Security Directory

iteratec GmbH is a medium-sized, established software development company founded in 1996, with multiple offices across Germany, Austria, and Poland. The company specializes in digital transformation, AI and data analytics, IT security, and sustainable technology solutions, targeting enterprises in automotive, energy, and logistics sectors. Their website reflects a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts their security posture. Privacy and cookie policies are well implemented with consent mechanisms, indicating good compliance with GDPR. Overall, the company demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to improve security and trust.

P

Pioneers Innovation GmbH

pioneers.io

22

Pioneers Innovation GmbH is an established innovation consulting and corporate venture building firm founded in 2013, serving a broad range of corporate clients across sectors such as energy, transportation, banking, and technology. The company offers comprehensive services including innovation strategy, setup, execution, venture building, and startup services, positioning itself as a trusted partner for innovation-powered transformation and growth. The website reflects a mature digital presence with professional design, clear navigation, and rich content including client testimonials and references to large organizations. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, but suffers from critical security shortcomings including the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business credibility is high, but the lack of HTTPS is a major risk that should be urgently addressed.

S

Smartly.io Solutions Oy

smartly.io

39

Smartly.io Solutions Oy operates a mature, enterprise-grade AI advertising platform focused on creative, media, and intelligence suites to optimize cross-channel advertising performance. The company is well-positioned in the technology sector with a strong market presence, supported by industry certifications and a comprehensive digital marketing infrastructure. The website is professionally designed, content-rich, and targets advertising professionals and teams seeking AI-powered campaign automation and insights. Technically, the site leverages modern web technologies including Webflow CMS, Marketo forms, and multiple analytics and tracking tools, hosted via Cloudflare CDN. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, significantly impacting the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business credibility is high, but urgent remediation of SSL/TLS issues is recommended to ensure secure user interactions and trust.

M

MTEL Austria

mtel.at

39

MTEL Austria is a telecommunications provider offering a range of services including mobile tariffs, internet, and TV entertainment packages primarily targeting private and business customers in Austria. The company is part of the Telekom Serbien Group, indicating a solid regional market presence. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It leverages modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for consent management. However, the site currently lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Security headers are properly configured, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Contact information including email and phone numbers is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to protect user data and build trust.

S

Swissport International AG

swissport.com

40

Swissport International AG operates as a global leader in airport ground services and air cargo handling, serving 286 airports worldwide. The company offers a broad portfolio of services including passenger services, ramp handling, air cargo services, airport hospitality, and executive aviation. Swissport targets airlines, airport operators, and cargo handlers, positioning itself as a market leader with a comprehensive service offering and a strong global network. The website reflects a professional and consistent brand image with extensive content and media releases supporting its market presence. Technically, the site leverages modern technologies such as Cloudflare CDN, Cookiebot for consent management, Google Tag Manager, and social media integrations, hosted on a CMS platform identified as Ibexa DXP. However, the website's SSL certificate is invalid or missing, which is a critical security concern that impacts the overall security posture. Security headers are well configured, but the lack of valid HTTPS and TLS protocols reduces the security score significantly. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by trust indicators such as ISO 27001 certification and official social media presence. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trust.

U

Ulrike Lahrs Steuerberatungskanzlei

kanzleilahrs.de

37

Ulrike Lahrs Steuerberatungskanzlei is a small, local tax consultancy firm based in Twistringen, Germany, specializing in tax advisory, accounting, payroll, and tax declaration services. The website presents a professional and clear business description targeting individuals and businesses seeking tax-related services in the region. The technical infrastructure is based on the IONOS MyWebsite platform, utilizing Apache server and common JavaScript libraries such as jQuery and Cookiebot for cookie consent management. However, the website lacks HTTPS support, which significantly undermines its security posture. Security headers are partially implemented, but the Content Security Policy is in report-only mode and permits unsafe script execution, increasing risk. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy, but no terms of service or explicit security policies are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

E

Egon Zehnder International Ltd.

egonzehnder.com

40

Egon Zehnder International Ltd. operates a global organizational consulting and leadership advisory website offering a wide range of executive search and leadership development services. The company is positioned as a global leader with extensive geographic reach and a comprehensive service portfolio targeting large enterprises and organizations seeking leadership solutions. Technically, the website uses modern web technologies including Vue.js and integrates multiple analytics and marketing tools, but suffers from a critical security flaw due to the absence of a valid SSL certificate and HTTPS support. Security headers and content security policies are well implemented, but the lack of HTTPS severely impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professionally designed and trustworthy, but the critical SSL issue poses a significant risk that should be remediated immediately.

A

ABAX Informationstechnik GmbH

abax.at

27

ABAX Informationstechnik GmbH is a well-established Austrian IT service provider with over 25 years of experience, offering a broad portfolio of IT infrastructure, support, security, and data analytics services. The company is part of the Roxcel Group, enhancing its enterprise readiness and market credibility. The website is professionally designed, content-rich, and targets businesses of various sizes seeking comprehensive IT solutions. Technically, the site uses WordPress with Elementor and integrates modern marketing and consent tools, but suffers from a critical lack of valid SSL/TLS configuration, impacting security posture significantly. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business presents a trustworthy and professional image, though security improvements are urgently needed.

B

Berufsfoerderungsinstitut Wien

bfi.wien

38

BFI Wien is a well-established educational institution based in Austria, specializing in vocational training, continuing education, and certification courses across various sectors including IT, business, languages, and social services. The website reflects a mature digital presence with a comprehensive catalog of courses, detailed descriptions, and clear pricing structures. The target audience includes private individuals, businesses, and job seekers, supported by extensive service and advisory offerings. Technically, the site is built on TYPO3 CMS and leverages Cloudflare for hosting and CDN services, with modern web technologies ensuring good mobile responsiveness and accessibility. However, the absence of a valid SSL certificate is a critical security gap, exposing users to risks and undermining trust. The site employs GDPR-compliant cookie consent mechanisms and provides clear privacy policies, demonstrating good privacy practices. Overall, while the business and content quality are excellent, the security posture requires urgent improvement to align with best practices and user expectations.

E

EasyAds

easyads.eu

38

EasyAds is a Dutch online marketing bureau specializing in e-commerce growth through automation, marketing optimization, and integration with marketplaces and advertising channels. The company has a solid market position supported by recognized partnerships with Channable, Google, Microsoft, and Cookiebot, and has been operating since 2006. Their services include datafeed management, marketplace integrations, advertising channel management, and managed campaign services, targeting retailers and brands seeking scalable online growth. Technically, the website is built on WordPress with Elementor and several plugins, hosted on WordPress.com's Atomic infrastructure. The site is multilingual and uses modern marketing and analytics tools, including Google Analytics and LinkedIn Insight, with a cookie consent mechanism via Cookiebot. However, the SSL certificate is invalid or missing, resulting in no HTTPS support, which is a critical security issue. Security headers are partially implemented, but TLS protocols are disabled, and no DNSSEC or CAA records are configured. Contact information is available via email, phone, and contact forms, but no explicit privacy policy or terms of service pages were found. Overall, the website is professional and content-rich but requires urgent security improvements to ensure trust and compliance.

S

Simplity

simplity.eu

40

Simplity is a medium-sized consultancy specializing in data intelligence and customer analytics services, targeting companies of all sizes, particularly in e-commerce and financial services sectors. The company leverages a modern technical infrastructure including React, Gatsby, and Storyblok CMS, hosted on Cloudflare, and employs Google Tag Manager and Cookiebot for analytics and privacy compliance. While the website is professionally designed with excellent content quality and user experience, a critical security issue is the invalid SSL certificate, which undermines the security posture. Privacy and cookie policies are well implemented with consent mechanisms, but no direct contact emails or phone numbers are provided, relying on forms for communication. Overall, Simplity presents a credible and trustworthy business presence with room for security improvements.

Pilz GmbH & Co. KG is a leading international provider of automation technology, specializing in components, systems, and services for safe automation. The company targets industrial automation customers, machine builders, and safety engineers with a comprehensive portfolio including products, consulting, training, and support. The website reflects a professional and consistent brand presence with detailed content tailored to its B2B audience in the manufacturing and technology sectors. Technically, the site uses Imperia CMS with JavaScript frameworks and integrates marketing and analytics tools such as Google Tag Manager, Cookiebot, and Etracker. However, the absence of a valid SSL certificate and lack of TLS support significantly weaken the security posture. Security headers are well configured, and privacy compliance is strong with GDPR-aligned cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained but requires urgent SSL/TLS remediation to improve security and user trust.

B

Bona AB

bona.com

38

Bona AB is a well-established family-owned company founded in 1919, specializing in manufacturing and distributing premium floor installation, renovation, and maintenance products globally. The company operates in over 90 countries with a strong focus on sustainability and product quality. Their website targets professional installers, homeowners, and distributors, offering comprehensive product lines and training. Technically, the website uses modern JavaScript frameworks (React), integrates multiple analytics and marketing tools, and is hosted behind Cloudflare. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is strong with clear policies and cookie consent mechanisms. Business credibility is high with transparent contact information and consistent branding. Overall, the site is professional but requires urgent security improvements.

T

TimeTac GmbH

timetac.com

31

TimeTac GmbH operates a comprehensive online time tracking software platform targeting businesses of all sizes, including SMEs and enterprises across multiple industries. The company offers modular SaaS solutions including employee time tracking, project time tracking, leave management, and integrations via API. Positioned as a market leader especially in German-speaking countries, TimeTac emphasizes GDPR compliance, data protection, and customer service excellence. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses WordPress CMS with Bootstrap and jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and Cookiebot for consent management. However, the website currently suffers from a critical security issue: the SSL certificate is invalid or missing, and no TLS protocols are enabled, exposing users to risks and undermining trust. Security headers are absent, and performance is slow due to high load times and large page size. Privacy compliance is strong with clear policies and consent mechanisms. Business credibility is high, supported by certifications, partner logos, and customer testimonials.

W

Wienerberger

wienerberger.it

39

Wienerberger Italy operates a comprehensive website focused on manufacturing and distributing clay building materials, targeting construction professionals and architects. The site offers detailed product catalogs, technical resources, and support services, positioning Wienerberger as a key player in the Italian building materials market. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and integrated marketing tools such as Google Tag Manager and Cookiebot for consent management. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. While the site includes privacy and cookie policies compliant with GDPR, it lacks explicit security and incident response disclosures. The domain registration is consistent with the business claims, reinforcing legitimacy. Strategic improvements in SSL deployment and security posture are essential to elevate the site's trustworthiness and compliance.

Z

Zahnarztpraxis Dr. Christian Pastor

zahnarzt-pastor.de

21

Zahnarztpraxis Dr. Christian Pastor is a small, local dental and oral surgery practice based in Beilstein, Germany. The website presents a professional image with a comprehensive range of dental services including prophylaxis, implantology, oral surgery, and aesthetic dentistry. The practice emphasizes patient-centered care and modern technology. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted by agenturserver.de, and includes cookie consent mechanisms and Google Tag Manager for analytics. However, the site lacks HTTPS encryption, which is a critical security flaw. Security headers are minimal, and no advanced security policies or incident response information is provided. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

A

APG

apg.nl

40

APG is a large Dutch pension fund service provider specializing in pension administration, asset management, and advisory services. The website is content-rich, professionally designed, and targets pension participants and institutional investors. The technical infrastructure includes Cloudflare hosting, Umbraco CMS, and multiple marketing and analytics tools such as Google Tag Manager and Cookiebot. However, a critical security issue is the absence of a valid SSL certificate and enabled TLS protocols, which severely impacts the security posture. Security headers are well implemented, but the lack of HTTPS reduces trust and security. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Contact information is primarily via web forms, with no explicit emails or phone numbers found. Social media presence is active on LinkedIn, Facebook, and Instagram. Overall, the website is professional and trustworthy but requires urgent SSL/TLS configuration improvements to enhance security and user trust.

T

The Jodel Venture GmbH

jodel-app.com

40

Jodel is a technology company operating a hyperlocal community social app designed to connect users instantly with people around them, primarily targeting young professionals and students (Gen Z and Y). The platform offers local tips, news, stories, and a tailored advertising service for brands, HR campaigns, and market research. The website is built on WordPress using Elementor and Elementor Pro, hosted behind Cloudflare CDN. Despite a professional design and good content quality, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Cookie consent is managed via Cookiebot, indicating good privacy compliance practices. However, no explicit contact information or security policies are found on the homepage, limiting direct user engagement and incident response readiness.

DiaSorin S.p.A. operates a comprehensive corporate website focused on molecular diagnostics, immunodiagnostics, and licensed technology platforms. The company positions itself as a global leader in laboratory diagnostics, targeting healthcare providers, laboratories, and scientific communities. The website provides extensive product information, corporate governance details, investor relations, and career opportunities, reflecting a mature and professional business presence. Technically, the site is built on Drupal 10 with modern front-end technologies and integrates marketing and analytics tools such as Google Tag Manager and Cookiebot for privacy compliance. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, exposing users to potential risks. Security headers are partially implemented, but the lack of HTTPS significantly lowers the security posture. Privacy policies and cookie consent mechanisms are well implemented, indicating good compliance with GDPR. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

F

Fundermax GmbH

fundermax.at

40

Fundermax GmbH is a large Austrian manufacturer specializing in high-quality wood-based materials and compact laminates used in interior and exterior design applications. The company offers a diverse portfolio including raw chipboard, coated chipboard, laminate panels, compact panels, and biofiber panels, targeting architects, designers, and manufacturers. Their website demonstrates a professional and consistent brand presence with multiple industry certifications and awards, indicating a strong market position. Technically, the site is built on Pimcore CMS with Bootstrap framework and integrates modern tools like Google Tag Manager and Cookiebot for analytics and cookie consent management. However, the website currently lacks a valid SSL certificate, which significantly impacts its security posture. While security headers are present, the absence of a valid HTTPS setup and explicit security or incident response policies are notable gaps. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance indicators. Overall, the site is professional and trustworthy but requires urgent attention to its SSL configuration and security policy transparency to enhance its security posture and user trust.

E

EKE-Yhtiöt

eke.fi

35

EKE-Yhtiöt is a Finnish company specializing in real estate development and leasing, as well as advanced train information systems technology. The company holds a strong market position as a world-leading supplier in the transportation technology sector and a reputable real estate developer in Finland. Their website reflects a medium-sized enterprise with a clear business model focused on residential and commercial property development alongside technology innovation. The site supports multiple languages, indicating an international target audience. Technically, the website is built on WordPress with modern SEO tools and consent management but suffers from slow performance and lacks HTTPS security, which is a critical concern. Security posture is weak due to the absence of a valid SSL certificate, no security headers, and no advanced TLS protocols, exposing users to potential risks. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. Overall, the website is professional but requires urgent security improvements to protect user data and enhance trust.

Bowas-Induplan Chemie Ges.m.b.h. is a mature, internationally active plant engineering company specializing in chemical plants for the energetic materials industry. With over 200 projects completed globally and a subsidiary in India, the company demonstrates a solid market presence and expertise in environmentally responsible industrial solutions. The website is professionally designed using Contao CMS and includes modern features such as cookie consent management via Cookiebot. However, the absence of HTTPS and a valid SSL certificate significantly undermines the site's security posture, exposing visitors to potential risks. Additionally, the domain is at high expiry risk with no domain protection locks, which could threaten business continuity if not addressed promptly. Privacy compliance is basic, with a privacy policy linked but no explicit GDPR compliance statements or data protection officer contact. Overall, the site presents a credible business but requires urgent security improvements.

D

DeepOcean

deepoceangroup.com

40

DeepOcean is a leading ocean services provider specializing in accelerating sustainable use of ocean resources. The company operates across multiple sectors including renewables, oil and gas, and ocean minerals, offering full lifecycle services such as survey, project management, engineering, maintenance, and recycling. With a strong emphasis on digitalization and remote operations, DeepOcean positions itself as a technology-driven leader in the energy transition space. The website reflects a professional and consistent brand image targeting industry stakeholders, investors, and potential employees. Technically, the website is built on the Webflow platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management. Hosting and CDN services are provided via Cloudflare and Webflow. While the site demonstrates good design quality, mobile optimization, and SEO practices, performance metrics are unavailable. Accessibility is basic but present. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. Although some security headers are present, the absence of TLS protocols and cipher suites severely undermines the security posture. Cookie consent mechanisms are implemented, and privacy policies are comprehensive and GDPR compliant. However, incident response and vulnerability disclosure information are missing. Overall, the website is credible and professionally maintained but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL deployment, enhanced security header configurations, and the addition of incident response contacts to strengthen the security culture and compliance posture.

U

UNTHA shredding technology GmbH

untha.com

29

UNTHA shredding technology GmbH is a well-established manufacturer specializing in industrial shredding machines for various waste and recycling applications. With over 50 years of experience and a global presence including subsidiaries in the US, the company offers tailored shredding solutions for materials such as residual wood, metal, plastics, electronic waste, and more. The website reflects a professional and comprehensive digital presence with detailed product information and customer testimonials. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS CloudFront, and integrates privacy and analytics tools such as Cookiebot, Google Tag Manager, and Matomo. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that significantly impacts the site's security posture. Security headers are properly configured, but the lack of TLS protocols and certificate transparency compliance are notable vulnerabilities. Overall, the site is trustworthy and business credible but requires urgent security improvements to protect user data and enhance trust.

A

Amgen Inc.

amgen.com

40

Amgen Inc. is a leading global biotechnology company focused on developing innovative biologic medicines to treat serious illnesses. The website reflects a mature enterprise with comprehensive content covering its science, products, corporate responsibility, and investor relations. The target audience includes healthcare professionals, patients, investors, and partners. The business model centers on research, development, manufacturing, and delivery of biologic therapeutics, positioning Amgen as a pioneer in biotechnology with a strong market presence. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, uses lazy loading for images, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is via Amazon CloudFront CDN, supporting global content delivery. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site implements several security headers including Content Security Policy and X-Frame-Options. However, a critical issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. No TLS protocols are enabled, and HSTS is not properly configured. These gaps expose users to potential risks and undermine trust. Overall, the website is professionally designed and content-rich, but the lack of HTTPS and valid SSL certificate is a major security concern. Strategic improvements in SSL/TLS deployment and enhanced security configurations are essential to protect user data and maintain trust. Privacy compliance is well addressed with Cookiebot and clear privacy and cookie policies. Business credibility is high, supported by consistent branding and comprehensive corporate information.

W

Wienerberger AG

wienerberger.com

39

Wienerberger AG is a leading global manufacturer and supplier of building materials, specializing in bricks, clay roof tiles, pipe systems, and surface pavings. The company holds a strong market position as the world's largest brick producer and a market leader in Europe for clay roof tiles and infrastructure solutions. The website reflects a mature and professional digital presence with comprehensive content targeting investors, customers, and job seekers. Technically, the site is built on Adobe Experience Manager and uses modern web technologies, but critically lacks HTTPS/SSL encryption, exposing users to security risks. Security headers are partially implemented, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and content quality but requires urgent security improvements to protect user data and maintain trust.

A

agru Kunststofftechnik GmbH

agru.at

37

AGRU Kunststofftechnik GmbH is a well-established Austrian manufacturer specializing in high-quality plastic piping systems and related products for industrial sectors such as energy, construction, and infrastructure. The company has a strong market position as a single-source supplier with a focus on innovation, quality, and employee orientation. Their website reflects a professional business presence with comprehensive product and market information, supported by active social media channels and a GDPR-compliant privacy framework. Technically, the site is built on TYPO3 CMS with modern frontend technologies but suffers from a critical lack of HTTPS, severely impacting security and trust. The absence of SSL/TLS encryption exposes users to risks and reduces the overall security posture. Privacy compliance is well addressed through cookie consent and a detailed privacy policy. However, direct contact information like emails or phone numbers is not explicitly provided, relying mainly on forms. Overall, the site is functional and informative but requires urgent security improvements to meet modern standards.

C

Coloplast Group

coloplast.com

40

Coloplast is a mature, enterprise-level healthcare company headquartered in Denmark, specializing in intimate healthcare solutions such as ostomy, continence, bowel, wound, urology, and respiratory care. The company operates globally with a presence in over 100 countries and serves more than 2 million people annually. Their website reflects a professional and comprehensive digital presence, targeting healthcare professionals, patients, investors, and job seekers. Technically, the site uses modern JavaScript frameworks, Episerver CMS, and integrates multiple third-party services including Salesforce, Stripe, and Cookiebot. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by detailed investor relations and sustainability information. Overall, the site is professionally designed and trustworthy but requires urgent security improvements.

J

Josef Manner & Comp AG

manner.com

38

Josef Manner & Comp AG operates the website manner.com, a well-established Austrian confectionery brand specializing in Viennese wafer specialties since 1890. The website showcases a comprehensive product range, including wafers, baking products, gingerbread, and merchandise, targeting consumers interested in traditional confectionery. The brand maintains a consistent and professional online presence with rich content, social media integration, and e-commerce capabilities. Technically, the site uses modern technologies such as Vue.js, Algolia search, and Cookiebot for consent management, hosted likely on DigitalOcean. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that undermines user trust and data protection. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website is professional and credible but requires urgent security improvements to meet modern standards.

G

GLOBAL HYDRO Energy GmbH

global-hydro.eu

23

GLOBAL HYDRO Energy GmbH is a specialized technology leader in the small hydropower sector, offering comprehensive turnkey solutions including design, engineering, digital plant control, revitalization, and lifetime service. The company operates globally with a strong Austrian headquarters and emphasizes sustainable energy solutions. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses Pimcore CMS on an Apache server and integrates Cookiebot for cookie consent and Google reCAPTCHA for form security. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. Security headers are partially implemented but modern TLS protocols and cipher suites are missing, exposing the site to potential risks. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

M

MM Group

mm-packaging.com

40

MM Packaging, a division of MM Group, is a leading global manufacturer of consumer packaging solutions specializing in pharmaceuticals, food, beauty, and consumer goods sectors. The company operates a network of 56 packaging sites worldwide, emphasizing innovation and sustainability in its product offerings. The website reflects a mature digital presence with comprehensive content, multilingual support, and strong branding consistent with an enterprise-level organization. Technically, the site is built on WordPress with modern marketing and analytics integrations, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility and content quality are high, but the security deficiencies pose a risk to user trust and data protection.

B

BWT Holding GmbH

christaqua.com

36

BWT Holding GmbH operates a professional and content-rich website focused on providing ultra-pure water solutions for the pharmaceutical, biotech, and cosmetics industries. The company positions itself as a market leader with a comprehensive product and service portfolio including purified water generation, water for injection, pure steam, and automation solutions. The website demonstrates strong branding consistency, excellent content quality, and clear navigation targeting a B2B audience in healthcare. Technically, the site uses Microsoft IIS, JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, with Sitecore CMS inferred. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Contact information is primarily via a contact form, with no explicit emails or phone numbers found. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and ensure secure communications.

RHI Magnesita is a global leader in the refractory industry, providing high-grade refractory products, systems, and services primarily for steel, cement, glass, and non-ferrous metals industries. The company emphasizes sustainability and innovation, targeting industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, structured data, and multi-language support. Technically, the site is built on WordPress with modern plugins and libraries, but suffers from critical security shortcomings due to an invalid SSL certificate and lack of HTTPS enforcement. Security headers are present but insufficient without proper TLS. Privacy compliance is well addressed with Cookiebot consent management and a detailed privacy policy. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security posture and user trust.

T

Taideyliopisto

uniarts.fi

29

Taideyliopisto is a leading Finnish arts university formed in 2013 by merging three major arts academies. It offers top-level education in music, visual arts, performing arts, and writing, with a strong emphasis on research and continuous learning. The university holds a notable global position in music education, reflected in its QS ranking. The website is professionally designed, multilingual, and rich in content, targeting students, researchers, and the arts community. Technically, the site runs on WordPress hosted on DigitalOcean with modern JavaScript libraries and analytics tools, though performance metrics are not optimal. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, exposing users to potential risks. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is credible and trustworthy but requires urgent security improvements.

P

panagenda

panagenda.com

40

panagenda is a technology company specializing in analysis and optimization of IT collaboration landscapes, focusing on Microsoft 365 and HCL Notes/Domino environments. Their offerings include software products like OfficeExpert TrueDEM and MarvelClient, alongside consulting and diagnostic services aimed at improving digital experience and reducing operational costs. The company targets IT professionals and enterprises seeking enhanced collaboration and user experience monitoring solutions. Technically, the website is built on WordPress with a modern tech stack including PHP 8, Apache, and various analytics and marketing tools. SEO and content quality are good, with structured data and comprehensive resource hubs. However, the security posture is weak due to the absence of a valid SSL certificate and disabled TLS protocols, which critically undermines secure communications. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

S

Spoon

spoon.se

36

Spoon is a well-established Swedish communications agency specializing in strategic and creative marketing services including storytelling, video production, and social media management. The company has a mature market presence with over 26 years of operation and is part of a larger agency network, People People People, enhancing its regional reach. The website reflects a professional and modern digital presence built on WordPress, with good SEO and user experience design. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Cookie consent is managed effectively via Cookiebot, but no privacy policy or terms of service pages were found, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

S

Scheer IMC

im-c.com

40

Scheer IMC is a well-established enterprise learning company specializing in scalable LMS solutions, automated eLearning content creation, and custom learning experiences. The company serves large global brands and has a strong market position supported by extensive client references and industry awards. Technically, the website is built on WordPress and uses modern JavaScript libraries and Cloudflare CDN for hosting and performance. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines trust and exposes users to risks. Privacy compliance is well addressed with Cookiebot and a comprehensive privacy policy. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.

S

Standortagentur Tirol GmbH

standort-tirol.at

21

Standortagentur Tirol GmbH is a regional economic development agency based in Tirol, Austria, focused on fostering innovation, technology, and sustainable growth for businesses, research institutions, and municipalities. The company operates as part of the Lebensraum Tirol Holding and offers a broad range of services including support for digitalization, funding, cluster networking, and internationalization. Their website reflects a professional and well-structured digital presence targeting multiple stakeholder groups with relevant content and resources. Technically, the site runs on Microsoft IIS with ASP.NET and uses common JavaScript libraries and marketing tools such as Google Tag Manager and Cookiebot for consent management. However, a critical security weakness is the absence of HTTPS and a valid SSL certificate, exposing users to potential risks. Privacy compliance is addressed with visible policies and consent mechanisms, but incident response and security policies are not evident. Overall, the site is credible and functional but requires urgent security improvements to protect user data and enhance trust.

S

Spanische Hofreitschule & Lipizzanergestüt Piber

srs.at

38

The website for Spanische Hofreitschule & Lipizzanergestüt Piber represents a well-established cultural institution in Austria focused on classical horse riding performances and heritage preservation. It offers rich content about its services, events, and visitor information, targeting tourists and cultural enthusiasts. The site uses modern CMS technology (Craft CMS) and integrates privacy-compliant analytics and cookie consent mechanisms. However, the lack of a valid SSL certificate and HTTPS severely impacts its security posture. While security headers are partially implemented, the absence of encryption exposes users to risks. The business information is clear and consistent with WHOIS data, supporting legitimacy. Overall, the site is professionally designed and user-friendly but requires urgent security improvements to protect visitors and enhance trust.

J

Jungheinrich AG

jungheinrich.com

40

Jungheinrich AG is a globally leading company in the intralogistics sector, headquartered in Hamburg, Germany. The company specializes in manufacturing industrial trucks, warehouse and material flow technology, and providing logistics services. The website reflects a mature enterprise with a strong market position and comprehensive service offerings targeting businesses requiring intralogistics solutions. Technically, the website employs modern web technologies including Vue.js, CoreMedia CMS, and integrates multiple marketing and analytics tools such as Google Tag Manager, Marketo, and Cookiebot. However, a critical security issue is present due to an invalid SSL certificate and lack of enabled TLS protocols, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professionally designed, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

S

Sanitär-Heinze GmbH & Co. KG

sanitaer-heinze.com

29

Sanitär-Heinze GmbH & Co. KG operates as a specialized wholesale and service provider in the sanitary, heating, ventilation, and renewable energy sectors primarily serving professional customers in Germany. The company offers a broad portfolio including bathroom products, heating systems, ventilation solutions, and 3D bathroom planning services. Their market position is that of an established regional player with a consistent brand presence and multiple product lines. Technically, the website is built on the Pimcore CMS platform, leveraging modern JavaScript libraries and Google analytics tools, with a professional design and good navigation. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that significantly impacts the security posture. Cookie consent is implemented properly, and privacy policies are comprehensive and GDPR compliant. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

T

TCI Consult GmbH

tciconsult.eu

38

TCI Consult GmbH is a specialized consulting firm with over 30 years of experience focusing on corporate management, banking control, business intelligence, and cybersecurity. The company operates primarily in Austria and Germany, targeting sectors such as finance, public services, telecommunications, and manufacturing. Their services include data warehousing consulting, cybersecurity assessments, and compliance support for EU regulations like NIS 2 and DORA. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery and Foundation, with analytics powered by Google Analytics and Piwik/Matomo. However, the site suffers from a critical security flaw due to an invalid SSL certificate, resulting in no HTTPS protection. This significantly impacts the security posture and trustworthiness of the site. Privacy compliance is partially addressed through Cookiebot consent mechanisms and a privacy policy located on the impressum page, but lacks comprehensive GDPR indicators. Overall, the website presents professional content and consistent branding but requires urgent security improvements to meet modern standards.

S

Speedinvest

speedinvest.com

40

Speedinvest is a well-established European venture capital firm focused on funding early-stage technology startups across multiple sectors including deep tech, fintech, health, climate tech, marketplaces, and SaaS. With over €1 billion under management, the company provides not only capital but also hands-on support and access to a broad network of founders and industry experts. The website reflects a professional and comprehensive digital presence, targeting founders and startups seeking early-stage investment and growth support. Technically, the site is built on Webflow and hosted via Cloudflare, leveraging modern JavaScript libraries such as GSAP and jQuery for enhanced user experience. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS, which severely impacts its security posture and trustworthiness. Cookie consent is managed effectively via Cookiebot, ensuring GDPR compliance and transparency in data collection practices. Overall, while the business model and content quality are strong, the lack of HTTPS and security headers represents a significant risk that should be addressed promptly.

G

GARTNER KG

gartnerkg.com

28

GARTNER KG is a large, family-owned Austrian logistics and transport company established in 1918, operating across 23 locations in 9 countries. The company specializes in road transport, intermodal transport, and warehousing services, positioning itself as one of Austria's largest family-owned transport providers and a leading logistics service provider in Europe. The website is professionally designed using TYPO3 CMS, with multilingual support and clear navigation targeting logistics customers and job seekers. Technically, the site uses Apache hosting with DNS managed by a1.net and integrates Cookiebot for GDPR-compliant cookie consent and Google Tag Manager for analytics. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy policies and contact information are comprehensive and accessible, but no explicit security or incident response policies are published. Overall, the site demonstrates good business credibility and privacy compliance but requires urgent security improvements.

T

Trek Bicycle Corporation

trekbikes.com

40

Trek Bikes is a well-established global bicycle manufacturer with a strong presence in Finland, offering a wide range of bicycles and cycling accessories. The website targets Finnish consumers with localized content and a comprehensive product catalog. Technically, the site uses modern frontend technologies such as Vue.js and Tailwind CSS, and is hosted behind Cloudflare CDN with integrated marketing and analytics tools like Google Tag Manager and Cookiebot for cookie consent management. However, a critical security weakness is the lack of a valid SSL/TLS certificate and HTTPS support, exposing users to potential risks. The site includes comprehensive privacy and cookie policies, indicating good privacy compliance, but lacks visible security policies or incident response information. Overall, the business credibility is high, supported by a mature domain and consistent branding, but the security posture requires urgent improvement to protect user data and trust.

P

PXP Financial

kalixa.com

40

PXP Financial operates a sophisticated unified commerce platform that integrates payment processing, acquiring, cross-border payments, and growth tools for a diverse range of industries including retail, hospitality, gaming, and travel. The company leverages a cloud-native, microservices-based architecture enhanced by AI to deliver scalable, reliable, and innovative payment solutions globally. Their platform emphasizes intelligent payment routing, real-time business intelligence, and self-service capabilities, positioning them as a modern leader in the payments technology sector. The website reflects a mature, professional business with strong branding and comprehensive service offerings.

ReSound Brazil, operated under the global GN Hearing A/S brand, specializes in manufacturing and retailing advanced hearing aids and wireless accessories. The website targets Brazilian consumers and hearing professionals, offering product information, support, and professional services. The company is well-established with a history dating back to 1943 and maintains a strong market position in the healthcare sector. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and consent management, hosted likely on Microsoft Azure infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing user trust. Overall, the site is professional and user-friendly but requires urgent security improvements to protect user data and maintain credibility.

M

MM Group

mm-karton.com

40

MM Group is a global leader in consumer packaging, specializing in cartonboard, folding cartons, kraft papers, uncoated fine papers, leaflets, and labels. The company targets businesses in the packaging and manufacturing sectors, emphasizing sustainability and innovation. Their website reflects a mature digital presence with multilingual support, comprehensive business information, and investor relations transparency. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and consent management tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS support, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security.

CARE Österreich is a well-established non-profit organization focused on humanitarian aid and sustainable development in over 100 countries. The website reflects a professional and content-rich platform targeting donors, partners, and beneficiaries. The technical infrastructure is based on WordPress hosted on WP Engine, utilizing modern plugins and tracking tools with GDPR-compliant cookie consent. However, the absence of a valid SSL/TLS certificate is a critical security flaw that exposes users to risks and undermines trust. While privacy policies and contact information are comprehensive and transparent, the lack of incident response and security policy pages indicates room for improvement in security governance. Overall, the site demonstrates strong business credibility and user experience but requires urgent security enhancements.

Primetals Technologies is a global leader in metallurgical plant solutions, offering a comprehensive portfolio of services and technologies across the steel production value chain. Their website reflects a mature enterprise-level business with a strong focus on innovation, digitalization, and sustainability, including green steel initiatives. The company targets industrial clients and professionals in the steel and metallurgical sectors, providing automation, lifecycle services, and integrated plant solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes multilingual support and professional design. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap that undermines data protection and user trust. Security headers are well implemented, but the lack of encryption and modern TLS protocols significantly lowers the security posture. Privacy compliance is well addressed with Cookiebot and Google Consent Mode integration, ensuring GDPR alignment. Overall, the site demonstrates high business credibility and professionalism but requires urgent security improvements to meet modern standards.