Security Directory

B

Bauwerk Group Schweiz AG

bauwerk-parkett.com

43

Bauwerk Group Schweiz AG operates a professional and comprehensive website focused on manufacturing and retailing high-quality parquet and wood flooring products. The company positions itself as a leading European parquet manufacturer with a strong Swiss heritage, offering a wide range of products, accessories, and digital tools to both end consumers and professionals. The website is well-structured, multilingual, and rich in content, emphasizing sustainability and certifications such as Cradle to Cradle GOLD. Technically, the site uses modern frameworks including Neos CMS and the Flow PHP framework, integrates Google reCAPTCHA, and employs analytics and marketing tools responsibly. Security posture is good with HTTPS enforced and standard best practices observed, though some security headers could be explicitly declared. Privacy compliance is strong with accessible policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

F

Freudenberg Sealing Technologies

fst.com

51

Freudenberg Sealing Technologies is a global leader specializing in sealing solutions and applications, serving diverse industries including automotive and general manufacturing. With a rich history dating back to 1929 and a strong focus on engineering and material expertise, the company offers a broad range of high-quality products and services, including custom sealing system design and validation. The website reflects a mature enterprise with comprehensive content, clear navigation, and consistent branding. Technically, the site employs modern frameworks like Alpine.js, integrates Google Analytics and Tag Manager for tracking, and uses Usercentrics for cookie consent management, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive user experience and business credibility.

C

Consys.it Srl

consys.it

52

Consys.it Srl is an Italian cybersecurity company specializing in managed security services, compliance solutions, and advanced cybersecurity technologies. The company positions itself as a trusted partner for businesses seeking to protect their digital assets and comply with stringent regulatory requirements. Their website presents a professional and consistent brand image, targeting B2B clients with a comprehensive portfolio of cybersecurity services including Security Operation Center, Security Automation, and Compliance Guard solutions. The technical infrastructure is based on WordPress CMS with modern plugins and integrations such as WPBakery Page Builder, Contact Form 7, Google Tag Manager, and Google reCAPTCHA, indicating a mature digital presence. The site is mobile optimized and includes privacy compliance mechanisms via Iubenda, reflecting attention to GDPR requirements. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and cookie consent management. However, explicit security headers and incident response contact details are not evident, suggesting areas for improvement. The WHOIS data aligns well with the website's business claims, supporting legitimacy and trustworthiness. Overall, Consys.it demonstrates a solid cybersecurity business presence with good technical and privacy compliance, though enhancements in security transparency and incident response communication would strengthen their posture further.

E

ELIX Polymers, S.L.U.

elix-polymers.com

40

ELIX Polymers, a member of Sinochem International, is a leading European manufacturer of ABS resins and derivatives, serving diverse industrial sectors including automotive, healthcare, and consumer goods. The company emphasizes innovation, sustainability, and customer service, operating globally with business relations in 40 countries. Their website reflects a professional and comprehensive digital presence with detailed corporate, product, and sustainability information. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted behind Cloudflare, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts security posture. Privacy and cookie policies are well implemented with GDPR compliance and active consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

Wolters Kluwer Financial and Corporate Compliance is a division of Wolters Kluwer N.V., a global leader providing technology-enabled compliance, regulatory, and corporate services solutions primarily targeting financial institutions, corporations, and legal professionals. The website presents a professional, well-branded digital presence with comprehensive content describing their portfolio of compliance and regulatory products and services. The technical infrastructure leverages modern web technologies, including Cloudflare CDN, Azure DNS, and marketing/analytics tools such as Google Tag Manager, Marketo, and OneTrust for privacy compliance. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and lack of enabled TLS protocols, which severely impacts the security posture and trustworthiness of the site. Privacy and cookie policies are well implemented with consent mechanisms, but no explicit security or incident response policies are published. Overall, the site reflects a mature enterprise business with strong branding and content quality but requires urgent remediation of its SSL/TLS configuration to meet security best practices.

E

EnliteAI GmbH

enlite.ai

40

EnliteAI GmbH is a specialized technology provider focused on Artificial Intelligence solutions, particularly in Reinforcement Learning, Computer Vision, and Power Grid Optimization. The company offers open-source frameworks like Maze and commercial platforms such as Detekt, targeting organizations seeking advanced AI integration. Their client portfolio includes notable enterprises, and recent seed funding supports their growth trajectory. Technically, the website is built on Webflow with modern analytics and consent tools, but lacks a valid SSL certificate, which impacts security posture. Security headers are partially implemented, and forms use Google reCAPTCHA for bot protection. Overall, the site is professional and content-rich but requires urgent SSL deployment to secure communications. Privacy compliance is addressed with cookie consent and policies, though no explicit security or incident response policies are published. Strategic recommendations include immediate SSL installation, enhanced security policy publication, and continuous privacy compliance improvements.

T

Transsystem Spółka Akcyjna

transsystem.pl

32

Transsystem Spółka Akcyjna is a Polish manufacturing company specializing in the production and general contracting of technological transport systems, primarily serving the tire industry, intralogistics, and e-commerce sectors. With over 31 years of market presence and a portfolio of international projects, the company maintains a solid market position supported by partnerships with major industry players such as Michelin, Goodyear, and Bridgestone. The website reflects a professional business model focused on manufacturing and technological transport solutions. Technically, the site is built on WordPress with common plugins like Yoast SEO and Contact Form 7, and it integrates Google Tag Manager and reCAPTCHA for analytics and security. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, exposing users to potential risks. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to align with best practices.

S

STAPPERT

stappert.biz

18

STAPPERT is a leading European stockholder and supplier of stainless steel long products and fittings, targeting industrial and business customers. The company emphasizes a comprehensive product range, quality, and customer-oriented service. The website is built on WordPress with professional SEO and multilingual support, indicating a mature digital presence. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. Cookie consent is managed via a third-party tool, and contact forms are protected with reCAPTCHA, showing some privacy awareness. Overall, the site is functional and professional but requires urgent security improvements to protect data and build trust.

LineMetrics GmbH is a medium-sized Austrian company specializing in smart building solutions through integrated sensor systems based on LoRaWAN technology. Their platform enables real-time data collection and analysis for energy consumption, room climate monitoring, and operational efficiency improvements. The company has a strong market presence with over 400 clients and 15,000 sensors deployed, positioning itself as a reliable provider in the real estate and technology sectors. Technically, the website is built on WordPress with modern plugins and integrations such as Kadence Blocks, WP Rocket, Google Tag Manager, and Zoho CRM, reflecting a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS, which significantly impacts the security posture. Privacy compliance is well addressed with comprehensive policies and active consent mechanisms. Overall, while the business and content quality are excellent, urgent improvements in security configurations are recommended to enhance trust and protect user data.

H

HOM Furniture

homfurniture.com

36

HOM Furniture is a large regional furniture retailer primarily serving the upper Midwestern United States, including Minnesota and surrounding states. The company offers a broad range of furniture, home décor, and design services both online and in physical stores. Their digital presence includes advanced features such as augmented reality visualization and room planning tools, indicating a moderate level of digital maturity. However, the website lacks a valid SSL certificate, which is a critical security shortfall that undermines user trust and data protection. While privacy policies are present, cookie consent mechanisms are missing despite the use of tracking and analytics tools. The site uses modern web technologies including MeteorJS and React, but performance data is lacking, suggesting potential optimization opportunities. Overall, the business appears legitimate and well-established, but security improvements are urgently needed to protect customer data and enhance trust.

C

Controller Institut s.r.o.

controlling.cz

24

Controller Institut s.r.o. is a well-established Czech education provider specializing in finance and controlling training, offering seminars, certified cycles, online courses, corporate training, and mentoring. The company targets finance professionals and controllers seeking practical and certified education. The website reflects a mature business with 30 years of market presence and a strong focus on quality content and professional services. Technically, the site uses a custom CMS with popular JavaScript libraries and marketing tools but lacks modern security measures such as HTTPS, which is a critical vulnerability. The security posture is weak due to the absence of SSL/TLS and related security headers, exposing users to risks. Privacy compliance is partial, with no active cookie consent mechanism despite tracking scripts in use. Overall, the business credibility is high, supported by consistent WHOIS data and clear contact information. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect users.

lautstark gmbh is a specialized below-the-line communications agency founded in 2003, focusing on live communication and brand experiences for premium clients including world brands and market leaders. The company positions itself as a creative activist agency delivering personalized, reliable, and impactful brand activations. The website reflects a professional and consistent brand image with comprehensive content and clear navigation targeting German-speaking audiences. Technically, the site is built on WordPress with Yootheme framework, hosted on Hetzner, and uses modern tools like Google reCAPTCHA and Matomo analytics. However, the absence of a valid SSL certificate and HTTPS is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the business demonstrates strong market positioning but must urgently address security shortcomings to maintain credibility and protect user data.

P

pewag International GmbH

pewag.com

26

pewag International GmbH is a historic Austrian manufacturer specializing in chains and lifting solutions with a global market presence. The company offers a broad portfolio including snow chains, forestry technique, conveyor systems, and DIY products, supported by digital configurators and advisory tools. The website reflects a mature digital infrastructure built on WordPress with multilingual support and integrated analytics and consent management tools. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability, undermining user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, pewag demonstrates strong business credibility and content quality but must urgently address its security posture to align with industry best practices.

EREMA Engineering Recycling Maschinen und Anlagen Ges.m.b.H. is a leading Austrian manufacturer specializing in plastic recycling machinery and systems. Founded in 1983, the company has established itself as a global market leader with over 7000 systems deployed worldwide, producing millions of tons of recycled granulate annually. Their business model focuses on manufacturing innovative recycling machines, providing customer testing centers, and offering digital solutions to optimize recycling processes. The website reflects a professional and comprehensive digital presence targeting industrial clients and businesses in the recycling sector. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, GSAP, and various UI libraries, hosted likely via A1 Telekom Austria infrastructure. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. Performance data is missing, and while mobile optimization and SEO are good, accessibility is basic. Privacy and cookie policies are well implemented with consent mechanisms, indicating good GDPR compliance. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture, exposing users to potential risks. Other security headers and best practices are missing, and no incident response or vulnerability disclosure information is provided. The domain registration details align well with the company's claims, supporting legitimacy. Overall, while the business and content quality are excellent, the critical lack of HTTPS and SSL significantly lowers the security score and overall trustworthiness. Strategic improvements in security infrastructure are essential to protect users and maintain the company's reputable market position.

K

Klippa App B.V.

klippa.com

59

Klippa App B.V. is a Dutch technology company specializing in AI-driven document automation solutions that help businesses reduce operational costs, save time, and prevent fraud. Their market position is strong, serving over 1000 brands with products like DocHorizon and SpendControl, targeting finance professionals and enterprises across various sectors including banking, logistics, and public services. The company leverages modern web technologies and cloud infrastructure (Microsoft Azure) to deliver scalable and efficient services. Security practices are generally good with HTTPS and Cloudflare protection, but improvements in SSL/TLS configuration are recommended. The website demonstrates strong compliance with data protection regulations and holds relevant certifications such as ISO 27001 and ISO 9001. Overall, Klippa presents a professional, trustworthy, and technically mature digital presence.

Ainsworth Game Technology is a well-established company specializing in gaming technology products, including gaming cabinets and interactive solutions, targeting global markets such as APAC, North America, Latin America, and Europe. The website reflects a professional corporate presence with clear navigation and consistent branding. Technically, the site uses modern frontend technologies like Tailwind CSS, Alpine.js, and integrates Google Analytics and reCAPTCHA for analytics and security. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Security headers are present but insufficient without HTTPS. Privacy compliance is basic, with a privacy policy and terms of use present but no cookie consent mechanism. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security configuration to protect user data and enhance trust.

A

Agenda Austria

agenda-austria.at

35

Agenda Austria is an established independent think tank based in Austria, focusing on economic and socio-political research and analysis. The organization provides a variety of content including publications, graphics, podcasts, and events aimed at policymakers, academics, and the interested public. Their market position as the first independent think tank in Austria specializing in these areas is supported by a consistent and professional online presence. Technically, the website is built on WordPress with a modern tech stack including caching, SEO optimization, and consent management tools. The site is well-structured, mobile-optimized, and offers good user experience with clear navigation and rich content. However, the SSL/TLS configuration is currently inadequate, lacking a valid certificate and modern protocol support, which poses a security risk. Security-wise, the site implements several important HTTP security headers and uses reCAPTCHA for form protection, but the absence of valid HTTPS and modern TLS protocols significantly lowers its security posture. Privacy compliance is strong, with clear privacy and cookie policies and GDPR-compliant consent mechanisms. Overall, the website is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing domain security with DNSSEC and CAA records.

M

Motorola Mobility LLC

motorola.com

40

Motorola.com is the official Finnish website for Motorola Mobility LLC, a subsidiary of Lenovo, offering Android smartphones and accessories. The site targets Finnish consumers with localized content and product families such as moto razr, moto edge, moto g, and moto e. The technical infrastructure leverages Akamai CDN, OpenResty web server, and modern JavaScript frameworks, with integrations for Google Tag Manager and Adobe DTM for marketing and analytics. However, the site currently lacks a valid SSL certificate, which is a critical security vulnerability. Security headers are well implemented, but absence of cookie consent mechanisms may impact GDPR compliance. The website demonstrates good business credibility and professional design but requires improvements in security and privacy compliance to enhance trust and user safety.

B

Brick & Patel LLP

brickpatel.com

40

Brick & Patel LLP is a small legal services firm specializing in trust and estate planning and administration, serving clients primarily in several US states including New York and Florida. The website provides basic information about the firm's services and geographic focus but lacks detailed contact information and modern web features. Technically, the site is built on an Apache server using older JavaScript libraries and Cloudfront CDN for some assets. However, the site lacks a valid SSL certificate, resulting in no HTTPS support despite security headers indicating HSTS, which undermines user trust and security. Privacy compliance is minimal with no cookie consent mechanism and only a basic privacy policy present. Business credibility is supported by a mature domain and consistent WHOIS data, but the overall digital maturity is low. Security posture is weak due to missing SSL and outdated libraries, posing risks to visitors and the firm's reputation. Strategic improvements should focus on securing the site with valid SSL, updating technology stack, and enhancing privacy and security policies to meet modern standards.

Häuser zum Leben is Austria's largest provider of senior care and housing services, operating 30 pensioners' homes and 135 clubs in Vienna. The organization focuses on providing accommodation, care, assisted living, dementia support, and social activities for senior citizens. Their business model is non-profit, emphasizing quality of life and integration for seniors. The website is professionally designed, content-rich, and targets senior citizens and their families in Vienna. Technically, the site runs on WordPress with modern plugins and optimizations, but suffers from critical security issues due to lack of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Contact information and social media presence are clear and professional. Overall, the site is trustworthy but urgently needs to address its SSL/TLS configuration to improve security and user trust.

P

Poesis Consulting GmbH

poesis.at

40

Poesis Consulting GmbH is a small, dynamic consulting firm specializing in strategy, project management, process management, and training services. The company targets businesses requiring tailored consulting solutions, particularly in complex projects where internal resources or expertise are limited. Their market position is regional with offices in Vorarlberg and Liechtenstein, emphasizing a personalized and deep consulting approach. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, supporting their credibility. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Cookiebot for consent management. Hosting is via Cloudflare CDN with DNS managed by United Hoster. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant technical and security deficiency. Performance is rated slow due to missing optimization metrics, but mobile responsiveness and SEO basics are adequately addressed. From a security perspective, the absence of HTTPS and TLS protocols severely undermines the site's security posture. While some security headers and best practices like HttpOnly cookies and reCAPTCHA are implemented, critical vulnerabilities exist including no DNSSEC, no certificate transparency compliance, and no session resumption. Privacy compliance is reasonably addressed with a privacy policy, cookie consent, and GDPR indicators, but no explicit security or incident response policies are published. Overall, the website presents a moderate risk profile primarily due to missing HTTPS and related security controls. Strategic recommendations include immediate SSL/TLS deployment, enhancement of DNS security, and publication of security policies. These improvements will bolster trust, compliance, and protect both the business and its clients from potential threats.

R

Randstad

randstad.com

40

Randstad is a global leader in the HR services industry, providing a wide range of staffing, recruitment, and workforce management solutions. The company targets job seekers, employers, investors, and press with a comprehensive digital presence and multiple country-specific subsidiaries. Their business model focuses on delivering specialized talent solutions at scale, supported by digital and enterprise services. The website reflects a mature and professional brand with strong market positioning and trust indicators. Technically, the website uses modern technologies including React and Drupal CMS, hosted on Amazon Web Services infrastructure. While the site is well-structured and mobile-optimized, performance data is unavailable. Security headers are properly configured, but the SSL certificate is invalid or missing, which is a critical vulnerability that undermines secure communications. The security posture shows good practices in headers and cookie management but lacks proper SSL/TLS implementation and explicit security or incident response policies. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. Contact information is primarily via forms, with no direct emails or phone numbers publicly listed. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions and maintain business credibility.

S

SLB

slb.com

40

SLB is a global energy technology company focused on driving innovation for a balanced planet. Their website showcases a comprehensive portfolio of solutions spanning decarbonization, digital transformation, and traditional oil and gas services. The company targets energy industry professionals, investors, partners, and job seekers, positioning itself as a market leader with extensive service offerings and a strong sustainability commitment. Technically, the website employs modern technologies such as jQuery, Brightcove video, Coveo search, and integrates multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and offers rich content with clear navigation. However, the security posture is weakened by an invalid or missing SSL certificate and lack of HTTPS support, which is a critical issue. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site reflects a mature enterprise with good business credibility but requires urgent security improvements to protect user data and maintain trust.

E

Evides N.V.

evides.nl

40

Evides N.V. is a large, established public utility company providing reliable and sustainable drinking water services to approximately 2.5 million consumers and businesses in the southwest Netherlands. The company operates a comprehensive digital infrastructure including a customer portal (Mijn Evides), extensive self-service options, and detailed information resources. Their market position is strong with a focus on quality, sustainability, and customer engagement. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Microsoft Azure, and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security measures are in place including a strict Content Security Policy and multiple security headers; however, the SSL certificate is currently invalid and no modern TLS protocols are enabled, representing a critical security risk. Privacy compliance is robust with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.

G

Grassfish

grassfish.com

40

Grassfish is a mature and established digital in-store platform and consulting company headquartered in Sweden, with additional presence in Austria. The company offers a comprehensive suite of digital signage and customer experience solutions tailored for retail brands and stores, positioning itself as the leading digital in-store platform in Europe trusted by over 500 brands. Their business model combines a SaaS platform with strategic, technical, and operational consulting services, targeting brands seeking to enhance their physical retail environments with digital innovation. Technically, the website is built on WordPress, leveraging modern web technologies and CDNs for content delivery, but currently suffers from critical SSL/TLS misconfigurations that undermine secure communications. The security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, posing significant risks to data confidentiality and user trust. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies aligned with GDPR requirements. Overall, while the business and content quality are excellent, the critical security gaps notably reduce the website's trustworthiness and require urgent remediation. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security headers and session management to safeguard user data and maintain compliance.

W

Weitzer Parkett Vertriebs GmbH

weitzer-parkett.com

40

Weitzer Parkett Vertriebs GmbH is a well-established Austrian family-owned manufacturer and distributor of parquet flooring and wooden stairs, with a history dating back to 1831. The company holds a leading market position in Austria and is recognized as one of the top parquet manufacturers in Europe. Their product portfolio includes innovative parquet solutions such as Pflegefrei-Parkett, Gesund-Parkett, and Flüster-Parkett, emphasizing sustainability and ecological responsibility. The website reflects a mature digital presence with comprehensive product information, multi-language support, and strong branding consistency. Technically, the website is built on WordPress with WooCommerce, utilizing modern libraries and plugins such as jQuery, Slick Slider, and Borlabs Cookie for cookie management. It is hosted behind Cloudflare, providing CDN and security services. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, impacting user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with explicit consent mechanisms. From a security perspective, while the site benefits from Cloudflare's protection and uses reCAPTCHA on forms, the lack of HTTPS and modern TLS protocols, as well as missing security headers like HSTS, reduce its security posture. No explicit security policy or incident response information is found, which could be improved to enhance transparency and readiness. Overall, the website is professional, content-rich, and business-credible but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include implementing a valid SSL certificate, enabling HTTPS, and enhancing security headers and protocols.

G

Gymnasium Camphusianum

camphusianum.nl

36

Gymnasium Camphusianum is a small, community-oriented gymnasium school located in Gorinchem, Netherlands, providing secondary education focused on broad academic knowledge and personal development. The website reflects a well-structured educational institution with clear communication channels, active social media presence, and comprehensive privacy and cookie policies compliant with GDPR. Technically, the site is built on WordPress with modern plugins and themes, leveraging Cloudflare CDN for content delivery. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. This exposes users to potential data interception risks and reduces trustworthiness from a security perspective. Overall, while the content and business credibility are strong, the lack of HTTPS is a major vulnerability that must be addressed promptly.

J

Jungbunzlauer Suisse AG

jungbunzlauer.com

33

Jungbunzlauer Suisse AG is a leading manufacturer of biodegradable ingredients of natural origin, serving diverse industries including food, beverage, pharmaceutical, cosmetics, and cleaners. The company emphasizes sustainability and quality, positioning itself as a global leader in its sector. Their website reflects a professional and content-rich digital presence, targeting businesses seeking natural and sustainable ingredient solutions. Technically, the site is built on TYPO3 CMS and hosted on infrastructure likely provided by AWS, with integrations such as Google Tag Manager for analytics. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of HTTPS support, which poses risks to data confidentiality and user trust. Privacy and cookie policies are well implemented, showing GDPR compliance and user consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect visitors and maintain credibility.

C

CAPESPAN | We Deliver

capespan.com

27

Capespan is a large, established global distributor, marketer, and producer of fresh fruit with a strong market position supported by recognized brands such as Cape, Outspan, Outspan Gems, and Goldland. The company operates an integrated business model encompassing fruit growing, packing, marketing, and distribution, serving grower partners and retail customers worldwide. Their website reflects a professional and content-rich digital presence with active social media engagement and regular press updates. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and social media integration, hosted on Apache servers. However, the lack of a valid SSL certificate and absence of HTTPS significantly undermine the security posture, exposing users to risks. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect data and maintain trust.

D

Dataphone GmbH

dataphone.at

25

Dataphone GmbH is an Austrian company specializing in digitalizing supply chain processes, offering innovative software and hardware solutions primarily for warehouse logistics, transport, and retail sectors. Their market position is strong within Austria, providing comprehensive services including warehouse management systems (LOGIS 4 and LOGIS Light), hardware products like barcode scanners and label printers, and professional maintenance and support services. The company targets businesses seeking to modernize and optimize their logistics and supply chain operations through digital transformation. Technically, the website is built on WordPress with a modern theme and uses a variety of plugins for SEO, performance optimization, cookie consent, and analytics. However, a critical security shortfall is the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. The site employs Google Analytics, Google Tag Manager, and other marketing tools with proper consent mechanisms, indicating good privacy compliance. Contact information and business details are clearly presented, enhancing business credibility. Overall, while the business and technical maturity are good, urgent improvements in security infrastructure are necessary to protect user data and build trust.

A

AIM Group International

aimgroupinternational.com

35

AIM Group International is a medium-sized service provider specializing in event management, digital communication, and consultancy services primarily targeting companies and associations. The company offers a broad portfolio including conference management, virtual and hybrid events, healthcare meetings, digital marketing, and consultancy services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern libraries and plugins, hosted on Amazon AWS infrastructure. However, the website lacks a valid SSL certificate and does not support HTTPS, which significantly impacts its security posture. While cookie consent and privacy policies are implemented and GDPR compliant, the absence of HTTPS and security headers exposes the site to risks. Overall, the business appears legitimate and well-established with active social media presence and trust indicators such as an annual report and newsletter. Strategic improvements in security configuration are recommended to enhance trust and compliance.

Acer Inc is a global technology company specializing in the manufacturing and retail of computing devices including laptops, desktops, Chromebooks, monitors, and projectors. The website targets both consumer and business audiences primarily in Finland but also globally, offering a comprehensive product catalog and support services. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the site uses ASP.NET MVC framework, jQuery, and integrates multiple third-party analytics and marketing tools such as Google Tag Manager and Visual Website Optimizer. Hosting is via Amazon AWS with Akamai CDN for content delivery. Security posture shows presence of key security headers and secure cookies; however, the SSL certificate is invalid or missing and no TLS protocols are enabled, which is a critical vulnerability. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security and trust.

Wolford operates an international e-commerce retail website specializing in fashion products, targeting multiple countries with localized language versions. The site is built on Salesforce Commerce Cloud (Demandware) and uses modern web technologies including Google Fonts, Google reCAPTCHA, and Usercentrics for cookie consent management. Cloudflare is used as a hosting and CDN provider. However, the website lacks a valid SSL/TLS certificate, resulting in no proper HTTPS support, which is a critical security concern. The site implements some security headers but misses important configurations such as HSTS and OCSP stapling. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information and security policies are not found in the analyzed content, reducing transparency and trust. Overall, the website demonstrates a basic level of technical and business maturity but requires significant improvements in security and privacy compliance to meet modern standards.

Weatherford's PetroVisor website presents a mature and comprehensive SaaS platform focused on unifying data and analytics for the energy sector, specifically oil and gas production optimization. The platform integrates AI/ML capabilities and offers multiple modules addressing production, artificial lift, completion optimization, ESG, and enhanced oil recovery. The website is professionally designed, content-rich, and targets enterprise-level energy industry professionals. Technically, the site uses a modern tech stack including Kentico CMS, jQuery, and various analytics and marketing tools. However, a critical security gap exists as the site lacks a valid SSL certificate and does not serve content over HTTPS, exposing users to potential risks. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security incident response or vulnerability disclosure information is found. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic security improvements are necessary to enhance trust and protect user data.

Heidelberger Druckmaschinen AG (HEIDELBERG) is a globally recognized leader in the manufacturing and supply of printing and packaging solutions, including offset and digital printing technologies, post-press packaging machines, and related software and services. The company targets commercial, packaging, and label printing companies worldwide, positioning itself as a market leader with a comprehensive product and service portfolio. The website reflects a mature digital presence with rich content, clear navigation, and strong branding, supporting its enterprise-level stature. Technically, the site uses modern web technologies and tracking tools but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security gap. Security headers are present but ineffective without SSL, and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism despite tracking scripts. WHOIS data confirms domain legitimacy and consistency with the company’s identity. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

F

Fenster. Türen. KATZBECK.

katzbeck.at

35

KATZBECK FensterGmbH Austria is a well-established manufacturer specializing in high-quality, custom windows and doors produced exclusively in Austria since 1950. The company emphasizes sustainability, regional production, and premium craftsmanship, targeting both end consumers and professional partners within Austria. Their website reflects a mature digital presence built on WordPress with the Divi theme, incorporating modern web technologies and user-friendly design. However, a critical security gap exists due to the absence of an SSL/TLS certificate, exposing users to potential risks. The site implements GDPR-compliant privacy and cookie policies, with clear contact channels and a professional content structure. To enhance trust and security, immediate implementation of HTTPS and additional security headers is recommended.

S

Studio Snap

studiosnap.ca

38

Studio Snap is a small photography service business with a website built on the GoDaddy Website Builder platform. The site presents a simple business description emphasizing timeless photography and friendly service, targeting local photography clients. The technical infrastructure relies on GoDaddy hosting and includes Google reCAPTCHA for form protection. However, the website lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. No privacy policy or terms of service pages are present, and contact information is limited to a contact form without direct emails or phone numbers. The site performance is slow, and security headers are absent, indicating a basic security posture. Overall, the business appears legitimate but is in an early stage with room for significant improvements in security and compliance.

QCM Holding is a Swiss-based aviation competence center specializing in regulatory and Part-147 training, design approvals, aircraft technical management, and consulting services. With over 25 years of industry presence and recent ownership transition, QCM maintains a strong market position serving aviation professionals and organizations. The website reflects a professional and comprehensive service offering with clear navigation and relevant content. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, but lacks a valid SSL certificate, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business demonstrates credibility and trustworthiness, though the security weaknesses present a risk that should be addressed promptly.

S

Salzburg Global Seminar, Inc.

salzburgglobal.org

39

Salzburg Global Seminar, Inc. is a well-established non-profit organization founded in 1947, dedicated to convening global leaders for breakthrough conversations on pressing global issues. The organization operates internationally with offices in Austria and the USA, providing leadership programs, fellowships, and global convenings. The website is built on TYPO3 CMS and uses standard web technologies including jQuery and Google reCAPTCHA for form security. While the site offers comprehensive content and clear navigation, it lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Privacy and cookie policies are present and include consent mechanisms, reflecting good privacy compliance. Contact information and social media presence are robust, enhancing business credibility. Overall, the site demonstrates a solid business and content foundation but requires urgent improvements in security infrastructure.

D

DYWIDAG Dyckerhoff & Widmann GmbH

dywidag.at

23

DYWIDAG Dyckerhoff & Widmann GmbH is a well-established construction company operating primarily in Austria and Southern Bavaria, specializing in general contracting and complex construction projects. The company holds multiple recognized certifications such as ISO 9001, ISO 45001, and compliance management certifications, underscoring its commitment to quality and safety. Their website reflects a professional business with a clear focus on construction services, career opportunities, and regional presence through multiple offices. The target audience includes construction clients and partners within the real estate and building sectors in Austria. Technically, the website is built on WordPress with common plugins and frameworks, including Visual Composer and Slider Revolution, and integrates Google Analytics and marketing pixels for user tracking. However, the site suffers from slow performance and outdated SSL/TLS configuration, lacking a valid HTTPS certificate, which is a critical security concern. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Contact information is clearly provided with multiple channels and locations. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

R

Ramar Record Retention, LLC

ramarrecords.com

22

Ramar Record Retention, LLC is a small business specializing in document and record storage, management, and secure shredding services primarily serving Maryland and surrounding areas. The company offers a range of services including records management, indexing, retention scheduling, and transportation. The website is built on Drupal 7 and incorporates modern web technologies such as Google reCAPTCHA and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and lack of HTTPS significantly weaken the security posture. While some security headers are present, critical best practices such as HSTS and OCSP stapling are missing. The website lacks published privacy, cookie, and security policies, which impacts privacy compliance and user trust. Overall, the site is functional with good content quality and navigation but requires urgent security improvements to protect user data and enhance credibility.

G

Goodpack IBC (Singapore) Pte. Ltd.

goodpack.com

39

Goodpack IBC (Singapore) Pte. Ltd. is a leading global provider of reusable intermediate bulk containers (IBCs) designed to optimize supply chains through a flexible pay-per-use leasing model. The company serves diverse industries including rubber, automotive, food and beverage, and chemicals, emphasizing sustainability and cost efficiency. Their extensive global network includes subsidiaries and offices across Asia, Europe, the Americas, and Africa, supporting a large-scale logistics operation. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting businesses seeking eco-friendly and efficient packaging solutions. Technically, the website is built on the Webflow CMS platform, leveraging modern JavaScript libraries such as jQuery, Luxy.js, and Splide.js for enhanced user experience. Hosting and CDN services are provided by Cloudflare, ensuring good content delivery performance. The site includes Google Analytics for user tracking and Google reCAPTCHA for bot protection. Mobile optimization and SEO practices are well implemented, though performance metrics are not explicitly provided. From a security perspective, the site has implemented some security headers including HSTS and CSP frame-ancestors, but critically lacks a valid SSL/TLS certificate and does not support modern TLS protocols, exposing users to potential risks. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR considerations. Overall, Goodpack’s website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in security policy transparency and incident response readiness would further enhance their security posture.

L

Langmatz GmbH

langmatz.de

24

Langmatz GmbH is a medium-sized German company specializing in the development and manufacturing of infrastructure products for telecommunications, energy, and transportation sectors. Their product portfolio includes cable ducts, network distributors, outdoor enclosures, and related infrastructure components. The company positions itself as a leading European provider with a strong focus on quality and customer-centric solutions. Technically, the website is built on the Pimcore CMS platform, uses modern JavaScript libraries such as Swiper.js, and integrates Google reCAPTCHA for form security. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture of the site. Privacy and terms of service policies are present and comprehensive, supporting GDPR compliance. Contact information is clearly provided, including emails, phone numbers, and physical address, alongside active social media channels. Overall, while the business and content quality are excellent, the lack of proper SSL/TLS configuration is a critical security gap that needs immediate remediation.

Sulzer Ltd is a globally recognized leader in fluid engineering, specializing in the manufacturing and servicing of pumps, agitators, mixers, separation, and purification technologies. The company serves essential industries such as energy, manufacturing, and process industries, positioning itself as a key player in enabling sustainable and efficient industrial operations worldwide. Their website reflects a mature enterprise with comprehensive product and service offerings, strong branding, and a clear focus on sustainability and innovation. Technically, the website employs a modern technology stack including Apache server, Vue.js framework, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Pardot, and Hotjar. The site is hosted with Azure DNS and demonstrates good SEO and mobile optimization practices. However, performance metrics are not explicitly available. From a security perspective, while the site implements several important security headers and content security policies, it critically lacks a valid SSL/TLS certificate and does not support HTTPS, which severely undermines its security posture. This exposes users to potential risks and reduces trustworthiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website is professional and credible but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and improve its security score. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security header configurations to protect users and maintain trust.

PTM EDV-Systeme GmbH operates the website mscrm-addons.com, providing specialized add-ons and solutions for Microsoft Dynamics 365 and Power Platform users. The company offers a mature product portfolio addressing document creation, capacity management, and activity handling, targeting businesses using Microsoft technologies. The website demonstrates a professional presence with clear business information, customer testimonials, and partner programs, positioning itself as a trusted provider in the technology sector. Technically, the site is built on ASP.NET with the DNN CMS platform and integrates modern JavaScript libraries and Google services for analytics and user interaction. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support and exposing users to potential risks. Privacy compliance is addressed with cookie consent and a privacy policy, and contact channels are well established. Overall, while the business and content quality are strong, the lack of HTTPS significantly impacts the security posture and user trust.

G

Gebauer & Griller

griller.at

40

Gebauer & Griller (GG Group) is a well-established international family-owned manufacturing group specializing in high-quality wires, cables, and wiring systems for automotive and industrial applications. The company positions itself as a leading provider in energy and data transmission sectors, emphasizing customized solutions, innovation, and strong partnerships. The website reflects a professional digital presence with comprehensive content, including corporate videos, social media integration, and detailed product and corporate information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates third-party services such as Google reCAPTCHA, Google Maps, Vimeo, and Flockler social feeds. However, the website currently lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical security concern. Security headers are partially implemented, but important features like HSTS and OCSP stapling are missing. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Contact information is comprehensive, including multiple global office addresses, emails, and phone numbers. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

G

GLOBAL HYDRO Energy GmbH

global-hydro.eu

23

GLOBAL HYDRO Energy GmbH is a specialized technology leader in the small hydropower sector, offering comprehensive turnkey solutions including design, engineering, digital plant control, revitalization, and lifetime service. The company operates globally with a strong Austrian headquarters and emphasizes sustainable energy solutions. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses Pimcore CMS on an Apache server and integrates Cookiebot for cookie consent and Google reCAPTCHA for form security. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. Security headers are partially implemented but modern TLS protocols and cipher suites are missing, exposing the site to potential risks. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

S

SmartStream Technologies ltd.

smartstream-stp.com

40

SmartStream Technologies ltd. is a well-established leader in financial data solutions, serving banks, capital markets, buy-side firms, and corporations. Their offerings focus on operational control, cost reduction, risk mitigation, regulatory compliance, and new revenue streams. The company maintains a strong market position with a comprehensive portfolio of services including data transformation, regulatory alignment, managed services, and innovation labs. The website reflects a professional and consistent brand image targeting financial institutions and related sectors. Technically, the website is built on WordPress using Elementor and Slider Revolution, hosted behind Cloudflare for security and performance. It integrates multiple marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Pardot, LinkedIn Insight Tag, and various media embedding services. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS enforcement, despite Cloudflare protection and Wordfence plugin usage. Security headers are present but could be enhanced with HSTS and OCSP stapling. Privacy compliance is strong with clear GDPR-aligned policies, cookie consent mechanisms, and a data protection officer contact. Overall, the website presents a credible and professional front for SmartStream Technologies but requires urgent SSL/TLS remediation to improve security and trustworthiness. Strategic recommendations include SSL installation, enhanced security headers, and continuous monitoring of third-party integrations.

P

Pümpel

puempel.at

29

Pümpel is a well-established construction materials and services company based in Vorarlberg, Austria, with over 90 years of experience. The company serves both private and commercial customers, offering a wide range of products including wood, windows, doors, tools, and garden supplies, alongside services such as consultation, delivery, custom cutting, and professional installation. Their market position is strong regionally, supported by certifications and a professional online presence. Technically, the website is built on WordPress with a modern frontend stack including Bootstrap and jQuery, but it lacks HTTPS and uses an outdated PHP version, which poses security risks. The security posture is weak due to missing SSL and security headers, although SPF and DMARC email protections are in place. Privacy compliance is basic with cookie consent and privacy information available, but no dedicated security or incident response policies are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Z

ZENTITY a.s.

zentity.com

28

ZENTITY a.s. is a medium-sized technology company specializing in digital transformation platforms, primarily serving the finance, telecommunications, and energy sectors. Their flagship offering, the Digital Accelerator Platform, enables enterprises to unify and personalize customer journeys across multiple digital channels. The company is recognized globally, including frequent mentions in Gartner's Market Guide, and holds ISO 9001 and ISO 27001 certifications, underscoring their commitment to quality and security. Their client portfolio includes notable brands such as Nedbank, KBC, and Vodafone. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. Hosting is provided by DreamHost. While the site demonstrates good design, navigation, and mobile optimization, performance metrics are lacking, and no valid SSL certificate is configured, resulting in a critical security gap. Forms are protected by Google reCAPTCHA, and contact mechanisms are comprehensive. Security posture is weak due to the absence of HTTPS and modern TLS protocols, lack of security headers, and missing vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is strong, supported by clear contact information, certifications, and client references. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling security headers, and establishing a vulnerability disclosure policy.