Transportation security reports

W

Wittur Group

wittur.com

40

Wittur Group operates as a leading global supplier of elevator components, offering a broad portfolio including doors, cars, drives, safety devices, and modernization solutions. The company targets elevator manufacturers, suppliers, and service providers, positioning itself as a trusted B2B partner in the transportation sector. Their website reflects a mature digital presence with comprehensive product information, customer service tools, and compliance documentation. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and analytics platforms like Google Analytics and Matomo. However, the absence of a valid SSL certificate and lack of security headers represent significant security weaknesses that could impact user trust and data protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website is professional and content-rich but requires urgent security improvements to meet industry best practices.

T

TachoEASY GmbH

tachoeasy.com

39

TachoEASY GmbH is a medium-sized Austrian company specializing in telematics and tachograph data archiving software solutions for the transportation and logistics sector. With nearly two decades of market presence, it offers products such as tacholog² and BlueLOGICO® targeting fleet operators and transport companies. The website is built on Joomla CMS with modern UIkit framework and integrates various third-party services including Calendly and friendly-challenge captcha for user interaction. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, representing a critical security vulnerability. Security headers are partially implemented but key protections like HSTS and DNSSEC are missing. The company provides comprehensive privacy and cookie policies with a consent mechanism, reflecting good GDPR compliance. Contact information is clearly presented with multiple channels including phone, email, and contact forms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

W

Webasto Group

webasto.com

40

Webasto Group is a mature, enterprise-level global automotive supplier specializing in innovative roof systems, battery solutions, heating, and cooling products. The company is positioned among the top 100 automotive suppliers worldwide, serving automotive manufacturers and end customers with a broad portfolio of products and services. The website is professionally designed, leveraging modern technologies such as Adobe Experience Manager and React, providing a rich user experience with clear navigation and relevant content. However, a critical security issue is the lack of a valid SSL certificate, resulting in no HTTPS enforcement, which significantly impacts the security posture. Privacy and cookie policies are present, indicating awareness of compliance requirements, but the absence of a cookie consent mechanism and security policy pages suggests room for improvement in privacy compliance and transparency. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

A

AMES - Aerospace and Mechanical Engineering Services

ames.aero

19

AMES - Aerospace and Mechanical Engineering Services is a mature Austrian company specializing in aerospace engineering, certification, production, maintenance, CAMO, consulting, and training services. With a domain age of 17 years and multiple aerospace certifications, AMES positions itself as a reliable service provider in the aerospace transportation sector. The website reflects a professional business model targeting aerospace industry professionals and companies requiring specialized engineering and certification services. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs a variety of established JavaScript libraries and frameworks such as jQuery, Bootstrap, and Owl Carousel, indicating a moderate level of digital maturity. However, the site lacks HTTPS encryption and modern security configurations, which significantly impacts its security posture. Performance is rated slow due to missing SSL and potential optimization gaps, though mobile responsiveness and navigation clarity are good. Security evaluation reveals critical vulnerabilities including the absence of SSL/TLS, no HSTS, no DNSSEC, and missing security headers. These gaps expose the site to potential interception and downgrade attacks. The domain's imminent expiry in 11 days adds operational risk. Privacy compliance is minimal, with basic privacy and terms documents available but no cookie consent or incident response contacts. Overall, AMES demonstrates solid business credibility and content quality but requires urgent security improvements to protect its digital assets and customer trust. Strategic recommendations include immediate SSL implementation, enhanced domain protection, and adoption of security best practices to elevate the security score and compliance posture.

BMW USA operates as the official US branch of BMW AG, providing a comprehensive digital platform for luxury vehicle sales, including new, pre-owned, electric, and hybrid models. The website offers rich content, detailed vehicle information, and multiple customer engagement tools such as build-your-own configurators, dealer locators, and financial services. The brand maintains a strong market position as a premium automotive manufacturer with a focus on innovation and customer experience. Technically, the site leverages Adobe Experience Manager, modern JavaScript modules, and integrates various analytics and marketing tools, reflecting a mature digital infrastructure. Security measures are partially implemented with secure cookies and some security headers, but the SSL certificate is invalid or missing, which is a critical issue. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting GDPR compliance. Overall, the website is professional and trustworthy but requires improvements in SSL configuration and security headers to enhance its security posture.

P

Porsche Inter Auto

porschewiennord.at

38

Porsche Inter Auto is a prominent automotive dealership network in Austria, representing multiple Volkswagen Group brands including VW, Audi, Porsche, ŠKODA, SEAT, and CUPRA. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, financing, and accessories. Their market position is strong within the Austrian automotive retail sector, supported by a large network of dealer locations and a high volume of customer reviews indicating strong customer satisfaction. Technically, the website is built on the Plone CMS platform using Python and Zope, with Cloudflare providing hosting and CDN services. The site integrates modern web technologies such as Google Tag Manager, OneTrust for cookie consent, Leaflet and Google Maps for location services, and Swiper for interactive content. The site is well-structured, mobile-optimized, and includes rich content and structured data for SEO. From a security perspective, the site currently lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability. Other security headers like HSTS are missing, and no advanced SSL/TLS features are enabled. However, the site does implement some security headers such as X-Frame-Options and uses Cloudflare for some level of protection. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is professionally designed and content-rich but requires urgent security improvements to enable HTTPS and strengthen SSL/TLS configurations. Addressing these issues will significantly enhance user trust and compliance with modern security standards.

BMW Group Careers website serves as a global recruitment portal for the BMW Group, a leading enterprise in the automotive transportation sector. The site offers extensive information about career opportunities worldwide, highlighting the company's commitment to innovation in autonomous driving, e-mobility, and AI. The website is well-branded, professionally designed, and targets job seekers globally with a focus on technology and automotive professionals. Technically, the site is built on Adobe Experience Manager and uses Akamai CDN and Google Maps API, reflecting a mature digital infrastructure. However, a critical security gap exists as the site lacks HTTPS, exposing users to potential risks. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The absence of direct contact emails or phone numbers is noted, but social media channels are official and active. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

faigle Kunststoffe GmbH is a medium-sized, family-owned company specializing in thermoplastic plastic solutions for industrial sectors such as transportation, intralogistics, public transport, and manufacturing. The company offers a range of products including machined finished parts, holding loops, plastic rollers, and semi-finished products, supported by an online shop. The business is positioned as an innovative and quality-focused player with international subsidiaries and recognized certifications like the Red Dot Design Award and Creditreform creditworthiness certificate. Technically, the website uses nginx, Google Tag Manager, and Matomo Analytics, but lacks a valid SSL certificate, resulting in insecure HTTP access and weak security posture. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. The website is well-structured, mobile-optimized, and professionally branded, though performance is slow and accessibility is basic. Security headers are partially implemented but critical SSL/TLS deficiencies significantly reduce the security score. Overall, the domain registration is consistent and legitimate, matching the business claims.

E

Econsult

econsult.at

25

Econsult is a small Austrian logistics consulting firm specializing in production logistics, supply chain design, transport economics, system and warehouse planning, process management, and public projects. The website targets businesses seeking expert logistics consulting services and presents a professional, content-rich presence primarily in German with English alternatives. The technical infrastructure is based on Joomla CMS with PHP 8 and hosted by Austria Web Hosting. However, the site lacks HTTPS, exposing visitors to significant security risks. Basic security headers are present, but critical SSL/TLS configurations are missing. Privacy compliance is minimal with no cookie consent mechanism despite Google Analytics tracking. Contact information is limited to an obfuscated email address, with no phone or physical address visible. Social media presence includes LinkedIn and Xing profiles.

The Doppelmayr Group website for the Automated People Mover system presents a business focused on transportation solutions, specifically cable liner automated people movers designed to manage high visitor flows efficiently. The company appears to be a large, established entity in the transportation sector based in Austria, with a consistent brand presence and clear business focus. The website content is basic but includes well-structured SEO metadata and social sharing tags, indicating some digital marketing maturity. Technically, the site uses modern frameworks such as Nuxt.js and WordPress CMS, hosted behind Cloudflare CDN. However, the absence of a valid SSL certificate and lack of HTTPS severely undermine the security posture. Performance metrics are unavailable, but the presence of many prefetch and preload scripts suggests an attempt at optimization, though the lack of HTTPS is a critical flaw. Mobile optimization and accessibility are basic, with room for improvement. Security analysis reveals significant vulnerabilities: no SSL/TLS encryption, no HSTS, no DMARC, DNSSEC, or CAA records, and no security.txt or vulnerability disclosure policies. Tracking and advertising scripts are present without accompanying privacy or cookie policies, indicating poor privacy compliance. No contact or incident response information is provided, limiting transparency and trust. Overall, the website's risk profile is elevated due to missing HTTPS and privacy compliance gaps. Strategic improvements in security infrastructure, privacy policies, and contact transparency are recommended to enhance trust and compliance.

Post Office Limited operates a comprehensive UK-wide network providing postal, financial, travel, insurance, and identity services. The website reflects a mature digital presence with extensive service offerings and strong brand consistency. The company leverages multiple external partners for financial and travel services, integrating them seamlessly into their platform. Technically, the site uses Magnolia CMS, Akamai CDN, and common JavaScript libraries like jQuery, ensuring a robust infrastructure. However, the SSL/TLS configuration is critically flawed with an invalid certificate and no enabled TLS protocols, exposing users to security risks. Additionally, a subdomain takeover vulnerability exists on api.postoffice.co.uk, which could be exploited if not remediated. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

E

EDITORIAL. LOGÍSTICA .LA

logistica.la

36

EDITORIAL. LOGÍSTICA .LA is a specialized editorial platform focused on logistics and supply chain management in Latin America, providing professional content, industry insights, and resources primarily in Spanish. The website is hosted on WordPress.com, leveraging WordPress CMS and related technologies such as Jetpack and Gutenberg. The site targets professionals, academics, and students interested in logistics and SCM, with a small but engaged subscriber base. Technically, the site uses modern web technologies but suffers from a critical lack of valid SSL/TLS configuration, exposing users to potential security risks. Privacy compliance is basic, with cookie consent implemented but no explicit privacy policy or terms of service found. The domain is mature and well-protected, registered with GoDaddy, supporting the site's legitimacy. Overall, the site offers valuable content but requires urgent security improvements to protect visitors and enhance trust.

F

Fercam S.p.A.

fercam.com

40

FERCAM S.p.A. is a well-established logistics and transport company with over 75 years of experience, offering a broad range of services including road, air, and ocean freight, integrated logistics, customs consulting, and specialized transport services. The company operates primarily in Europe with presence in Asia and Africa, targeting businesses requiring comprehensive supply chain solutions. The website demonstrates a good level of digital maturity with multi-language support, structured navigation, and integration of modern analytics and marketing tools. However, the absence of HTTPS and a valid SSL certificate significantly weakens the security posture, exposing users to potential risks. Privacy and cookie policies are present and supported by consent mechanisms, indicating compliance with GDPR standards. Overall, the site is professional and trustworthy but requires urgent security improvements.

B

Bridgestone Americas, Inc.

bridgestoneamericas.com

40

Bridgestone Americas, Inc. is a leading enterprise in the transportation sector specializing in tire manufacturing and sustainable mobility solutions. Founded in 1931 and operating as a subsidiary of Bridgestone Corporation, the company maintains a strong market position with a comprehensive digital presence. The website reflects a professional and consistent brand image, targeting both consumers and business clients with detailed corporate information and resources. Technically, the site leverages modern frameworks such as Adobe Experience Manager and Vuetify, supported by a robust hosting infrastructure on AWS. However, a critical security gap exists due to an invalid or missing SSL certificate, severely impacting the site's security posture. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained but requires urgent remediation of its SSL configuration to ensure secure user interactions.

A

AXIS Flight Training Systems GmbH

axis-simulation.com

38

AXIS Flight Training Systems GmbH is a medium-sized Austrian company specializing in the design and manufacture of advanced flight simulation solutions, including full flight simulators and training devices that comply with international aviation standards such as EASA, FAA, and ICAO. Founded in 2004, AXIS positions itself as an innovator in the flight simulation industry, emphasizing quality, efficiency, and responsiveness to customer needs. The company maintains ISO 9001-2015 certification and has committed to CO2 neutrality since 2021, reflecting corporate responsibility values. Technically, the website is built on WordPress with Elementor and integrates various plugins for event management, galleries, and cookie consent. The site uses Google Analytics and Google Ads for analytics and marketing, with a compliant cookie consent mechanism in place. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. The DNS configuration shows some malformed CAA records, and no modern TLS protocols are enabled, exposing the site to potential security risks. Security posture is weak due to the absence of HTTPS and related security headers, although no active vulnerabilities or malware were detected. Privacy compliance is strong, with clear privacy and cookie policies and user consent mechanisms. Business credibility is high, supported by detailed company information, social media presence, and trust indicators such as certifications and CO2 neutrality. Overall, the website is professional and content-rich but requires urgent security improvements, particularly SSL/TLS implementation, to protect user data and enhance trustworthiness.

G

Gruppo Codognotto

codognotto.eu

39

Gruppo Codognotto is a well-established logistics and freight transport company based in Italy, offering integrated logistics services including sea, air, and road transport, customs handling, and warehousing. The company operates a large fleet across multiple countries and holds recognized ISO certifications, positioning itself as a reliable third-party logistics provider in the European and international markets. The website reflects a professional business presence with clear service offerings and relevant content for its target audience. Technically, the site runs on Drupal 7 with common web technologies like jQuery and Bootstrap, but suffers from outdated CMS usage and lacks a valid SSL certificate, which significantly impacts its security posture. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols exposes users to risks. Privacy and cookie policies exist but are basic, with limited GDPR compliance indicators. Contact information is available via email and forms, but no phone numbers or physical addresses are explicitly provided. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

Genuine Parts Company is a well-established global leader in the distribution of automotive and industrial replacement parts, founded in 1928. The company operates extensively across North America, Europe, and Australasia with a large workforce and numerous locations. Their business model focuses on providing quality parts and value-added solutions through a network of subsidiaries and partner brands such as NAPA and Motion. The website reflects a mature corporate presence with investor relations, sustainability reporting, and career opportunities prominently featured. Technically, the site is built on WordPress with common libraries and frameworks, and is hosted behind Cloudflare. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy compliance is addressed through a OneTrust cookie consent mechanism and a comprehensive privacy policy, but no explicit terms of service or security policies are found. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

A

AirBerlin PLC & Co. Luftverkehrs KG

airberlin.com

24

The website for airberlin.com currently serves as a minimal placeholder 'Coming Soon' page referencing insolvency information for AirBerlin PLC & Co. Luftverkehrs KG, a former airline company. The site lacks substantive business content, contact information, and user engagement features, reflecting the company's insolvency status and inactive operations. Technically, the site uses Tailwind CSS for styling and is hosted on Hetzner infrastructure, but suffers from poor performance with a high load time and lacks modern web optimizations. Critically, the site does not have a valid SSL certificate and is served over HTTP only, exposing users to security risks. No privacy, cookie, or terms of service policies are present, and no contact or social media links are provided, limiting transparency and user trust. Overall, the website's security posture is weak, with no HTTPS, no security headers, and no advanced DNS security features enabled.

R

Rosenfelt & West Engineering A/S

rwe.dk

36

Rosenfelt & West Engineering A/S is a Danish engineering company specializing in railway safety systems, including automatic secured level crossings and marshalling yard safety installations. The company offers comprehensive services such as equipment renovation, training courses, and career opportunities within the railway safety sector. Their market position is supported by certifications in environmental management, quality management, and railway safety standards, reflecting a commitment to reliability and compliance. Technically, the website is built on WordPress with common plugins and hosted on a LiteSpeed server, but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS and related security headers exposes the site and its visitors to potential risks. Privacy compliance is partial, with a privacy policy present but no cookie policy or consent mechanism detected. Contact information is limited to a phone number and contact page link, with no email addresses or social media profiles found. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

Stellantis NV operates a comprehensive global website representing one of the world's largest automotive groups with a portfolio of 14 iconic brands and mobility services. The site targets industry stakeholders, investors, customers, and the general public, providing rich content including press releases, investor relations, sustainability initiatives, and innovation highlights. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries like jQuery, and performance monitoring tools such as Boomerang, hosted on Microsoft Azure with Akamai CDN integration. While the website demonstrates excellent design quality, mobile optimization, and SEO practices, it critically lacks a valid SSL certificate and HTTPS support, severely impacting its security posture. Security headers are partially implemented but insufficient without TLS encryption. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is strong with consistent branding and comprehensive content. Overall, the site scores moderately due to the critical absence of HTTPS, which should be prioritized to protect user data and maintain trust.

A

AirPlus

airplus.com

40

AirPlus operates as a global enterprise specializing in corporate travel payment and expense management solutions. The company targets business travelers and corporate clients worldwide, offering localized website versions for multiple countries and languages. The business model focuses on B2B services within the transportation sector, positioning AirPlus as an established player in the corporate travel payment industry. Technically, the website is hosted on an Apache server with Akamai CDN support, utilizing JavaScript and Bootstrap frameworks for frontend presentation. While the site offers multilingual support and country-specific content, performance metrics are not provided, and the site shows basic mobile optimization and accessibility features. The technical stack is modern but lacks advanced CMS or platform indicators. From a security perspective, the website lacks a valid SSL certificate and does not enable any TLS protocols, which is a critical vulnerability. Although several security headers are present, some important protections like X-XSS-Protection are disabled, and HSTS is not fully configured. The site uses multiple external tracking and advertising services, leading to extensive user tracking without visible privacy or cookie policies, indicating poor privacy compliance. Overall, the website demonstrates moderate business credibility but suffers from significant security and privacy shortcomings. Strategic improvements in SSL/TLS configuration, privacy policy implementation, and security header enhancements are essential to reduce risk and improve trustworthiness.

D

DS AUTOMOTION GmbH

ds-automotion.com

31

DS AUTOMOTION GmbH is a medium-sized Austrian company specializing in the development and manufacture of driverless transport systems and autonomous mobile robotics, with nearly 40 years of experience. The company operates internationally and is part of the SSI Schaefer Group, enhancing its market position. Their key offerings include automated guided vehicles (AGVs), autonomous mobile robots (AMRs), fleet management software (NAVIOS), and custom vehicle solutions tailored to various industries such as manufacturing and intralogistics. The website reflects a professional and modern digital presence built on TYPO3 CMS, featuring responsive design and good SEO practices. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture.

D

Deutsche Lufthansa AG

ltt.aero

40

Lufthansa Technical Training (LTT) is a well-established aviation technical training provider affiliated with Deutsche Lufthansa AG. The company offers a broad range of training services including vocational, basic, and type training for aviation professionals worldwide. Their business model targets both individual trainees and corporate clients, leveraging customized training solutions to meet specific needs. The website reflects a professional and consistent brand image with comprehensive content and strong trust indicators such as EASA certification and Lufthansa Group affiliation. Technically, the site is built on the Scrivito CMS platform and hosted on Amazon S3 with CloudFront CDN, but suffers from a critical lack of HTTPS due to an invalid or missing SSL certificate, which severely impacts security posture. Privacy and cookie policies are well implemented and GDPR compliant, with moderate user tracking via Google Analytics and marketing tools like Intercom and Usercentrics. Overall, the website provides a good user experience and clear navigation but requires urgent security improvements to enable HTTPS and strengthen SSL/TLS configurations.

KTM Sportmotorcycle GmbH operates a professionally designed and content-rich website targeting motorcycle enthusiasts primarily in Finland and Europe. The company is a leading European manufacturer of high-performance street and offroad motorcycles, supported by a large-scale business model including sales, parts, accessories, and motorsport activities. The website leverages modern technologies such as Adobe Experience Manager, Scene7 Dynamic Media, and Google Tag Manager, indicating a mature digital infrastructure. However, a critical security weakness is present due to an invalid SSL certificate and lack of TLS protocol support, which undermines secure communications. Privacy and cookie policies are well implemented and GDPR compliant, supporting good privacy practices. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

QCM Holding is a Swiss-based aviation competence center specializing in regulatory and Part-147 training, design approvals, aircraft technical management, and consulting services. With over 25 years of industry presence and recent ownership transition, QCM maintains a strong market position serving aviation professionals and organizations. The website reflects a professional and comprehensive service offering with clear navigation and relevant content. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, but lacks a valid SSL certificate, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business demonstrates credibility and trustworthiness, though the security weaknesses present a risk that should be addressed promptly.

E

Exmanco

exmanco.com

24

Exmanco is a regional Austrian automotive service provider and retailer specializing in tires, rims, auto parts, and vehicle maintenance services. Operating multiple branches in Austria, the company targets vehicle owners seeking professional and affordable automotive repair and parts. The website is built on WordPress with WooCommerce and uses the Enfold theme, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support represents a significant security risk. The site includes cookie consent mechanisms and structured data for SEO but lacks comprehensive privacy and security policies. Contact information and physical addresses are clearly provided, supporting business credibility.

A

AASupplies e.U

aa-supplies.eu

27

AASupplies e.U is a Vienna-based company specializing in the sale and logistics of premium used warehousing equipment, forklifts, generators, and material handling machinery. The company targets businesses primarily in Europe and the Middle East, offering access to a large inventory and comprehensive transport services. Their multilingual team and European supplier network position them as a reliable B2B provider in the transportation sector. Technically, the website is built on WordPress with modern plugins such as WooCommerce, Elementor, and Gravity Forms, but lacks a valid SSL certificate, which is a critical security gap. The site includes GDPR-compliant cookie consent and privacy policies, reflecting good privacy practices. However, the absence of HTTPS and some security headers reduces the overall security posture. The business information is transparent and consistent with WHOIS data, enhancing credibility. Strategic improvements in SSL deployment and security policy publication are recommended to strengthen trust and compliance.

C

CAE Inc.

cae.com

32

CAE Inc. is a leading global provider of training and simulation solutions primarily serving the civil aviation, defense and security, and healthcare sectors. The company operates an enterprise-scale business model with a strong market position supported by a comprehensive portfolio of training services, simulation equipment, and software solutions. CAE targets aviation professionals, defense organizations, and business partners worldwide, leveraging a well-established brand and extensive global presence. The website reflects a mature digital infrastructure with modern JavaScript frameworks and Cloudflare hosting, although it lacks a valid SSL certificate, which is a critical security gap. Privacy compliance is robust, with clear cookie and privacy policies and consent mechanisms implemented via OneTrust. The security posture is moderate but impaired by the absence of HTTPS and incomplete SSL/TLS configurations. Overall, CAE presents a professional and trustworthy online presence with room for security improvements to align with best practices.

Hermes Europe GmbH operates a mature and professionally presented website focused on integrated supply chain and logistics solutions, targeting national and international trading companies. The company positions itself as a leading expert in the transportation sector, offering services such as global e-commerce support, parcel distribution, and specialized handling solutions. The website content is well-structured, with clear navigation and multilingual support, reflecting a large enterprise with multiple subsidiaries. Technically, the site is hosted on Google Cloud infrastructure using nginx and incorporates modern analytics and consent management tools. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting responsible data handling practices. Overall, the domain registration data corroborates the business legitimacy and maturity, but urgent improvements in security configurations are recommended.

B

bulmor industries GmbH

bulmor-airground.com

37

Bulmor airground technologies GmbH is a specialized manufacturer of medical highloaders (Ambulift SideBull) designed to facilitate safe and efficient boarding of mobility-impaired passengers at airports. The company has a niche market position with patented technology and partnerships with major airports and airlines. The website is built on TYPO3 CMS and uses several JavaScript libraries for enhanced user experience. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. The domain is mature and trustworthy, registered since 2011 with no suspicious patterns beyond lack of domain protection locks.

P

Porsche Informatik Gesellschaft m.b.H.

porscheinformatik.at

37

Porsche Informatik Gesellschaft m.b.H. is a medium-sized Austrian company specializing in software solutions and IT services for the automotive industry, operating as a subsidiary of the Porsche Holding group. The company focuses on digitalizing automotive trade and enabling future mobility through specialized software development. Their website reflects a professional and consistent brand image, targeting automotive clients and IT professionals. Technically, the site is built on WordPress with PHP 7.2.24 and Apache, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS impacts user trust and security posture significantly. Privacy and cookie policies are well implemented and GDPR compliant, with clear contact information provided. Social media presence is robust, supporting brand trust and outreach.

M

ManpowerGroup

manpower.com

40

ManpowerGroup operates a comprehensive workforce solutions platform primarily targeting job seekers and employers in the United States. The company offers staffing, recruitment, and workforce management services across multiple sectors including transportation, logistics, engineering, and financial services. The website reflects a mature digital presence with a modern React and Sitecore CMS infrastructure, supported by Cloudflare for hosting and CDN services. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR and related regulations. However, the website's security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which are critical issues that must be addressed to protect user data and maintain trust. Overall, the site is professionally designed with excellent content quality and strong business credibility, supported by consistent WHOIS data and recognized certifications.

Suomen Euromaster Oy operates a comprehensive automotive service website focused on tire sales, installation, and vehicle maintenance services across Finland. The company serves both individual consumers and business clients with a wide network of over 80 service points. The website is professionally designed, localized primarily in Finnish, and integrates modern web technologies and marketing tools. However, the site suffers from a critical security flaw due to an invalid SSL certificate and lack of TLS protocol support, which significantly impacts its security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, supporting business credibility. The domain registration data aligns well with the business claims, indicating legitimacy.

S

Swissport International AG

swissport.com

40

Swissport International AG operates as a global leader in airport ground services and air cargo handling, serving 286 airports worldwide. The company offers a broad portfolio of services including passenger services, ramp handling, air cargo services, airport hospitality, and executive aviation. Swissport targets airlines, airport operators, and cargo handlers, positioning itself as a market leader with a comprehensive service offering and a strong global network. The website reflects a professional and consistent brand image with extensive content and media releases supporting its market presence. Technically, the site leverages modern technologies such as Cloudflare CDN, Cookiebot for consent management, Google Tag Manager, and social media integrations, hosted on a CMS platform identified as Ibexa DXP. However, the website's SSL certificate is invalid or missing, which is a critical security concern that impacts the overall security posture. Security headers are well configured, but the lack of valid HTTPS and TLS protocols reduces the security score significantly. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by trust indicators such as ISO 27001 certification and official social media presence. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trust.

BMW Thailand operates an official, comprehensive website offering premium automotive products and services tailored to the Thai market. The site showcases new and certified pre-owned BMW vehicles, financial services, digital offerings, and after-sales support, positioning BMW as a leading premium automotive brand in Thailand. The website is built on Adobe Experience Manager and delivered via Akamai CDN, reflecting a mature digital infrastructure. However, the current SSL/TLS configuration is critically flawed, with no valid certificate and disabled TLS protocols, exposing users to security risks. Security headers are partially implemented but require improvements, especially enabling X-XSS-Protection and modern TLS versions. Privacy and cookie policies are present and comprehensive, supporting GDPR compliance. Contact information is primarily via forms and chat, with no explicit emails or phone numbers found. Overall, the site is professional and trustworthy but must urgently address SSL issues to ensure secure user interactions.

M

motion06 gmbh

motion06.at

23

motion06 GmbH is a medium-sized Austrian company specializing in the manufacture and supply of advanced conveyor systems primarily for airport baggage handling, ecommerce logistics, and industrial intralogistics. As a global leader in its niche, motion06 offers customized hardware and software solutions to optimize logistics processes. The company operates under the parent company Duravant, reflecting a strong corporate backing and market presence. The website content is well-structured, professionally designed, and targets logistics and industrial sectors with clear product and service offerings. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and marketing integrations such as Google Analytics and Marketo. However, the site lacks HTTPS encryption, which is a critical security flaw. Performance metrics are missing but inferred to be slow. Mobile optimization and SEO are adequately addressed, though accessibility is basic. From a security perspective, the absence of SSL/TLS and security headers significantly lowers the security posture. While cookie consent and privacy policies are implemented and GDPR compliant, there is no visible security or incident response policy. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional business front but requires urgent security improvements, especially implementing HTTPS and enhancing security headers, to protect user data and improve trust. Strategic recommendations include upgrading security infrastructure, publishing security policies, and improving performance metrics for better user experience.

R

Rosenbauer International AG

rosenbauer.com

28

Rosenbauer International AG is a globally recognized leader in firefighting technology, manufacturing a wide range of firefighting vehicles, equipment, and digital solutions. With over 150 years of history, the company serves fire departments, municipal authorities, industrial clients, and airports worldwide. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site is built on TYPO3 CMS with PHP backend and uses Amazon CloudFront CDN for delivery. However, the security posture is weakened by an invalid SSL certificate, which undermines HTTPS protection despite the presence of several security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security and user trust.

G

Graz-Köflacher Bahn und Busbetrieb GmbH

gkb.at

23

Graz-Köflacher Bahn und Busbetrieb GmbH (GKB) is a regional transportation company based in Austria, providing rail and bus services primarily in the West Styria region. The company has a long history dating back to 1935 and focuses on sustainable mobility solutions including electrification of rail lines and regional bus services. Their website serves as an information portal for passengers, offering schedules, fare information, and service updates. The company maintains an active social media presence and provides comprehensive privacy and cookie policies in compliance with GDPR. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS and modern TLS protocols exposes users to potential risks. Despite this, the site is well-structured, mobile-optimized, and provides clear contact information. Overall, the business is credible and well-established, but the website's security posture requires urgent improvement to protect user data and maintain trust.

M

MAN Truck & Bus Vertrieb Österreich GmbH

mantruckandbus.at

36

MAN Truck & Bus Vertrieb Österreich GmbH operates a comprehensive commercial vehicle website targeting the Austrian market, offering trucks, buses, transporters, and related services. The website demonstrates a strong market position with extensive product information, digital services, and customer engagement tools such as configurators and contact forms. The technical infrastructure leverages modern web technologies including AWS CloudFront CDN, Bootstrap, and jQuery, ensuring a responsive and user-friendly experience. However, the absence of HTTPS and a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

L

Linde Material Handling Austria

linde-mh.at

40

Linde Material Handling Austria is a leading provider of material handling equipment and solutions, including forklifts, automated vehicles, and digital fleet management products. The company targets businesses requiring efficient logistics and warehouse operations, offering new, used, and rental equipment alongside comprehensive service packages. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the site uses JavaScript, jQuery, and tracking tools like etracker and SalesViewer, hosted likely on Microsoft Azure. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Business credibility is strong, supported by certifications and consistent domain registration data. Overall, the site is functional and professional but requires urgent security improvements to protect users and maintain trust.

A

Autohaus Birngruber

birngruber.at

38

Autohaus Birngruber is a medium-sized automotive dealership based in Austria, representing major brands such as Volkswagen, Audi, Seat, Skoda, and Cupra. The company offers new and used car sales, vehicle servicing, financing, and insurance services, targeting car buyers and service customers in the Austrian market. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on the Plone CMS platform using Python and Zope, with Cloudflare as CDN and security proxy. However, the security posture is weak due to an invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the overall security score. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The business credibility is supported by extensive customer reviews and social media presence. Overall, the site is functional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

G

Goodpack IBC (Singapore) Pte. Ltd.

goodpack.com

39

Goodpack IBC (Singapore) Pte. Ltd. is a leading global provider of reusable intermediate bulk containers (IBCs) designed to optimize supply chains through a flexible pay-per-use leasing model. The company serves diverse industries including rubber, automotive, food and beverage, and chemicals, emphasizing sustainability and cost efficiency. Their extensive global network includes subsidiaries and offices across Asia, Europe, the Americas, and Africa, supporting a large-scale logistics operation. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting businesses seeking eco-friendly and efficient packaging solutions. Technically, the website is built on the Webflow CMS platform, leveraging modern JavaScript libraries such as jQuery, Luxy.js, and Splide.js for enhanced user experience. Hosting and CDN services are provided by Cloudflare, ensuring good content delivery performance. The site includes Google Analytics for user tracking and Google reCAPTCHA for bot protection. Mobile optimization and SEO practices are well implemented, though performance metrics are not explicitly provided. From a security perspective, the site has implemented some security headers including HSTS and CSP frame-ancestors, but critically lacks a valid SSL/TLS certificate and does not support modern TLS protocols, exposing users to potential risks. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR considerations. Overall, Goodpack’s website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in security policy transparency and incident response readiness would further enhance their security posture.

C

CPB Contractors

cpbcon.com.au

40

CPB Contractors is a well-established major contractor specializing in critical and complex infrastructure projects across Australia and New Zealand. The company operates as a subsidiary of the CIMIC Group and holds a leading market position in sectors such as transport, energy, and construction. Their website reflects a professional business model focused on large-scale infrastructure delivery, with key services including rail, tunneling, roads, water, and new energy projects. The target audience includes government agencies, industry partners, and prospective employees. Technically, the website is built on modern frameworks including Next.js and Material-UI, integrated with Sitecore CMS, and employs Google Analytics and Tag Manager for tracking. However, the site suffers from slow load times and lacks a valid SSL certificate, which critically impacts security and user trust. Mobile optimization and SEO are adequately addressed, but accessibility features are basic. From a security perspective, the absence of HTTPS and security headers represents a significant vulnerability. No explicit security policies or incident response contacts are published, and privacy compliance is limited despite the presence of a privacy policy. The site uses tracking technologies but lacks cookie consent mechanisms, indicating partial privacy compliance. Overall, the website is functional and professional but requires urgent security improvements, especially SSL implementation and enhanced privacy compliance, to reduce risk and improve trustworthiness.

J

JATO Dynamics

jato.com

40

JATO Dynamics is a well-established global leader in automotive market research and business intelligence, providing comprehensive data and analytics solutions to the automotive industry. Their offerings include vehicle specifications, market analysis, integrated API solutions, and bespoke consultancy services. The website is professionally designed, content-rich, and targets automotive OEMs, retailers, leasing companies, and professional financial services. Technically, the site is built on HubSpot CMS with modern marketing and analytics tools, but suffers from poor SSL/TLS configuration, which is a critical security concern. Security headers are present but cannot compensate for the lack of a valid SSL certificate and TLS support. Privacy and cookie policies are comprehensive and GDPR compliant, though no explicit security or incident response policies are found. Overall, the website is trustworthy and credible but requires urgent remediation of its SSL and TLS security posture to protect users and maintain trust.

F

Frauscher Sensor Technology USA Inc.

frauscher.com

40

Frauscher Sensor Technology USA Inc. is a leading provider of highly reliable train detection and wayside object control solutions, serving rail operators and system integrators globally. The company offers a comprehensive portfolio including hardware components like wheel sensors and axle counters, software solutions, and smart life cycle services. With a strong market position and a global footprint, Frauscher is recognized for its innovation and quality in the transportation sector. Technically, the website is built on modern frameworks such as Nuxt.js and uses Storyblok CMS, hosted on AWS CloudFront. The site is well-optimized for mobile and SEO, with good accessibility features. However, performance is moderate and could be improved. From a security perspective, the site employs several security headers and has a proactive PSIRT program. However, the SSL certificate is currently invalid, which is a critical issue that impacts the overall security posture. Other security best practices are in place, but improvements in SSL configuration and CSP are recommended. Overall, the website presents a professional and trustworthy image, with comprehensive privacy and cookie policies in place. The domain registration is consistent with the business claims, enhancing credibility. Strategic recommendations include fixing SSL issues, enhancing security headers, and maintaining strong privacy compliance to further strengthen trust and security.

TNT.com represents the Finnish localized website of TNT Express, a global logistics and express delivery company now integrated with FedEx. The website offers comprehensive information about TNT's shipping services, tracking tools, and customer support, targeting both businesses and individual customers requiring international and domestic shipping solutions. The site is professionally designed with consistent branding and uses advanced marketing and analytics technologies such as Adobe Experience Manager, Optimizely, and Adobe DTM. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, which significantly undermines the site's security posture. Privacy and terms of service pages are present and appear comprehensive, supporting GDPR compliance. Overall, the site demonstrates a mature digital presence but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and maintain user trust.

S

SPACEKEYS GmbH

spacekeys.aero

62

SPACEKEYS GmbH is a specialized aviation technology company providing advanced GNSS RAIM prediction solutions worldwide. Their offerings include RAIM PRO and RAIM ANSP products, supporting multiple aviation standards and providing RESTful APIs for integration. The company is funded by the European Space Agency under the NAVISP programme, positioning it as a credible and innovative player in the aviation navigation sector. The website reflects a professional business with clear product descriptions and partner relationships, notably with Flightkeys and ESA. Technically, the site uses modern web technologies such as jQuery and slick carousel but lacks a valid SSL certificate, which is a critical security deficiency. Security headers are present, but the absence of HTTPS and modern TLS protocols significantly reduces the security posture. Privacy compliance is weak, with no privacy or cookie policies found. Contact information is clearly provided, including a physical address and company email. Overall, the site is functional and professional but requires urgent improvements in security and privacy compliance to meet industry standards.

S

Schiebel

schiebel.net

27

Schiebel is a mature, internationally recognized company specializing in the development and production of unmanned air systems and mine detection equipment, founded in 1951 and headquartered in Austria. Their product portfolio includes the CAMCOPTER® S-100 UAS and advanced mine detection systems, supported by a composite technology division. The company maintains multiple global offices and emphasizes quality certifications such as ISO 9001 and AS/EN 9100. Technically, the website is built on WordPress with common plugins and scripts, offering good content quality and SEO optimization. However, the absence of HTTPS and SSL/TLS encryption is a critical security vulnerability, severely impacting the site's security posture. While security headers are implemented, the lack of encryption exposes users and data to risks. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security infrastructure are urgently recommended to protect the company's digital presence and customer trust.

C

Cosma

cosma.com

39

Cosma, a division of Magna International Inc., is a global provider of body, chassis, and engineering solutions primarily serving the automotive industry. The company leverages robust product engineering, tooling capabilities, and process expertise to deliver lightweight and innovative products to its customers worldwide. Positioned as a key group within a large multinational, Cosma targets automotive manufacturers and industry partners with a B2B business model focused on manufacturing and engineering services. Technically, the website is built on the Sitefinity CMS platform and utilizes modern JavaScript libraries such as jQuery, Google Tag Manager, and CookiePro for analytics and consent management. The site demonstrates good SEO, accessibility, and mobile optimization practices, with comprehensive privacy and cookie policies in place. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. From a security perspective, while the site implements strong content security policies and several security headers, the lack of HTTPS and TLS protocols is a critical vulnerability. This exposes users to potential data interception and undermines trust. No incident response or security policy information is publicly available, and no vulnerability disclosure or security.txt files were found. Overall, the website presents a professional and trustworthy business front with strong content and compliance practices but requires urgent remediation of its SSL/TLS configuration to meet modern security standards and protect user data effectively.

K

Knorr-Bremse AG

knorr-bremse.com

40

Knorr-Bremse AG is a global leader in manufacturing braking systems and safety-critical sub-systems for rail and commercial vehicles. With a history spanning over 28 years, the company holds a strong market position as an innovator in mobility and transport technologies. Their business model focuses on delivering advanced braking and safety solutions, complemented by comprehensive investor relations and career development programs. Technically, the website is built on a modern Angular framework, hosted on Nginx and Amazon CloudFront, with good SEO and accessibility features. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the security posture. The site implements strong security headers and content policies but lacks advanced SSL configurations and session management. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent SSL deployment to enhance security and user trust.