Transportation security reports

G

Gaia System AB

gaia.se

48

Gaia System AB specializes in providing advanced digital solutions for public transport, including a cloud-based real-time platform and an online vehicle platform that enhance traffic and passenger information management. Recently acquired by Axentia Group, Gaia is positioned as a niche player focused on integrating real-time data and AI-driven services for transport authorities, operators, and passengers. The website demonstrates a mature digital presence with comprehensive content, customer testimonials, and clear business messaging. Technically, the site is built on WordPress with modern frameworks and includes robust security measures such as HTTPS, reCAPTCHA, and consent management. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. Overall, Gaia exhibits a strong security posture with no critical vulnerabilities detected, supporting its credibility and trustworthiness in the transportation technology sector.

O

OSM Maritime Group

osm.no

61

OSM Maritime Group operates as a leading global ship management company under the brand OSM Thome, managing a diverse fleet of approximately 1,000 vessels including tankers, bulkers, offshore, and cruise ships. The company emphasizes sustainability, crew welfare, and digital innovation, positioning itself as a market leader with a strong financial foundation and comprehensive marine services. Their business model integrates ship technical management, crew management, and a variety of marine services, supported by a global presence in over 20 countries. Technically, the website is built on WordPress using the Divi theme, enhanced with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided by SiteGround, and the site demonstrates good performance, mobile optimization, and SEO practices. The presence of a chatbot and advanced tracking indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved to enhance transparency and readiness. Overall, the website reflects a professional, trustworthy maritime services company with a solid digital presence and good security posture. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.

S

Suzuki Sverige

suzuki.se

39

Suzuki Sverige operates as the official Swedish portal for Suzuki products, providing navigation to specialized sites for automobiles, motorcycles, marine products, and ATVs. The website serves primarily as a brand presence and gateway for Swedish customers interested in Suzuki offerings. The technical infrastructure is basic, relying on a legacy CMS (Waxtrapp) and custom JavaScript, with Google Analytics integrated for visitor tracking. The site lacks modern web standards such as HTTPS, mobile optimization, and accessibility features, indicating a low digital maturity level. Security posture is weak, with no visible security headers or privacy policies, and no secure forms or contact mechanisms. Overall, the site presents moderate trustworthiness but requires significant improvements in security and compliance to meet current standards.

V

Västtrafik AB

vasttrafik.se

52

Västtrafik AB operates as the regional public transportation authority for Västra Götaland, Sweden, providing comprehensive travel planning, ticketing, and traffic information services. The website serves a broad audience of public transport users in the region, offering tools and information to facilitate travel across multiple modes including bus, tram, train, and ferry. The business is positioned as a key regional transport provider under the Västra Götalandsregionen umbrella, with a large operational scale and a focus on sustainable and accessible mobility solutions. Technically, the website is built on the EPiServer CMS platform, leveraging modern JavaScript frameworks and libraries, including Matomo for analytics and EPiServer Forms for user feedback and contact forms. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate to fast performance profile. Hosting appears to be managed by the regional government infrastructure, ensuring reliability and alignment with public sector standards. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements cookie consent mechanisms compliant with GDPR. While explicit security policies and incident response contacts are not published, the site shows adherence to best practices with no visible vulnerabilities or exposed sensitive data. The use of nonce attributes in scripts and consent-based tracking further enhance security and privacy. Overall, Västtrafik's website reflects a mature digital presence with strong business credibility, good technical implementation, and a solid security posture. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure guidelines to further enhance trust and compliance.

P

Polestar

polestar.com

61

Polestar is a premium electric vehicle brand focused on delivering high-performance electric cars with a strong commitment to sustainability and innovation. The website targets consumers interested in electric vehicles, offering detailed product information, leasing options, and charging solutions. The brand positions itself as a leader in the electric transportation sector with a comprehensive digital presence. Technically, the website employs modern web technologies including React, CSS-in-JS, and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and provides a vulnerability disclosure page, indicating a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable digital asset for Polestar. Strategic recommendations include publishing detailed security policies and incident response information to enhance transparency and trust.

Schmiedmann Sverige AB operates as Sweden's largest independent BMW specialist, offering an extensive e-commerce platform for BMW and MINI styling, tuning, and spare parts. The company maintains a strong market position with a comprehensive product catalog exceeding 300,000 items, targeting vehicle owners, workshops, and enthusiasts. Their digital presence is supported by a professional website with clear navigation, mobile optimization, and active social media engagement across Facebook, YouTube, Instagram, and TikTok. The technical infrastructure is built on ASP.NET with modern libraries and analytics integrations, ensuring a robust and scalable platform. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of security tokens in forms, though there is room for enhancement in security headers and library updates. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

The website lindgrenbil.se is a Swedish-language car workshop and vehicle maintenance service site focused on providing safe car service and related automotive information. It targets vehicle owners in Sweden with blog content covering topics such as vehicle inspections, tire problems, oil changes, and common car faults. The business model is that of a small local automotive service provider, with no explicit corporate or parent company information available. Technically, the site is built on WordPress using standard themes and jQuery libraries, with moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is basic, with no visible security headers or incident response contacts, and no privacy or cookie policies are present, indicating low privacy compliance. The site does not expose sensitive data or use vulnerable libraries but would benefit from improved security and compliance measures. Overall, the site is functional and informative but lacks critical trust and compliance elements.

V

Volvo Group

volvoit.com

59

Volvo Group is a leading global enterprise specializing in commercial transport and infrastructure solutions, including trucks, buses, construction equipment, and marine and industrial engines. With a workforce of nearly 102,000 employees and operations in almost 180 markets, Volvo Group maintains a strong market position supported by a diverse portfolio of 14 brands and comprehensive financing and service solutions. The website reflects a mature and professional corporate presence, targeting investors, suppliers, job seekers, and customers worldwide. Technically, the website leverages Adobe Experience Manager as its CMS, integrates advanced media delivery via Scene7, and employs modern analytics and consent management tools such as Adobe Analytics and OneTrust. The site demonstrates excellent performance, mobile optimization, and accessibility, with a well-structured navigation system and rich multimedia content. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website presents a trustworthy and professional digital footprint consistent with Volvo Group's corporate stature. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing a vulnerability disclosure policy to further strengthen trust and compliance.

Apollo Tyres Ltd. operates a corporate website showcasing its two key tyre brands, Apollo Tyres and Vredestein, targeting a global automotive audience. The company emphasizes its legacy, product range, and premium positioning, particularly for Vredestein. The website is built on Adobe Experience Manager and integrates modern analytics and marketing tools such as Google Tag Manager and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security and privacy policy pages are not found in the provided content. Overall, the site presents a professional and trustworthy corporate image with good user experience and compliance mechanisms.

H

Haldex

haldex.com

42

Haldex is a well-established manufacturer specializing in braking and air suspension systems for heavy trucks, trailers, and buses, with over 130 years of industry experience. The company operates as a strong brand under the SAF-HOLLAND Group, targeting commercial vehicle manufacturers and fleet operators. Their website reflects a professional corporate presence with clear business information and a focus on innovation and sustainability. Technically, the site is built on modern frameworks including React and Episerver CMS, hosted on Microsoft Azure, and integrates advanced analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforcement and cookie management, though explicit security policies and incident response details are absent. Overall, the site demonstrates good digital maturity and business credibility, supporting Haldex's market position as a trusted supplier in the transportation sector.

E

Express Delivery Sweden Logistics Group AB

expressdelivery.se

47

Express Delivery Sweden Logistics Group AB (EDS) is a Swedish-based global transport and logistics company offering comprehensive logistics solutions including road, air, sea, container, and rail freight. The company emphasizes personalized support, quality assurance, and strategic optimization of supply chains. Their market position is strengthened by partnerships with leading global logistics providers and a broad service portfolio tailored to business needs. The website reflects a mature digital presence built on WordPress with advanced performance optimizations and multilingual support. Security posture is strong with HTTPS enforcement, security headers, and GDPR compliance, though explicit security policies and incident response information are absent. Overall, EDS presents a professional and trustworthy business front with clear contact channels and compliance mechanisms.

T

Transdev

transdev.se

45

Transdev Sverige AB operates as one of the largest public transportation providers in Sweden, offering environmentally friendly travel options by sea, rail, and road. As part of the international Transdev Group, the company leverages a large workforce to facilitate millions of sustainable journeys daily. Their business model focuses on integrated transport solutions, including vehicle maintenance, traffic management, and passenger services, targeting both commuters and leisure travelers. The website reflects a mature digital presence with clear branding, comprehensive service descriptions, and active recruitment efforts. Technically, the website is built on WordPress with modern JavaScript modules and SEO optimizations via Yoast. Hosting is provided by OhMyHosting, with good mobile responsiveness and accessibility features. The site uses HTTPS with nonce-based script loading, indicating attention to security best practices, although explicit security headers are not detected. Analytics are implemented via Google Analytics, with privacy and cookie policies in place, demonstrating GDPR compliance. Security posture is solid with no visible vulnerabilities or blocking mechanisms. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure limits transparency. The domain registration is consistent with the business identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly platform that supports Transdev's market position as a leading transportation provider in Sweden. Strategic improvements in security transparency and terms of service publication could further enhance compliance and user trust.

G

Green Cargo

greencargo.com

61

Green Cargo is a prominent Swedish logistics company specializing in sustainable rail freight transport solutions. The company positions itself as a climate-smart and cost-effective logistics partner, serving primarily business customers seeking environmentally friendly transport options. Their website reflects a mature digital presence with comprehensive content, clear navigation, and a strong emphasis on sustainability and customer engagement through case studies and partner showcases. The technical infrastructure leverages modern JavaScript frameworks such as React and is built on the SiteVision CMS platform, with integrated Piwik PRO analytics for user tracking and performance insights. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not present, indicating areas for improvement in transparency and security maturity. No critical vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration uses privacy protection, which is justified for this business type and does not raise immediate concerns. Overall, Green Cargo's website demonstrates a high level of professionalism, technical competence, and privacy compliance, supporting its market position as a leading sustainable logistics provider in Sweden. Strategic enhancements in security policy publication and incident response readiness would further strengthen trust and resilience.

Mitsubishi Forklift Trucks Europe operates a comprehensive website offering detailed information about their range of forklift trucks and warehouse equipment. The company is positioned as a leading provider in the transportation sector, serving businesses across Europe, Africa, and the Middle East. Their offerings include sales, short and long-term hire, operator training, parts, and extended warranty services. The website demonstrates a mature digital presence with multi-language support and regional targeting. Technically, the site uses AngularJS, jQuery, and Bootstrap frameworks, integrating Google Maps and Vimeo for enhanced user experience. Security measures include HTTPS, IP anonymization in analytics, and a robust cookie consent mechanism, although additional security headers and modern framework updates are recommended. The site is well-structured, professionally designed, and includes comprehensive privacy and cookie policies, aligning with GDPR requirements. Contact information is clearly presented, including a contact form collecting personal data. No critical security issues or WAF blocks were detected, and domain registration details are consistent with the business identity, indicating a trustworthy and legitimate online presence.

Honda UK operates as a prominent division of the global Honda Motor Co., Ltd., offering a broad portfolio of vehicles and power products including cars, motorcycles, marine engines, and lawn and garden equipment. The website serves as an official portal targeting UK consumers, providing product information and corporate disclosures such as Modern Slavery and Gender Pay Gap reports. The site demonstrates a mature digital presence with embedded multimedia content and social media integration. Technically, the site leverages modern JavaScript ES6 modules, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a commitment to privacy compliance and user experience. Security posture is moderate with room for improvement in explicit security headers and published policies. Overall, the site is professional, trustworthy, and well-branded, supporting Honda's market position in the UK transportation and manufacturing sectors.

A

APL

apl.com

55

APL is a global logistics and shipping company specializing in advanced supply chain solutions, particularly for the U.S. Government, operating across more than 160 countries. The website reflects a mature digital presence with comprehensive service offerings including maritime, air freight, warehousing, and multimodal solutions. The platform supports shipment tracking, booking, and document management, catering to business and government clients. Technically, the site employs modern JavaScript frameworks like Kendo UI, integrates third-party tools such as WalkMe for user guidance, OneTrust for privacy compliance, and DataDome for bot protection. Security practices include CSRF tokens in forms and cookie consent mechanisms, though additional HTTP security headers could enhance protection. The site is well-structured, mobile-optimized, and SEO-friendly, with a consistent brand identity aligned with its parent company, CMA CGM Group. No WAF or blocking mechanisms were detected, and WHOIS data confirms domain legitimacy and consistency with business claims.

G

Greencarrier

greencarrier.com

49

Greencarrier is a Sweden-based logistics company specializing in sea freight and supply chain solutions with over 30 years of global shipping experience. The company operates primarily in the Nordic and Baltic regions, Poland, Germany, and Singapore, holding a strong market position with subsidiaries focused on Full Container Load and Less than Container Load services. Their website reflects a professional and sustainability-focused business model, targeting organizations requiring efficient and environmentally responsible shipping solutions. Technically, the site is built on WordPress with Elementor and incorporates modern SEO and anti-spam technologies, ensuring a good user experience across devices. Security posture is strong with HTTPS, anti-spam measures, and cookie consent mechanisms, although explicit security policies and incident response details are not published. Overall, the site demonstrates a mature digital presence with good compliance and trust indicators.

Ö

Öhlins Racing AB

ohlins.com

54

Öhlins Racing AB is a leading manufacturer specializing in advanced suspension technology for motorcycles, automotive, mountain bikes, and powersports. With a strong heritage in motorsport and over 400 motorsport titles, the company holds a prominent market position as a trusted OEM and aftermarket supplier. Their website reflects a professional and comprehensive digital presence, targeting motorsport teams, enthusiasts, and OEM partners globally. The business model focuses on manufacturing, OEM partnerships, and aftermarket sales, supported by a well-structured and content-rich website.

T

time:matters GmbH

time-matters.com

46

time:matters GmbH is a medium-sized German logistics company specializing in time-critical, high-performance, and highly supervised transport solutions worldwide. The company positions itself as a reliable global partner offering customized transport services by air, rail, and road. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with performance optimizations and SEO best practices. The site is mobile-optimized and accessible, providing clear navigation and comprehensive content including customer success stories and sustainability commitments. Security posture is solid with HTTPS enabled and secure form handling, though the absence of explicit security policies and cookie consent mechanisms indicates room for improvement. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

A

A.P. Moller - Maersk

safmarine.com

53

The website safmarine.com serves as a transitional informational portal for customers of Safmarine, a subsidiary of A.P. Moller - Maersk, informing them about the integration of Safmarine's services into the Maersk brand and platform. It provides detailed guidance on how customers can continue to track shipments, manage accounts, and book future shipments via Maersk.com. The site is well-structured with multi-language support and comprehensive cookie consent mechanisms, reflecting a mature approach to privacy and compliance. Technically, the site leverages modern technologies including Sitecore CMS, Salesforce Commerce Cloud, and Akamai CDN, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Overall, the site reflects a large enterprise-grade digital presence with good privacy compliance and business credibility.

A

Autoliv

autoliv.com

51

Autoliv is a global leader in automotive passive safety systems and mobility safety solutions, operating in 25 countries with a workforce of approximately 65,000 employees. The company focuses on innovation and sustainability, aiming to save more lives through advanced safety technologies. Their website provides comprehensive investor relations, sustainability, and career information, reflecting a mature and professional digital presence. Technically, the site is built on Drupal 10 with modern libraries and frameworks, optimized for mobile and accessibility. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website reflects a trustworthy and credible enterprise with a solid digital infrastructure.

Volkswagen Group Sverige AB operates as Sweden's largest automotive importer, representing major brands such as Volkswagen, Audi, SEAT/CUPRA, SKODA, Porsche, and Volkswagen Transportbilar. The website serves multiple audiences including customers, partners, media, and job seekers, providing comprehensive information about the company, news updates, and contact options. The business model focuses on import, distribution, authorized service partnerships, and training services, positioning itself strongly in the Swedish automotive market as a key player under the Volkswagen AG umbrella. Technically, the website is built on the Episerver CMS platform, utilizing modern JavaScript libraries including jwplayer and jQuery, and integrates Google Analytics with user consent. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site employs a robust cookie consent mechanism with granular user controls, aligning with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or exposed sensitive data were found, but security headers and advanced protections could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a high level of business credibility. Strategic enhancements in security transparency and accessibility would further strengthen its posture.

P

PostNord Sverige

postnord.se

50

PostNord Sverige operates as a leading postal and logistics service provider in Sweden, offering parcel and letter tracking, online freight purchasing, and product sales including packaging and stamps. The website reflects a mature digital presence with a strong focus on user experience, mobile optimization, and sustainability initiatives. Technically, the site leverages modern analytics and consent management tools such as Google Tag Manager, Microsoft Application Insights, Optimizely, and OneTrust, hosted likely on Microsoft Azure and built on Episerver CMS. Security posture is robust with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting a large enterprise business model in the transportation sector.

L

Logent

logent.se

37

Logent AB is a leading independent logistics partner in the Nordic region, specializing in contract logistics and a broad range of services designed to guarantee cost and quality improvements for their clients. The company operates across multiple countries including Sweden, Norway, Denmark, Finland, and the Netherlands, serving businesses requiring comprehensive logistics solutions. Their service portfolio includes logistics consulting, warehousing, production logistics, transport management, customs services, ports and terminals operations, staffing, and recruitment. The website reflects a mature digital presence with strong SEO, multilingual support, and integration of marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in explicit security policies and headers. Overall, Logent demonstrates a professional and trustworthy online presence consistent with a large enterprise in the transportation sector.

C

Carglass®

carglass.se

46

Carglass® is a well-established Swedish company specializing in automotive glass repair and replacement services. As part of the global Belron group, it holds a strong market position in Sweden, offering services such as stone chip repair, windshield replacement, side and rear window replacement, and windshield calibration. The company targets car owners in Sweden seeking fast, reliable, and professional automotive glass services. The website reflects a mature digital presence with modern technologies like Next.js and React, integrated consent management, and strong SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies. Contact information is comprehensive, including phone, physical addresses, and social media channels. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

T

T-Engineering

t-engineering.se

49

T-Engineering AB is a Scandinavian development company specializing in control systems and electrification solutions for future mobility. The company offers a comprehensive suite of services including electrical architecture development, integration, calibration, validation, and hardware-in-the-loop testing. Their market position is strengthened by their in-house IP and close ties to automotive industry players, including implied association with Dongfeng Motor. The website reflects a medium-sized enterprise with a strong focus on technology and transportation sectors, targeting automotive manufacturers and mobility solution providers. Technically, the website is built on a modern WordPress CMS platform using Elementor and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is adequate with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the security posture is sound with no critical vulnerabilities detected, and the domain registration details align well with the business claims, indicating legitimacy. The company maintains active social media channels and provides clear contact information, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and maintaining regular security audits to strengthen compliance and resilience.

L

Laxå Special Vehicles AB

laxasv.se

41

Laxå Special Vehicles AB is a specialized manufacturer and developer of custom special vehicles, with a strong legacy dating back to 1968. The company focuses on producing and customizing vehicle cabins and chassis, particularly CrewCab models, tailored to customer specifications. Their close collaboration with Scania positions them as a trusted niche player in the transportation sector in Sweden. The website reflects a professional and consistent brand image, targeting customers requiring specialized vehicle solutions. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, integrating analytics tools like Google Analytics and Facebook SDK for marketing and tracking. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security-wise, HTTPS is enforced, but the absence of security headers and explicit security policies indicates room for improvement. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR adherence information. Overall, the security posture is solid but could be enhanced by implementing security headers, publishing security policies, and adding cookie consent. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The website provides clear contact information and social media presence, reinforcing business credibility.

V

Volvo

volvo.com

52

Volvo is a globally recognized enterprise specializing in manufacturing and selling vehicles and related products across multiple sectors including cars, trucks, buses, construction equipment, marine and industrial engines, defense, autonomous solutions, energy, and financial services. The website reflects a strong market position with comprehensive offerings and a clear focus on quality, safety, and environmental care. The digital infrastructure is built on Adobe Experience Manager and Scene7 platforms, leveraging modern technologies for content delivery, media management, and analytics. Privacy compliance is robust, with clear cookie consent mechanisms and detailed privacy policies. Security posture is strong, with HTTPS enforced and best practices observed, although explicit security and incident response policies are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

R

Ramirent AB

ramirent.se

52

Ramirent AB is a leading equipment rental company operating primarily in Sweden and the Nordic region, offering a wide range of construction and industrial equipment along with digital services and training. The company emphasizes safety, knowledge, and sustainability, as evidenced by its ISO 9001, 14001, and 45001 certifications. The website reflects a mature digital infrastructure using modern technologies such as Next.js and React, with strong mobile optimization and good SEO practices. Security posture is robust with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and accessible web presence. Overall, Ramirent demonstrates a strong market position with clear business credibility and compliance with privacy regulations.

Z

Zeekr Technology Europe AB

cevt.se

62

Zeekr Technology Europe AB, formerly known as CEVT, is a leading technology company specializing in electric mobility solutions. Based in Gothenburg, Sweden, the company employs over 900 researchers and engineers focused on developing intelligent, sustainable, and user-centric automotive technologies. Their offerings include advanced in-car experiences, smart driving systems, future mobility platforms, and energy efficiency optimizations, positioning them as a key player in the electric vehicle technology sector within the Geely Group ecosystem. The website reflects a mature digital presence with comprehensive content, modern technology stack, and strong compliance with privacy regulations including GDPR. Security posture is robust with HTTPS enforcement, security headers, and consent management mechanisms in place. However, explicit security policy and incident response contacts are not prominently published, suggesting room for improvement. Overall, the company demonstrates high professionalism, trustworthiness, and alignment between their digital footprint and business identity.

M

Modulsystem Sweden AB

modulsystem.se

37

Modulsystem Sweden AB is a well-established company specializing in payment and ticketing systems primarily for parking and public transportation sectors in Sweden. With over 30 years of experience, the company offers a range of services including payment solutions, card terminals with proprietary transaction handling, system management, and software development. Their business model focuses on B2B engagements, targeting organizations requiring innovative and reliable payment infrastructure. The company maintains partnerships with leading manufacturers and has secured framework agreements with notable partners such as Securitas Sverige AB. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and Google Maps API, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and SEO, with good mobile responsiveness and clear navigation. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles. Google Analytics is used for user tracking with transparent cookie information. However, the absence of explicit privacy policies, security headers, and incident response contacts indicates room for improvement in security maturity. Overall, the website presents a professional and credible business front with moderate risk. Strategic enhancements in privacy documentation, security headers, and incident response readiness would strengthen trust and compliance.

G

Gunnebo AB

gunnebo.com

38

Gunnebo AB is a global leader in security solutions, specializing in entrance control and safe storage systems designed to protect valuables and control people flow in various sectors including public transport, banking, retail, and industrial sites. The company operates in over 100 markets and is owned by Altor and Stena Adactum. Their website reflects a mature digital presence with comprehensive content, clear branding, and a focus on customer engagement through testimonials and detailed business unit information. Technically, the site is built on WordPress with modern technologies such as React and integrates marketing and analytics tools like HubSpot and Google Tag Manager, supported by a robust cookie consent mechanism via OneTrust.

V

Vy flygbussarna

flygbussarna.se

52

Vy flygbussarna is a well-established transportation company specializing in airport shuttle services across Sweden. With a history dating back to 1989, the company offers reliable, sustainable, and affordable travel options to six major Swedish airports. Their digital presence is robust, featuring a modern, responsive website built on Next.js and Chakra UI, integrated with Google Maps and advanced analytics via Piwik PRO. The site demonstrates strong privacy compliance with comprehensive cookie consent mechanisms and clear privacy and terms of service documentation. Security posture is solid, with HTTPS enforced and appropriate security headers in place, though there is room for improvement in publishing dedicated security policies and incident response contacts. Overall, Vy flygbussarna presents a professional, trustworthy, and user-friendly online platform that supports their market position as a leading airport shuttle provider in Sweden.

S

Södertälje Hamn

soeport.se

46

Södertälje Hamn operates as a regional port located in one of Sweden's most expansive regions near Stockholm and Mälardalen. The company provides key port services including RoRo, container handling, energy port operations, and project cargo logistics. Their market position is that of an important transportation and energy sector player serving businesses in the region. The website reflects a medium-sized enterprise with a focus on sustainability and infrastructure proximity. Technically, the site uses AngularJS framework, integrates Matomo and Google Analytics for tracking, and supports mobile responsiveness with a moderate performance profile. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and incident response disclosures. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business credibility effectively.

R

RN Nordic AB

renault.se

47

Renault Sverige, operated by RN Nordic AB, is a prominent automotive company specializing in manufacturing and selling a wide range of vehicles including electric cars, hybrids, transport vehicles, and sport cars. The website targets Swedish consumers and businesses, offering services such as vehicle sales, leasing, financing, after-sales support, and test drive bookings. The company holds a strong market position in Sweden with a consistent and professional brand presence. Technically, the website is built on modern frameworks like Next.js and Sitecore CMS, integrating advanced tracking and consent management tools such as Google Tag Manager and Usercentrics CMP. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

M

Motor-Service Sweden AB

motor-service.se

41

Motor-Service Sweden AB is an independent aftermarket supplier specializing in spare parts for Vasa 4-stroke engines. Established since 1969, the company serves a global customer base with a focus on personal service and high-quality products. Their market position is that of a niche supplier with a long-standing reputation in the transportation sector, particularly maritime and power plant engines. The website reflects this business focus with clear contact information and product descriptions tailored to their target audience. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and LiteSpeed caching for performance optimization. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Analytics and marketing tools like Google Analytics and Facebook Pixel are implemented, but without visible cookie consent mechanisms, indicating room for privacy compliance improvement. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and explicit security or incident response policies. No privacy or cookie policies were found, which is a compliance gap under GDPR. No critical vulnerabilities or exposed sensitive data were detected, but the absence of security best practices and policies suggests moderate security maturity. Overall, the website is professional and functional with moderate risk. Strategic recommendations include implementing privacy and cookie policies, adding security headers, publishing incident response information, and enhancing GDPR compliance to improve trust and security posture.

S

SJ

sj.se

48

SJ.se is the official website of SJ, the leading Swedish rail operator offering train ticket booking and travel information services primarily for travel within Sweden and to nearby international destinations such as Copenhagen and Oslo. The website targets both domestic and international travelers seeking convenient rail travel options. The business model centers on ticket sales and travel-related services, positioning SJ as a key player in Sweden's transportation sector. Technically, the website employs a modern React-based frontend with integrations including Adobe Launch for tag management, Microsoft AppInsights for monitoring, and Queue-Fair for traffic management. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a smooth user experience. External resources are loaded from trusted domains, and the site uses HTTPS with a good SSL configuration. From a security perspective, SJ.se enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers and incident response policies are not directly visible in the HTML, the site shows no signs of exposed sensitive data or vulnerable libraries. Tracking technologies include Adobe Analytics and Facebook Pixel, with moderate user tracking levels balanced by privacy compliance measures. Overall, SJ.se presents a professional, trustworthy, and well-maintained digital presence consistent with a large transportation enterprise. Recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further enhance transparency and security posture.

V

Veoneer

veoneer.com

54

Veoneer is a globally recognized leader in automotive safety electronics, specializing in the design, manufacture, and sale of advanced restraint control systems and safety sensors. The company emphasizes its mission to protect everyone in every crash and demonstrates a strong commitment to sustainable mobility and innovation. Their market position is solid, with over one billion sensors and electronic control units delivered worldwide, serving automotive manufacturers and partners. The website reflects a professional and consistent brand image, targeting industry stakeholders and potential employees. Technically, the website is built on Drupal CMS with modern frontend technologies such as Bootstrap and jQuery, ensuring good mobile optimization, accessibility, and SEO practices. The site integrates third-party services like YouTube and Investis Digital's cookie manager, indicating a mature digital infrastructure. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a high level of professionalism and trustworthiness, with minor areas for improvement in security transparency and legal documentation. The domain registration details align well with the company's identity, supporting the legitimacy of the online presence.

M

Mobill

mobill.se

54

Mobill is a Swedish company providing a mobile app solution for parking and electric vehicle charging payments. The company positions itself as a convenient and secure payment platform, offering users the ability to pay via invoice or card and only for the actual usage time or energy consumed. The website reflects a mature digital presence with partnerships in the sports and municipal sectors, indicating a solid market position in the Scandinavian transportation and energy sectors. Technically, the site uses AngularJS and integrates modern analytics and tracking tools, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, user-friendly, and trustworthy, supporting Mobill's business credibility in its domain.

E

Evolution Time Critical

evolution-timecritical.com

40

Evolution Time Critical is a UK-based logistics company specializing in urgent and critical supply chain solutions. With over 20 years of experience and a strong market position, it offers a wide range of services including emergency logistics, critical deliveries, express deliveries, and supply chain analysis. The company operates globally with multiple control centers and is a subsidiary of Metro Supply Chain. The website reflects a professional and well-branded digital presence with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Analytics, HubSpot, and Contact Form 7. It is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security practices include HTTPS enforcement and use of Google reCAPTCHA on forms, but additional security headers and a public security policy are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism aligned with GDPR. Contact information is comprehensive and clearly presented. Overall, the website demonstrates a mature digital infrastructure supporting the company's business goals. Strategically, the company should consider publishing a formal security policy and vulnerability disclosure to enhance trust and compliance. Improving accessibility and security headers would further strengthen the security posture and user experience.

T

Trafikverket

trafikverket.se

46

Trafikverket is the Swedish government agency responsible for the long-term planning and management of the country's transport systems, including road traffic, railways, shipping, and aviation. The website trafikverket.se serves primarily private individuals with comprehensive information on traffic conditions, driving licenses, and ongoing infrastructure projects. The agency holds a strong national position as the authoritative source for transport infrastructure in Sweden, offering key services such as traffic information, booking for driving tests, and updates on major construction projects. Technically, the website is built on the EPiServer CMS platform and utilizes modern web technologies including Bootstrap for responsive design and SVG for graphics. The site demonstrates good performance and accessibility, with clear navigation and mobile optimization. Privacy and cookie policies are well implemented, featuring a consent mechanism and detailed information pages. Analytics are handled via a proprietary Trafikverket Analytics Tag Manager, with moderate user tracking. From a security perspective, the site enforces HTTPS, employs strict referrer policies, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The WHOIS data confirms the domain's legitimacy as a Swedish government entity, consistent with the website's content and business claims. Overall, Trafikverket.se is a professional, trustworthy, and well-maintained government website with strong content quality and technical implementation. Strategic recommendations include publishing formal security and incident response policies, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

EasyPark Group is a large, Sweden-based global mobility platform specializing in parking technology and urban mobility solutions. The company operates in over 90 countries and 20,000 cities, offering a broad portfolio of services including off-street parking, electric vehicle charging payment solutions, parking data services, and in-car integrations. The website reflects a professional and consistent brand presence with clear navigation and good mobile optimization. Technically, the site uses modern web technologies such as Google reCAPTCHA and Bootstrap, but lacks some advanced security headers and explicit privacy policies. Security posture is moderate with room for improvement in published policies and headers. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

A

A & A Customs Brokers Ltd.

aacb.com

48

A & A Customs Brokers Ltd. is a well-established customs brokerage and trade compliance service provider operating since 1979, primarily serving businesses involved in cross-border trade between the United States and Canada. The company offers a comprehensive suite of services including Canadian and US customs brokerage, CARM management, government contracting solutions, trade consulting, and international logistics. Their target audience includes businesses across diverse industries such as food and beverage, machinery, retail, healthcare, and more. The company positions itself as a trusted partner with over four decades of experience, supported by customer testimonials and industry certifications. Technically, the website is built on the Webflow platform and integrates modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight. The site is hosted on a reliable CDN infrastructure, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the website employs HTTPS with good SSL configuration and secure form handling. However, it lacks important security headers and a formal security policy or incident response information. Privacy compliance is partial, with a clear privacy policy and terms of service but no cookie consent mechanism or GDPR explicit compliance indicators. No vulnerability disclosure or security.txt file is present. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in security best practices and privacy compliance. The domain registration details align well with the business claims, indicating high legitimacy and trustworthiness.

J

Jacksons (CI) Limited Trading as Van Mossel Jacksons

jacksonsci.com

58

Van Mossel Jacksons is a well-established automotive dealership based in Jersey, representing a portfolio of premium automotive brands including Aston Martin, Audi, Bentley, BMW, Jaguar, Land Rover, Mercedes-Benz, MINI, Porsche, Smart, Volkswagen, and Volvo. The company operates as part of the larger Van Mossel Automotive Group, which has a strong European presence and a 77-year heritage. The website reflects a professional and customer-focused business model, offering new and used car sales, servicing, finance, and other automotive-related services. The target audience primarily consists of car buyers and owners in Jersey and Guernsey seeking premium vehicles and related services. Technically, the website employs modern frontend technologies such as Alpine.js, integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for privacy compliance. The site is hosted on Amazon CloudFront CDN, ensuring good performance and availability. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Contact information is clearly presented, enhancing business credibility. Overall, the website demonstrates a mature digital presence aligned with the company's market position and business objectives.

F

FBE Acquisitions

flybe.com

49

Flybe.com is a website dedicated to preserving the legacy and brand of Flybe, once Europe's largest regional airline. The site provides historical information, fleet details, and brand licensing opportunities. It targets aviation enthusiasts, historians, and potential brand licensees. The business operates under FBE Acquisitions and maintains a consistent brand presence with a focus on heritage preservation. Technically, the website is built on the Wix platform using modern technologies including React 18 and Wix's Thunderbolt framework. It features responsive design elements, although mobile optimization is basic. The site integrates Instagram feeds and a professional gallery to showcase historical images. From a security perspective, the site enforces HTTPS and employs scripts to harden fetch and XHR requests. However, it lacks explicit security headers and visible security policies. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages. Overall, the website is professionally designed and trustworthy, but could improve by adding comprehensive privacy policies, terms of service, and clearer contact information to enhance user trust and compliance.

T

Team Novo Nordisk

teamnovonordisk.com

58

Team Novo Nordisk is a pioneering professional cycling team composed entirely of athletes with type 1 diabetes. As the world's first all-diabetes pro cycling team, they aim to inspire, educate, and empower individuals affected by diabetes. The organization is backed by Novo Nordisk, a global leader in diabetes care, reinforcing their strong market position and commitment to health and sports. Their website reflects a professional, well-branded presence with comprehensive content focused on their mission and activities. Technically, the site is built on WordPress with modern tools like Gravity Forms and Beaver Builder, ensuring good performance, mobile optimization, and SEO. Security measures include HTTPS, security headers, and a detailed cookie consent mechanism, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates a mature digital infrastructure and a strong commitment to privacy and compliance.

F

Fraport AG

fraport.com

51

Fraport AG is a globally leading airport operator active at 29 airports across four continents, headquartered in Frankfurt, Germany. The company provides comprehensive airport and terminal operations, including ground handling, security, and infrastructure development. Their business model includes airport investments, consulting, and service offerings, with a strong emphasis on sustainability and digital transformation. The website reflects a mature digital presence with modern CMS technology, comprehensive content, and clear navigation tailored to investors, passengers, and partners. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be explicitly confirmed. Privacy compliance is robust with clear policies and GDPR adherence. WHOIS data confirms legitimacy and consistency with the company's public profile. Overall, the site demonstrates professionalism, trustworthiness, and a strategic focus on innovation and sustainability.

M

Menzies Aviation Limited

menziesaviation.com

55

Menzies Aviation Limited is a globally recognized leader in aviation services, established in 1833 and operating in over 65 countries and 300 airports worldwide. The company offers a comprehensive range of services including ground handling, air cargo, fuelling, and executive services, positioning itself as the world's largest aviation services provider. The website reflects a mature digital presence with professional design, clear navigation, and strong content relevance tailored to aviation industry stakeholders. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Google Tag Manager, Hotjar, and CookieYes for cookie consent management. The site demonstrates good performance, mobile optimization, and accessibility features. SEO is enhanced by Yoast SEO plugin and proper meta tags including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA on forms, and has achieved ISO 27001 certification, indicating a robust information security management system. Cookie consent mechanisms comply with GDPR, and no critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contact details and a security.txt file are not found, representing areas for improvement. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing incident response transparency, maintaining up-to-date third-party scripts, and further strengthening security headers.

A

Astatine Investment Partners

alinda.com

48

Astatine Investment Partners is a private equity firm specializing in mid-market infrastructure investments and equipment leasing. The company positions itself as a leading player in this niche, targeting investors and infrastructure market participants. Their website reflects a professional and consistent brand image with a focus on delivering value through innovative investment strategies. The business model centers on private equity investments in infrastructure sectors, supported by a medium-sized organizational footprint and a founding date of 2022. Technically, the website is built on WordPress with modern SEO practices implemented via the Yoast SEO plugin. The site uses jQuery and Google Fonts, and it demonstrates good mobile optimization and moderate performance. Accessibility is basic but functional, and SEO optimization is good. Hosting details are not explicitly disclosed. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several recommended security headers. There is no visible security policy or incident response contact information, and no vulnerability disclosure mechanism is present. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Recommendations include enhancing security headers, adding cookie consent for GDPR compliance, publishing security policies, and implementing a vulnerability disclosure process to improve the security posture and compliance maturity.