Security Directory

F

FWT Composites & Rolls GmbH

fwt.at

20

FWT Composites & Rolls GmbH is a medium-sized Austrian manufacturing company specializing in composite rollers, tubes, drive shafts, and related services primarily for industrial sectors such as paper, film, and non-woven industries. Founded in 1996, the company has established itself as a leading manufacturer with a strong focus on product quality, customer service, and technical expertise. Their website reflects a professional business presence with detailed product and service descriptions, multilingual support, and active social media engagement via Facebook. Technically, the website is built on WordPress with common plugins and includes structured data for SEO benefits. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Privacy compliance is addressed through a cookie consent mechanism and a comprehensive privacy policy. Overall, the company demonstrates a solid market position but should urgently address its security posture to protect user data and improve trust.

ACS Vienna is a small Austrian consulting firm specializing in business growth strategies, including external growth, exit and liquidity planning, and internal growth. The company has a long-standing market presence with 25 years of experience, targeting businesses seeking growth and exit planning services. The website reflects a professional business image with clear service offerings and consistent branding. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Google Analytics, but lacks modern security features such as HTTPS, which significantly impacts its security posture. The absence of SSL/TLS encryption and security headers exposes the site to potential risks and undermines user trust. Privacy compliance is minimal, with a basic privacy policy but no cookie consent mechanism or GDPR indicators. Overall, the site demonstrates moderate business credibility but requires urgent security improvements to protect user data and enhance trust.

Ö

ÖSTU-STETTIN Hoch- und Tiefbau GmbH

oestu-stettin.at

39

ÖSTU-STETTIN Hoch- und Tiefbau GmbH is a large Austrian construction company specializing in underground and high-rise construction projects worldwide. As part of the HABAU GROUP, it offers a comprehensive range of services including mining, garage construction, general contracting, industrial construction, and tunnel building. The website is professionally designed, multilingual (German and English), and provides detailed service information targeting clients in the construction and infrastructure sectors globally. Technically, the site is built on WordPress with a mature plugin ecosystem and hosted on Azure DNS infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with a GDPR-compliant cookie consent mechanism and a comprehensive privacy policy. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are visible, though social media channels and contact forms are available. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect visitors and enhance trust.

N

Nussmüller Architekten ZT GmbH

nussmueller.at

23

Nussmüller Architekten ZT GmbH is a small Austrian architecture firm specializing in residential, educational, urban development, cultural, and commercial projects. The company has a solid regional presence with multiple awards and a professional website showcasing their portfolio and services. The website is built on WordPress and uses common web technologies such as nginx, jQuery, and FontAwesome. However, the site lacks HTTPS encryption, which is a critical security vulnerability. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a physical address and implied contact forms, with no explicit emails or phone numbers visible. Overall, the business presents itself professionally but needs to address key security and privacy gaps to improve trust and compliance.

U

Universität Klagenfurt

aau.at

37

Universität Klagenfurt is a large, well-established public university in Austria, serving as the largest academic institution in Carinthia. The website provides comprehensive information about academic programs, research initiatives, student services, and international collaborations. It targets a broad audience including prospective students, current students, researchers, staff, and alumni. The digital infrastructure is based on WordPress with a modern theme and multiple plugins supporting SEO, events, and accessibility. However, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical security vulnerability. Privacy and cookie policies are well implemented with user consent mechanisms, and the university demonstrates strong business credibility through multiple certifications and accreditations. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and ensure trust.

Gerald Binder's website is a personal blog primarily targeting German-speaking audiences interested in diverse topics such as chili recipes, media theory, travel, and quotes. The site operates on a WordPress platform with a modest but consistent content update history, positioning itself as a niche media outlet rather than a commercial enterprise. Technically, the site uses an Apache server with WordPress 5.0.22 and integrates social media plugins for Facebook and Twitter. However, the absence of HTTPS and modern security configurations significantly undermines the site's security posture. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanisms or GDPR compliance indicators. Overall, the site is functional but lacks critical security and privacy features, which poses risks to user trust and data protection.

M

MedAustron

medaustron.at

26

MedAustron is a specialized healthcare and research center based in Austria, focusing on advanced ion therapy for cancer treatment using proton and carbon ion technologies. The organization serves patients, medical professionals, and students, positioning itself as one of the few global providers of this innovative therapy. The website is professionally designed, multilingual, and provides comprehensive information about services, patient care, and research activities. Technically, the site runs on WordPress with common plugins and demonstrates good SEO and user experience, though performance metrics are unavailable. Security posture is weak due to the absence of HTTPS, no valid SSL certificate, and missing advanced security headers, which poses a critical risk. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Contact information is transparent and complete, enhancing business credibility. Overall, the site is trustworthy but requires urgent security improvements to protect user data and improve trust.

C

Choctaw Casinos & Resort

choctawcasinos.com

37

Choctaw Casinos & Resort operates a network of casino and resort properties primarily in Oklahoma, offering gaming, hospitality, live entertainment, dining, and rewards programs. The business is positioned as a regional leader with a strong brand presence and a focus on customer experience. Technically, the website is built on WordPress, hosted on WP Engine, and uses modern web technologies and third-party integrations such as Google Tag Manager and Vimeo. However, the absence of a valid SSL certificate and HTTPS support is a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Overall, the website is professionally designed and content-rich but requires urgent security improvements to meet modern standards.

A

Alicona Imaging GmbH

alicona.com

33

Alicona Imaging GmbH operates as a global provider of optical 3D metrology and surface roughness measurement solutions, specializing in non-contact measurement technologies based on Focus-Variation. The company targets manufacturing sectors such as automotive, aerospace, medical technology, and precision manufacturing, offering devices and automation solutions to enhance quality assurance and production measurement. The website reflects a mature digital presence with professional design, comprehensive content, and active engagement through blogs and events. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. The technical infrastructure leverages modern frameworks and CMS platforms, but performance issues such as slow load times need addressing. Privacy compliance is well managed with cookie consent mechanisms and clear privacy policies. Overall, Alicona demonstrates strong business credibility but must urgently improve its security posture to align with best practices and regulatory requirements.

K

Kaleidoscope GmbH

kaleidoscope.at

27

Kaleidoscope GmbH is a medium-sized technology company specializing in terminology management, quality management, translation, and documentation services. They provide a comprehensive suite of software and consulting services aimed at enabling businesses to communicate content globally in a consistent and efficient manner. Their market position is supported by long-standing client relationships and partnerships with technology providers such as Eurocom, Congram, and Greatcontent. The website is professionally designed, content-rich, and optimized for SEO, targeting companies seeking global content solutions. Technically, the site is built on WordPress with modern plugins and themes but lacks a valid SSL certificate, which is a significant security concern. The security posture is basic with several missing best practices, including HTTPS and TLS support. Privacy compliance is well addressed with cookie consent and privacy policies in place. Overall, the site is trustworthy but requires urgent security improvements.

P

PARTNER Consulting+Projects GmbH

partner-cp.com

39

PARTNER Consulting+Projects GmbH is a specialized consulting and project realization company serving cultural institutions and museums primarily in Austria and beyond. With over 30 years of experience, the company offers comprehensive services including consulting, project management, sustainability solutions, and interim management. Their market position is well-established with a strong portfolio of projects and partnerships. Technically, the website is built on WordPress with modern plugins and hosted on WP Engine with Cloudflare CDN, reflecting a mature digital infrastructure. However, the lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the business demonstrates professionalism and trustworthiness but must urgently address its SSL/TLS security to protect user data and improve trust.

B

BioEnergy Consult

bioenergyconsult.com

25

BioEnergy Consult is a specialized advisory and consulting organization focusing on biomass energy, waste-to-energy, and waste management sectors. The website serves as a rich knowledge base with extensive articles targeting professionals and organizations interested in renewable energy and environmental sustainability. The technical infrastructure is based on WordPress with common plugins for SEO and analytics, but lacks HTTPS security, which is a critical vulnerability. The site has implemented privacy and cookie policies with consent mechanisms, but lacks explicit terms of service and security policies. Overall, the site is content-rich and professionally presented but requires significant security improvements to protect users and enhance trust.

D

Design Storz GmbH

designstorz.com

35

Design Storz GmbH is a small, established Austrian design studio with over 38 years of experience specializing in automotive, product, graphic design, branding, and design strategy. The company serves international clients including major automotive brands and consumer product companies. The website is built on WordPress using popular plugins and page builders, presenting professional content and clear navigation primarily in German. However, the technical infrastructure lacks a valid SSL certificate and modern TLS protocols, exposing the site to security risks. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security or incident response policies are found. Overall, the business credibility is moderate, supported by consistent WHOIS data and a clear contact presence. The security posture is weak due to missing HTTPS and security headers, which should be addressed urgently to protect user data and improve trust.

F

feibra GmbH

feibra.at

40

feibra GmbH is a well-established Austrian company specializing in direct marketing and mailing services, including unaddressed and addressed mailings, campaign planning, and geomarketing. The company benefits from over 60 years of experience and is a subsidiary of the Österreichische Post Aktiengesellschaft, positioning it strongly in the Austrian media and marketing sector. The website targets businesses and marketing professionals seeking effective direct marketing solutions across Austria. Technically, the website is built on WordPress with a modern plugin ecosystem and SEO optimization, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with some security headers present but no active TLS protocols or certificate transparency compliance. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

F

Fusonic GmbH

fusonic.net

40

Fusonic GmbH is a medium-sized technology company based in Austria, specializing in software development and UX design with a strong regional presence in Vorarlberg. The company offers a broad range of digital services including software modernization, MVP development, service and process optimization, digital strategy consulting, data analysis, and artificial intelligence solutions. Their market position is supported by over 100 successful projects and long-term partnerships, targeting a wide audience including various industries. The website content is professionally presented with excellent design, clear navigation, and relevant business information. Technically, the site uses modern frameworks such as Symfony and Angular, and is hosted behind Amazon CloudFront CDN, but suffers from a critical lack of valid SSL/TLS configuration, which severely impacts security posture. Security headers are partially implemented, but the absence of HTTPS and TLS protocols is a major vulnerability. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, and the use of Matomo analytics reflects privacy-conscious tracking. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain credibility.

H

Hotel Restaurant Höldrichsmühle

hoeldrichsmuehle.at

23

Hotel Restaurant Höldrichsmühle is a historic hospitality business located in Hinterbrühl, Austria, offering hotel accommodation, restaurant services, seminar facilities, wedding venues, and equestrian activities. The business targets tourists, local visitors, and corporate clients seeking event spaces near Vienna. The website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and clear navigation. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. The site implements cookie consent mechanisms and displays contact information prominently, but lacks advanced security policies and incident response contacts. Overall, the business appears legitimate and well-established, but the website's security posture requires urgent improvement to meet modern standards.

D

Deisl-Beton Ges.m.b.H.

deisl-beton.at

23

Deisl-Beton Ges.m.b.H. is an Austrian company specializing in the manufacturing and distribution of concrete and related construction materials, including transport concrete, aggregates, dry spray concrete, recycling products, and natural stones. The company also provides logistics services such as fleet management and concrete pumps. The website serves as an informational portal for customers and partners, primarily targeting construction professionals and businesses within Austria. The market position appears regional with a focus on quality and service. Technically, the website is built on WordPress 6.1.7, hosted by Futureweb GmbH, and served via Apache. The site uses standard web technologies including jQuery but lacks modern performance optimizations and mobile responsiveness is basic. The absence of HTTPS and a valid SSL certificate is a significant technical and security deficiency, exposing users to risks. No advanced SEO or accessibility features are evident, and performance metrics are missing. From a security perspective, the site lacks HTTPS, HSTS, OCSP stapling, and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or terms of service policies are present, indicating poor compliance with GDPR and related regulations. Contact information is clearly provided, but no incident response or security policy details are available. The domain registration is consistent and legitimate, registered with a reputable Austrian registrar. Overall, the website presents moderate business credibility but suffers from critical security and privacy shortcomings. Strategic improvements in SSL implementation, security headers, and privacy compliance are urgently recommended to enhance trust and protect users. Technical modernization and performance optimization would also benefit user experience and SEO.

HOT Engineering GmbH operates a professional website serving the energy sector, specializing in consultancy, laboratory services, software, and training focused on underground energy storage and oil & gas field development. The company positions itself as a leading provider with a mature domain and a consistent business presence. The technical infrastructure is based on WordPress with common plugins and hosted by Hetzner, but lacks HTTPS, which is a critical security gap. The site includes cookie consent mechanisms and privacy policies compliant with GDPR, reflecting good privacy practices. However, the absence of SSL/TLS encryption significantly impacts the security posture and overall trustworthiness. Strategic improvements in security configuration are essential to protect user data and enhance credibility.

U

USound

usound.com

37

USound is a technology company specializing in MEMS speaker technology designed for integration into advanced audio devices such as TWS earbuds, headphones, AR/VR glasses, audio glasses, and hearing aids. The company positions itself as an innovator in the audio technology market, offering products with superior form factors, low power consumption, and high audio fidelity. Their website provides comprehensive product catalogs, technical documentation, and application insights targeting manufacturers and developers in the wearable and hearable device sectors. Technically, the website is built on WordPress with a modern tech stack including React, jQuery, and various plugins for enhanced user experience. However, the site lacks HTTPS, which is a critical security vulnerability. The security posture is basic with no advanced headers or SSL configuration, but no known vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance security headers.

R

redmail Logistik & Zustellservice GmbH

redmail.at

36

redmail Logistik & Zustellservice GmbH is an established Austrian media distribution and logistics service provider specializing in the delivery of print advertising such as flyers and brochures. The company operates multiple offices across Austria and offers an online booking platform for print and delivery services. Their market position is supported by recognized certifications and a professional web presence. Technically, the website is built on WordPress with common plugins and modern design elements, but suffers from a critical lack of HTTPS and proper SSL/TLS configuration, exposing users to security risks. Privacy policies and cookie consent mechanisms are in place, reflecting GDPR compliance. Overall, while the business is credible and well-presented, the security posture requires urgent improvement to protect customer data and maintain trust.

V

VIER PFOTEN International – gemeinnützige Privatstiftung

four-paws.org

36

FOUR PAWS International is a globally recognized non-profit animal welfare organization dedicated to protecting animals under human influence. The organization operates multiple country offices and campaigns worldwide, focusing on rescue missions, veterinary care, sterilization of stray animals, and advocacy against animal cruelty. Their website reflects a professional and comprehensive digital presence, targeting animal welfare supporters, donors, and volunteers. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript libraries such as Splide.js and Google Tag Manager for analytics and marketing. However, a critical security weakness is the absence of a valid SSL certificate and lack of TLS protocol support, which significantly undermines the site's security posture. Privacy and cookie policies are well implemented and GDPR compliant, enhancing user trust. Overall, the site demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

I

ICB Engineering GmbH

icb-engineering.at

19

ICB Engineering GmbH is a small Austrian engineering firm specializing in energy and process plant engineering, offering services such as pre-engineering, process design, and project management. The company emphasizes quality and environmental responsibility, holding ISO 9001 and ISO 14001 certifications. Their website is professionally designed using WordPress and common plugins, targeting industrial clients and engineering professionals. However, the absence of HTTPS is a critical security flaw that undermines trust and data protection. The site includes cookie consent mechanisms but lacks explicit privacy policy and incident response disclosures. Overall, the company presents a credible business with moderate digital maturity but requires urgent security improvements.

P

Pinzgau Webdesign

pinzgauwebdesign.at

25

Pinzgau Webdesign is a small, locally focused WordPress web design agency based in Zell am See, Austria, operated by Martin Pletzenauer since 2013. The company offers custom WordPress website development and related services primarily targeting small to medium businesses in the Pinzgau region. The website presents a professional design with clear contact information and client references, supporting its local market position. Technically, the site is built on WordPress using the Salient theme and WPBakery Page Builder, with common plugins such as Contact Form 7. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security gap. Security headers are present but cannot compensate for the missing HTTPS, exposing visitors to potential risks. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

P

Projekt Kraft

projektkraft.at

40

Projekt Kraft is a European general contractor and project management company specializing in retail, hospitality, office, and e-mobility sectors. They provide comprehensive services including planning, design, construction, and facility management with a multilingual team and multiple office locations in Austria, Germany, and Italy. The website is professionally designed with rich content and clear navigation, targeting B2B clients seeking turnkey project solutions. Technically, the site runs on WordPress with modern plugins and tracking tools but suffers from a critical security issue due to the lack of a valid SSL certificate, impacting its security posture significantly. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the business demonstrates strong credibility and market presence but should urgently address SSL and TLS configuration to improve security and trust.

P

pbbr | Sociedade de Advogados RL, Lda.

pbbr.pt

40

pbbr | Sociedade de Advogados RL, Lda. is a small full service law firm based in Lisbon, Portugal, established in 2006. The firm offers comprehensive legal advice and assistance with a national and international client base. Their website reflects a professional and consistent brand image, targeting clients seeking high-quality legal services. The firm maintains a presence on LinkedIn and provides newsletter subscriptions to engage clients and partners. Technically, the website uses a modern tech stack including nginx, PHP, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile optimized and SEO friendly, though performance metrics are unavailable. Hosting is managed via host-redirect.com DNS servers. However, the website lacks a valid SSL certificate, resulting in no proper HTTPS support, which is a significant security concern. Security posture is moderate with good use of security headers and content security policies, but the absence of valid SSL/TLS and modern TLS protocols severely undermines security. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Contact information is limited to forms, with no explicit emails or phone numbers displayed. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trustworthiness. Strategic improvements in security and contact transparency will enhance the firm's digital maturity and client confidence.

E

Efumo

efumo.lv

40

Efumo is a Latvian-based IT services company specializing in the development and maintenance of internet shops, websites, mobile applications, and IT systems. The company targets businesses seeking modern, responsive, and integrated digital solutions. Their market position is that of a small but established regional player with a portfolio of notable clients and a professional online presence. Technically, the website is built on WordPress with Yoast SEO, uses modern web technologies, and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS, secure cookies, and several security headers, but lacks full HSTS enforcement and email security measures like DMARC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security policy transparency.

T

Toode

toode.ee

40

Toode AS is an established Estonian company specializing in roofing materials, rainwater systems, and roofing accessories, with a history dating back to 1991. The company serves the Baltic region with a medium-sized business model that includes manufacturing, retail, and e-commerce components. Their website reflects a consistent brand presence and targets customers seeking quality roofing solutions. Technically, the site is built on WordPress with a variety of plugins and third-party integrations, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, lack of security headers, and no advanced TLS configurations. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but could be enhanced. Overall, the domain and WHOIS data confirm the legitimacy and maturity of the business. Strategic improvements in security and performance are recommended to enhance trust and compliance.

Z

ZAAO

zaao.lv

36

ZAAO is a Latvian waste management company providing comprehensive services including collection, sorting, transportation, and disposal of various waste types in an environmentally friendly manner. The company targets private individuals, businesses, farmers, and public event organizers within its regional operational area. The website reflects a medium-sized enterprise with a clear business model focused on waste management and recycling services. Technically, the site is built on WordPress with Elementor, hosted on Google Cloud infrastructure, and uses modern web technologies and analytics tools. However, the absence of a valid SSL certificate significantly impacts the security posture, exposing users to potential risks. While cookie consent and privacy policies are well implemented, the lack of HTTPS and security headers are critical vulnerabilities. Overall, the domain registration is consistent and trustworthy, but security improvements are urgently needed to protect user data and enhance trust.

U

UVdata A/S

uvdata.dk

37

UVdata A/S is a Danish software company specializing in providing comprehensive software solutions for private and free schools, afterschools, and educational institutions in Denmark. Their product portfolio includes school management systems, payroll solutions, guidance software, and time management tools, positioning them as a key player in the Danish education technology sector. The company operates under the parent company KMD, enhancing its market credibility and reach. The website content is well-structured, primarily in Danish, and targets educational institutions with relevant services and support information. Technically, the website is built on WordPress using the Avada theme and integrates several JavaScript libraries and plugins, including Matomo for analytics. However, the site suffers from performance issues with slow load times and a large number of resources. Security-wise, the website lacks a valid SSL certificate, serving content without HTTPS, which is a critical vulnerability. Additionally, it lacks essential security headers and advanced SSL features such as HSTS and OCSP stapling. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism, aligning with GDPR requirements. Overall, while the business and content aspects are strong and credible, the technical and security posture require significant improvements to ensure user trust and data protection.

C

Certified Senders Alliance

certified-senders.org

56

Certified Senders Alliance (CSA) is a technology-focused organization operating as a central whitelisting authority for commercial email senders and mailbox providers. Their primary mission is to improve the quality and deliverability of commercial emails such as newsletters, invoices, and order confirmations, while protecting recipients from spam and abuse. CSA offers certification services, monitoring tools, and data insights to help email service providers and senders maintain high reputation and compliance standards. The organization is positioned as a trusted intermediary in the email marketing ecosystem, supported by testimonials from major industry players and operated under the eco Association of the Internet Industry in Germany. Technically, the website is built on WordPress with common web technologies including Bootstrap, jQuery, and Font Awesome. It uses plugins for cookie consent (Borlabs Cookie) and bot protection (hCaptcha). However, the site suffers from a lack of a valid SSL certificate and does not support modern TLS protocols, which is a critical security shortfall. Performance is suboptimal with a slow page load time and a large page size, though mobile optimization and SEO practices are generally good. From a security perspective, the site implements DMARC with reporting and provides abuse contact emails, indicating some level of incident response readiness. However, the absence of HTTPS, security headers, and OCSP stapling significantly weakens the security posture. No explicit security policy or vulnerability disclosure mechanism is found. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, while the business credibility and content quality are strong, the technical and security implementations require urgent improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS, adding security headers, and optimizing site performance.

C

Convesio

convesio.nl

40

Convesio.nl is a specialized managed WordPress hosting provider focused on delivering scalable, high-performance hosting solutions using innovative Docker container technology. The company targets business-critical WordPress websites including WooCommerce shops, membership sites, and e-learning platforms, emphasizing automatic scaling, speed, and security. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site leverages modern web technologies including WordPress CMS, GeneratePress theme, and integrates with Google and Amazon cloud platforms. Security posture is adequate with HTTPS and TLS 1.3 support, but lacks advanced configurations such as HSTS, DMARC, and OCSP stapling, which are recommended for improvement. Privacy compliance is strong with a comprehensive cookie policy and GDPR consent mechanisms. Overall, the site presents a credible and trustworthy business with room for security enhancements.

R

Rhubarb Tech Inc.

objectcache.pro

65

Object Cache Pro is a specialized technology company providing a high-performance Redis object cache backend tailored for WordPress users. The company positions itself as a premium service provider with dedicated engineering support and a subscription-based business model. Their website reflects a mature and professional presence with strong endorsements from notable hosting partners, indicating a solid market position within the WordPress hosting and performance optimization niche. Technically, the website is built on WordPress and integrates modern tools such as Intercom for customer engagement and Google Analytics for tracking. However, the site suffers from a critical security flaw due to the absence of a valid SSL certificate, which undermines the security posture and user trust. While privacy policies are present, cookie consent mechanisms are lacking, which may pose compliance risks. Overall, the business appears credible and well-established, but immediate attention to SSL and privacy compliance is recommended.

M

MD non public school coalition organization

marylandboost.org

30

Maryland BOOST Scholarship Coalition is a small non-profit organization advocating for and supporting the Maryland BOOST scholarship program, which provides educational options to income-eligible children in Maryland. The website serves as an informational and advocacy platform targeting parents, educators, and concerned citizens in Maryland. It promotes scholarship applications and encourages legislative support. Technically, the site is built on WordPress using the Astra theme, with common analytics and tracking tools such as Google Analytics and Facebook Pixel. However, the site suffers from a lack of HTTPS/SSL configuration, resulting in a poor security posture. There are no privacy or cookie policies present, and security best practices such as security headers and DMARC are missing. Overall, the site is functional with good content quality and user experience but requires significant improvements in security and privacy compliance to enhance trust and protect users.

C

Cass County Memorial Hospital

casshealth.org

47

Cass Health is a mature healthcare provider organization based in the United States, specifically serving southwest Iowa. The website reflects a medium-sized rural hospital with a strong community focus, offering a wide range of medical services including specialty clinics, obstetrics, and rapid care. The organization is well-established with a domain age of 26 years and multiple awards that reinforce its market position and trustworthiness. Technically, the website is built on WordPress with modern front-end frameworks and integrates third-party services such as Algolia for search and Google Tag Manager for analytics. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security gap. Privacy and cookie policies are not found, indicating potential compliance issues. The site includes contact information and social media links, supporting user engagement but lacks explicit security or incident response policies. Overall, while the business and content quality are strong, the security posture and privacy compliance require urgent improvements to protect user data and enhance trust.

Polaria is a well-established Arctic experience center located in Tromsø, Norway, with a strong focus on education, sustainability, and family-friendly tourism. The organization operates a physical center featuring aquariums, seal exhibits, guided tours, and a panoramic cinema, supported by ticket sales and an online store. The website is built on WordPress, hosted on WP Engine with Google Cloud infrastructure, and uses modern web technologies including multilingual support via Weglot. While the site content and business information are comprehensive and professionally presented, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing visitors to potential risks. Privacy policies are present but cookie consent mechanisms are lacking, indicating partial compliance with GDPR requirements. The domain is mature and legitimate, with consistent WHOIS data and multiple certifications that reinforce trust. Strategic improvements in security and privacy compliance are recommended to enhance overall risk posture and user trust.

F

Framsenteret Drift AS

framforum.com

40

Framforum is a specialized online publication operated by Framsenteret Drift AS, focusing on climate, environment, and people in the High North, particularly the Arctic region. The website serves as a communication platform for research notes, profiles, retrospectives, and editorials related to Arctic environmental research, targeting researchers, journalists, and interested public. The business operates as a non-profit entity with a clear affiliation to the Fram Centre, a recognized research center in Norway. Technically, the website is built on WordPress, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts, with Matomo and Google Tag Manager for analytics. However, the site suffers from a critical security shortfall: it lacks a valid SSL certificate and does not serve content over HTTPS, which undermines user trust and data security. While HSTS is enabled, it is ineffective without proper SSL/TLS configuration. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is clearly provided, enhancing business credibility. Overall, the site is content-rich and professionally designed but requires urgent security improvements to protect users and enhance trust.

S

Su Presencia Radio

supresenciaradio.com

40

Su Presencia Radio is a Spanish-language media company operating a niche radio station focused on musical and informative content. The website offers multiple programs targeting youth, families, entrepreneurs, and health-conscious audiences. The company maintains an active digital presence with streaming, podcasts, and social media channels. Technically, the site is built on WordPress using the Avada theme and several popular plugins, hosted likely on Amazon infrastructure. However, the site lacks a valid SSL certificate, which severely impacts security and user trust. Privacy compliance is minimal, with no cookie consent mechanisms detected, and only a basic privacy policy available. Contact information is clearly provided, supporting business credibility. Overall, the site is functional and content-rich but requires urgent security and privacy improvements to meet modern standards.

H

Hopscotch Groupe

hopscotchgroupe.com

49

Hopscotch Groupe is a French communication agency specializing in creative communication and relational capital services. The company targets businesses seeking expertise in public relations, event management, and specialized agency services. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress and uses common web technologies such as jQuery, Mapbox, and Google Tag Manager. However, the site lacks HTTPS, which is a critical security vulnerability. Security headers are minimal, and no advanced security frameworks or incident response policies are evident. Privacy compliance is supported by comprehensive privacy and cookie policies with consent mechanisms. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

T

The Nansen Legacy

arvenetternansen.com

59

The Nansen Legacy website represents a collaborative Arctic research project focused on the Barents Sea and related environmental studies. It serves as an information portal for research activities, team members, publications, and events. The project is supported by multiple Norwegian academic and governmental institutions, indicating a strong presence in the education and research sector. The website targets researchers, early career scientists, and stakeholders interested in Arctic science. Technically, the site is built on WordPress with Elementor and hosted on WordPress.com infrastructure. While the site uses HTTPS and modern web technologies, its performance is slow with a high number of resources loaded. Accessibility and SEO are basic to good, but there is room for improvement in security headers and advanced SSL configurations. Security posture is moderate with valid SSL but lacking HSTS and OCSP stapling. No explicit privacy or cookie policies were found, which is a compliance gap especially under GDPR. Contact information is limited to an email address, with no phone numbers or detailed business registration data visible. Social media presence is active on major platforms. Overall, the site is a credible academic project portal but would benefit from enhanced privacy compliance, improved security headers, and performance optimizations to strengthen trust and user experience.

Roofer North London is a small local roofing service provider specializing in residential and commercial roofing solutions in North London and surrounding areas. Their services include roof repairs, new roof installations, chimney repairs, and maintenance. The website is built on WordPress and uses standard SEO tools but suffers from slow performance and lacks a valid SSL certificate, resulting in no HTTPS support. Contact information is clearly provided, including phone numbers, email, and a physical address. Social media presence is established on Instagram, Facebook, and Twitter. Security posture is weak due to missing SSL, lack of security headers, and absence of privacy and cookie policies. Overall, the website is professional in content and design but requires significant security improvements to protect users and enhance trust.

S

Scholas Occurrentes

scholasoccurrentes.org

39

Scholas Occurrentes is an international non-profit organization founded in 2013 by Pope Francisco, focused on transforming education and promoting social inclusion through various programs involving youth, educators, and institutions worldwide. The organization operates globally with a presence in 70 countries and over 2.5 million participants, leveraging donations and volunteer support to sustain its initiatives. The website reflects a well-structured digital presence with multilingual support and integration of donation platforms, social media, and analytics tools. However, the technical infrastructure shows critical security gaps, notably the absence of a valid SSL certificate and HTTPS, lack of security headers, and no cookie consent mechanism despite active tracking. These issues expose the site to risks and reduce user trust. The domain registration is mature and privacy-protected, consistent with the organization's profile, but obscures registrant details. Strategic improvements in security posture and privacy compliance are essential to enhance trust and protect user data.

S

Shaftesbury (operating name of Livability)

livability.org.uk

20

Shaftesbury, operating under the charity Livability, is a well-established UK-based non-profit organization focused on providing disability support services including care, education, and rehabilitation. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple trust indicators such as certifications and social media presence. Technically, the site is built on WordPress with a modern tech stack but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. The absence of HTTPS impacts user trust and security posture significantly. Privacy and cookie policies are present and indicate good compliance with GDPR standards. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and enhance trust.

S

Statamic, LLC

statamic.com

60

Statamic, LLC operates a mature and well-established CMS platform focused on delivering a modern, developer-friendly content management system built on Laravel. The company targets developers and teams seeking an alternative to traditional CMS platforms, offering a rich ecosystem of addons, starter kits, and a partner network. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the site leverages modern front-end technologies such as Tailwind CSS and Alpine.js, and integrates services like Stripe and Google reCAPTCHA. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of HTTPS enforcement, which severely impacts its security posture. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks cookie consent mechanisms. Overall, the business credibility is strong, supported by customer testimonials and a vibrant community presence.

M

MakeCommerce

makecommerce.lt

40

MakeCommerce is a leading payment solutions provider for e-commerce businesses in the Baltic region, trusted by over 6,000 merchants. The company offers a comprehensive suite of payment services including card payments, bank link payments, recurring payments, POS terminals, and financing options. Their business model focuses on enabling seamless payment processing for online and physical stores, supported by a well-developed API and integration modules for popular e-commerce platforms. The website reflects a mature and professional digital presence with consistent branding and detailed service information. Technically, the website is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, testimonial management, and advanced sliders. However, the site suffers from poor performance with a high load time and a large number of resources. Mobile optimization is good, but accessibility features are basic. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. Other security best practices such as HSTS, OCSP stapling, and modern TLS protocols are not implemented. DNS security features like DNSSEC and CAA records are also missing. The domain registration is consistent and mature, but the absence of domain protection locks is a minor concern. Overall, while the business and website content are strong and trustworthy, the security posture is weak due to missing HTTPS and related configurations. This poses a significant risk to user data and trust. Strategic improvements in SSL/TLS deployment and performance optimization are recommended to enhance security and user experience.

M

MakeCommerce

makecommerce.lv

40

MakeCommerce is a leading e-commerce payment service provider in the Baltic region, trusted by over 6500 clients. The company offers a comprehensive suite of payment and delivery solutions including internet banking payments, card payments, Apple Pay, Google Pay, POS terminals, and delivery integrations with major logistics providers. Their business model focuses on simplifying payment acceptance for online and physical stores with a single integration. The website targets e-commerce businesses in Latvia and neighboring countries, positioning itself as a reliable and customer-focused partner.

M

Maksekeskus AS

makecommerce.net

47

MakeCommerce is a leading payment solutions provider focused on the Baltic e-commerce market, serving over 6,000 merchants with a comprehensive suite of payment and delivery integration services. The company offers a broad range of payment methods including bank payments, card payments, buy now pay later options, and POS terminals, positioning itself as a key player in the regional e-commerce ecosystem. The website reflects a mature digital presence with professional design, multilingual support, and developer resources facilitating integration with popular e-commerce platforms. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. While privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy, the technical security posture requires urgent improvement. Overall, the business appears legitimate and well-established, but the security shortcomings pose a significant risk that should be remediated promptly.

M

Mittwald CM Service GmbH & Co. KG

agenturserver.it

40

Mittwald CM Service GmbH & Co. KG operates a professional hosting platform targeting web agencies and freelancers, offering managed hosting, vServer, CMS and shop hosting solutions, and related services. The company is well-established with over 20 years of experience and operates its own TÜV-certified data center in Germany. The website reflects a mature business with a strong market position in the German hosting sector, emphasizing performance, security, and customer support. Technically, the site uses modern frameworks such as Flow and Neos CMS, with a focus on responsive design and accessibility. Security posture is solid with multiple security headers and a valid SSL certificate, though improvements like enabling HSTS preload and OCSP stapling are recommended. Privacy compliance is well addressed with GDPR-compliant cookie and privacy policies. Overall, the website and business demonstrate high professionalism and trustworthiness.

M

Mittwald CM Service GmbH & Co. KG

agenturserver.co

40

Mittwald CM Service GmbH & Co. KG operates a professional hosting platform targeting web agencies and freelancers, offering managed webhosting, vServers, CMS and shop hosting solutions, SSL certificates, domain services, and a proprietary management platform called mStudio. The company is well-established with a domain age of 6 years and operates from Germany with a TÜV certified ISO 27001 data center. The website demonstrates a mature digital presence with excellent design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern frameworks including Flow PHP and Neos CMS, supports TLS 1.3, and implements strong security headers and a detailed Content Security Policy. Privacy compliance is robust with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. The domain registration data aligns well with the business identity, though domain expiry is imminent and domain protection locks are absent, representing a moderate risk. Overall, the security posture is strong with no detected vulnerabilities, but improvements such as enabling DNSSEC, DMARC, and OCSP stapling are recommended to enhance security further.

I

IILA - ORGANIZZAZIONE INTERNAZIONALE ITALO-LATINO AMERICANA

iila-economia-circolare-citta-verdi.it

37

The website represents the Foro Permanente Economia Circolare e Città Verdi project under the IILA organization, focusing on circular economy and sustainable urban development between Italy and Latin America. The site provides information, best practices, and project updates targeting stakeholders interested in environmental sustainability and green city initiatives. Technically, the site is built on WordPress with common plugins and frameworks, hosted on SiteGround, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security posture. The security configuration is basic, missing key headers and DNS/email protections, though no active vulnerabilities were detected. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is moderately professional and trustworthy but requires urgent security improvements, especially enabling HTTPS and enhancing security headers. Strategic recommendations include SSL deployment, security header implementation, and DNS/email security enhancements to improve trust and compliance.

C

Copolad

copolad.eu

40

Copolad is a government and non-profit cooperation program focused on drug policy collaboration between Latin America, the Caribbean, and the European Union. The website serves as an information portal offering news, publications, training, and event details to stakeholders involved in drug policy. The business model is based on international cooperation funded by the EU and partner organizations, positioning Copolad as a reputable program in its sector. Technically, the website is built on WordPress with multiple plugins and frameworks including WP Rocket, WPML for multilingual support, and various marketing and analytics tools such as Google Analytics and Mailchimp. The site is hosted by Arsys Internet S.L.U. but suffers from slow load times and lacks a valid SSL certificate, which impacts security and user trust. From a security perspective, the absence of a valid SSL certificate is a critical vulnerability, exposing users to potential data interception. No security headers or incident response policies are evident, indicating room for significant improvement in security posture. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, while the website provides valuable content and maintains good business credibility, the lack of HTTPS and security best practices lowers its security score and user trust. Strategic improvements in SSL deployment, security headers, and incident response readiness are recommended to enhance the site's security and compliance standing.