Security Directory

Meusburger Georg GmbH & Co KG is a market leader in manufacturing high-precision standard parts, serving global customers in mould, die, and jig & fixture construction. The company offers a comprehensive product portfolio including standard parts, workshop equipment, hot runner systems, and control systems. Their website reflects a mature digital presence with extensive product categorization and multi-language support. However, the absence of a valid SSL/TLS certificate significantly impacts the security posture, exposing users to potential risks. Security headers are well configured, but the lack of HTTPS is a critical vulnerability. Privacy compliance is moderate with a privacy policy present but no visible cookie consent mechanism. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

A

Activision Publishing

treyarch.com

40

Treyarch.com is the official website of Treyarch Studios, a renowned video game developer known for the Call of Duty Black Ops series. The site is professionally designed, targeting gamers and industry professionals, and showcases the company's history, culture, and game portfolio. It operates under the parent company Activision Publishing, reflecting a strong market position in the gaming industry. Technically, the site uses Adobe Experience Manager CMS, hosted via Akamai, and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe Launch. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical issue for user trust and data protection. Privacy and cookie policies are comprehensive and GDPR compliant, linked through the parent company domain. Overall, the site is content-rich and trustworthy but requires urgent security improvements.

E

easybank

easybank.at

39

easybank is a leading direct bank in Austria, offering a comprehensive range of financial services including personal and business accounts, loans, credit cards, savings, and investment products. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and clear navigation. The business is well-positioned in the Austrian banking sector, supported by its parent company BAWAG Group and subsidiaries such as easyleasing.at. Technically, the site uses CoreMedia CMS and integrates modern marketing and analytics tools like Adobe and Google Tag Manager, alongside a consent management platform for privacy compliance. However, the website suffers from a critical security deficiency: it lacks a valid SSL certificate and does not support HTTPS, exposing users to significant risks. Security headers and modern TLS protocols are also absent, which undermines the overall security posture. Privacy policies and cookie consent mechanisms are well implemented, indicating good compliance with GDPR. Overall, while the business and content quality are excellent, the security shortcomings significantly impact the risk profile and trustworthiness of the site.

G

GE HealthCare

gehealthcare.com

40

GE HealthCare is a leading enterprise in the healthcare technology sector, specializing in precision health solutions including imaging systems, ultrasound, patient care, pharmaceutical imaging agents, and digital healthcare solutions. The company targets healthcare providers and clinicians, offering integrated technologies to improve patient outcomes and operational efficiency. The website reflects a mature, well-established business with a strong market position and comprehensive service offerings. Technically, the website is built on a modern stack including React and Sitecore CMS, with extensive use of analytics and marketing tools such as Google Tag Manager, Adobe Marketing Cloud, and New Relic. The site is well-optimized for mobile and accessibility, though performance is moderate due to large page size and resource count. Security posture is a concern due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical issue. Other security best practices like HSTS and OCSP stapling are also missing. The domain is mature and registered consistently with the business claims, enhancing trustworthiness. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling modern TLS protocols, and improving security headers and mechanisms.

B

Bauer Media Group

bauermedia.co.uk

26

Bauer Media Group is a well-established UK-based media company operating across multiple sectors including audio broadcasting, publishing, and advertising services. The company targets a broad UK adult audience and maintains a strong market position with a portfolio of iconic brands. The website reflects a mature digital presence with comprehensive content, structured data, and good SEO practices. However, the technical infrastructure shows critical security gaps, notably the absence of a valid SSL/TLS certificate and lack of HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed through external policies and a consent management platform. Overall, the business credibility is strong, but the security weaknesses pose risks that should be urgently addressed.

E

Ethical Workforce

ethicalworkforce.co.uk

33

Ethical Workforce is a specialist hospitality recruitment agency based in London, offering permanent and temporary staffing solutions with an international reach. The company targets both employers seeking hospitality staff and jobseekers looking for roles in the hospitality sector. Their website presents a professional image with clear service offerings and client testimonials from notable hospitality figures, positioning them as a trusted niche player in the recruitment market. Technically, the website is built on WordPress using PHP 7.4 and Apache, with common plugins such as Yoast SEO and WPBakery Page Builder. Google Tag Manager is used for analytics and marketing tracking. The site is mobile optimized and SEO friendly, but lacks performance metrics data. The hosting provider is not explicitly identified but uses hdodns.com nameservers. From a security perspective, the site has critical weaknesses: it does not have an SSL/TLS certificate installed, serving content over HTTP only, which severely impacts user trust and data security. No modern TLS protocols or security headers are present. Cookie consent is implemented, but no privacy policy or terms of service pages were found, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements, especially implementing HTTPS and enhancing privacy compliance. Strategic recommendations include obtaining a valid SSL certificate, adding comprehensive privacy and terms pages, and improving security headers to protect users and build trust.

Z

ZETA

zeta.com

39

ZETA is a large, established engineering and consulting company specializing in the pharmaceutical and biotech industries. They provide comprehensive services including process engineering, automation, food engineering, lifecycle management, and digitalization solutions. The company operates globally with multiple locations and a strong market presence in Austria and beyond. Their website reflects a professional and content-rich digital presence targeting industry clients seeking advanced technological solutions. Technically, the website is built on the Contao CMS platform, served by Apache, and uses common web technologies such as jQuery and Google Tag Manager. While the site is well-structured and optimized for mobile devices, performance metrics indicate slow loading times, and accessibility features are basic. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability. Security headers are partially implemented, but important features like HSTS, OCSP stapling, and session resumption are missing. The extensive use of tracking and marketing tools is managed with a clear cookie consent mechanism, indicating good privacy compliance. Overall, the website presents a trustworthy and professional business front but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include immediate SSL certificate installation, enabling modern security protocols, and enhancing security headers to meet industry best practices.

T

TD Canada Trust

td.com

39

TD Canada Trust is a leading North American financial institution offering a broad range of banking and investment services to personal, small business, and commercial clients. The website reflects a mature digital presence with comprehensive content on corporate values, sustainability, innovation, and customer care. The technical infrastructure is built on Adobe Experience Manager and supported by major third-party services for analytics and marketing. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of HTTPS support, which poses significant risks to user data confidentiality and trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements.

W

WIG Wietersdorfer Holding GmbH

wietersdorfer.com

39

WIG Wietersdorfer Holding GmbH is a large, family-owned industrial enterprise based in Austria with a 125-year history. The company operates internationally with subsidiaries in multiple countries, focusing on sectors such as cement, lime, GFK and PP pipe systems, and industrial minerals. Their business model is centered on manufacturing and global distribution, targeting industrial and construction markets. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with the Avada theme and uses common plugins for forms, multilingual content, and cookie management. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which is a critical issue that needs immediate remediation. Privacy compliance is well addressed with comprehensive policies and a robust cookie consent mechanism. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect user data and maintain trust.

A

Air Liquide

airliquide.com

40

Air Liquide is a global leader in gases, technologies, and services for industry and healthcare, operating in 60 countries with a large workforce and millions of customers. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding. However, the technical security posture is weak due to an invalid SSL certificate and disabled TLS protocols, which poses significant risks to user trust and data security. Privacy and cookie policies are well implemented and GDPR compliant, supporting regulatory adherence. The absence of direct contact information and vulnerability disclosure policies suggests areas for improvement in transparency and incident response readiness. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy.

W

Wüstenrot

wuestenrot.at

38

Wüstenrot is a well-established Austrian financial services provider with a 100-year history, offering integrated banking, insurance, and savings products. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to private customers in Austria. Technically, the site is built on Adobe Experience Manager and uses modern web technologies and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate and enabled TLS protocols, exposing users to potential risks. Privacy compliance is strong with GDPR-aligned cookie consent and detailed privacy policies. Overall, the business is credible and trustworthy, but urgent security improvements are needed to protect user data and maintain trust.

S

Standortagentur Tirol GmbH

standort-tirol.at

21

Standortagentur Tirol GmbH is a regional economic development agency based in Tirol, Austria, focused on fostering innovation, technology, and sustainable growth for businesses, research institutions, and municipalities. The company operates as part of the Lebensraum Tirol Holding and offers a broad range of services including support for digitalization, funding, cluster networking, and internationalization. Their website reflects a professional and well-structured digital presence targeting multiple stakeholder groups with relevant content and resources. Technically, the site runs on Microsoft IIS with ASP.NET and uses common JavaScript libraries and marketing tools such as Google Tag Manager and Cookiebot for consent management. However, a critical security weakness is the absence of HTTPS and a valid SSL certificate, exposing users to potential risks. Privacy compliance is addressed with visible policies and consent mechanisms, but incident response and security policies are not evident. Overall, the site is credible and functional but requires urgent security improvements to protect user data and enhance trust.

G

Grand Hotel Oslo

grand.no

33

Grand Hotel Oslo is a historic and iconic hospitality business located in the heart of Oslo, Norway. It offers premium hotel accommodations, multiple restaurants and bars, event hosting facilities, and spa services. The hotel targets tourists, business travelers, and event organizers, positioning itself as a luxury and culturally significant venue. The website reflects a professional and consistent brand image with clear business information and trust indicators such as environmental certification and social media presence. Technically, the site uses modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking, hosted likely on Microsoft Azure infrastructure. However, a critical security gap exists as the website lacks HTTPS/SSL encryption, exposing visitors to potential risks. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the website is functional and content-rich but requires urgent security improvements to protect user data and enhance trust.

S

Salzburger Nachrichten Medien GmbH & Co. KG

salzburg.com

35

Salzburger Nachrichten Medien GmbH & Co. KG operates a mature and well-established regional news website focused on Salzburg, Austria, and international news. The site offers a wide range of content including politics, economy, culture, sports, and local events, supported by various services such as job listings, real estate, e-paper, and podcasts. The company maintains a strong market position as a leading media provider in the region with a consistent and professional brand presence. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, leveraging GraphQL for data management. It uses Varnish caching and is hosted on Conova infrastructure. The site is well-optimized for mobile and SEO, with good accessibility features. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap. From a security perspective, the website lacks HTTPS, HSTS, and other essential security headers, which significantly lowers its security posture. While no critical vulnerabilities or malware were detected, the lack of encryption exposes users to potential risks. Privacy policies and cookie consent mechanisms are in place, indicating compliance with GDPR requirements. Overall, the website is content-rich and professionally managed but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling security headers, and enhancing incident response capabilities.

SIGEL is a medium-sized manufacturing company specializing in innovative office equipment and smart procurement solutions tailored for modern, agile work environments. The company positions itself as a trusted partner for businesses seeking high-quality office products, supported by multiple international design awards and ISO certification. The website is professionally designed using Drupal 11, with strong SEO, accessibility, and multi-language support, reflecting a mature digital presence. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture. While security headers and cookie consent mechanisms are well implemented, the lack of incident response and vulnerability disclosure policies indicates room for improvement in security governance. Overall, the website is trustworthy and professional but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

J

Jungheinrich AG

jungheinrich.com

40

Jungheinrich AG is a globally leading company in the intralogistics sector, headquartered in Hamburg, Germany. The company specializes in manufacturing industrial trucks, warehouse and material flow technology, and providing logistics services. The website reflects a mature enterprise with a strong market position and comprehensive service offerings targeting businesses requiring intralogistics solutions. Technically, the website employs modern web technologies including Vue.js, CoreMedia CMS, and integrates multiple marketing and analytics tools such as Google Tag Manager, Marketo, and Cookiebot. However, a critical security issue is present due to an invalid SSL certificate and lack of enabled TLS protocols, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professionally designed, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

S

Sanitär-Heinze GmbH & Co. KG

sanitaer-heinze.com

29

Sanitär-Heinze GmbH & Co. KG operates as a specialized wholesale and service provider in the sanitary, heating, ventilation, and renewable energy sectors primarily serving professional customers in Germany. The company offers a broad portfolio including bathroom products, heating systems, ventilation solutions, and 3D bathroom planning services. Their market position is that of an established regional player with a consistent brand presence and multiple product lines. Technically, the website is built on the Pimcore CMS platform, leveraging modern JavaScript libraries and Google analytics tools, with a professional design and good navigation. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that significantly impacts the security posture. Cookie consent is implemented properly, and privacy policies are comprehensive and GDPR compliant. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

E

EGLO FINLAND OY

eglo.com

40

EGLO FINLAND OY operates as a major player in the global lighting manufacturing and retail sector, offering a wide range of lighting and home decor products through a multilingual e-commerce platform. The company is well-established with a domain age of 27 years and a strong market presence supported by a global network of sales entities. The website is professionally designed, user-friendly, and targets consumers and retailers seeking lighting solutions. Technically, the site leverages Magento Commerce with modern JavaScript frameworks and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine the site's security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business is credible and trustworthy, but urgent security improvements are recommended to protect user data and enhance trust.

S

Smarter Ecommerce GmbH

smarter-ecommerce.com

40

Smarter Ecommerce GmbH is an established Austrian company founded in 2007, specializing in AI-powered PPC campaign management software and expert consulting services tailored for ecommerce businesses. The company holds reputable certifications such as Google Premier Partner and Microsoft Advertising Elite Partner, positioning itself as a trusted player in the ecommerce marketing technology sector. Their offerings focus on Performance Max optimization, Google Ads management, and comparison shopping services, targeting ecommerce clients seeking to maximize advertising ROI. Technically, the website leverages modern web technologies including Bootstrap, GSAP, and Storyblok CMS, hosted behind Cloudflare CDN. The site implements a consent management platform (Usercentrics) and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, and Microsoft Clarity, reflecting a mature digital marketing infrastructure. Mobile optimization and SEO practices are well addressed, although performance metrics are not explicitly available. From a security perspective, the site lacks a valid SSL certificate, which is a critical vulnerability impacting user trust and data protection. While some security headers are present, important enhancements such as DNSSEC, CAA records, and full HSTS implementation are missing. No explicit security or incident response policies are published, and no vulnerability disclosure mechanisms are evident. Privacy compliance is well managed through a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL/TLS issues and security hardening to ensure secure user interactions and compliance with best practices.

H

Hypo Tirol Bank AG

hypotirol.com

40

Hypo Tirol Bank AG operates as a digital regional bank in Austria, primarily serving private and corporate clients in Tirol and Vienna. The website presents a comprehensive portfolio of banking products including accounts, cards, savings, investments, loans, and insurance services. The bank emphasizes personal service combined with digital convenience, targeting a broad customer base from individuals to public institutions. The site is professionally designed with clear navigation and localized German content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates marketing and tracking tools such as Google Tag Manager and Adrom.net. However, the website currently lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security vulnerability. Other security best practices such as security headers and HSTS are also missing. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and an active consent mechanism. Overall, while the business and content aspects are strong, the security posture requires urgent improvement to protect user data and maintain trust.

TDK Corporation is a leading global manufacturer of electronic components and devices, specializing in high magnetics technology. The company maintains a strong market position with a comprehensive corporate website offering detailed information on its business, sustainability efforts, investor relations, and career opportunities. The website is professionally designed, multilingual, and targets investors, customers, and job seekers worldwide. Technically, the site is built on Drupal CMS with modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Security posture is weak due to missing HTTPS and security headers, though privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

H

Holcim

lafargeholcim.com

40

Holcim is a globally recognized enterprise specializing in innovative and sustainable building materials and solutions. The company positions itself as a leader in decarbonizing construction with a broad portfolio including low-carbon cement, concrete, roofing, and insulation products. Their website reflects a mature, well-established business with a strong emphasis on sustainability, innovation, and corporate responsibility. The target audience includes construction professionals, architects, investors, and sustainability advocates worldwide. Technically, the site is built on Drupal CMS, hosted on AWS infrastructure, and employs modern web technologies and SEO best practices. However, a critical security gap exists due to the absence of HTTPS/SSL, which severely impacts the site's security posture. While security headers are properly configured, the lack of encryption exposes users to risks. Privacy and cookie policies are comprehensive and GDPR compliant, indicating good privacy governance. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

T

TheAngryTeddy Communications

theangryteddy.com

22

TheAngryTeddy Communications is a specialized marketing and podcast production company based in Linz, Austria, serving self-employed professionals and SMEs. The company offers strategic content marketing, podcast production, social selling systems, and coaching services, positioning itself as a trusted partner with over a decade of experience. The website is professionally designed, content-rich, and well-structured, targeting German-speaking audiences with a focus on authentic and mindful marketing approaches. Technically, the site runs on WordPress with the Divi theme and employs multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight. However, the absence of a valid SSL certificate and HTTPS significantly impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with comprehensive policies and consent mechanisms via iubenda. Overall, the business demonstrates strong credibility and market positioning but must urgently address security gaps to protect users and improve trust.

P

PageGroup

page.com

40

PageGroup is a well-established global recruitment consultancy operating since 1976 with a strong market position and multiple specialist brands. The website reflects a professional corporate presence with comprehensive content targeting job seekers, employers, and investors. Technically, the site uses a mature Drupal CMS platform with modern front-end libraries and integrates multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which critically impact secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy but requires urgent security improvements to protect user data and maintain credibility.

I

Ing. Punzenberger COPA-DATA GmbH

copadata.com

40

COPA-DATA is a well-established industrial and energy automation software company headquartered in Austria, offering the zenon Software Platform for digital transformation across multiple industries including energy, manufacturing, and transportation. The company maintains a strong global presence with numerous regional offices and a robust partner community, serving over 5,000 customers worldwide with more than 300,000 installations. Their business model focuses on software development, global distribution, and comprehensive support and training services.

S

SOS-Kinderdorf Österreich

sos-kinderdorf.at

40

SOS-Kinderdorf Österreich is a well-established non-profit organization dedicated to providing loving homes and support to children in need both in Austria and globally. Founded in 1949, it operates in 138 countries and relies on donations, sponsorships, and volunteer engagement to fulfill its mission. The website reflects a professional and consistent brand presence with comprehensive content and clear navigation targeting donors, volunteers, and families in need. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates modern libraries like jQuery and FontAwesome, and employs a consent management platform for GDPR compliance. However, a critical security gap exists due to the absence of HTTPS and a valid SSL certificate, exposing users to potential risks. Privacy policies and cookie consent mechanisms are well implemented, supporting regulatory compliance. Overall, the site demonstrates strong business credibility and user trust but requires urgent security improvements.

S

SSI SCHAEFER Group

ssi-schaefer.co.uk

40

SSI SCHAEFER Group operates as a global leader in intralogistics, providing modular warehouse and logistics systems to a broad range of industries. The company targets businesses seeking advanced intralogistics solutions, offering products, software, and consulting services. The website reflects a mature enterprise with comprehensive content, multilingual support, and strong branding consistency. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics. However, the lack of a valid SSL/TLS certificate and absence of HTTPS significantly weaken the security posture. Security headers are well configured, but the missing HTTPS is a critical vulnerability. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism is present. Contact information is available primarily through forms and phone links, though no explicit emails or phone numbers are listed in the content. Overall, the domain registration data aligns well with the business claims, indicating legitimacy. Strategic improvements in SSL deployment and privacy mechanisms are recommended to enhance trust and security.

T

Tourismusschulen Bad Gleichenberg

tourismusschule.com

27

Tourismusschulen Bad Gleichenberg is a well-established private educational institution in Austria specializing in tourism and hospitality education. With a history dating back to 1946, it offers a variety of programs including practical internships and international exposure, positioning itself as a leading school in its sector. The website reflects a professional and consistent brand image targeting students interested in tourism careers. Technically, the site is built on WordPress with common plugins and scripts but suffers from a critical lack of valid SSL/TLS certificates, exposing it to security risks. Privacy compliance is addressed with cookie consent and a privacy policy, though some security policies are absent. Overall, the site is content-rich and credible but requires urgent security improvements to protect user data and enhance trust.

G

GARTNER KG

gartnerkg.com

28

GARTNER KG is a large, family-owned Austrian logistics and transport company established in 1918, operating across 23 locations in 9 countries. The company specializes in road transport, intermodal transport, and warehousing services, positioning itself as one of Austria's largest family-owned transport providers and a leading logistics service provider in Europe. The website is professionally designed using TYPO3 CMS, with multilingual support and clear navigation targeting logistics customers and job seekers. Technically, the site uses Apache hosting with DNS managed by a1.net and integrates Cookiebot for GDPR-compliant cookie consent and Google Tag Manager for analytics. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy policies and contact information are comprehensive and accessible, but no explicit security or incident response policies are published. Overall, the site demonstrates good business credibility and privacy compliance but requires urgent security improvements.

G

GAS Global 24

gasglobal.com

40

GAS Global 24 is a mature and established workforce partner specializing in the Energy Industry with over 50 years of experience. The company offers comprehensive recruitment and staffing services globally, supported by regional offices and subsidiaries in Brazil and Mexico. Their business model focuses on delivering skilled professionals to energy projects worldwide, emphasizing strong client relationships and commitment to people. The website reflects a professional brand with consistent messaging and trust signals such as testimonials and a founder's message. Technically, the site is built on Squarespace with modern web technologies but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is basic with a cookie consent mechanism and a privacy policy, but lacks detailed GDPR indicators. Security posture is weak due to missing HTTPS, security headers, and email authentication records. Overall, the site is functional and credible but requires urgent security improvements to protect users and enhance trust.

L

Lead Innovation Management GmbH

lead-innovation.com

40

Lead Innovation Management GmbH is a well-established innovation consulting firm based in Austria with a strong presence in the German-speaking market. The company offers comprehensive innovation management services including organizational development, strategy, and new business development, targeting established enterprises seeking to enhance their innovation capabilities. The website is professionally designed, content-rich, and consistent with the company's branding and market positioning. Technically, the site is built on HubSpot CMS, leveraging common marketing and analytics tools such as Google Analytics and Google Tag Manager. However, a critical security weakness is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly undermines the security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing trust and compliance. Overall, the website reflects a mature business with good digital maturity but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and maintain user trust.

E

EGGER

egger.com

36

EGGER is a well-established global family-owned manufacturing company specializing in wood-based materials for furniture, interior design, wood construction, and flooring. Founded in 1961 and headquartered in Austria, EGGER holds a strong market position as an internationally leading manufacturer. The website reflects a professional and content-rich digital presence targeting industry professionals and retailers. Technically, the site uses modern JavaScript frameworks and custom CMS templates hosted on AWS infrastructure, but lacks performance metrics and has room for improvement in accessibility and SEO. Security posture is weak due to the absence of a valid SSL certificate, lack of modern TLS protocols, and missing security headers, exposing users to risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and social media presence are well established, enhancing business credibility. Overall, the site is trustworthy but requires urgent security enhancements to protect users and improve compliance.

C

Cubro Network Visibility

cubro.com

24

Cubro Network Visibility is a mature technology company specializing in network visibility solutions including hardware and software products such as Network TAPs, Packet Brokers, and Probes. With over 19 years of domain presence and a strong market position, Cubro serves service providers, enterprises, data centers, and government organizations globally. The website is professionally designed, content-rich, and well-structured, targeting technical and business audiences interested in network performance and security monitoring. Technically, the site is built on WordPress with modern plugins and frameworks, though performance is moderate and mobile optimization is good. Security posture is a concern due to the absence of a valid SSL certificate and HTTPS, lack of modern TLS protocols, and missing HSTS, which significantly lowers the security score. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Business credibility is supported by certifications like ISO 27001:2022, detailed contact information, and partnerships with major industry players. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

I

IDEMIA

idemia.com

40

IDEMIA is a global leader in biometrics and cryptography, providing advanced technology solutions that enable secure payments, identity verification, connectivity, and public safety. The company serves governments, enterprises, and financial institutions worldwide, positioning itself as a trusted partner with a strong market presence and extensive customer references. The website reflects a mature digital infrastructure with modern JavaScript libraries, SEO best practices, and a professional design that supports a positive user experience. However, the current lack of a valid SSL certificate and HTTPS implementation significantly impacts the security posture, exposing the site to potential risks. Privacy policies and cookie consent mechanisms are well implemented, and a Data Protection Officer contact is provided, indicating good privacy compliance. Overall, the site demonstrates high business credibility but requires urgent improvements in SSL/TLS security to align with best practices and user trust expectations.

L

LJ Hooker

ljhooker.com.au

39

LJ Hooker is a well-established Australian real estate company with nearly 100 years of history, offering services in property sales, rentals, investment advice, and property management. The website is professionally designed, content-rich, and targets Australian property buyers, sellers, renters, and investors. It leverages modern web technologies and HubSpot CMS to deliver a good user experience and extensive resources. However, the website currently lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. While security headers are present, critical TLS protocols and certificate transparency are missing. Privacy compliance is basic, with no cookie consent mechanism detected, and no explicit security or incident response policies are found. The domain WHOIS data is consistent with the business claims, showing legitimacy and long-term registration. Overall, the website is credible and professional but requires urgent security improvements to protect user data and enhance trust.

T

teamecho

teamecho.at

31

teamecho is a specialized technology company providing a scientifically validated employee sentiment barometer platform designed to replace traditional employee surveys. The platform offers real-time feedback, AI-driven comment analysis, and actionable insights to improve employee satisfaction and reduce turnover. The website is professionally designed using WordPress and Elementor, targeting companies and management teams seeking continuous employee feedback solutions. The technical infrastructure includes modern web technologies and integrations with major analytics and marketing tools. However, a critical security issue is the lack of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. The site implements strong security headers and GDPR-compliant cookie consent mechanisms, reflecting good privacy compliance. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

V

Vienna Beef

viennabeef.com

40

Vienna Beef operates a well-established e-commerce website specializing in Chicago style hot dogs and related food products. The company has a strong market position with a rich history dating back to 1893 and offers a variety of products including hot dogs, sausages, deli meats, condiments, soups, and branded merchandise. The website targets both consumers and foodservice businesses, providing online shopping, educational programs like Hot Dog University, and store locator services. Technically, the site is built on the BigCommerce platform with modern web technologies and integrates multiple marketing and analytics tools such as Google Analytics 4, Hotjar, and Klaviyo. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of direct contact emails or phone numbers on the site is a minor concern. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

T

Trek Bicycle Corporation

trekbikes.com

40

Trek Bikes is a well-established global bicycle manufacturer with a strong presence in Finland, offering a wide range of bicycles and cycling accessories. The website targets Finnish consumers with localized content and a comprehensive product catalog. Technically, the site uses modern frontend technologies such as Vue.js and Tailwind CSS, and is hosted behind Cloudflare CDN with integrated marketing and analytics tools like Google Tag Manager and Cookiebot for cookie consent management. However, a critical security weakness is the lack of a valid SSL/TLS certificate and HTTPS support, exposing users to potential risks. The site includes comprehensive privacy and cookie policies, indicating good privacy compliance, but lacks visible security policies or incident response information. Overall, the business credibility is high, supported by a mature domain and consistent branding, but the security posture requires urgent improvement to protect user data and trust.

L

Ludwig Reiter Schuhmanufaktur GmbH

ludwig-reiter.com

40

Ludwig Reiter Schuhmanufaktur GmbH is a traditional shoe manufacturing company based in Vienna, Austria, founded in 1885. The company operates a well-structured e-commerce website offering a wide range of shoes, accessories, and shoe care products targeting consumers interested in high-quality footwear. The website reflects a consistent brand image and provides comprehensive business and contact information, including social media presence and newsletter subscription options. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and features good SEO practices. However, the absence of HTTPS and SSL/TLS certificates is a critical security flaw, exposing users to potential risks. From a security perspective, while several security headers are implemented, the lack of HTTPS severely undermines the site's security posture. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. Contact information is transparent, but no explicit security or incident response policies are found. Overall, the website is professional and trustworthy from a business and content perspective but requires urgent security improvements, especially enabling HTTPS, to protect user data and enhance trustworthiness.

L

Language Services Associates (LSA)

lsaweb.com

40

Language Services Associates (LSA) is a mature and established provider of interpretation and translation services, operating for over 25 years. The company offers a broad range of language services including onsite, video remote, over the phone, telehealth, and AI-enhanced translation solutions. Their market position is strong, serving diverse industries such as healthcare, government, and insurance, with a large network of qualified linguists. Technically, the website is built on WordPress with modern plugins and hosted on WP Engine behind Cloudflare, showing good digital maturity and SEO optimization. However, the security posture is weakened by an invalid SSL certificate and lack of cookie consent mechanisms, which are critical for trust and compliance. Overall, the website is professional and trustworthy but requires urgent security improvements to enhance user trust and regulatory compliance.

E

Europapier Austria GmbH

europapier.at

40

Europapier Austria GmbH is a traditional wholesale and distribution company specializing in graphic papers, packaging, design papers, office papers, hygiene products, and advertising technology. The company operates primarily in Austria and serves business customers with a broad product portfolio and multiple locations. The website is professionally designed, content-rich, and provides comprehensive contact options including email, phone, and contact forms. Technically, the site uses modern technologies such as Pimcore CMS, Apache server, and Google Tag Manager for analytics. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS support, which is a critical issue. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy compliance. Overall, the site is trustworthy and professional but requires urgent security improvements.

P

PXP Financial

kalixa.com

40

PXP Financial operates a sophisticated unified commerce platform that integrates payment processing, acquiring, cross-border payments, and growth tools for a diverse range of industries including retail, hospitality, gaming, and travel. The company leverages a cloud-native, microservices-based architecture enhanced by AI to deliver scalable, reliable, and innovative payment solutions globally. Their platform emphasizes intelligent payment routing, real-time business intelligence, and self-service capabilities, positioning them as a modern leader in the payments technology sector. The website reflects a mature, professional business with strong branding and comprehensive service offerings.

S

Sanofi

sanofi.com

40

Sanofi is a globally recognized, research and development-driven biopharmaceutical company leveraging artificial intelligence to innovate in healthcare. The company focuses on developing medicines and vaccines across multiple therapeutic areas, positioning itself as a leader in the healthcare industry with a strong commitment to improving patient outcomes. The website reflects a mature enterprise with comprehensive content targeting healthcare professionals, patients, investors, and partners. Technically, the site employs modern frameworks and libraries such as Material UI and Font Awesome, with integrations for analytics and cookie consent management. However, the security posture is currently weak due to the absence of a valid SSL/TLS certificate and missing security headers, which poses significant risks for user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms, aligning with GDPR requirements. Overall, while the business credibility and content quality are high, urgent improvements in security infrastructure are recommended to enhance trust and protect users.

EC Red Bull Salzburg is a well-established professional ice hockey team with a strong brand presence linked to the global Red Bull brand. Their website offers comprehensive information about the team, schedules, tickets, merchandise, and multimedia content, targeting sports fans and enthusiasts. The technical infrastructure leverages modern web technologies such as React and integrates third-party services for analytics and cookie consent management. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of modern TLS protocols, which significantly impacts the security posture. Privacy compliance is well addressed with clear policies and active consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

R

Rituals Cosmetics

rituals.com

40

Rituals Cosmetics operates a large-scale international e-commerce platform specializing in cosmetics and lifestyle products. The website offers a localized shopping experience with multiple country and language options, leveraging Salesforce Commerce Cloud technology. The technical infrastructure includes modern JavaScript libraries, tag management, and analytics tools, but suffers from a lack of a valid SSL certificate and security headers, which significantly impacts the security posture. Privacy compliance is addressed with cookie consent mechanisms and a comprehensive privacy policy, though explicit contact and security policy information is limited. Overall, the website is professional and trustworthy from a business perspective but requires urgent improvements in security configuration to protect user data and maintain trust.

BMO Global Asset Management (BMO GAM) is a leading Canadian asset manager offering a broad range of investment products including mutual funds, ETFs, and alternative products. The website clearly targets investors, advisors, and institutional clients, reflecting a mature and well-established financial services business. The company operates under the larger Bank of Montreal (BMO) umbrella, reinforcing its market position and credibility. Technically, the website leverages modern web technologies such as Next.js and integrates with Adobe Launch and OneTrust for marketing and compliance. Hosting is provided via Akamai CDN, ensuring global content delivery. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant technical and security shortcomings that undermine user trust and data protection. From a security perspective, while some security headers like HSTS and X-Frame-Options are present, the lack of HTTPS and modern TLS support is a critical vulnerability. No published security policies, incident response contacts, or vulnerability disclosure mechanisms were found, indicating gaps in security transparency and readiness. Overall, the website is professionally designed and content-rich, but the lack of proper SSL/TLS configuration and security disclosures lowers its security posture and trustworthiness. Strategic improvements in SSL deployment, security policy publication, and DNS security would significantly enhance the site's security and compliance standing.

S

Strelle Records

strelle.at

35

Strelle Records is a small Austrian media and event technology service provider specializing in audio, video, lighting, installations, and event planning since 2011. The company targets event organizers, artists, and media producers primarily in the Kärnten region. The website is built on WordPress with a modern theme and integrates Google Analytics and Jetpack for analytics and performance tracking. However, the site lacks HTTPS, which is a critical security deficiency. The cookie consent mechanism is implemented, but no privacy policy or terms of service pages are present, indicating partial GDPR compliance. Contact information is clearly provided, and social media presence is strong, enhancing business credibility. Overall, the technical infrastructure is moderate but requires urgent security improvements.

L

Leica Microsystems

leica-microsystems.com

40

Leica Microsystems is a well-established global leader in microscopy and imaging solutions, serving diverse sectors including life sciences, industrial manufacturing, medical specialties, and education. The company offers a broad portfolio of products ranging from light and confocal microscopes to software and consumables, supported by comprehensive service and application support. The website reflects a mature digital presence with rich, professional content and consistent branding, targeting scientific and industrial professionals worldwide. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the current lack of a valid SSL certificate and absence of HTTPS significantly undermines the security posture, despite the presence of several security headers and policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. WHOIS data confirms the domain's maturity and legitimacy, registered under Network Solutions without privacy protection, consistent with the company's profile. Strategic improvements in SSL/TLS configuration and enhanced security practices are recommended to elevate trust and protect user data.

Europapier International AG is a large, well-established paper merchant headquartered in Vienna, Austria, with a strong presence across Central and Eastern Europe. The company offers a broad portfolio of paper and paper-related products, supported by extensive warehousing and distribution infrastructure. As part of the Heinzel Group since 2010, Europapier serves a diverse B2B customer base including commercial printers and specialty market businesses. The website reflects a mature digital presence with comprehensive business and product information, professional design, and good user experience. However, the absence of HTTPS and SSL/TLS encryption represents a significant security risk, undermining user trust and data protection. The site employs modern technologies such as Pimcore CMS and Google Tag Manager for analytics, but performance data suggests potential loading delays. Legal and privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Europapier demonstrates strong business credibility but requires urgent security improvements to align with best practices.

B

BWT Holding GmbH

bwt.fr

37

BWT Holding GmbH operates a comprehensive website focused on water treatment solutions, targeting private consumers and professional sectors in France. The site offers detailed product and service information, supported by a consistent brand presence and multiple customer contact channels. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and performance optimization tools, hosted behind Cloudflare. However, a critical security weakness is the invalid SSL certificate and lack of TLS protocol support, which significantly undermines the site's security posture. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. Overall, the site is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.