and transparency enhancements.

B

BIOS s.r.o.

biossro.cz

52

BIOS s.r.o. is a well-established Czech company specializing in the manufacturing and retail of wooden roof structures, including trusses, traditional roof frameworks, and turnkey roofing solutions. With a history dating back to 1970, the company holds a strong market position in Eastern Europe, serving both professional clients and individual customers. Their website reflects a mature digital presence with e-commerce capabilities and a focus on quality and tradition. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers and policies are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy transparency and security documentation.

Saint-Gobain Construction Products CZ a.s., operating under the brand Weber, is a leading manufacturer and supplier of construction materials and systems in the Czech Republic. Their website offers comprehensive information about their products including facades, plasters, insulation, flooring, adhesives, and waterproofing solutions. The company targets professionals such as architects, developers, investors, as well as DIY enthusiasts, providing both products and supporting digital tools like calculators and design applications. The website is professionally designed, well-structured, and consistent with the Saint-Gobain corporate identity. Technically, the website is built on Drupal CMS and employs modern web technologies including Google Tag Manager, OneTrust for cookie consent, and lazy loading for performance optimization. The site is mobile-optimized and accessible, with good SEO practices and structured data implemented. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. The WHOIS data for the domain is incomplete and malformed, lacking registrar and registrant details, which reduces trustworthiness from a domain registration perspective. However, the website content and branding strongly indicate legitimacy as part of the Saint-Gobain group. Contact information is available, including a company phone number and social media channels, but no direct company emails are exposed on the site. Overall, the website presents a trustworthy and professional digital presence for a large manufacturing company, with good privacy compliance and user experience. Recommendations include enhancing security headers, publishing a security policy or incident response contacts, and verifying WHOIS data for improved domain trust.

G

Glass Service, a.s.

gsl.cz

58

Glass Service, a.s. is a Czech Republic-based company specializing in advanced glass manufacturing services and products, including simulations, lab services, audits, smart process control systems, and special furnaces. The company targets industrial clients in the glass manufacturing sector and has a strong market presence supported by over 25 years of industry experience and recognized partnerships. Their website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WP Rocket, and WPML for multilingual capabilities. It integrates Google reCAPTCHA for security and WP Statistics for analytics. The site is mobile-optimized with good SEO practices but could improve accessibility and security headers. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and anti-bot measures in place. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement. The lack of WHOIS data transparency slightly reduces trust but is mitigated by clear business contact information and professional web presence. Overall, the website is trustworthy and well-maintained, serving its business purpose effectively. Strategic improvements in security transparency and WHOIS data availability would enhance credibility and compliance.

C

Chryso

chryso.cz

61

Chryso is a global leader in sustainable construction chemicals and solutions, operating as part of Saint-Gobain Construction Chemicals. The website presents a professional corporate presence with a focus on B2B services in the manufacturing sector, targeting construction industry professionals worldwide. The digital infrastructure is built on WordPress with integration of modern marketing and analytics tools such as HubSpot and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data raises questions about domain registration transparency, which could impact trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

A

Adfors (Saint-Gobain group)

silnydikylidem.cz

65

The website www.silnydikylidem.cz represents Adfors, a manufacturing company specializing in glass production and operating under the Saint-Gobain group. The site emphasizes employee well-being, community involvement, and recruitment, targeting local job seekers and industry professionals. The business is positioned as a reputable regional employer with awards and active community projects. Technically, the website is built on the solidpixels CMS platform, utilizing modern web technologies including Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and a professional design, although accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data for the domain is missing, which limits the ability to fully verify domain legitimacy and registration details. Despite this, the professional presentation and consistent branding suggest a legitimate business presence. Overall, the website scores well in content quality, security posture, and business credibility, with room for improvement in technical implementation and transparency of security policies.