Security Directory

F

Flint Group

flintgrp.com

40

Flint Group is a global enterprise specializing in manufacturing print consumables for the packaging and printing industries. The company emphasizes sustainable innovation, customer support, and ethical business practices, positioning itself as a global leader in its sector. The website reflects a professional and comprehensive digital presence with extensive content, clear navigation, and a focus on sustainability and corporate responsibility. Technically, the site uses modern analytics and tracking tools but lacks HTTPS support due to an invalid or missing SSL certificate, which is a significant security concern. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, Flint Group demonstrates strong business credibility but must address its SSL/TLS configuration to improve security posture and user trust.

A

Active Solution Sverige AB

activesolution.se

38

Active Solution Sverige AB is a well-established Swedish technology consulting company founded in 1998, specializing in system development, cloud-based solutions, artificial intelligence, and digital transformation. The company holds recognized Microsoft Solutions Partner Designations and a specialization in building and modernizing AI applications with Microsoft Azure, indicating strong technical expertise and market positioning. Their website reflects a professional and content-rich presence, targeting businesses seeking innovative digital solutions and cloud transformation services. Technically, the site is built on Squarespace with integrations of HubSpot and Google Tag Manager for marketing and analytics, but suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. While cookie consent mechanisms are implemented, the absence of privacy and terms of service policies indicates incomplete privacy compliance. Overall, the business appears credible and mature, but immediate attention is needed to secure the website with proper SSL/TLS configuration to protect visitors and maintain trust.

P

PARTNER Consulting+Projects GmbH

partner-cp.com

39

PARTNER Consulting+Projects GmbH is a specialized consulting and project realization company serving cultural institutions and museums primarily in Austria and beyond. With over 30 years of experience, the company offers comprehensive services including consulting, project management, sustainability solutions, and interim management. Their market position is well-established with a strong portfolio of projects and partnerships. Technically, the website is built on WordPress with modern plugins and hosted on WP Engine with Cloudflare CDN, reflecting a mature digital infrastructure. However, the lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the business demonstrates professionalism and trustworthiness but must urgently address its SSL/TLS security to protect user data and improve trust.

D

DDB Worldwide

tribalworldwide.com

40

DDB Worldwide is a highly ranked global advertising agency specializing in creative advertising and marketing services. The company operates an enterprise-level website built on WordPress, hosted on WP Engine and served via Cloudflare CDN, leveraging modern web technologies such as jQuery, Axios, and ReactPress. The website features professional design, clear navigation, and comprehensive privacy and cookie policies, indicating a mature digital presence. However, the absence of a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks and reducing trust. Security headers are well configured but cannot compensate for the lack of HTTPS. Contact information is limited to email addresses without phone numbers or physical addresses, and no explicit security or incident response policies are published. Overall, the site demonstrates good business credibility and privacy compliance but requires urgent security improvements.

D

Die Presse Verlags-Gesellschaft m.b.H. & Co KG

diepresse.com

40

Die Presse is a prominent Austrian media company operating a comprehensive online news portal offering premium journalism, podcasts, videos, and newsletters targeting German-speaking audiences primarily in Austria. The website demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks (Vue.js), advanced consent management (Didomi), and multiple advertising and analytics platforms. However, the security posture is notably weak due to the absence of a valid SSL certificate and disabled TLS protocols, exposing users to potential risks. Privacy compliance is robust with clear policies and consent mechanisms in place. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect user data and maintain trust.

Condor is a well-established airline focused on providing affordable flights primarily between the USA, Canada, and Europe. The website offers comprehensive flight booking services, flexible fare options, and travel extras such as seat reservations and baggage management. The company targets travelers seeking convenient and cost-effective air travel solutions. Technically, the website is built on TYPO3 CMS and leverages Akamai CDN for content delivery, with modern JavaScript frameworks and cookie consent managed by Usercentrics, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS support, which severely impacts the security posture and user trust. Privacy compliance is well addressed with GDPR-consistent cookie consent mechanisms and clear privacy policies. Overall, the website is professional and user-friendly but requires urgent security improvements to protect user data and ensure secure transactions.

P

Peek & Cloppenburg B.V. & Co. KG

peek-cloppenburg.com

40

Peek & Cloppenburg B.V. & Co. KG is a well-established European fashion retailer with a strong presence in physical stores and online platforms. The company offers a curated selection of international and exclusive brands, targeting fashion-conscious consumers across multiple countries. Their business model focuses on multi-brand retailing with a significant footprint in Europe, supported by a comprehensive loyalty program and customer service infrastructure. Technically, the website is built on modern frameworks like Next.js and Magnolia CMS, leveraging Cloudflare for hosting and CDN services. The site is well-optimized for mobile and SEO, with good accessibility features. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which critically impacts secure communications and user trust. Privacy compliance is robust, with clear policies and consent mechanisms implemented. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

A

Addiko Bank AG

addiko.com

40

Addiko Bank AG operates as a regional digital bank serving multiple European countries with a focus on online banking products such as savings accounts and loans. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting retail and corporate banking customers. Technically, the site is built on WordPress with modern plugins and integrates multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which is critical for a financial institution. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, while the business and technical aspects are solid, the security deficiencies pose a significant risk that must be remediated promptly.

L

Lexogen GmbH

lexogen.com

26

Lexogen GmbH is a specialized biotechnology company based in Vienna, Austria, focused on next generation sequencing (NGS) and transcriptomics solutions. The company offers a comprehensive portfolio of RNA analysis products, including RNA-Seq sample preparation kits, RNA spike-in controls, and bioinformatics data analysis services. Their target audience includes researchers, pharmaceutical companies, and academic institutions seeking innovative RNA sequencing and analysis solutions. Lexogen positions itself as a niche leader with ISO 9001 and ISO 13485 certifications, underscoring its commitment to quality and regulatory compliance. Technically, the website is built on WordPress using Elementor and WooCommerce, hosted on Cloudpit infrastructure. The site integrates modern web technologies such as Google Tag Manager and reCAPTCHA for analytics and security. While the site is mobile optimized and SEO friendly with good content quality and navigation, performance metrics are unavailable. The absence of a valid SSL/TLS certificate is a critical security gap, exposing users to insecure HTTP connections. From a security perspective, the site lacks HTTPS, HSTS, and other essential security headers, resulting in a low security posture score. No explicit security or incident response policies are published. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact information is detailed and trustworthy, including multiple phone numbers, emails, and physical addresses in Austria and the USA. Overall, Lexogen's website demonstrates strong business credibility and content quality but suffers from a critical security deficiency due to missing HTTPS. Strategic improvements in SSL implementation and security headers are essential to enhance user trust and data protection. The company’s digital maturity is moderate, with opportunities to improve technical infrastructure and security practices to better support its specialized biotech market presence.

H

Handwerkskammer Aachen

hwk-aachen.de

39

Handwerkskammer Aachen is a regional chamber of crafts in Germany representing approximately 17,400 member businesses. The organization provides a broad range of services including vocational training, further education, consulting, business start-up support, and expert services. The website reflects a well-established institution with a strong market position in the education and government sectors, targeting apprentices, craftsmen, business founders, and companies within the Aachen region. The content is rich, professionally presented, and highly relevant to its audience. Technically, the site is built on the ODAV CMS platform, utilizing modern JavaScript libraries and frameworks, but suffers from poor SSL/TLS implementation, lacking a valid certificate and modern encryption protocols. This significantly impacts the security posture of the website. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Contact information is complete and transparent, enhancing business credibility. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

Ecolab Inc. is a global enterprise specializing in water, hygiene, and infection prevention solutions and services. The company serves a broad range of industries including manufacturing, healthcare, hospitality, food and beverage processing, and energy. With a strong market position as a leader in sustainability and operational efficiency, Ecolab offers science-based solutions and data-driven insights to help customers improve safety, reduce environmental impact, and optimize operations. The website reflects a mature digital presence with comprehensive content, clear navigation, and multi-channel contact options. Technically, the website is built on the Sitecore CMS platform, leveraging modern technologies such as Coveo for search, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is hosted via Akamai CDN and integrates multiple third-party marketing and analytics tools, indicating a sophisticated digital marketing strategy. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site implements strong HTTP security headers and content security policies. However, a critical issue is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly undermines the security posture. This gap exposes the site to risks and should be addressed promptly. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, Ecolab's website demonstrates high business credibility and professionalism but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic recommendations include fixing the SSL certificate, enabling modern TLS protocols, enhancing HSTS policies, and continuing to maintain strong privacy and security practices.

P

PHINIA Inc.

delphi.com

40

PHINIA Inc. is a mature, large-scale business specializing in premium fuel systems, electrical systems, and aftermarket automotive products with a strong emphasis on sustainability and innovation. The company positions itself as a market leader advancing clean transportation technologies and alternative fuels. The website reflects a professional and consistent brand image with comprehensive corporate governance and investor relations information. Technically, the site uses Sitefinity CMS, Cloudflare hosting, and integrates multiple marketing and analytics tools such as Google Analytics and HubSpot. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS support, which poses a critical risk to user trust and data security. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is content-rich and professionally maintained but requires urgent remediation of SSL/TLS issues to ensure secure communications.

A

AT&S Austria Technologie & Systemtechnik AG

ats.net

33

AT&S Austria Technologie & Systemtechnik AG is a globally recognized leader in high-end printed circuit boards and IC substrates, serving key industries such as aerospace, automotive, communication, and medical technology. The company demonstrates a strong market position with a comprehensive digital presence, including investor relations, career opportunities, and sustainability initiatives. Technically, the website is built on WordPress with modern tools and plugins, offering good SEO and accessibility, though performance is moderate. Security posture is weakened by the absence of a valid SSL/TLS certificate and disabled TLS protocols, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business is credible and trustworthy, but urgent improvements in SSL/TLS configuration are recommended to enhance security and user trust.

B

Bombardier Recreational Products

brp.com

40

Bombardier Recreational Products (BRP) is a global leader in the manufacturing and retail of recreational vehicles including snowmobiles, all-terrain vehicles, 3-wheel motorcycles, and personal watercraft. The company maintains a strong market position with multiple well-known brands such as Ski-Doo, Lynx, Sea-Doo, and Can-Am. The website reflects a professional and comprehensive digital presence targeting consumers and enthusiasts in the powersports industry. Technically, the site leverages modern technologies including Adobe Experience Manager, Google Tag Manager, and Dynatrace monitoring, indicating a mature digital infrastructure. However, a critical security weakness is the absence of a valid SSL certificate, which undermines the security posture and user trust. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site is content-rich and professionally designed but requires urgent remediation of SSL issues to ensure secure user interactions.

E

Expeditors International of Washington, Inc.

expeditors.com

40

Expeditors International of Washington, Inc. is a global logistics company specializing in freight forwarding, customs brokerage, and supply chain management services. The company operates a comprehensive worldwide network and offers technology-enabled solutions to optimize logistics operations. The website reflects a professional and consistent brand presence targeting businesses requiring global transportation and supply chain services. Technically, the site uses ASP.NET and is hosted behind Cloudflare with integrations such as Google Tag Manager and HubSpot for marketing and analytics. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical vulnerability. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site is functional and credible but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

P

Pierre Fabre Laboratories

pierre-fabre.com

40

Pierre Fabre Laboratories is a well-established French pharmaceutical and dermocosmetics group with a global presence and a strong portfolio of brands. The company focuses on developing innovative healthcare and beauty solutions inspired by patients and consumers. Their website reflects a mature digital presence with comprehensive content, multilingual support, and clear business information. However, the technical infrastructure shows weaknesses, particularly in security, as the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical issue for user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via OneTrust. Overall, the website is professional and trustworthy but requires urgent security improvements to meet modern standards.

Ö

ÖAMTC - Österreichischer Automobil-, Motorrad- und Touring Club

oeamtc.at

40

ÖAMTC is a large, well-established Austrian automobile and touring club serving over 2 million members. The organization provides a wide range of services including roadside assistance, insurance, travel planning, and member benefits. The website reflects a strong brand presence with comprehensive content and multimedia offerings targeting motorists and travelers in Austria. Technically, the site uses modern technologies such as nginx, RequireJS, JW Player, and integrates with multiple third-party services for analytics and advertising. However, a critical security issue is the lack of a valid SSL certificate and absence of HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent management platform in place. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL configuration to ensure secure user interactions.

E

EV Group (EVG)

evgroup.com

39

EV Group (EVG) is a well-established company specializing in semiconductor manufacturing equipment and process solutions, including wafer bonding, lithography, and metrology. The company targets semiconductor manufacturers and related industries, positioning itself as a leading supplier with a global presence. The website reflects a professional and comprehensive digital presence with multilingual support and detailed product and technology information. Technically, the site is built on TYPO3 CMS and uses modern tools like Cookiebot and Google Tag Manager, but lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and TLS protocols severely impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and credible but requires urgent security improvements to protect user data and maintain trust.

H

Hotel Restaurant Höldrichsmühle

hoeldrichsmuehle.at

23

Hotel Restaurant Höldrichsmühle is a historic hospitality business located in Hinterbrühl, Austria, offering hotel accommodation, restaurant services, seminar facilities, wedding venues, and equestrian activities. The business targets tourists, local visitors, and corporate clients seeking event spaces near Vienna. The website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and clear navigation. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. The site implements cookie consent mechanisms and displays contact information prominently, but lacks advanced security policies and incident response contacts. Overall, the business appears legitimate and well-established, but the website's security posture requires urgent improvement to meet modern standards.

G

Getzner Werkstoffe GmbH

getzner.com

27

Getzner Werkstoffe GmbH is a well-established company specializing in vibration isolation solutions for the railway, construction, and industrial sectors. With over 50 years of expertise, the company manufactures innovative polyurethane elastomers and elastic modules that reduce noise and vibrations, enhancing product longevity and application suitability. The website reflects a strong market position with comprehensive product and service information targeting construction professionals, urban developers, and industrial clients. Technically, the website employs modern tools such as Google Tag Manager and Matomo Analytics, indicating a mature digital infrastructure. However, the absence of a valid SSL/TLS certificate and minimal security headers represent significant security vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security posture is currently weak due to lack of HTTPS and related best practices, exposing users to potential risks. WHOIS data confirms the domain's legitimacy and long-term registration, supporting business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

T

Trayport Limited

visotech.at

35

Trayport Limited operates a comprehensive energy trading platform connecting traders, brokers, and exchanges globally, with a strong focus on power, gas, and carbon markets. Their flagship product, Joule, offers extensive market access and analytics, positioning them as a key player in the energy trading software sector. The website reflects a mature digital presence with rich content and clear navigation tailored to energy market participants. Technically, the site leverages modern web technologies including WordPress, Alpine.js, and Mapbox for interactive features, but lacks HTTPS support, which is a critical security shortfall. Security posture is weak due to the absence of SSL/TLS and security headers, exposing users to potential risks. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business appears legitimate and professionally presented, but urgent improvements in security infrastructure are recommended.

N

NTS

nts.eu

29

NTS is a well-established IT services and solutions provider based in Austria, specializing in network infrastructure, security, data center, collaboration, cloud services, and artificial intelligence platforms. The company targets businesses and organizations seeking comprehensive digital transformation and managed services. Their market position is strong regionally with a broad portfolio of key services and a consistent brand presence. Technically, the website is built on WordPress with modern plugins and tracking tools, but suffers from critical security shortcomings due to the lack of a valid SSL certificate and disabled TLS protocols. Security headers are well implemented, but the absence of HTTPS significantly undermines the security posture. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, the website is professional and content-rich, but the lack of HTTPS is a critical risk that must be addressed immediately.

ams-OSRAM AG is a global leader in innovative light and sensor solutions, offering a broad portfolio including high-performance LEDs, lasers, mixed-signal analog ICs, and sensors tailored for automotive, industrial, medical, and consumer applications. The company positions itself as a technology innovator with a strong focus on quality and customer engagement, supported by comprehensive investor relations and sustainability initiatives. The website reflects a mature digital presence with modern frameworks and a professional design, targeting B2B customers and industry partners worldwide. However, the absence of a valid SSL certificate is a critical security gap that undermines trust and secure communications. Privacy compliance is well addressed with clear policies and consent management mechanisms. Overall, the company demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to enhance security posture.

Ö

Öresundskraft AB

oresundskraft.se

35

Öresundskraft AB is a well-established Swedish energy company with over 160 years of history, providing a broad range of energy and communication services including electricity, district heating, gas, fiber internet, solar cells, battery solutions, and electric vehicle charging. The company targets both private consumers and businesses, positioning itself as a regional leader in sustainable and renewable energy solutions. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the site is built on ASP.NET MVC hosted on Microsoft Azure, utilizing modern marketing and analytics tools such as Usercentrics CMP, Weglot for translations, Google Tag Manager, and Microsoft Application Insights. Accessibility and mobile optimization are well addressed. However, a critical security weakness is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly undermines user security and trust. Privacy compliance is strong with clear GDPR and cookie policies and consent mechanisms. Business credibility is high with transparent contact information and active social media engagement. Strategic recommendations include immediate implementation of HTTPS, enhancement of security headers, and publication of security policies and incident response information to improve overall security posture and trust.

S

Staticus

staticus.com

30

Staticus is a well-established full-service façade engineering company specializing in the design, production, installation, and maintenance of unitised façade solutions primarily serving the Northern Europe market. With over 18 years of domain maturity and a large market presence, the company positions itself as one of the largest façade contractors in the region, targeting architects, construction firms, and real estate developers. Their business model emphasizes sustainability and collaborative project delivery. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WP Rocket, and integrates marketing and analytics tools like Google Tag Manager, Facebook Pixel, and MailerLite. However, the site suffers from slow load times and lacks modern security configurations, notably missing HTTPS support and security headers, which significantly impacts its security posture. From a security perspective, the absence of SSL/TLS encryption is a critical vulnerability, exposing users to potential data interception risks. While privacy policies and cookie consent mechanisms are properly implemented, the lack of incident response contacts and vulnerability disclosure policies indicates room for improvement in security governance. Overall, Staticus presents a professional and credible business front with strong content and branding, but urgent security enhancements are necessary to protect user data and improve trustworthiness. Strategic recommendations include immediate SSL deployment, security header implementation, and performance optimization to align with best practices and compliance requirements.

S

SKS365

sks365.com

28

SKS365 is a medium-sized, Italy-based omnichannel sports betting and gaming operator, positioned as a leading player in the Italian market. The company offers a broad range of betting and gaming services including sports betting, virtual sports, and online casino games. The website reflects a professional corporate presence with consistent branding and a focus on compliance and responsible gaming. Technically, the site is built on WordPress and hosted on Microsoft Azure, utilizing common web technologies such as jQuery and Google Tag Manager. However, the site lacks a valid SSL certificate, which severely impacts its security posture and user trust. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent mechanisms are missing. No direct contact information such as emails or phone numbers are visible, which may affect user engagement and trust. Overall, the site is functional but requires significant security improvements to meet modern standards.

Pilz GmbH & Co. KG operates an international website focused on providing comprehensive automation technology solutions, emphasizing safety and industrial security. The company targets industrial automation professionals and machine builders, offering components, systems, and services to ensure safe automation worldwide. The website is professionally designed with clear navigation and multilingual support, reflecting a strong market position in manufacturing and technology sectors. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, but suffers from critical SSL/TLS misconfigurations that undermine its security posture. Security headers are well implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the site's security score. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Business credibility is high, supported by detailed contact information, social media presence, and consistent branding. Overall, the site is functional and professional but requires urgent remediation of its SSL/TLS issues to improve security and trust.

Confidex is a mature and reputable company specializing in RFID, NFC, and BLE solutions for industries, logistics, and mobility sectors. Recently acquired by Beontag, a global leader in graphic and label materials and RFID technology, Confidex strengthens its global presence and service localization. The website reflects a professional and comprehensive digital presence with strong branding and relevant content targeting industrial and supply chain customers. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS CloudFront, with good SEO and accessibility practices. However, the lack of a valid SSL certificate and HTTPS support is a critical security gap that significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain registration data confirms the legitimacy and maturity of the business. Strategic improvements in SSL/TLS configuration and incident response readiness are recommended to enhance trust and security.

V

VDEL

vdel.com

31

VDEL is an established software company founded in 1993, specializing in customized software solutions including document and process management, blockchain, big data, and AI. The company operates internationally with subsidiaries in Belgrade and Katowice and serves businesses seeking integrated IT solutions. Their business model includes distribution and multilingual support, leveraging partnerships such as Software United. Technically, the website uses Bitrix CMS with common web technologies and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and lack of privacy and cookie policies indicate significant security and compliance gaps. The security posture is weak due to missing HTTPS and security policies, exposing users to risks. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

R

Regionalmedien Austria AG

regionalmedien.at

32

Regionalmedien Austria AG is a leading Austrian regional media company with a broad portfolio of digital and print products, including well-known brands such as MeinBezirk.at and BezirksBlätter. The company focuses on local and regional news coverage, serving communities across all Austrian states. Their business model centers on media publishing and advertising services, positioning themselves as innovation drivers in the regional media market. The website reflects a mature digital presence with professional design, structured data, and comprehensive content tailored to their target audience of regional readers and businesses. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Cookiebot, but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Security posture is basic with no advanced headers or incident response information. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to meet modern standards.

Glashütte Original is a prestigious German luxury watch manufacturer with a rich history dating back to 1845. The company operates under the Swatch Group umbrella and offers a range of technically sophisticated and iconic watch collections targeting discerning luxury consumers globally. The website reflects a mature digital presence with multilingual support, comprehensive product and brand information, and integrated e-commerce and customer service functionalities. Technically, the site is built on WordPress with WooCommerce and leverages modern JavaScript libraries and tracking technologies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the business demonstrates strong credibility and branding but must urgently address its SSL/TLS configuration to improve security posture and user confidence.

A

Anton Paar

anton-paar.com

40

Anton Paar is a globally recognized manufacturer of high-quality analytical and measuring instruments serving research and industrial sectors. The company holds a strong market position as a leader in density, concentration, CO2 measurement, and rheometry. Their website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive product information, regional office contacts, and support services. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens their security posture, exposing users to potential risks. The site employs modern analytics and marketing tools with appropriate privacy and cookie consent mechanisms, demonstrating good compliance with GDPR and user privacy standards. Strategic improvements in SSL/TLS deployment and security headers would enhance trust and security.

E

Evon Technologies

evontech.com

40

Evon Technologies Pvt. Ltd. is a well-established software development company based in India, with over 17 years of experience serving a global clientele. The company offers a broad range of services including custom web and app development, AI and machine learning solutions, cloud consulting, ERP/CRM implementations, and staff augmentation. Their market position is strengthened by certifications such as CMMI Level 5 and ISO 27001:2022, and a diverse client portfolio featuring technology heavyweights and startups. Technically, the website is built on Joomla CMS, hosted likely on AWS infrastructure, and integrates modern marketing and analytics tools. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security gap. Privacy and cookie policies are present with consent mechanisms, supporting basic GDPR compliance. Contact information is comprehensive and accessible via multiple channels.

T

Thommen Medical AG

thommenmedical.com

30

Thommen Medical AG is a Swiss-based manufacturer specializing in dental implantology products with over 35 years of clinical experience. The company offers a comprehensive range of dental implants, prosthetics, instruments, and digital workflow products, targeting dental professionals and patients globally. Their market position is strong within the healthcare manufacturing sector, emphasizing Swiss precision and innovation. The website is professionally designed, content-rich, and well-structured, supporting their business model of manufacturing and distribution alongside educational services and scientific collaboration. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates multiple analytics and marketing tools. However, a critical security weakness exists due to the absence of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are present and GDPR compliant, enhancing user trust. Contact information is comprehensive and clearly presented, supporting business credibility. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

ERGO Versicherung Aktiengesellschaft operates the website das.at, providing legal protection insurance products under the D.A.S. Rechtsschutz brand in Austria. The company is a market leader with a strong reputation, offering services to private individuals, self-employed, and businesses. The website is professionally designed, content-rich, and targets Austrian customers with comprehensive insurance solutions and customer support channels. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates multiple marketing and analytics tools. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. WHOIS data confirms the domain's legitimacy and alignment with the ERGO group. Overall, the website is credible and professional but requires urgent security improvements to protect user data and trust.

Schrack Technik GmbH is a well-established Austrian company founded in 1920, specializing in the distribution and provision of electrical products and solutions across energy technology, building technology, industrial applications, networking, and lighting. The company operates a comprehensive online shop and physical stores, targeting electricians and industrial clients primarily in Austria and Central/Eastern Europe. Their market position is strong, supported by a broad product portfolio and personal customer service. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates a consent management platform for privacy compliance. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical vulnerability. Privacy and cookie policies are well implemented, and the site shows good business credibility with ISO certification and trust marks. Overall, the website is professional and content-rich but requires urgent security improvements.

D

delfortgroup AG

delfortgroup.com

40

delfortgroup AG is a mature, enterprise-level global manufacturer specializing in specialty and functional papers, serving industries such as packaging, tobacco, battery separators, and more. The company emphasizes sustainability and innovation, supported by a comprehensive digital presence including detailed product catalogs, sustainability reports, and career opportunities. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, leveraging various JavaScript libraries and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and lack of HTTPS enforcement represent critical security weaknesses. Security headers are present but insufficient without proper TLS configuration. The domain is well-established with consistent WHOIS data, supporting business legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

B

BearingPoint

bearingpoint.com

40

BearingPoint is a global management and technology consultancy with European roots, operating in over 70 countries with 13,000 employees. The company offers a broad range of consulting services, products, and capital advisory, targeting enterprises across multiple industries including technology, finance, manufacturing, and government sectors. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to enterprise clients. Technically, the site uses Apache server technology, modern JavaScript frameworks, and cookie consent management tools, but lacks a valid SSL certificate and has disabled TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols.

A

Avanade Inc.

avanade.com

40

Avanade Inc. is a leading global provider of cloud, AI, and advisory services focused on the Microsoft ecosystem. With over 25 years of experience and a strong market position as the world’s leading Microsoft expert, Avanade serves enterprise clients across multiple industries including technology, energy, banking, healthcare, government, and retail. The company operates globally with headquarters in the United States, Europe, and Asia, and is a subsidiary of Accenture. Their business model centers on delivering advisory, managed services, and integrated Microsoft technology solutions to help organizations unlock digital transformation and sustainability goals. Technically, Avanade’s website leverages modern frameworks such as Next.js and Sitecore CMS, hosted on Vercel and integrated with marketing and analytics tools like Adobe Launch, Google Tag Manager, and OneTrust for consent management. The site is well-designed, mobile-optimized, and rich in content, providing a professional user experience with clear navigation and comprehensive business information. From a security perspective, the website currently suffers from critical issues including the absence of a valid SSL certificate and lack of TLS protocol support, severely impacting its security posture. While security headers such as Content-Security-Policy and HSTS are present, they are not fully hardened. The presence of a vulnerability disclosure page and detailed privacy and cookie policies indicate a mature approach to compliance and security awareness, but the lack of HTTPS is a major risk. Overall, the website is highly credible and professional but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and maintain trust. Strategic improvements in security practices and continued adherence to privacy compliance will strengthen Avanade’s digital presence and risk posture.

S

SER Solutions Deutschland GmbH

ser.de

40

SER Solutions Deutschland GmbH is a well-established enterprise content management (ECM) software provider based in Germany, with over 35 years of experience. The company is recognized as a leader in the ECM market, evidenced by its inclusion in Gartner's Magic Quadrant and IDC MarketScape reports. Their core offerings include intelligent content automation, document management, process automation, and collaboration tools, targeting large enterprises and organizations undergoing digital transformation. The website reflects a mature digital presence with comprehensive content, multiple language support, and strong branding consistency. Technically, the website is built on the Contao CMS platform, hosted on Ubuntu servers with Amazon CloudFront CDN for content delivery. It employs modern marketing and analytics tools such as Google Tag Manager, Visual Website Optimizer, and Usercentrics for consent management. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which severely impacts the security posture. Security headers are properly configured, but the lack of TLS protocols and valid certificates exposes the site to risks and undermines user trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, while the business and content quality are excellent, urgent remediation of SSL/TLS issues is necessary to improve security and trustworthiness.

G

Gewista

gewista.at

34

Gewista is a leading Austrian media company specializing in Out-of-Home advertising, operating under the majority ownership of global market leader JCDecaux. The company offers a broad portfolio of advertising media including traditional billboards, street furniture, and transport media, with a strong focus on digital innovation and public value initiatives. The website reflects a mature digital presence built on Drupal 10, leveraging modern JavaScript libraries and CDN hosting. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. Additionally, a subdomain takeover vulnerability was identified, posing a risk to brand reputation and security. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to meet modern standards.

M

MPREIS

mpreis.at

39

MPREIS is a well-established Austrian supermarket chain offering a broad range of grocery and related products both in physical stores and online. The website reflects a mature digital presence with detailed product catalogs, recipe inspirations, and a focus on regional and organic products. The company maintains active social media channels and provides comprehensive privacy and cookie policies with consent management, indicating good privacy awareness. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates advanced marketing and search tools like Bloomreach and Algolia. However, the absence of a valid SSL certificate and lack of HTTPS support represent significant security shortcomings, exposing users to potential risks. Security headers are partially implemented, but critical TLS protocols and cipher suites are missing, reducing the overall security posture. The domain registration and hosting are consistent with the business claims, registered under A1 Telekom Austria AG, a reputable provider. No WAF or security challenge blocks access, allowing full content analysis. Privacy compliance is strong, but the lack of incident response and security policy pages suggests room for improvement in security governance. Overall, MPREIS demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to protect users and enhance trust. Strategic security enhancements and continuous compliance monitoring are recommended to maintain its market position and customer confidence.

G

Gesundheitscampus Wesel

evkwesel.de

24

Gesundheitscampus Wesel operates a regional healthcare campus in Germany offering integrated medical, nursing, therapy, and palliative care services. The website is built on TYPO3 CMS and provides comprehensive information about its multiple healthcare divisions, targeting patients and healthcare consumers in the Wesel region. The digital infrastructure includes standard web technologies and Google Analytics for visitor tracking. However, the site lacks a valid SSL certificate, serving content over HTTP only, which is a significant security concern. The cookie consent mechanism is implemented and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is professionally designed with good navigation and content relevance but requires urgent improvements in security posture to protect user data and enhance trust.

F

FHV - Vorarlberg University of Applied Sciences

fhv.at

40

FHV - Vorarlberg University of Applied Sciences is a medium-sized educational institution based in Austria, offering a wide range of Bachelor and Master programs across technical, economic, design, and social-health disciplines. The institution emphasizes applied research and international cooperation, positioning itself as a leading university of applied sciences in the Bodenseeraum region. The website is professionally designed, content-rich, and well-structured, targeting prospective students, researchers, and academic partners. Technically, the site uses modern CMS Pimcore and Vue.js frontend framework, with Google Tag Manager for analytics and Cookiebot for consent management. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, despite having security headers and HSTS configured. This exposes users to potential risks and undermines trust. Contact information is clearly provided, and privacy policies comply with GDPR standards. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to improve security posture and user trust.

Ö

Österreichische Lotterien GmbH

lotterien.at

38

Österreichische Lotterien GmbH operates as the official national lottery provider in Austria, offering a wide range of lottery games, including Lotto 6 aus 45, EuroMillionen, and various scratch cards. The website serves as a comprehensive platform for game participation, result checking, and customer engagement, targeting Austrian lottery players and stakeholders. The company holds a strong market position as a government-associated entity with multiple subsidiaries in the gaming sector. Technically, the website is built on TYPO3 CMS and integrates modern analytics and consent management tools, demonstrating a mature digital infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. Despite this, the site implements several security headers and maintains a responsible disclosure page, reflecting a commitment to security awareness. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

F

Frequentis

frequentis.com

40

Frequentis is a well-established company specializing in safety-critical communication and information solutions with over 75 years of market presence. The company serves key sectors including civil aviation, defence, public safety, maritime, and public transportation, positioning itself as a leader with a strong focus on innovation and user-centric design. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to government agencies and large organizations. Technically, the site is built on Drupal 10 with modern libraries and integrates multiple marketing and analytics tools. However, the absence of a valid SSL/TLS certificate and HTTPS support is a significant security gap, impacting the overall security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high business credibility but requires urgent security improvements to align with best practices.

V

VIER PFOTEN International – gemeinnützige Privatstiftung

four-paws.org

36

FOUR PAWS International is a globally recognized non-profit animal welfare organization dedicated to protecting animals under human influence. The organization operates multiple country offices and campaigns worldwide, focusing on rescue missions, veterinary care, sterilization of stray animals, and advocacy against animal cruelty. Their website reflects a professional and comprehensive digital presence, targeting animal welfare supporters, donors, and volunteers. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript libraries such as Splide.js and Google Tag Manager for analytics and marketing. However, a critical security weakness is the absence of a valid SSL certificate and lack of TLS protocol support, which significantly undermines the site's security posture. Privacy and cookie policies are well implemented and GDPR compliant, enhancing user trust. Overall, the site demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

G

GEZE GmbH

geze.at

38

GEZE GmbH is a globally recognized family-owned company specializing in manufacturing and providing innovative door, window, and safety technology solutions. The company has a strong market position with over 3,000 employees and 37 subsidiaries worldwide, focusing on digital connectivity and building automation. The website reflects a professional and comprehensive presentation of their products and services, targeting architects, planners, and building operators. Technically, the site uses TYPO3 CMS hosted on AWS CloudFront with modern content delivery but suffers from critical SSL/TLS misconfigurations, impacting security posture. Privacy compliance is well addressed with a clear privacy policy and consent management via Usercentrics. The site offers multiple contact channels and social media presence, enhancing business credibility. However, the invalid SSL certificate and lack of HTTPS protocols represent significant security risks that should be urgently addressed.

B

Bacon & Bold

baconbold.com

38

Bacon & Bold is a medium-sized performance branding and social media marketing agency based in Austria, founded in 2016. The company positions itself as a leading social media agency focused on delivering measurable business success through targeted digital marketing strategies, workshops, and AI-driven applications. Their client portfolio includes notable companies such as Siemens, Wiener Linien, and voestalpine AG, underscoring their market presence and credibility. Technically, the website is built on Webflow CMS, uses modern web fonts, Google Tag Manager, and is hosted via Cloudflare and Azure services. While the site is well-designed, mobile-optimized, and rich in content, it suffers from critical security issues including an invalid SSL certificate and a subdomain takeover vulnerability. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

F

FACC AG

facc.com

35

FACC AG is a mature and leading aerospace company specializing in the design, production, and maintenance of advanced lightweight components and systems for the global aviation industry. The company maintains strong partnerships with major aerospace manufacturers such as Airbus, Boeing, and Embraer, and offers a broad portfolio including aerostructures, engines, nacelles, cabin interiors, and MRO services. The website reflects a professional and well-branded digital presence targeting industry partners, investors, suppliers, and job seekers. Technically, the site is built on WordPress with modern JavaScript frameworks like Vue.js and uses Amazon CloudFront CDN for hosting. However, performance metrics are missing, and the site appears to load slowly. Security posture is a significant concern due to the absence of a valid SSL certificate and lack of TLS protocol support, which critically undermines secure communications. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is credible and professional but requires urgent security improvements to protect user data and maintain trust.