Transportation security reports

S

SITA

sita.aero

55

SITA is a leading global IT provider specializing in air transport communications and information technology. The company offers a broad portfolio of solutions targeting airlines, airports, ground handlers, governments, and air navigation service providers. Their services focus on enabling seamless, safe, and sustainable air travel through innovative digital travel solutions, passenger processing, border management, baggage management, and aircraft communications. The website reflects a mature enterprise with a strong market position and a comprehensive service offering tailored to the air transport industry. Technically, the website employs a modern technology stack including jQuery UI, Matomo analytics, Marketo marketing tools, OneTrust for cookie consent, and Azure Application Insights for monitoring. The site is hosted likely on Azure infrastructure and uses Episerver CMS. Performance and mobile optimization are good, with clear navigation and professional design. SEO and accessibility features are well implemented. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, best practices appear to be followed. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy, incident response information, and vulnerability disclosure mechanisms, which are recommended for enterprise-grade security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk profile is low with no blocking or WAF interference detected. Strategic improvements include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security maturity.

I

International Longshore and Warehouse Union

ilwu.org

34

The International Longshore and Warehouse Union (ILWU) operates a well-structured website primarily serving its members and labor community. The site provides union news, historical archives, leadership information, and contact resources. It holds a strong market position as a large, established non-profit labor union in the transportation sector. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies including React and GiveWP for donations. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

F

Focal Maritime Services Co. Ltd

focalmaritime.com

45

Focal Maritime Services Co. Ltd is a Malta-based maritime and logistics service provider with a strong market presence and over 25 years of operational history. The company leverages Malta's strategic location to offer a broad range of services including port agency, ship husbanding, freight forwarding, and ship broking, targeting shipowners and international trading companies. The website reflects a professional and consistent brand image with clear service offerings and affiliations to reputable maritime organizations. Technically, the site is built on WordPress using the Avada theme and Slider Revolution plugin, with modern JavaScript libraries and Google Tag Manager for analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policies and some security headers. Privacy compliance is partially met with cookie consent but missing a dedicated privacy policy page. Overall, the site is well-structured, user-friendly, and trustworthy, supporting the company's business credibility.

The Public Transport Authority of Western Australia (PTA) operates as the primary government agency responsible for public transportation services across Western Australia. The website serves as a comprehensive portal providing information about its key services including Transperth, Transwa, Transregional, and School Bus Services. The PTA positions itself as a safe, customer-focused, integrated, and efficient public transport provider, targeting residents and visitors within the region. The site reflects a well-established government entity with a large operational scale and a clear focus on public transport infrastructure and service delivery. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and various third-party analytics and tracking tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site demonstrates good mobile optimization and accessibility basics, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes anti-forgery tokens in forms, indicating some level of security awareness. However, there is a lack of visible security headers and no published vulnerability disclosure or incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but the absence of a cookie consent mechanism despite tracking scripts is a notable gap. No contact emails or phone numbers are explicitly provided on the homepage, which may affect user trust and support accessibility. Overall, the PTA website is a professional and trustworthy government site with solid business credibility and technical implementation. Security posture is adequate but could be improved with enhanced headers, explicit consent mechanisms, and incident response transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and improving security headers to strengthen compliance and user trust.

E

Elit'Avia

elitavia.com

60

Elit'Avia is a Malta-based private aviation company founded in 2006, specializing in aircraft management, private charter, and aircraft sales and acquisitions. The company emphasizes sustainable aviation and offers bespoke services tailored to private aviation clients globally. Their market position is that of a leading global and sustainable operator with a strong commitment to client satisfaction and environmental responsibility. Technically, the website is built on WordPress using Elementor and jQuery, with good SEO and mobile optimization, though some accessibility features could be improved. Security-wise, the site uses HTTPS with no visible vulnerabilities and demonstrates transparency through a published security incident notice, but lacks a formal security policy and vulnerability disclosure. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.

Avolta AG operates in the transportation sector, providing travel retail services including loyalty programs, customs information, and customer support. The company targets travelers, investors, and media, positioning itself as a significant player in travel retail with a global customer service presence. The website is built on Drupal 10 and uses modern web technologies and analytics tools, hosted behind Incapsula WAF for security. However, the site content is currently blocked with a 403 Access Denied error, limiting full content visibility. Privacy and cookie policies are present and GDPR compliant, with detailed contact information segmented by department. Security posture is generally good with HTTPS and security headers, but lacks explicit security policy and incident response information.

Sogefi SpA operates as a global leader in the automotive components manufacturing sector, specializing in engine filtration, air intake, cooling systems, and flexible suspension components. The company serves top vehicle manufacturers and aftermarket replacement markets, positioning itself as a key player in the transportation and manufacturing industries. The website reflects a mature business with comprehensive investor relations, press releases, and sustainability reporting, targeting industry professionals, investors, and clients worldwide. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Matomo analytics, ensuring moderate performance and good mobile optimization. The presence of a cookie consent mechanism and multilingual support indicates a commitment to privacy and user experience. However, some areas such as accessibility and security headers could be improved. From a security perspective, the site uses HTTPS (assumed from context), includes nonce attributes in scripts, and implements cookie consent, but lacks visible security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, suggesting a reasonable security posture but with room for enhancement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and market position. Strategic improvements in security policies, accessibility, and explicit contact information would further strengthen the site’s reliability and user trust.

The website hkexpress.com currently displays an 'Access Denied' page indicating that access to the site has been temporarily suspended. The message advises users to use the mobile app or WeChat Mini-app for booking and check-in, suggesting a shift away from web-based interactions. Due to this access restriction, no meaningful website content, metadata, or contact information is available for analysis. The business behind the domain is Hong Kong Express Airways Limited, a regional low-cost airline based in Hong Kong, focusing on passenger air transportation services. The website's technical infrastructure cannot be fully assessed due to the blocked content, but the presence of JavaScript indicates some client-side scripting. Security posture is weak or unknown as no HTTPS or security headers are detected in the provided data. Overall, the site is inaccessible, limiting the ability to evaluate privacy compliance, security policies, or business credibility.

T

Turistik Hava Taşımacılık A.Ş.

corendon-airlines.com

58

Corendon Airlines is a well-established Turkish airline founded in 2004, providing affordable flight tickets and holiday services primarily targeting leisure travelers in Europe and Turkey. The company holds multiple industry certifications including IATA and IOSA, reflecting a strong market position and commitment to quality and safety. Their website offers comprehensive services including flight booking, online check-in, additional services like baggage and seat selection, group bookings, and partnerships for car hire and hotels. The digital infrastructure is modern, utilizing popular JavaScript libraries and marketing tools, with good mobile optimization and user experience. Security measures include HTTPS, reCAPTCHA, and use of security-conscious script loading, though additional security headers could enhance protection. The site is fully accessible without WAF or blocking mechanisms, indicating reliable availability. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with privacy regulations.

W

Wilhelmsen

wilhelmsen.com

44

Wilhelmsen is an established enterprise-level maritime services company focused on shaping the global maritime industry through innovation, expertise, and quality products and services. Their offerings include port services, ship services, ship management, new energy solutions, and other related maritime services. The company targets maritime industry stakeholders and global fleet operators, positioning itself as a diversified and trusted service provider in the transportation sector. Technically, the website employs a modern technology stack including React, jQuery, Microsoft Application Insights, Google Tag Manager, and Cookiebot for consent management. The site is hosted likely on Microsoft Azure and uses EpiServer CMS. Performance and mobile optimization are good, with basic accessibility features and solid SEO implementation. From a security perspective, the site enforces HTTPS, uses monitoring tools, and implements cookie consent mechanisms. However, explicit security headers are missing, and no vulnerability disclosure or security.txt files are found. Incident response contact channels exist but lack direct email addresses. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is moderate with recommendations to enhance security headers, publish vulnerability disclosure policies, and improve accessibility compliance.

E

Eurofreight - Global Connections - World Wide Logistics

eurofreight.com.mt

36

Eurofreight is a Malta-based freight forwarding and logistics company offering comprehensive transport solutions via sea, road, and air. The company positions itself as a reliable partner with global connections, focusing on efficient and cost-effective supply chain management. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and user experience optimizations. The technical infrastructure includes modern JavaScript libraries and Google services for analytics and security. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though explicit security policies are not published. Overall, the website is trustworthy and well-maintained, supporting Eurofreight's market position as a competent logistics provider.

A

Academy 147

academy147.com

46

Academy 147 is a globally recognized provider of business aviation maintenance training, established in 2014. The company offers specialized training services for various aircraft manufacturers including Bombardier, Dassault Falcon, Gulfstream, Pilatus, Embraer, and Textron. Their market position is strong within the niche of business aviation, supported by a professional and well-structured website that targets aviation professionals and organizations worldwide. The website demonstrates a mature digital presence with modern WordPress infrastructure, SEO optimization, and compliance with privacy regulations through Cookiebot and GDPR mechanisms. Security posture is solid with HTTPS enforcement, CAPTCHA on forms, and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website and business appear trustworthy and professionally managed, with a good balance of content quality, technical implementation, and privacy compliance.

T

TUG Malta

tugmalta.com

43

TUG Malta is a maritime service provider specializing in harbour towage, offshore towage and salvage, environmental response, and technical support services. The company is part of a group with origins dating back to 1922, linked to Rimorchiatori Riuniti SpA in Genoa, Italy, positioning it as an established player in the maritime transportation sector. The website reflects a professional and consistent brand image targeting maritime industry clients and port authorities. Technically, the site is built on WordPress using the Enfold theme and integrates modern plugins such as Yoast SEO and Contact Form 7, with Google reCAPTCHA v3 for spam protection. The site is mobile optimized and SEO friendly, with a comprehensive cookie consent mechanism indicating good privacy compliance. Security posture is moderate with HTTPS enforced and some best practices observed, but lacks explicit security policies or vulnerability disclosure information. Overall, the website is trustworthy and professionally maintained, supporting the company’s credibility in its sector.

A

Attrans Ltd

attrans.com

54

Attrans Ltd is a Malta-based international transport and forwarding company specializing in logistics services between Malta, Europe, and North Africa. Established in 1976 as a family business, it offers a range of services including groupage transport, temperature-controlled and refrigerated transport, as well as project and exceptional load transport. The company leverages a network of local agents across multiple European countries and North Africa to provide reliable and efficient transport solutions. The website reflects a medium-sized enterprise with a clear focus on transportation and forwarding services, targeting businesses requiring cross-border logistics solutions. Technically, the website is built on an IBM Domino CMS platform, utilizing common JavaScript libraries such as jQuery, Slick Slider, and PhotoSwipe for UI enhancements. It integrates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and professional design. However, the performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS and asynchronous loading of analytics scripts, but lacks explicit security headers such as Content Security Policy or HSTS. There is no visible cookie consent mechanism despite the use of tracking technologies, and no published security or incident response policies. No email contacts are provided, only a phone number, which may limit direct communication channels. Overall, the security posture is average with room for improvement in privacy compliance and security best practices. The overall risk assessment indicates a legitimate and established business with a professional online presence but with moderate privacy and security compliance gaps. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving privacy compliance to strengthen trust and regulatory adherence.

E

ETC

etcc.com

45

ETC (Electronic Transaction Consultants, LLC) is a specialized enterprise software and services provider focused on the transportation and tolling industry. The company offers integrated roadside and back office solutions that support millions of toll transactions daily on busy toll roads across the United States. ETC holds a leading market position with recognized industry awards and a comprehensive product suite including congestion management, interoperability hubs, and AI-powered vehicle identification technologies. The website reflects a mature digital presence with detailed product information and customer service offerings. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, enhanced by SEO plugins like Yoast and analytics tools including Google Analytics and MonsterInsights. The site is mobile-optimized and demonstrates good performance and SEO practices. However, there is room for improvement in accessibility and explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses security plugins but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business identity, supporting the legitimacy of the website. Overall, ETC's website presents a professional, trustworthy, and content-rich platform suitable for its target audience in the transportation sector. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture.

ArcBest Corporation operates the ABF Freight brand, a leading less-than-truckload (LTL) freight carrier with over 100 years of experience. The company offers extensive logistics and transportation services across North America, supported by a large network of service centers and a commitment to safety, innovation, and sustainability. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to business customers seeking freight and supply chain solutions. Technically, the site is built on Drupal 10 and integrates multiple marketing and analytics tools, including Google Analytics, HubSpot, and Facebook Pixel, indicating a sophisticated approach to user engagement and data collection. Security practices are generally good, with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be more explicitly implemented. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, aligned with the company's enterprise status and market position.

M

Mats

maltats.com

52

MATS Malta operates as the national air traffic service provider for Malta, delivering essential air traffic management and related services. The organization positions itself as a recognized ANSP within the Euro Mediterranean region, emphasizing safety, excellence, and innovation. Their website reflects a medium-sized enterprise with a clear mission and vision, targeting airspace users and stakeholders. The business model focuses on service provision in the transportation sector, with key offerings including AIM, technical services, operations, training, and safety quality services. The company is ISO 9001 certified, reinforcing its commitment to quality standards. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and several plugins such as WPBakery Page Builder and Contact Form 7. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Analytics tools are present but not fully configured, and accessibility is basic. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks explicit security headers and comprehensive security policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers, privacy compliance (notably cookie consent), and analytics configuration. The domain registration data aligns well with the business claims, showing consistency and legitimacy. The website is accessible without WAF or blocking mechanisms, supporting a positive trust assessment. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, completing analytics setup, publishing security and incident response policies, and conducting regular security audits to strengthen the security culture and trustworthiness.

S

SR Technics Switzerland Ltd.

srtechnics.com

52

SR Technics Switzerland Ltd. is a globally recognized Maintenance, Repair, and Overhaul (MRO) service provider specializing in aircraft, engines, and components. With over 500 customers worldwide and more than 90 years of operational experience, the company serves airlines, leasing companies, OEMs, and component traders with tailored aviation solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

M

Melita Marine Group

melitamarinegroup.net

60

Melita Marine Group is a well-established marine services company founded in 1989, specializing in shipyard facilities, superyacht agency services, engine distribution, and yacht charters primarily in Malta, Spain, and Greece. The company has expanded its operations with subsidiaries such as Melita Power Diesel and Melita Yacht Painters Ltd, positioning itself as a significant player in the Mediterranean yachting industry. The website reflects a professional digital presence with comprehensive service descriptions and clear contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and moderate performance. Security measures include HTTPS and Google reCAPTCHA, though additional security headers could enhance protection. Privacy compliance is addressed with clear privacy and cookie policies, though cookie consent mechanisms could be improved. Overall, the site demonstrates high business credibility and trustworthiness, supported by ISO certifications and active social media engagement.

V

Vista Global Holding Limited

vistaglobal.com

52

Vista Global Holding Limited operates as a leading private aviation company offering advanced flying services globally. The company targets high-net-worth individuals and corporate clients, providing shared-economy flight subscriptions, flexible luxury charters, and a comprehensive digital platform. With a strong market position and extensive global reach, Vista Global leverages subsidiaries such as VistaJet and XO to deliver its services. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly disclosed security policies, incident response contacts, and vulnerability disclosure programs. Privacy compliance is partially met with a comprehensive privacy policy but no explicit cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic improvements in security transparency and privacy compliance would enhance its posture and user trust.

Y

Yacht and Boat Sales by YATCO

yachtandboat.com.au

43

Yacht and Boat Sales by YATCO operates a comprehensive online platform specializing in new and used boat sales across Australia and New Zealand. The website serves boating enthusiasts by providing extensive listings of power boats, sailboats, jet skis, commercial boats, and related equipment. It also offers additional resources such as boating news, reviews, advice, and a marine business directory, positioning itself as a leading marketplace in the regional boating industry. The business model focuses on connecting buyers with sellers and dealers, supported by a user-friendly search interface and categorized navigation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, leveraging third-party libraries such as Selectize.js and Slick Carousel for enhanced user experience. The site is mobile-optimized and employs SEO best practices, including structured data and Open Graph metadata, to improve visibility. Google Tag Manager is used for analytics and marketing tracking, indicating a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers and a cookie consent mechanism, which are important for compliance and protection. No critical vulnerabilities or malware indicators were found. The absence of a published security policy or incident response contact suggests room for improvement in security governance. Overall, the website presents a professional and trustworthy front with good content quality and business credibility. Strategic enhancements in privacy compliance and security policies would further strengthen its posture and user trust.

M

Maritime MT

maritimemt.edu.mt

53

Maritime MT is a Malta-based maritime training center specializing in seafarer education and certification. The organization offers a broad range of courses including accredited engine courses, basic safety training, oil spill response, and e-learning options. It holds accreditations from Transport Malta, DNV, and SQA, positioning itself as a reputable institution within the maritime education sector. The website features detailed course information, student testimonials, and a professional design that supports its educational mission. The target audience includes maritime professionals and students seeking certification and career advancement in the maritime industry. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins for course management and user engagement. The site is mobile-optimized and includes structured data for SEO enhancement. However, some accessibility features are basic, and performance is moderate. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks certain security headers and formal security policies. From a security and compliance perspective, the site lacks explicit privacy and cookie policies, which is a notable compliance gap especially under GDPR. There is no visible incident response or vulnerability disclosure information, and no security.txt file. Contact information is clearly provided, enhancing business credibility. The domain registration is consistent with the business profile, indicating legitimacy and trustworthiness. Overall, Maritime MT presents a professional and credible online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence, supporting its role as a leading maritime training provider.

CTF Technologies is a Brazilian company specializing in fleet management and automated payment solutions for businesses. The website reflects the company's rebranding as Sem Parar Empresas, emphasizing its leadership in providing automated toll, fuel, and freight payment services. The site targets companies of various sizes seeking efficient vehicle expense management. Technically, the website uses Bootstrap for responsive design and is protected by Incapsula WAF, indicating a moderate level of security infrastructure. However, there are gaps in privacy compliance and security best practices, such as missing cookie consent mechanisms and incomplete privacy policy links. The absence of visible security headers and incident response information suggests room for improvement in security posture. Overall, the website is functional and professional but would benefit from enhanced privacy and security features to increase trust and compliance.

C

Consulting Engineers Group Ltd.

cegindia.com

35

Consulting Engineers Group Ltd. (CEG) is a well-established international infrastructure engineering consulting firm founded in 1984, specializing in a wide range of sectors including highways, bridges, railways, metros, tunnels, airports, buildings, water resources, and urban development. The company operates globally with over 1300 professionals and has a strong market position supported by ISO 9001:2015 certification and a broad portfolio of engineering and consulting services. The website reflects a professional and content-rich presence targeting government agencies, infrastructure developers, and urban planners. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Font Awesome, and Contact Form 7. The site shows moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site lacks visible security headers and vulnerability disclosure mechanisms, and no privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The site uses HTTPS as indicated by canonical links but no explicit SSL configuration details are provided. Content protection measures like disabling right-click and keyboard shortcuts are implemented. Overall, the website is trustworthy and professional but would benefit from enhanced security practices, privacy compliance improvements, and explicit incident response information to strengthen its security posture and regulatory adherence.

T

Thomas Smith & Co Ltd

tcsmith.com

53

Thomas Smith & Co Ltd is a Malta-based company specializing in maritime-related services including express shipping, port agency, shipping logistics, and insurance brokerage. The company serves a broad range of clients including international brands and various vessel types, positioning itself as a reliable and established player in the transportation and insurance sectors. The website reflects a professional and consistent brand image with clear service offerings and subsidiary domains supporting its business model. Technically, the site is built on WordPress with Elementor and integrates modern tools such as Google Analytics and reCAPTCHA, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and basic protections, though there is room for improvement in security headers and incident response transparency. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the company's market position effectively.

Liaco Limited is a Malta-based vehicle distributor and importer with a long-standing history dating back to 1967. The company specializes in importing new vehicles and distributing them locally, with a focus on Subaru vehicles and related automotive services. Their market position is that of an established local player with over five decades of experience, targeting vehicle buyers and importers primarily in Malta. The website currently displays a maintenance message but provides comprehensive contact details and social media presence, indicating ongoing business operations. Technically, the website employs common tracking and marketing tools such as Google Analytics, Google Tag Manager, CookieYes for cookie consent, and Elfsight widgets. The site lacks advanced CMS or frameworks and shows basic mobile optimization and SEO practices. Performance is moderate, and accessibility features are minimal. No structured data or advanced SEO tags were detected. From a security perspective, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but no explicit security headers were identified in the provided data. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file was found. Cookie consent is implemented, supporting privacy compliance to a basic degree. The absence of terms of service and limited privacy policy details suggest room for improvement in compliance and transparency. Overall, the website is functional but basic, with moderate trustworthiness and business credibility. The domain uses privacy protection for WHOIS data, which is common and justified for this business type. The AI score reflects moderate content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security policies, compliance documentation, and technical modernization would enhance the site's professionalism and trust.

S

Salvo Grima Group

salvogrima.com

42

Salvo Grima Group is a well-established international distributor and supplier specializing in fast-moving consumer goods, ship and yacht supplies, and travel retail operations across multiple countries including Malta, Spain, and parts of Africa. The company operates subsidiaries such as Vladex BV in the Netherlands and C&C Technik in Malta, enhancing its market reach and service capabilities. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its maritime and retail clientele. Technically, the site is built on WordPress with Elementor, integrating modern analytics and user experience tools like Google Analytics and Hotjar. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the website demonstrates strong business credibility and compliance with GDPR, supporting its position as a trusted supply partner in its sectors.

M

MMH Malta Ltd

mmh.com.mt

46

MMH Malta Ltd operates as a maritime support service provider based in Malta, offering a comprehensive range of services including port operations, technical support, recruitment and crew logistics, yachting services, and maritime training through its MMH Academy. The company positions itself as a key player in onshore and offshore maritime support, targeting maritime industry clients and partners. The website reflects a medium-sized enterprise with a professional online presence and consistent branding. Technically, the site is built on WordPress with modern web technologies such as jQuery, Google reCAPTCHA, and Yoast SEO, ensuring good SEO and moderate performance. Mobile optimization and accessibility are adequately addressed. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA; however, the absence of security headers and explicit incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, supporting the company's business credibility and market position.

M

Michael Debono Ltd

toyota.com.mt

51

Toyota Malta, operated by Michael Debono Ltd, is the official Toyota dealership in Malta offering a comprehensive range of new and used vehicles, commercial and business fleet options, financing solutions, and after-sales services including servicing, parts, and warranty. The website positions itself as a trusted local automotive provider with a focus on customer experience and sustainable growth. The digital infrastructure is built on WordPress with Elementor and related plugins, providing a modern and responsive user experience. The site integrates Google Tag Manager and Facebook Pixel for marketing and analytics, reflecting a mature digital marketing approach. Security posture is strong with HTTPS enforced and standard security headers present, though no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's market position in Malta.

S

Sullivan Shipping

sullivanshipping.com.mt

55

Sullivan Shipping is a well-established family-led maritime company based in Malta, with a history dating back to 1888. The company offers comprehensive maritime solutions including agency and logistics services, serving a global clientele. Their market position is strong, supported by over 130 years of experience and an ISO 9001 certification, which underscores their commitment to quality and professionalism. The website reflects a mature business with clear branding, consistent messaging, and a focus on maritime industry clients. Technically, the website is built on WordPress using modern plugins and frameworks such as WPBakery Page Builder, Yoast SEO, and Ajax Search Pro. Hosting is provided by GoDaddy, and the site employs HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses security nonces for AJAX calls, but lacks advanced security headers and an incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit consent mechanism for cookies was found. Business credibility is high with clear contact information, social media presence, and trust indicators. Overall, the website presents a professional and trustworthy digital presence for Sullivan Shipping. Strategic recommendations include enhancing security headers, adding an incident response page, and improving accessibility to further strengthen their security posture and compliance.

S

Seatrans Shipping Ltd

seatrans.com.mt

42

Seatrans Shipping Ltd is a Malta-based shipping agency established in 1986, providing a range of shipping and logistics services including shipping agency, husbandry matters, bunker agency, tramp and liner agency, freight services, warehousing, and transhipment. The company targets clients in the shipping and logistics sectors and maintains a regional presence with multiple locations including Malta, Greece, Sicily, Cyprus, and Spain. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the website is built on WordPress CMS using standard web technologies such as Bootstrap, jQuery, and Font Awesome. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking tools are detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks important security headers and explicit security or incident response policies. There is no visible cookie consent mechanism despite having a cookie policy page, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration details align well with the business claims, supporting legitimacy. Overall, the website presents a moderate risk profile with good business credibility but some gaps in security best practices and privacy compliance. Strategic improvements in security headers, incident response transparency, and cookie consent implementation are recommended to enhance trust and compliance.

A

AirX

airx.aero

42

AirX is a well-established UK-based private jet charter airline founded in 2011, offering a diversified fleet and bespoke luxury air travel services to individuals, corporations, governments, and VIP clients globally. The company positions itself as a top-tier operator with strong trust signals including ARGUS Platinum and IS-BAO Stage 2 certifications, and a membership jet card program for frequent flyers. The website reflects a high level of professionalism with comprehensive service descriptions, customer testimonials, and multiple contact channels including forms, email, phone, and WhatsApp. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Google reCAPTCHA v3, ensuring secure and user-friendly data collection. Performance is moderate with good mobile optimization and accessibility features. SEO and metadata are well implemented, including Open Graph and JSON-LD structured data enhancing search visibility. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, representing an area for improvement. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms in place. Overall, AirX demonstrates a mature digital presence with strong business credibility and security awareness. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and continuous monitoring of third-party scripts to maintain security integrity.

M

Malta Public Transport

publictransport.com.mt

51

Malta Public Transport operates as the primary public transportation provider in Malta, offering comprehensive bus services including journey planning, real-time updates, and card management. The website is well-structured, targeting both local residents and tourists, with a focus on ease of use and accessibility. The technical infrastructure is based on WordPress with modern plugins and integrations such as Google Maps API, Cookiebot for consent management, and analytics tools like Google Analytics and Hotjar. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is robust, supported by a detailed privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness, reflecting the organization's commitment to service quality and user experience.

E

eCabs

ecabs.com.mt

50

eCabs is a leading ride-hailing and taxi service provider based in Malta, offering a comprehensive mobility platform including ride-booking apps, taxi software solutions, and corporate account management. The company leverages over 14 years of operational experience and integrates real-time traffic data to optimize service delivery. Their market position is strong within Malta, supported by a medium-sized, technology-driven business model targeting both individual riders and corporate clients. Technically, the website is built on WordPress with a modern tech stack including SEO and analytics tools, and it demonstrates good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or compliance gaps were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for the business.

S

Smelne Yachtcenter

smelne.nl

37

Smelne Yachtcenter is a well-established Dutch company specializing in motor yachts, offering services including new builds, brokerage, refit, and maintenance since 1968. Positioned as a leading watersport company in Europe, it caters primarily to motor yacht owners and buyers. The website reflects a mature digital presence with a modern WordPress-based infrastructure utilizing Elementor, Yoast SEO, and Cookiebot for compliance. Security posture is strong with HTTPS, cookie consent management, and reCAPTCHA integration, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Motherwell Bridge Industries Ltd.

mbmalta.com

58

Motherwell Bridge Industries Ltd. is a well-established Maltese company specializing in customized engineering services, particularly in on-site assembly and maintenance of port-handling equipment. Founded in 1992, the company holds a strong market position as a leader in its sector and serves industrial and marine engineering clients. The website reflects a professional digital presence with clear branding, consistent messaging, and a focus on key services such as crane services, marine engineering, and industrial supplies. Technically, the site is built on WordPress with modern frameworks like Elementor and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Aage Hempel Group

aagehempel.com

36

Aage Hempel Group is a specialized maritime service provider offering installation, maintenance, surveys, and spare parts supply for marine electronics worldwide. With a strong global presence through 31 offices in 11 countries and a network of certified technicians, the company ensures high-quality service for vessels on major maritime routes. Their partnerships with leading brands and classification societies position them as a trusted player in the maritime electronics sector. Technically, the website is built on WordPress using modern plugins and themes, optimized for SEO and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. No critical vulnerabilities or security issues were detected. Overall, the website and business demonstrate professionalism, compliance, and a solid market position.

A

Air Malta Plc.

airmalta.com

49

Air Malta Plc., the national airline of Malta, ceased flight operations on March 30th, 2024 after 50 years of service. The website serves primarily as an announcement platform informing visitors of the cessation and directing them to KM Malta Airlines, the new national airline. The business model was focused on passenger air transport, representing Malta internationally. The website content is basic, with limited contact information and no privacy or terms of service policies published. Technically, the site is built on the GoDaddy Website Builder platform, using modern web fonts and JavaScript frameworks such as React. The site includes a cookie consent banner but lacks advanced analytics or tracking tools. Security posture is moderate with no visible security headers or incident response policies, and no WHOIS data was provided for domain legitimacy analysis.

B

bpostgroup

bpostgroup.com

66

bpostgroup is a leading Belgian postal and logistics operator with a strong presence in Europe, North America, and Asia. The company specializes in mail and parcel delivery as well as e-commerce logistics, serving consumers, businesses, and government entities. Their website reflects a mature business with comprehensive investor relations, sustainability initiatives, and a broad portfolio of subsidiaries. Technically, the site is built on Drupal 10, uses modern web technologies, and is optimized for mobile and accessibility. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's market position as a major postal and logistics provider.

B

bpost nv

bpost.be

77

bpost nv is the official Belgian postal service provider, offering a wide range of postal and parcel delivery services both nationally and internationally. The company targets residential and business customers, providing key services such as parcel sending and receiving, registered mail, and digital tools including a mobile app for shipment tracking and management. The website reflects a strong market position as Belgium's leading postal operator with a comprehensive service portfolio. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and integrates various third-party tools for analytics, marketing, and user feedback. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and follows good security practices, though explicit security policies and incident response contacts are not publicly available. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

L

Laisvalaikio Dovanos

superdrive.lt

38

Super Drive is a Lithuanian-based leisure company specializing in supercar driving experiences featuring luxury vehicles such as Ferrari 360 Spider and Lamborghini Gallardo. The company targets individuals and corporate clients seeking unique driving events and gift vouchers. Their market position is niche but well-established within the Baltic region, supported by partnerships with regional leisure experience providers. Technically, the website employs a modern JavaScript stack with Bootstrap and jQuery, integrates Google Tag Manager and reCAPTCHA for analytics and security, and maintains good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforcement and form protection, though formal security policies and incident response contacts are absent. Privacy compliance is addressed through a cookie consent banner and a privacy policy page in Lithuanian, indicating GDPR awareness. Overall, the website is professional, trustworthy, and functional with clear contact information and customer testimonials enhancing credibility.

A

Akciju sabiedrība "CATA"

cata.lv

41

Akciju sabiedrība "CATA" is a Latvian regional transportation company specializing in regular bus services, bus rentals, heavy vehicle maintenance, and related services such as tachograph inspection and room rental. The company targets regional passengers and businesses requiring transportation and vehicle services, positioning itself as a key regional transport operator in Latvia. The website reflects a medium-sized enterprise with a professional online presence, providing clear service descriptions and contact information. Technically, the site is built on Joomla CMS with Gantry 5 framework, integrating modern web technologies and Google Maps for location services. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are found. Overall, the site is trustworthy and compliant with GDPR basics, but could improve security and transparency aspects.

P

pj101

pj101.net

42

pj101.net is a Japanese website focused on providing comprehensive food event coordination, vendor support, and transportation logistics services. The company targets event organizers, convention centers, and facilities, aiming to streamline food event operations through integrated logistics solutions. The website uses modern web technologies including Nuxt.js and Vue.js, hosted on Google Cloud Storage, and demonstrates good mobile optimization and SEO practices. However, it lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact emails or phone numbers, relying solely on a contact form for communication. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and functional but could improve transparency and compliance.

I

ITS Latvia

its-latvia.com

10

ITS Latvia is a platform that unites participants in intelligent transport and logistics systems in Latvia, offering a wide range of innovative solutions to ensure an efficient, safe, and sustainable transport sector both domestically and internationally. The website is built on the Wix platform, leveraging modern technologies such as React 18 and various Wix apps for bookings, events, and e-commerce. The technical infrastructure is solid, with good security practices including HTTPS and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is basic, with a cookie consent banner and a privacy policy linked via the cookie banner. Overall, the website presents a professional and trustworthy image, targeting stakeholders in the transport and logistics industry in Latvia and the broader Nordic and European regions.

O

OSM Maritime Group

osmthome.com

61

OSM Thome is a globally recognized leader in ship management, crew management, and marine services, managing a diverse fleet of approximately 1,000 vessels. The company emphasizes sustainability, digital innovation, and crew welfare, positioning itself as a progressive maritime services provider. Their market position is strong, supported by a solid financial foundation and a comprehensive service portfolio including green initiatives like EVIGO. Technically, the website is built on WordPress with the Divi theme, leveraging modern analytics and marketing tools, and hosted likely on SiteGround. Security posture is robust with HTTPS and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the company demonstrates high professionalism and trustworthiness, supported by consistent WHOIS data and multiple trust indicators.

L

LatRailNet

lrn.lv

52

AS LatRailNet is a state-owned enterprise and subsidiary of Latvijas dzelzceļš, responsible for managing public railway infrastructure in Latvia. The company performs essential functions such as capacity allocation, train path assignment, and infrastructure fee management. The website provides comprehensive regulatory and operational information targeted at railway operators, regulatory bodies, and stakeholders in the transportation sector. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and SEO compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site reflects a professional and trustworthy organization with transparent business practices and regulatory compliance.

L

Latvijas dzelzceļa vēstures muzejs

railwaymuseum.lv

57

The Latvijas dzelzceļa vēstures muzejs (Latvian Railway Museum) is a cultural institution dedicated to preserving and presenting the history of railways in Latvia. It operates as a small-sized non-profit entity affiliated with the Latvian Railways group, offering museum exhibitions, educational programs, guided tours, and a souvenir shop. The website is professionally designed using Drupal 7 CMS and Bootstrap, providing a responsive and user-friendly experience primarily in Latvian with English language support. The museum targets general visitors, railway enthusiasts, students, and event organizers, positioning itself as a leading railway heritage institution in Latvia. Technically, the website employs a mature but somewhat dated technology stack including jQuery 1.8, Drupal 7, and Bootstrap 3. It integrates Google Maps and Google Analytics for enhanced user experience and analytics. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS with no detected WAF or blocking mechanisms, ensuring secure access. From a security perspective, the site demonstrates good practices such as cookie consent compliance and no visible vulnerabilities or exposed sensitive data. However, it lacks advanced security headers and uses an older jQuery version, which could be improved. Privacy compliance is strong with GDPR-aligned cookie and privacy policies. Contact information is clearly presented, though no explicit security or incident response policies are found. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its cultural and educational mission effectively. Strategic improvements in security headers, technology updates, and explicit security policies would enhance its security posture and trustworthiness further.

S

Secretariat of Latvian Ports, Transit and Logistics Council

vialatvia.com

62

VIA Latvia operates as a unifying information portal for the Latvian transport and logistics industry, providing comprehensive sector information, contact details, and industry news. The website targets professionals and stakeholders in the transport sector, positioning itself as a key resource for Latvian transport modes including ports, railways, road transport, aviation, and logistics. The platform also supports multilingual access and participates in international expos, enhancing its industry presence. Technically, the website is built on WordPress using Elementor and several plugins such as Jet Elements and Cherry Framework. It employs modern JavaScript libraries like jQuery, Swiper, and Slider Pro for interactive elements. The site shows moderate performance and good mobile optimization, though accessibility features could be improved. SEO is basic but present with meta tags and structured navigation. Security posture is moderate with HTTPS usage and a cookie consent mechanism in place. However, no advanced security headers or explicit security policies are detected. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is basic, with a privacy and cookie policy present but no explicit GDPR compliance statements or data protection officer contact. Overall, the website is professional and trustworthy with a solid business credibility score. Recommendations include enhancing security headers, adding terms of service and incident response policies, improving accessibility, and strengthening privacy compliance to align with GDPR and other regulations.

V

VAS Latvijas dzelzceļš

ldz.lv

58

VAS Latvijas dzelzceļš is the national railway company of Latvia, operating as a large state-owned enterprise focused on rail freight and passenger transport, infrastructure management, and related services including energy sales and logistics. The company maintains a strong market position as the primary rail operator in Latvia, serving both business and private customers. Their digital presence is supported by a Drupal 7 CMS platform with modern frontend technologies such as Bootstrap and jQuery, and includes integration with major social media platforms and analytics tools. The website demonstrates a mature technical infrastructure with good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with comprehensive privacy and cookie policies in Latvian, aligned with GDPR requirements. Overall, the website and business exhibit high trustworthiness and professionalism, supported by certifications such as ISO 50001 and clear contact information. The domain registration details are consistent with the company's identity and history, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and modernizing the CMS for improved security.