Security Directory

S

Stieglbrauerei zu Salzburg GmbH

stiegl.at

40

Stiegl Privatbrauerei is Austria's leading private brewery with a rich heritage dating back to 1492. The company offers a broad portfolio of beer specialties, operates an online shop, and provides B2B distribution and technical services. The website reflects a mature digital presence with professional design, comprehensive content, and active marketing integrations. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with consent mechanisms, indicating good privacy awareness. Overall, the business is well-established and credible, but urgent improvements in security infrastructure are recommended.

A

AT&S Austria Technologie & Systemtechnik AG

ats.net

33

AT&S Austria Technologie & Systemtechnik AG is a globally recognized leader in high-end printed circuit boards and IC substrates, serving key industries such as aerospace, automotive, communication, and medical technology. The company demonstrates a strong market position with a comprehensive digital presence, including investor relations, career opportunities, and sustainability initiatives. Technically, the website is built on WordPress with modern tools and plugins, offering good SEO and accessibility, though performance is moderate. Security posture is weakened by the absence of a valid SSL/TLS certificate and disabled TLS protocols, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business is credible and trustworthy, but urgent improvements in SSL/TLS configuration are recommended to enhance security and user trust.

Pilz GmbH & Co. KG operates an international website focused on providing comprehensive automation technology solutions, emphasizing safety and industrial security. The company targets industrial automation professionals and machine builders, offering components, systems, and services to ensure safe automation worldwide. The website is professionally designed with clear navigation and multilingual support, reflecting a strong market position in manufacturing and technology sectors. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, but suffers from critical SSL/TLS misconfigurations that undermine its security posture. Security headers are well implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the site's security score. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Business credibility is high, supported by detailed contact information, social media presence, and consistent branding. Overall, the site is functional and professional but requires urgent remediation of its SSL/TLS issues to improve security and trust.

R

Regionalmedien Austria AG

regionalmedien.at

32

Regionalmedien Austria AG is a leading Austrian regional media company with a broad portfolio of digital and print products, including well-known brands such as MeinBezirk.at and BezirksBlätter. The company focuses on local and regional news coverage, serving communities across all Austrian states. Their business model centers on media publishing and advertising services, positioning themselves as innovation drivers in the regional media market. The website reflects a mature digital presence with professional design, structured data, and comprehensive content tailored to their target audience of regional readers and businesses. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Cookiebot, but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Security posture is basic with no advanced headers or incident response information. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to meet modern standards.

A

AVL List GmbH

avl.com

40

AVL List GmbH is a globally recognized leader in mobility technology, specializing in development, simulation, and testing solutions primarily for the automotive industry. The company offers a broad portfolio of engineering, simulation, and testing services, with a strong emphasis on sustainable and innovative mobility solutions such as hydrogen engines, hybrid powertrains, and fuel cells. Their market position is that of a mature, enterprise-level technology provider with a significant global presence and a history spanning over 28 years. Technically, the website is built on Drupal 10 with modern JavaScript libraries and includes Cookiebot for consent management. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Performance is also a concern, with a notably slow page load time and a large page size. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Business credibility is strong, supported by detailed corporate information, consistent branding, and multiple trust signals. Overall, while the business and content quality are excellent, the lack of HTTPS and slow performance are key vulnerabilities that should be addressed promptly.

ERGO Versicherung Aktiengesellschaft operates the website das.at, providing legal protection insurance products under the D.A.S. Rechtsschutz brand in Austria. The company is a market leader with a strong reputation, offering services to private individuals, self-employed, and businesses. The website is professionally designed, content-rich, and targets Austrian customers with comprehensive insurance solutions and customer support channels. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates multiple marketing and analytics tools. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. WHOIS data confirms the domain's legitimacy and alignment with the ERGO group. Overall, the website is credible and professional but requires urgent security improvements to protect user data and trust.

F

FACC AG

facc.com

35

FACC AG is a mature and leading aerospace company specializing in the design, production, and maintenance of advanced lightweight components and systems for the global aviation industry. The company maintains strong partnerships with major aerospace manufacturers such as Airbus, Boeing, and Embraer, and offers a broad portfolio including aerostructures, engines, nacelles, cabin interiors, and MRO services. The website reflects a professional and well-branded digital presence targeting industry partners, investors, suppliers, and job seekers. Technically, the site is built on WordPress with modern JavaScript frameworks like Vue.js and uses Amazon CloudFront CDN for hosting. However, performance metrics are missing, and the site appears to load slowly. Security posture is a significant concern due to the absence of a valid SSL certificate and lack of TLS protocol support, which critically undermines secure communications. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is credible and professional but requires urgent security improvements to protect user data and maintain trust.

A

AVL Cultural Foundation GmbH

avlcf.com

33

AVL Cultural Foundation GmbH is a small, Austria-based cultural foundation dedicated to fostering the intersection of art and science through innovative projects, artistic installations, and interdisciplinary discussions. The organization targets artists, scientists, and cultural enthusiasts, positioning itself as a niche player in the cultural foundation sector. The website is built on Drupal 10 and hosted likely on AWS infrastructure, demonstrating a moderate level of digital maturity with good mobile optimization and accessibility. However, the absence of HTTPS/SSL is a critical security flaw that severely impacts the site's security posture. Privacy and cookie policies are well implemented with a consent mechanism via Cookiebot, reflecting good privacy compliance. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is professional but requires urgent security improvements.

H

HOERBIGER

hoerbiger.com

40

HOERBIGER is a large industrial company specializing in emissions solutions and performance-defining components across sectors such as energy, automotive, and hydrogen industries. The company holds a strong market position as a world leader in compression and rotary unions, providing innovative products and services aimed at increasing efficiency, safety, and sustainability. The website reflects a professional and well-branded digital presence, leveraging modern technologies such as Neos CMS and Flow Framework, with multimedia content and clear navigation tailored for industrial clients and partners. Technically, the website employs advanced content security policies, privacy compliance tools like Cookiebot, and analytics via Matomo, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts the site's security posture and user trust. Other security headers are well implemented, but the lack of encryption exposes users to potential risks. Overall, the security posture is weak due to missing HTTPS, but privacy compliance and business credibility are strong. The site is accessible without WAF or blocking mechanisms, allowing full content analysis. Strategic improvements in SSL deployment and enhanced security practices are essential to elevate the site's trustworthiness and compliance. The risk assessment highlights the urgent need for SSL certificate installation and enabling HTTPS to protect data integrity and confidentiality. The company should also consider publishing vulnerability disclosure policies and incident response contacts to further strengthen security culture and transparency.

P

pbbr | Sociedade de Advogados RL, Lda.

pbbr.pt

40

pbbr | Sociedade de Advogados RL, Lda. is a small full service law firm based in Lisbon, Portugal, established in 2006. The firm offers comprehensive legal advice and assistance with a national and international client base. Their website reflects a professional and consistent brand image, targeting clients seeking high-quality legal services. The firm maintains a presence on LinkedIn and provides newsletter subscriptions to engage clients and partners. Technically, the website uses a modern tech stack including nginx, PHP, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile optimized and SEO friendly, though performance metrics are unavailable. Hosting is managed via host-redirect.com DNS servers. However, the website lacks a valid SSL certificate, resulting in no proper HTTPS support, which is a significant security concern. Security posture is moderate with good use of security headers and content security policies, but the absence of valid SSL/TLS and modern TLS protocols severely undermines security. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Contact information is limited to forms, with no explicit emails or phone numbers displayed. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trustworthiness. Strategic improvements in security and contact transparency will enhance the firm's digital maturity and client confidence.

Haimer GmbH is a well-established German manufacturing company specializing in precision tool holding products and related services for the machining industry. With over 23 years of domain presence and a global workforce exceeding 800 employees, Haimer offers comprehensive solutions including tool management, calibration, and training. The website reflects a mature digital presence with extensive product catalogs, service offerings, and customer engagement channels. Technically, the site uses modern technologies such as Pimcore CMS, Google Analytics, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. However, the absence of a valid SSL/TLS certificate significantly impacts the security posture, exposing users to risks and limiting trust. Security headers are properly configured, but the lack of HTTPS is a critical issue. Overall, the business credibility and privacy compliance are strong, but immediate remediation of SSL issues is recommended to enhance security and user trust.

Z

Zone Media OÜ

zone.lv

40

Zone Media OÜ operates the website zone.lv and zone.eu, providing domain registration, web hosting, and cloud services primarily targeting European businesses. With over 25 years of hosting experience and a customer base of nearly 145,000 domains, the company positions itself as a reliable and innovative technology provider. Their offerings include a wide range of domain extensions, WordPress-optimized hosting, and cloud VPS solutions, supported by a proprietary platform called ZoneOS. The website demonstrates strong digital maturity with modern technologies, good SEO practices, and a comprehensive cookie consent mechanism compliant with GDPR. Security posture is robust with HTTPS, SPF, and DMARC configured, though improvements like enabling HSTS and DNSSEC are recommended. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

Z

Zone Media Oy

zone.fi

40

Zone Media Oy operates the website zone.fi, providing domain registration, web hosting, email, and virtual server services primarily targeting Finnish businesses, associations, and private individuals. With over 25 years of experience and a customer base exceeding 50,000 web hosting accounts and 145,000 domains, Zone holds a strong market position as a reliable and comprehensive hosting provider in Finland. Their service portfolio includes WordPress-optimized hosting, managed virtual servers, and security monitoring, emphasizing local data center hosting in Finland for data protection and compliance. Technically, the website is built on WordPress with modern technologies such as TLS 1.3, OCSP stapling, and integrates multiple third-party tools including Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. The site demonstrates good performance and mobile optimization, with clear navigation and professional design. SEO practices are well implemented with Yoast SEO plugin and structured data. From a security perspective, the site enforces HTTPS with strong TLS protocols, has SPF and DMARC email authentication configured with reject policies, and shows no critical vulnerabilities. Cookie consent mechanisms are in place, ensuring GDPR compliance. However, improvements are recommended in enabling HSTS, fixing CAA records, and publishing a security.txt file to enhance security posture further. Overall, zone.fi presents a trustworthy, professional, and secure online presence with strong compliance and user experience. The domain registration details align with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing HTTPS enforcement, improving transparency in vulnerability disclosure, and maintaining up-to-date security practices to sustain trust and compliance.

Kotisivutehdas is a Finnish small-sized technology service provider specializing in professional website development, SEO, AI services, and comprehensive marketing solutions. The company targets small and medium enterprises seeking turnkey, responsive, and SEO-optimized websites. Their market position is strengthened by over 20 years of industry experience and a broad service portfolio including copywriting, website maintenance, and security services. Technically, the website employs modern frameworks like UIkit and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, the website suffers from critical security shortcomings, notably the absence of HTTPS and a valid SSL certificate, which severely impacts its security posture. Privacy compliance is addressed through a comprehensive cookie consent mechanism and a detailed privacy policy, though terms of service and security policies are lacking. Overall, the website presents professional content and clear contact information but requires urgent security improvements to protect user data and enhance trust.

S

SIA Toode

toode.lv

40

SIA Toode is a medium-sized manufacturing company based in Latvia specializing in steel roofing and wall profiles, rainwater drainage systems, and related construction materials. The company has a regional presence with partner sites in Estonia, Lithuania, and Finland, positioning itself as a key player in the Baltic and Nordic construction materials market. Their website reflects a professional business with clear product offerings and a focus on construction professionals and building owners. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. However, performance is somewhat slow, and accessibility is basic. Security posture is adequate with HTTPS and SPF/DMARC records but lacks advanced SSL features such as HSTS and OCSP stapling, and no security headers are detected. Privacy compliance is supported by a privacy policy and cookie consent mechanism, though no incident response or security policy is visible. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security headers, SSL configuration, and incident response transparency would enhance the site's security and trustworthiness.

D

Dateks

dateks.lv

39

Dateks.lv operates as a medium-sized e-commerce retailer based in Latvia, specializing in a broad range of technology and consumer electronics products. The website offers extensive product categories including computers, components, office equipment, and home appliances, targeting both consumers and businesses in the Baltic region. The company maintains partnerships with major technology brands such as Asus, Dell, Intel, Lenovo, and Nvidia, reinforcing its market position as a reputable regional retailer. From a technical perspective, the website employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. However, the site suffers from slow performance due to a large page size and numerous resources. Mobile optimization is good, but accessibility features are basic. The lack of a valid SSL certificate is a critical security shortfall, impacting user trust and data protection. Security posture reveals several vulnerabilities including missing DMARC, DNSSEC, and CAA records, and no domain protection locks, which collectively increase risk exposure. While HSTS is enabled, the absence of a valid SSL certificate and other security best practices lowers the overall security score. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. Overall, Dateks.lv presents a professional and content-rich e-commerce platform with moderate technical maturity and security posture. Strategic improvements in SSL/TLS implementation, email security, and DNS hardening are recommended to enhance trust and compliance.

E

efficy

tribecrm.se

40

Tribe CRM, operated by efficy, offers a comprehensive, customizable CRM platform designed to help businesses grow by streamlining customer relationship management, sales, marketing, and project management processes. The platform integrates AI-driven tools and supports seamless integration with popular business applications, targeting medium-sized enterprises primarily in Sweden and surrounding markets. The website is professionally designed with rich content, multiple language support, and clear calls to action, reflecting a mature digital presence. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and HTTPS, which severely undermines user trust and data security. Despite extensive use of analytics and marketing tools with consent mechanisms, the lack of HTTPS and security headers poses significant risks. Overall, the business appears legitimate and well-positioned in the CRM market, but urgent improvements in security posture are necessary to protect users and comply with best practices.

E

efficy

tribecrm.eu

40

Tribe CRM is a technologically advanced, no-code CRM platform designed to empower businesses with customizable sales, marketing, and customer service tools integrated with AI capabilities. The platform targets medium-sized businesses seeking scalable and adaptable CRM solutions. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. The site employs multiple third-party analytics and marketing tools, including Piwik PRO, Google Analytics, and Cookiebot, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Overall, while the business and technical maturity are strong, the security posture requires urgent improvement to meet industry standards and protect user data effectively.

E

efficy

tribecrm.dk

57

Tribe CRM, operated by efficy, is a modern, AI-enhanced CRM platform designed to support businesses in sales, marketing, customer service, and project management. The platform targets medium-sized businesses seeking flexible and integrated CRM solutions with advanced automation and AI capabilities. The website demonstrates a professional and consistent brand presence with comprehensive content and multilingual support. Technically, the site is built on WordPress with several marketing and analytics integrations, including Piwik PRO, Google Analytics, and VWO, indicating a mature digital marketing approach. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with a robust consent mechanism, reflecting good privacy practices. Overall, while the business and content aspects are strong, the security posture requires urgent improvement to meet modern standards.

E

efficy

efficy.com

68

efficy is a leading European CRM software provider offering modular, GDPR-compliant solutions tailored to businesses of all sizes. The company emphasizes flexible, scalable platforms that centralize customer data, automate sales, and enhance customer engagement. With a strong market presence and over 13,500 customers, efficy positions itself as a trusted partner in the CRM and marketing automation space. The website reflects a mature digital infrastructure with advanced analytics and A/B testing capabilities, although performance optimization is needed due to slow load times. Security posture is currently weak due to an invalid SSL certificate and lack of modern TLS protocols, which poses a critical risk. Privacy compliance is well addressed with comprehensive cookie and privacy policies, including a consent mechanism. Overall, the site demonstrates professionalism and trustworthiness but requires urgent security improvements.

M

Medarbejder- og Kompetencestyrelsen

medst.dk

40

Medarbejder- og Kompetencestyrelsen is a Danish government agency under the Ministry of Finance focused on labor agreements, HR education, and development activities within the public sector. The agency provides tools, advisory services, and regulatory information to state employers and HR professionals. The website serves as an authoritative platform for state HR matters, offering educational programs, circulars, and practical tools. Technically, the site is built on the Umbraco CMS platform, uses modern JavaScript libraries such as Swiper.js for UI components, and integrates Cookiebot for cookie consent management. However, the site suffers from a critical security issue due to an invalid or missing SSL certificate, which undermines secure HTTPS access. Other security best practices such as HSTS, DNSSEC, and security headers are absent, indicating room for improvement in security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent SSL remediation to ensure secure user interactions.

S

Statens Administration

statens-adm.dk

40

Statens Administration is a Danish government entity providing centralized administrative services focusing on payroll, accounting, reimbursement, and support portals for public sector organizations. The website reflects a professional government service portal with clear navigation and relevant content for its target audience. Technically, the site uses Umbraco CMS and integrates third-party analytics and search tools, but suffers from a critical security flaw due to the absence of a valid SSL certificate, impacting HTTPS availability. Privacy compliance is well addressed with Cookiebot consent management and comprehensive cookie and privacy policies. The security posture is weak due to missing HTTPS and security headers, posing risks to user data confidentiality and integrity. Overall, the site is functional and trustworthy but requires urgent security improvements to meet modern standards.

S

Statens It

statens-it.dk

40

Statens It is a Danish government IT organization established in 2008, providing a range of IT services including workplace solutions, security, IT operations, servicedesk, and development of shared services primarily for public sector entities. The website reflects a mature and consistent government presence with clear contact information and compliance with GDPR through comprehensive privacy and cookie policies. Technically, the site uses modern tools such as Cookiebot for consent management and Cludo for search functionality, and is built on the Umbraco CMS platform. However, the security posture is weakened by the absence of a valid SSL certificate and HTTPS support, lack of security headers, and missing DNSSEC, which are critical for protecting user data and ensuring secure communications. The domain registration data aligns well with the official government entity, showing a long-standing and legitimate presence.

G

GetWhy A/S

preely.com

62

Preely is a Denmark-based technology company offering a SaaS platform focused on enhancing product decision-making through remote user testing and continuous discovery. Their platform supports testing of prototypes across devices and integrates AI (ChatGPT) for advanced test analysis. The company targets product teams, UX professionals, and businesses seeking efficient user feedback mechanisms. The website demonstrates a professional presence with trusted clients and active social media engagement. Technically, the website is built on WordPress with WPBakery Page Builder, leveraging Cloudflare for DNS and CDN services. It employs standard marketing and analytics tools including Google Analytics, Facebook Pixel, and Cookiebot for GDPR-compliant cookie management. While the SSL certificate is valid, the site lacks advanced security headers and HSTS, and performance metrics indicate a slower load time. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in HTTP security headers and DNSSEC implementation. Privacy compliance is strong, supported by a comprehensive privacy policy and cookie consent mechanism. Business credibility is reinforced by clear company information, testimonials, and client logos. Overall, Preely presents a trustworthy and functional online presence with room for technical and security enhancements to further strengthen its posture and user trust.

e-Boks Group operates Denmark's leading digital mailbox platform, serving millions of users with secure digital post and document management services. The company is well-established, owned by reputable parent companies Nets and PostNord, and targets both private individuals and businesses. Their platform supports secure communication with public authorities and private entities, leveraging MitID for authentication and providing mobile app access for convenience. Technically, the website employs modern JavaScript frameworks and integrates Cookiebot for privacy compliance, but critically lacks a valid SSL certificate, exposing users to security risks. The absence of HTTPS and security headers significantly lowers the security posture score. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, the website is professionally designed with excellent content quality and user experience, but urgent improvements in SSL/TLS configuration and security headers are necessary to enhance trust and security.

S

Statens It

govcloud.dk

40

Statens It operates GovCloud, a specialized cloud service platform designed to host governmental applications and data securely within Denmark. The service targets public sector organizations, offering cloud infrastructure hosted in Danish data centers. The website reflects a government-affiliated entity with clear contact information and a focus on compliance with privacy regulations, including GDPR. However, the absence of a valid SSL certificate undermines secure communications, which is a critical security gap. Technically, the site uses modern web technologies including Umbraco CMS, responsive design, and Cookiebot for cookie consent management. Performance is moderate, and accessibility features are adequately implemented. Analytics are minimal and privacy-conscious, using Silktide analytics and Cookiebot tracking pixels. Security posture is weak due to the lack of HTTPS, missing security headers, and absence of DNSSEC and CAA records. No explicit security or incident response policies are published. The domain registration is consistent with the business identity, showing a mature domain age and no suspicious discrepancies. Overall, the site is professional and trustworthy from a business perspective but requires urgent improvements in SSL deployment and security hardening to protect user data and maintain trust.

D

Digitaliseringsstyrelsen

digst.dk

40

Digitaliseringsstyrelsen is the Danish government agency responsible for leading the digital transformation of Denmark, aiming to simplify daily life for citizens and businesses while supporting public authorities in delivering quality services. The agency operates a comprehensive website offering information on digital solutions such as MitID, Digital Post, and various support services, targeting both citizens and businesses. The site reflects a strong government presence with clear contact details and compliance with privacy regulations. Technically, the website uses modern tools like Cookiebot for consent management and analytics platforms such as Matomo and Siteimprove, but suffers from a lack of valid SSL certificates and slow load times, which negatively impact security and user experience. Security posture is weak due to missing HTTPS, lack of security headers, and no DNSSEC, although SPF and DMARC are properly configured. Overall, the site is trustworthy and authoritative but requires urgent improvements in security infrastructure to protect user data and enhance trust.

K

Kelly Services Inc.

kellyconnect.com

52

KellyConnect is a business-to-business service provider specializing in contact center workforce and outsourcing solutions. The company operates as a subsidiary of Kelly Services Inc., a well-established enterprise founded in 1946 in the United States. KellyConnect offers tailored contact center optimization, managed services, and outsourcing solutions to enhance customer experience and operational efficiency for its clients. The website is professionally designed, targeting businesses seeking contact center services, and demonstrates consistent branding and good content quality. Technically, the site is built on the HubSpot CMS platform and integrates various marketing and analytics tools such as Google Analytics, Cookiebot, and Cheq for bot protection. However, the website suffers from a critical security issue: it lacks a valid SSL certificate and does not serve content over HTTPS, which significantly undermines its security posture. Other security best practices such as HTTP security headers and modern TLS protocols are also absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR-compliant consent mechanisms. Contact information is primarily available through contact forms, with no explicit emails or phone numbers found in the HTML content. Overall, while the business and content aspects are strong, the lack of HTTPS is a major risk that should be urgently addressed to protect user data and maintain trust.

T

Teachers On Call, a Kelly Education company

teachersoncall.com

69

Teachers On Call, a division of Kelly Education and Kelly Services, operates as a leading staffing service specializing in providing licensed teachers, paraeducators, tutors, and early childhood education staff to over 150 school districts and 450 education centers primarily in the US Midwest and Northwest. The company has a mature online presence with a professionally designed website built on the HubSpot CMS platform, featuring comprehensive content and clear navigation tailored to both job seekers and school clients. The technical infrastructure leverages modern web technologies and integrates extensive marketing and analytics tools, ensuring robust user tracking and data collection with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS, DMARC enforcement, and domain protection, though improvements such as enabling HSTS and DNSSEC could enhance resilience. Overall, the website reflects a trustworthy and credible business with a clear market position in the education staffing sector.

N

NextGen | GTA

kellytelecom.com

54

NextGen | GTA, a Kelly Telecom company, is a leading provider of innovative engineering, deployment, and talent solutions in the telecommunications and digital infrastructure industry. The company specializes in staffing, scope of work, and direct hire services, serving Tier-1 carriers and technology firms across the United States and Canada. Their market position is strong, supported by extensive client testimonials, industry awards, and a comprehensive service portfolio including 5G, fiber, RF design, and network optimization. Technically, the website is built on WordPress with modern plugins and integrations such as Gravity Forms, Cookiebot, and Google Analytics, hosted behind Cloudflare CDN. However, the site lacks a valid SSL certificate and HTTPS, which is a critical security gap. Security headers are partially implemented but the absence of TLS protocols and certificate transparency compliance significantly lowers the security posture. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Overall, the website is professional and trustworthy but urgently needs to address SSL/TLS issues to improve security and user trust.

U

UiT Norges arktiske universitet

uit.no

58

UiT Norges arktiske universitet is a prominent Norwegian university specializing in Arctic education and research. The website serves a broad audience including students, researchers, and staff, providing comprehensive information about study programs, research initiatives, and public services. The institution maintains a strong digital presence with extensive use of third-party services for analytics, marketing, and content delivery. Technically, the site employs modern frameworks like Bootstrap and jQuery, along with Font Awesome for icons, and integrates a robust cookie consent mechanism via Cookiebot. However, the website suffers from an invalid SSL certificate, which significantly impacts its security posture. While privacy compliance is well addressed with detailed cookie policies and GDPR adherence, the absence of explicit terms of service and security headers indicates areas for improvement. Overall, the site is professional and trustworthy but requires urgent attention to its SSL configuration to ensure secure user interactions.

K

Kelly Education

kellyeducation.com

68

Kelly Education is a well-established education staffing and workforce solutions provider operating primarily in the United States. The company serves over 10,000 schools and 1,000+ districts, offering a broad range of staffing services including substitute teaching, special education, tutoring, and HR administration. The website reflects a mature and professional business with consistent branding and a strong market position as a leader in education staffing. Technically, the site is built on HubSpot CMS, uses modern web technologies, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS, proper security headers, and SPF/DMARC email protections, though some improvements like HSTS preload and certificate transparency compliance are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, user-friendly, and aligned with the company's business objectives.

K

KellyOCG

kellyocg.com

54

KellyOCG is a well-established enterprise workforce solutions provider with over 75 years of industry experience, serving primarily Fortune 100 companies and large global enterprises. Their service offerings include managed service provider solutions, recruitment process outsourcing, payroll outsourcing, and talent consulting. The website is built on HubSpot CMS and integrates multiple marketing, analytics, and advertising technologies, reflecting a mature digital marketing strategy. However, the absence of a valid SSL certificate and lack of modern TLS protocols represent critical security weaknesses that expose users to risks and reduce trust. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy, supporting GDPR compliance. Overall, the website demonstrates strong business credibility and content quality but requires urgent security improvements to meet enterprise-grade standards.

E

Epiq

epiqglobal.com

55

Epiq is a global leader in legal and compliance services, offering a broad portfolio of solutions including eDiscovery, class action administration, bankruptcy services, and business transformation. The company integrates technology, legal expertise, and process innovation to serve law firms, corporate legal departments, and compliance professionals worldwide. Their website reflects a mature digital presence with extensive content, clear navigation, and a professional design that supports their market position as a trusted partner in legal services. Technically, the site leverages modern web technologies and multiple analytics and marketing tools, indicating a high level of digital maturity. However, the security posture is currently weak due to the absence of a valid SSL certificate and missing security headers, which poses risks to user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Epiq demonstrates strong business credibility and digital sophistication but should urgently address critical security gaps to maintain trust and compliance.

K

Kelly Services Inc.

kellyservices.com

40

Kelly Services Inc. is a global leader in staffing and workforce solutions, connecting job seekers with meaningful employment opportunities and providing companies with expert talent solutions. The company operates a comprehensive website with a strong global presence, offering services such as temporary staffing, managed services, and consulting. The website is professionally designed, well-branded, and targets both job seekers and employers effectively. Technically, the site leverages HubSpot CMS and marketing tools, Cloudflare for CDN, and includes modern JavaScript libraries. However, the SSL certificate is currently invalid, and no modern TLS protocols are enabled, which significantly impacts the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Contact information is clearly provided, including phone numbers and social media links. Overall, the website is credible and trustworthy but requires urgent SSL and TLS configuration fixes to improve security.

L

Landmarc Solutions

landmarcsolutions.com

36

Landmarc Solutions is a well-established service provider specializing in safe and sustainable training solutions for the Armed Forces in the United Kingdom. With over 20 years of experience, the company offers a range of services including training areas and ranges, rural management, project management, facilities management, and MOD event locations. The website reflects a professional and consistent brand image targeting military and government clients. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Cookiebot for privacy compliance and Google Analytics for visitor insights. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of security headers, which significantly impacts its security posture. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website is content-rich and user-friendly but requires urgent security improvements to protect user data and enhance trust.

O

Ospedale Pediatrico Bambino Gesù

ospedalebambinogesu.it

36

Ospedale Pediatrico Bambino Gesù is a leading pediatric hospital and research center in Europe, providing specialized healthcare services for children and adolescents primarily in Italy but also internationally. The website serves as a comprehensive portal offering information about the hospital, research projects, patient services including online appointment booking, and donation opportunities. The institution is well-positioned in the healthcare sector with strong trust indicators such as certifications and a professional digital presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Handlebars.js, and integrates Google Analytics and Tag Manager for tracking and marketing. Hosting is via Amazon CloudFront CDN, and authentication services use Amazon Cognito. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security gap. Cookie consent is managed through Cookiebot, indicating compliance with GDPR requirements. From a security perspective, the absence of HTTPS and related security headers significantly lowers the security posture. No incident response or vulnerability disclosure information is published. DNS security features like DNSSEC and DMARC are missing. Despite these issues, the site does not show signs of active vulnerabilities or malicious content. Overall, the website is professionally designed and content-rich but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include deploying a valid SSL certificate, enabling HSTS, implementing DNS security records, and publishing security policies and incident response contacts.

A

Aruba Business

arubabusiness.it

40

Aruba Business is a well-established Italian IT services provider founded in 2015, offering a comprehensive portfolio of IT solutions including domain registration, hosting, cloud services, and data center solutions. The company targets IT professionals and businesses seeking advanced technological infrastructure and personalized IT services. Their market position is strong within Italy, supported by a mature domain and extensive service offerings. The website reflects a high level of professionalism, with clear navigation, excellent content quality, and consistent branding. Technically, the site uses modern technologies such as Google Tag Manager, Matomo, and Cookiebot, and is hosted within Aruba's own infrastructure. However, a critical security issue is the absence of a valid SSL certificate, which undermines the security posture despite the presence of HSTS and other good practices. Privacy compliance is robust, with comprehensive privacy and cookie policies and an effective consent mechanism. Overall, the site is trustworthy and business credible but requires urgent SSL remediation to improve security and user trust.

E

Eurochambres, BEUC and SMEunited

consumerlawready.eu

38

ConsumerLawReady.eu is an EU-backed educational platform focused on providing consumer law training for Small and Medium Enterprises (SMEs) and consumer law trainers across the European Union. The website offers dedicated portals for each EU country, supporting multilingual content and localized training resources. The project is implemented by reputable organizations including Eurochambres, BEUC, and SMEunited on behalf of the European Commission, establishing strong trust and legitimacy in the market. The platform targets legal experts, SME owners, and employees seeking to enhance their knowledge of consumer law.

E

Eurochambres

eurochambres.eu

40

Eurochambres is a well-established non-profit association representing European chambers of commerce and industry, serving as a key voice for the business community at the EU level since 1958. The organization focuses on advocacy, information dissemination, and supporting SMEs through various projects and services. Their website reflects a professional and consistent brand presence targeting European businesses and policymakers. Technically, the site is built on WordPress with the Divi theme and integrates several plugins and external services such as Cookiebot for cookie consent and Google Analytics for tracking. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. While privacy compliance is well addressed through Cookiebot and a comprehensive privacy policy, the lack of security best practices and slow performance pose risks to user trust and data protection. Strategic improvements in SSL deployment, security headers, and performance optimization are recommended to enhance the overall security and user experience.

A

AS Kredītinformācijas Birojs

kib.lv

40

AS Kredītinformācijas Birojs is a Latvian credit information bureau providing credit data and reporting services to individuals and businesses. The company is positioned as a trusted entity in the Latvian financial sector, supported by ISO 27001 certification and memberships in recognized organizations such as Creditinfo and the Latvian Chamber of Commerce (LTRK). Their services focus on promoting responsible lending and credit transparency. Technically, the website is built on WordPress with common libraries like jQuery and uses Cookiebot for GDPR-compliant cookie consent. The site is moderately performant and mobile-optimized, though page load times could be improved. Security posture is adequate with HTTPS and SPF/DMARC email protections, but lacks advanced SSL features like HSTS and OCSP stapling. Privacy policies and terms of service are clearly presented and GDPR compliant. Overall, the website reflects a professional and credible business with room for technical and security enhancements.

C

Creditinfo

creditinfo.is

52

Creditinfo is a leading Icelandic company specializing in the provision of financial and business information services, including credit scoring, business data, and media monitoring. The company targets both individuals and businesses in Iceland, offering subscription-based and service-oriented products to support informed decision-making. The website reflects a mature and professional business with a clear market position and a comprehensive range of services. Technically, the site is built on Webflow and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot, and Weglot for multilingual support. However, the website suffers from a critical security deficiency due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are well-presented and GDPR compliant, with active consent mechanisms. Overall, while the business credibility and content quality are strong, the security posture requires urgent improvement to protect user data and maintain trust.

M

Marfina, SL

moventisexperience.es

40

MoventisExperience is an online platform operated by Marfina, SL, offering road transport services and excursions primarily in Catalonia, Spain. The company provides shuttle transfers, private transfers, and guided tours, targeting tourists and travelers seeking convenient booking options. The website reflects a medium-sized business with consistent branding and a focus on customer service, including 24/7 telephone support and cancellation policies. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, but suffers from slow load times and lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well addressed with clear cookie and privacy policies and a consent mechanism via Cookiebot. However, no explicit security or incident response policies are found on the site. Overall, the site is professional and trustworthy but requires improvements in security and performance to enhance user trust and compliance.

M

Moventia

moventia.es

40

Moventia is a well-established Spanish multinational company specializing in collective and private mobility solutions since 1923. The company positions itself as a leader in the transportation sector with a strong emphasis on innovation, sustainability, and quality service. Their website reflects a mature digital presence with multilingual support, rich multimedia content, and comprehensive corporate information. Technically, the site is built on WordPress with modern plugins and frameworks, though performance is somewhat slow likely due to heavy resource usage. Security posture is a concern due to an invalid SSL certificate and lack of modern TLS protocols, which exposes the site to risks and undermines user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by consistent branding and trust signals, but security improvements are critical to maintain reputation and compliance.

U

Universitat de Barcelona

ub.edu

53

The Universitat de Barcelona (UB) is a leading public academic institution in Spain, specializing in education, research, and innovation. The website serves a diverse audience including students, researchers, academic staff, alumni, companies, and media. It offers comprehensive information on academic programs, research initiatives, and institutional activities, positioning itself as a major educational entity in the region. The digital presence is supported by a mature technical infrastructure leveraging Liferay CMS and modern JavaScript frameworks, ensuring a good user experience and accessibility. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed through Cookiebot and Google Consent Mode, with clear cookie and privacy policies in place. Overall, the website is professional and content-rich but requires urgent security improvements to meet modern standards.

B

Banca Agricola Commerciale

baclife.sm

39

Banca Agricola Commerciale (BAC) is a well-established financial institution based in San Marino, providing a broad range of banking, investment, and insurance services to both private individuals and businesses. The website reflects a mature and professional presence with comprehensive business information, news updates, and customer resources. The company operates subsidiaries such as BAC Life S.p.A. and BAC Investments, indicating a diversified financial services group. The target audience is primarily local customers in San Marino, with services tailored to their needs including online and mobile banking solutions. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Cookiebot for compliance and marketing. It integrates Google Tag Manager and Google Maps API, showing a moderate level of digital maturity. However, performance metrics are missing, and some technical debt is evident, especially in the SSL/TLS configuration. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability exposing users to potential data interception. While some security headers are present, the absence of HTTPS and DNSSEC reduces the overall security posture significantly. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is credible and professional but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing DNS and domain protections.

C

Colorificio Sammarinese SpA

colsampuretech.com

34

Colsam PureTech is a specialized manufacturing company focused on innovative and sustainable waterborne paint solutions, operating under Colorificio Sammarinese SpA. The company leverages Industry 4.0 technologies to deliver high-quality, low environmental impact products primarily targeting industrial and construction sectors. Their digital presence is supported by a WordPress-based website with modern SEO and marketing tools, including video content and multilingual support. However, the website's security posture is weakened by an invalid SSL certificate and lack of advanced security headers, which poses risks to user trust and data protection. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the company demonstrates a solid market position with clear business information and certifications, but should urgently address SSL and security improvements to enhance trust and compliance.

B

BAUER Group

bauer.de

40

The BAUER Group is a globally recognized enterprise specializing in specialist foundation engineering, manufacturing, and environmental services. With a history spanning over two centuries, the company maintains a strong market position as a leader in construction and mechanical engineering sectors. Their business model integrates manufacturing of specialized equipment and provision of geotechnical and resource-related services, targeting construction professionals, investors, and job seekers worldwide. Technically, the website is built on Drupal 10 with modern web technologies and demonstrates good mobile optimization, accessibility, and SEO practices. However, the absence of a valid SSL/TLS certificate and HTTPS support significantly undermines the security posture. Security headers and policies are well implemented, but the lack of encryption exposes users to risks. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site reflects a professional and trustworthy business presence but requires urgent security improvements to protect user data and maintain trust.

H

Haake Technik GmbH

haake.it

38

Haake Technik GmbH is a family-run company specializing in the development and manufacturing of industrial safety equipment, including safety edges, bumpers, mats, switches, and locking systems. With over 30 years of experience and an international presence, the company serves industrial clients focused on workplace and machine safety. The website reflects a professional business with clear product offerings and strong customer references. Technically, the site uses modern tracking and consent tools but suffers from a critical lack of a valid SSL certificate, resulting in no HTTPS support and exposing users to security risks. Performance is slow, and security headers are missing, indicating room for improvement in technical and security infrastructure. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the business credibility is strong, but the security posture requires urgent attention to protect user data and maintain trust.