Security Directory

P

Plato's Closet

platosclosetdurham.com

40

Plato's Closet operates a large franchise retail business specializing in buying and selling gently used name brand clothes, shoes, and accessories targeting teens and young adults. The company is positioned as the largest chain in its niche with over 500 locations across North America, emphasizing sustainability and affordability. The website is built on the BigCommerce platform, leveraging modern e-commerce technologies and marketing tools such as Google Analytics 4 and TikTok Pixel. While the site demonstrates good content quality, accessibility, and privacy compliance, it lacks a valid SSL certificate, severely impacting its security posture. Security headers are partially implemented, but the absence of HTTPS is a critical vulnerability. The domain is mature and registered consistently with the business claims, supporting legitimacy. Strategic improvements in SSL deployment and enhanced security practices are recommended to strengthen trust and compliance.

S

STRG

strg.at

37

STRG is a well-established Austrian technology and research company specializing in custom software solutions, AI research, and digital transformation services. With over 20 years of experience, STRG offers a modular approach to software development, integrating AI and sustainability principles to optimize business processes across various industries including manufacturing, healthcare, finance, and media. The company maintains a strong market position supported by client testimonials, case studies, and industry partnerships. Technically, the website is built on WordPress with Elementor and employs modern web technologies and performance optimizations. However, the absence of a valid SSL certificate and HTTPS configuration is a critical security gap that undermines user trust and data protection. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, STRG demonstrates a mature digital presence but must urgently address its SSL/TLS security to enhance its security posture and trustworthiness.

V

Vaillant Group Austria GmbH

vaillant.at

40

Vaillant Group Austria GmbH operates a comprehensive website focused on heating solutions including heat pumps, gas heating, photovoltaic systems, and smart home technologies targeted at private customers in Austria. The company is a well-established player with over 150 years of history and a dense service network, positioning itself as a market leader in the energy sector. The website provides detailed product information, customer testimonials, and service offerings, reflecting a mature business model with strong customer engagement. Technically, the site uses modern JavaScript libraries and marketing tools such as Optimizely and Google Tag Manager, with good mobile optimization and SEO practices. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are well implemented, but the lack of TLS protocols and OCSP stapling reduces the overall security posture. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

E

eMAGNETIX Online Marketing GmbH

emagnetix.at

26

eMAGNETIX Online Marketing GmbH is a well-established digital marketing agency based in Austria, specializing in tailored online marketing solutions including SEO, performance advertising, content marketing, and data analytics. With over 15 years of experience and a strong client base including tourism sector businesses, the company holds premium partnerships with major platforms such as Google, Microsoft, and Meta, reinforcing its market position. The website reflects a professional and consistent brand image with comprehensive service offerings and clear contact channels. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business demonstrates strong credibility and digital maturity but must urgently address its SSL/TLS configuration to ensure secure user interactions and maintain trust.

A

ACN Opportunity, LLC

myacn.com

40

ACN Opportunity, LLC operates a mature and established website offering essential services such as internet, energy, and wireless, combined with a home-based business opportunity model. The company targets individuals interested in essential services and entrepreneurial ventures, positioning itself as a trusted provider with strong industry memberships and a broad social media presence. Technically, the website leverages modern frontend technologies including Joomla CMS, Bootstrap, jQuery, and Swiper.js, hosted on AWS infrastructure with CloudFront CDN. The site is mobile optimized and SEO friendly, though performance metrics are unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS enforcement, despite the presence of several security headers. Privacy compliance is strong with comprehensive policies and a OneTrust cookie consent mechanism. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and enhance trust.

S

StreamUnlimited Engineering GmbH

streamunlimited.com

25

StreamUnlimited Engineering GmbH is a medium-sized technology company based in Austria, specializing in system integration for connected audio, Matter, IoT, and voice assistant technologies. The company offers a comprehensive portfolio of software and hardware solutions, including StreamSDK, StreamAnalytics, Stream2Go, and StreamAMP, targeting brands and ODMs seeking advanced embedded products. With over 120 professionals and a global reach, StreamUnlimited positions itself as a reliable partner for audio streaming and IoT product development. The website is professionally designed, well-structured, and provides detailed information about products, services, and company values. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. The site includes GDPR-compliant privacy and cookie policies with consent mechanisms, reflecting good privacy practices. Overall, the company demonstrates strong business credibility and digital maturity but must urgently address its security posture to ensure safe and trusted user interactions.

P

ProSiebenSat.1 PULS 4

atv.at

37

ATV.at is the official website of the Austrian TV channel ATV, operated under the parent company ProSiebenSat.1 PULS 4. The site offers streaming of live TV, video on demand, and detailed program guides, targeting German-speaking audiences interested in entertainment and reality TV. The business model is primarily advertising-driven, leveraging partnerships with streaming platforms like JOYN to deliver content. The website demonstrates a high level of digital maturity with modern web technologies such as React and Next.js, providing a responsive and user-friendly experience across devices. However, the site currently lacks a valid SSL certificate, which is a critical security gap. While privacy and legal policies are comprehensive and GDPR compliant, the absence of HTTPS and security headers reduces the overall security posture. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in SSL implementation and security headers are recommended to enhance user trust and compliance.

I

Incentage AG

incentage.com

25

Incentage AG is a Swiss-based software company specializing in innovative financial technology solutions for banking and financial institutions. Their offerings include modular platforms for payment processing, securities transactions, innovation acceleration, and risk management with cyber protection. The company positions itself as a pioneer in accelerating financial innovation with a focus on flexibility and end-to-end security. The website reflects a professional and consistent brand image targeting financial sector clients. Technically, the site uses modern web technologies including Webflow CMS, jQuery, Weglot for translations, and Google Tag Manager for analytics. Hosting is via Cloudflare, but a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy, though no explicit security policy or incident response contacts are found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in SSL/TLS deployment and enhanced security practices are recommended to strengthen trust and compliance.

S

St. Anna Kinderspital

stanna.at

29

St. Anna Kinderspital is a well-established pediatric hospital located in Vienna, Austria, providing comprehensive medical care for children and adolescents. The website reflects a strong commitment to patient care and family support, offering detailed information about medical departments, services, and patient guidance. The institution operates as a non-profit entity supported by donations, with clear calls to action for donations and career opportunities. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie management, but lacks HTTPS which is a critical security shortfall. Security headers are partially implemented, but the absence of SSL/TLS and modern TLS protocols significantly weakens the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but urgently needs to implement HTTPS to protect user data and improve security.

RHI Magnesita is a global leader in the refractory industry, providing high-grade refractory products, systems, and services primarily for steel, cement, glass, and non-ferrous metals industries. The company emphasizes sustainability and innovation, targeting industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, structured data, and multi-language support. Technically, the site is built on WordPress with modern plugins and libraries, but suffers from critical security shortcomings due to an invalid SSL certificate and lack of HTTPS enforcement. Security headers are present but insufficient without proper TLS. Privacy compliance is well addressed with Cookiebot consent management and a detailed privacy policy. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security posture and user trust.

B

Bauer Media Group

bauermedia.co.uk

26

Bauer Media Group is a well-established UK-based media company operating across multiple sectors including audio broadcasting, publishing, and advertising services. The company targets a broad UK adult audience and maintains a strong market position with a portfolio of iconic brands. The website reflects a mature digital presence with comprehensive content, structured data, and good SEO practices. However, the technical infrastructure shows critical security gaps, notably the absence of a valid SSL/TLS certificate and lack of HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed through external policies and a consent management platform. Overall, the business credibility is strong, but the security weaknesses pose risks that should be urgently addressed.

P

Pankl SHW Industries AG

pankl.com

40

Pankl SHW Industries AG operates as a leading Austrian manufacturing group specializing in high-technology mechanical systems for niche markets including motorsport, luxury automotive, and aerospace. The company is majority-owned by Pierer Industrie AG and maintains a strong international presence with 21 locations and over 4,200 employees. Their product portfolio spans engine and turbo systems, drivetrain components, forged parts, aerospace components, and advanced powder metallurgy products. The website reflects a professional corporate identity with comprehensive content and clear navigation, targeting industrial clients and partners. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens the security posture, exposing users to potential risks. Privacy and cookie policies are well implemented, indicating GDPR compliance. The domain registration is mature and consistent with the business claims, enhancing trustworthiness. Strategic security improvements are recommended to elevate the site's protection and user trust.

H

Hypo Tirol Bank AG

hypotirol.com

40

Hypo Tirol Bank AG operates as a digital regional bank in Austria, primarily serving private and corporate clients in Tirol and Vienna. The website presents a comprehensive portfolio of banking products including accounts, cards, savings, investments, loans, and insurance services. The bank emphasizes personal service combined with digital convenience, targeting a broad customer base from individuals to public institutions. The site is professionally designed with clear navigation and localized German content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates marketing and tracking tools such as Google Tag Manager and Adrom.net. However, the website currently lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security vulnerability. Other security best practices such as security headers and HSTS are also missing. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and an active consent mechanism. Overall, while the business and content aspects are strong, the security posture requires urgent improvement to protect user data and maintain trust.

TDK Corporation is a leading global manufacturer of electronic components and devices, specializing in high magnetics technology. The company maintains a strong market position with a comprehensive corporate website offering detailed information on its business, sustainability efforts, investor relations, and career opportunities. The website is professionally designed, multilingual, and targets investors, customers, and job seekers worldwide. Technically, the site is built on Drupal CMS with modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Security posture is weak due to missing HTTPS and security headers, though privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

V

VTU Top GmbH

vtu.com

34

VTU Top GmbH is a medium-sized Austrian engineering company specializing in the planning and implementation of modern, sustainable process plants primarily serving the Life Sciences, Chemistry, and Process Industry sectors. The company offers a broad range of services including general planning (EPCMv), process engineering, electrical engineering, automation, GMP services, and manufacturing science & technology. The website is built on TYPO3 CMS with modern frontend technologies and provides comprehensive business and contact information, including a contact form and social media presence on LinkedIn. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy and cookie policies are well implemented with a consent mechanism, reflecting good GDPR compliance. Overall, the website presents a professional image but requires urgent security improvements to protect user data and enhance trust.

P

PageGroup

page.com

40

PageGroup is a well-established global recruitment consultancy operating since 1976 with a strong market position and multiple specialist brands. The website reflects a professional corporate presence with comprehensive content targeting job seekers, employers, and investors. Technically, the site uses a mature Drupal CMS platform with modern front-end libraries and integrates multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which critically impact secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy but requires urgent security improvements to protect user data and maintain credibility.

S

Sprecher Automation GmbH

sprecher-automation.com

40

Sprecher Automation GmbH is a medium-sized Austrian company specializing in manufacturing and providing products and solutions for energy supply, industrial automation, and infrastructure technology. The company focuses on making critical infrastructures safer and optimizing complex energy and industrial processes. Their website reflects a professional and consistent brand presence with comprehensive content targeting energy, industry, infrastructure, and IT security sectors. The company maintains active communication channels including a customer portal, support, and career opportunities, indicating a mature business operation. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frontend libraries such as Font Awesome and Swiper.js, and integrates analytics tools like Matomo and Google Analytics. The site is mobile-optimized with good navigation and SEO practices. However, performance metrics are unavailable, and accessibility is basic. From a security perspective, the website lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability. Although several security headers and a content security policy are implemented, the absence of TLS protocols and session resumption mechanisms significantly weakens the security posture. Privacy and cookie policies are present and GDPR compliant, but incident response and vulnerability disclosure information are missing. Overall, the website presents a trustworthy and professional business front but requires urgent improvements in SSL/TLS implementation to secure user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and publishing clear security and incident response policies.

L

Language Services Associates (LSA)

lsaweb.com

40

Language Services Associates (LSA) is a mature and established provider of interpretation and translation services, operating for over 25 years. The company offers a broad range of language services including onsite, video remote, over the phone, telehealth, and AI-enhanced translation solutions. Their market position is strong, serving diverse industries such as healthcare, government, and insurance, with a large network of qualified linguists. Technically, the website is built on WordPress with modern plugins and hosted on WP Engine behind Cloudflare, showing good digital maturity and SEO optimization. However, the security posture is weakened by an invalid SSL certificate and lack of cookie consent mechanisms, which are critical for trust and compliance. Overall, the website is professional and trustworthy but requires urgent security improvements to enhance user trust and regulatory compliance.

L

Leica Microsystems

leica-microsystems.com

40

Leica Microsystems is a well-established global leader in microscopy and imaging solutions, serving diverse sectors including life sciences, industrial manufacturing, medical specialties, and education. The company offers a broad portfolio of products ranging from light and confocal microscopes to software and consumables, supported by comprehensive service and application support. The website reflects a mature digital presence with rich, professional content and consistent branding, targeting scientific and industrial professionals worldwide. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the current lack of a valid SSL certificate and absence of HTTPS significantly undermines the security posture, despite the presence of several security headers and policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. WHOIS data confirms the domain's maturity and legitimacy, registered under Network Solutions without privacy protection, consistent with the company's profile. Strategic improvements in SSL/TLS configuration and enhanced security practices are recommended to elevate trust and protect user data.

CERATIZIT S.A. is a leading high-technology engineering group specializing in cutting tools and hard material solutions, serving industrial and manufacturing sectors globally. The company is part of the Plansee Group and maintains a strong market position supported by innovation, patents, and sustainability certifications such as the EcoVadis Gold Rating. The website reflects a professional and well-branded digital presence with comprehensive content and multilingual support. Technically, the site uses modern frameworks including Next.js and Adobe Experience Manager, supported by Akamai CDN for content delivery. However, the security posture is currently weak due to the absence of a valid SSL certificate and HTTPS support, exposing the site to potential risks. Privacy and legal compliance are well addressed with clear policies and consent mechanisms. Overall, CERATIZIT demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS security to protect users and enhance trust.

I

incadea GmbH

incadea.com

40

incadea GmbH is a well-established German company founded in 2000, specializing in innovative cloud-based software solutions for the automotive retail and wholesale sectors. The company supports over 4,000 dealerships globally, leveraging Microsoft Dynamics 365 Business Central and maintaining strong partnerships with leading OEMs and Microsoft. Their offerings include dealer management systems for passenger cars and commercial vehicles, importer management solutions, and professional services such as consultancy and training. Technically, the website is built on Umbraco CMS with modern JavaScript libraries like jQuery and Swiper.js, hosted on Azure DNS infrastructure. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance efforts. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

S

SIWA Online GmbH

siwa.at

38

SIWA Online GmbH is a medium-sized Austrian digital agency specializing in web, app, and e-commerce solutions. The company emphasizes consulting, design, development, and ongoing support services, positioning itself as a trusted partner with ISO 27001 certification. Their market presence is supported by multiple client testimonials and a professional online presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and hosted on AWS CloudFront, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines secure communications. The site implements strong security headers and content policies but lacks full TLS protocol support and HSTS enforcement. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business demonstrates strong credibility and professionalism but must urgently address SSL/TLS issues to improve security posture and trust.

I

Interlingua Language Services ILS GmbH

interlingua.at

31

Interlingua Language Services ILS GmbH is a professional translation service provider based in Vienna, Austria, offering certified language services in over 90 languages. The company holds ISO certifications (EN ISO 17100 and EN ISO 9001:2015), positioning itself as a reliable and quality-focused player in the language services market. Their website is content-rich, professionally designed, and targets both business and private customers seeking translation, localization, and related services. Technically, the website is built on WordPress with modern plugins and multilingual support, but suffers from a critical lack of a valid SSL certificate, which undermines its security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the business demonstrates strong credibility through certifications, testimonials, and clear contact information.

M

MM Group

mm-karton.com

40

MM Group is a global leader in consumer packaging, specializing in cartonboard, folding cartons, kraft papers, uncoated fine papers, leaflets, and labels. The company targets businesses in the packaging and manufacturing sectors, emphasizing sustainability and innovation. Their website reflects a mature digital presence with multilingual support, comprehensive business information, and investor relations transparency. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and consent management tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS support, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security.

V

VAMED WWH

vamed.com

37

VAMED WWH is a globally recognized provider of modern hospital solutions, specializing in turnkey projects that encompass design, construction, medical equipment supply, and operational support for healthcare facilities. The company has a strong international presence with a portfolio of approximately 1,000 projects across more than 98 countries, serving government health ministries and healthcare providers. The website reflects a professional and comprehensive presentation of their services and project achievements, targeting healthcare infrastructure stakeholders worldwide. Technically, the site is built on WordPress with Elementor and related plugins, offering good mobile optimization and accessibility but suffers from the critical absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the site's security posture and user trust. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the business credibility and content quality are high, but the lack of HTTPS is a major security concern that needs immediate remediation.

A

Axians ICT Austria GmbH

axians.at

40

Axians ICT Austria GmbH is a well-established IT service provider in Austria, offering a broad range of IT solutions including cloud services, cyber security, enterprise networks, and SAP consulting. The company targets business customers across various industries and emphasizes a human-centric approach to technology. Technically, the website is built on WordPress with modern libraries and integrates analytics and marketing tools such as Matomo and HubSpot. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and lack of HTTPS support, which significantly impacts its security posture. Privacy compliance is strong, with comprehensive policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent improvements in its SSL/TLS configuration to enhance security and user trust.

R

Rosendahl Nextrom GmbH

rosendahlnextrom.com

39

Rosendahl Nextrom GmbH is a well-established global leader in production technologies serving the battery, cable & wire, and optical fiber industries. The company offers sophisticated manufacturing equipment and tailor-made solutions, targeting industrial manufacturers worldwide. The website reflects a mature business with a professional digital presence, including multi-language support and structured data for SEO. Technically, the site uses WordPress with Elementor and performance optimizations like WP Rocket, hosted behind Cloudflare CDN. However, a critical security gap exists as the site lacks HTTPS/SSL encryption, exposing users to potential risks. Privacy compliance is addressed with a privacy policy and cookie consent via Cookiebot. Business credibility is strong with clear contact forms and parent company affiliation to KNILL Gruppe. Overall, the site is content-rich and professionally maintained but requires urgent security improvements.

D

DDB Worldwide

tribalworldwide.com

40

DDB Worldwide is a highly ranked global advertising agency specializing in creative advertising and marketing services. The company operates an enterprise-level website built on WordPress, hosted on WP Engine and served via Cloudflare CDN, leveraging modern web technologies such as jQuery, Axios, and ReactPress. The website features professional design, clear navigation, and comprehensive privacy and cookie policies, indicating a mature digital presence. However, the absence of a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks and reducing trust. Security headers are well configured but cannot compensate for the lack of HTTPS. Contact information is limited to email addresses without phone numbers or physical addresses, and no explicit security or incident response policies are published. Overall, the site demonstrates good business credibility and privacy compliance but requires urgent security improvements.

S

Sony DADC Europe GmbH

sonydadc.com

40

Sony DADC Europe GmbH operates a professional and comprehensive website presenting itself as a leading end-to-end supply chain and manufacturing service provider primarily serving the entertainment industry. The company offers a broad range of services including micro optics, manufacturing, assembly and packaging, logistics, and global business services. The website is well-structured, professionally designed, and targets B2B clients requiring specialized supply chain solutions. Technically, the site is built on WordPress with common libraries such as jQuery and Swiper.js, and includes SEO optimizations and accessibility features. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS configuration, which severely impacts the security posture and user trust. Privacy and cookie policies are comprehensive and GDPR compliant, but no incident response or vulnerability disclosure information is provided. Overall, the site is credible and trustworthy but requires urgent security improvements to protect user data and ensure secure communications.

E

Expeditors International of Washington, Inc.

expeditors.com

40

Expeditors International of Washington, Inc. is a global logistics company specializing in freight forwarding, customs brokerage, and supply chain management services. The company operates a comprehensive worldwide network and offers technology-enabled solutions to optimize logistics operations. The website reflects a professional and consistent brand presence targeting businesses requiring global transportation and supply chain services. Technically, the site uses ASP.NET and is hosted behind Cloudflare with integrations such as Google Tag Manager and HubSpot for marketing and analytics. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical vulnerability. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site is functional and credible but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

G

Getzner Werkstoffe GmbH

getzner.com

27

Getzner Werkstoffe GmbH is a well-established company specializing in vibration isolation solutions for the railway, construction, and industrial sectors. With over 50 years of expertise, the company manufactures innovative polyurethane elastomers and elastic modules that reduce noise and vibrations, enhancing product longevity and application suitability. The website reflects a strong market position with comprehensive product and service information targeting construction professionals, urban developers, and industrial clients. Technically, the website employs modern tools such as Google Tag Manager and Matomo Analytics, indicating a mature digital infrastructure. However, the absence of a valid SSL/TLS certificate and minimal security headers represent significant security vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security posture is currently weak due to lack of HTTPS and related best practices, exposing users to potential risks. WHOIS data confirms the domain's legitimacy and long-term registration, supporting business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

T

Trayport Limited

visotech.at

35

Trayport Limited operates a comprehensive energy trading platform connecting traders, brokers, and exchanges globally, with a strong focus on power, gas, and carbon markets. Their flagship product, Joule, offers extensive market access and analytics, positioning them as a key player in the energy trading software sector. The website reflects a mature digital presence with rich content and clear navigation tailored to energy market participants. Technically, the site leverages modern web technologies including WordPress, Alpine.js, and Mapbox for interactive features, but lacks HTTPS support, which is a critical security shortfall. Security posture is weak due to the absence of SSL/TLS and security headers, exposing users to potential risks. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business appears legitimate and professionally presented, but urgent improvements in security infrastructure are recommended.

ams-OSRAM AG is a global leader in innovative light and sensor solutions, offering a broad portfolio including high-performance LEDs, lasers, mixed-signal analog ICs, and sensors tailored for automotive, industrial, medical, and consumer applications. The company positions itself as a technology innovator with a strong focus on quality and customer engagement, supported by comprehensive investor relations and sustainability initiatives. The website reflects a mature digital presence with modern frameworks and a professional design, targeting B2B customers and industry partners worldwide. However, the absence of a valid SSL certificate is a critical security gap that undermines trust and secure communications. Privacy compliance is well addressed with clear policies and consent management mechanisms. Overall, the company demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to enhance security posture.

M

MCI | Die Unternehmerische Hochschule®

mci.edu

40

The Management Center Innsbruck (MCI) is a well-established entrepreneurial university located in Austria, offering a broad range of academic programs including Bachelor, Master, and Executive Education degrees. The institution emphasizes internationality, academic quality, and practical relevance, serving students, professionals, and corporate partners. The website reflects a strong brand presence with comprehensive content, testimonials from notable figures, and active social media engagement. Technically, the site is built on Joomla CMS with modern frontend technologies but suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Security headers are partially implemented, and DNS configurations show some misconfigurations such as malformed CAA records. Privacy compliance is moderate with a clear privacy policy but lacking cookie consent mechanisms. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

Glashütte Original is a prestigious German luxury watch manufacturer with a rich history dating back to 1845. The company operates under the Swatch Group umbrella and offers a range of technically sophisticated and iconic watch collections targeting discerning luxury consumers globally. The website reflects a mature digital presence with multilingual support, comprehensive product and brand information, and integrated e-commerce and customer service functionalities. Technically, the site is built on WordPress with WooCommerce and leverages modern JavaScript libraries and tracking technologies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the business demonstrates strong credibility and branding but must urgently address its SSL/TLS configuration to improve security posture and user confidence.

T

TEST-FUCHS GmbH

test-fuchs.com

40

TEST-FUCHS GmbH is a well-established manufacturing company specializing in test systems and aerospace systems, with a history dating back to 1946. The company has grown into a medium-sized enterprise with a global presence and over 600 employees. Their website reflects a professional corporate identity with clear navigation and relevant business content targeting industrial B2B clients. Technically, the website is built on Drupal CMS with modern JavaScript libraries, but lacks HTTPS security, which is a significant risk. The absence of a valid SSL certificate and modern TLS protocols exposes visitors to potential data interception and undermines trust. Privacy compliance is addressed with a cookie consent mechanism and a basic GDPR-compliant privacy policy. However, no explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are present. Overall, the website is functional and professional but requires urgent security improvements to protect users and enhance credibility.

O

Oberbank AG

oberbank.at

40

Oberbank AG is a well-established regional bank operating primarily in Austria and neighboring countries, offering a broad range of financial services including retail banking, corporate banking, savings, investments, financing, and online/mobile payment solutions. The website reflects a mature digital presence with comprehensive content tailored to private and corporate customers, supported by a modern technology stack based on Liferay and JavaServer Faces. The site demonstrates strong privacy compliance with detailed cookie consent mechanisms and GDPR-aligned privacy policies. However, the security posture is weakened by an invalid or missing SSL certificate and lack of TLS protocol support, which poses significant risks to secure communications. No explicit security or incident response policies are published, indicating room for improvement in transparency and readiness. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.

C

CRIF S.p.A.

crif.com

40

CRIF S.p.A. is a globally recognized enterprise specializing in credit bureau reporting, business information systems, analytics, and outsourcing services. The company operates in 37 countries with over 85 subsidiaries, serving both businesses and consumers with advanced digital solutions including open banking and ESG analytics. The website reflects a mature business with comprehensive service offerings and a strong market position in the finance sector. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Swiper.js, and is hosted on a CDN network (Akamai), ensuring good performance and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the website is professional and trustworthy but requires urgent remediation of its SSL/TLS configuration to protect user data and maintain trust.

J

Johannes Kepler Universität Linz

jku.at

36

Johannes Kepler Universität Linz operates as a large public university in Austria, offering a wide range of academic programs including Bachelor, Master, Diplom, and doctoral studies. The institution serves students, researchers, and alumni with comprehensive educational and research services, supported by a well-structured and professionally designed website. The university maintains a strong market position as the largest university in Upper Austria with extensive campus services and international programs. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager and Matomo. However, the absence of a valid SSL/TLS certificate is a critical security gap, exposing users to risks and lowering the overall security posture. Privacy and cookie policies are well implemented with explicit consent mechanisms, reflecting good GDPR compliance. Overall, the website is trustworthy and professional but requires urgent security improvements to enable HTTPS and strengthen its security framework.

Z

Zone Media OÜ

zone.lv

40

Zone Media OÜ operates the website zone.lv and zone.eu, providing domain registration, web hosting, and cloud services primarily targeting European businesses. With over 25 years of hosting experience and a customer base of nearly 145,000 domains, the company positions itself as a reliable and innovative technology provider. Their offerings include a wide range of domain extensions, WordPress-optimized hosting, and cloud VPS solutions, supported by a proprietary platform called ZoneOS. The website demonstrates strong digital maturity with modern technologies, good SEO practices, and a comprehensive cookie consent mechanism compliant with GDPR. Security posture is robust with HTTPS, SPF, and DMARC configured, though improvements like enabling HSTS and DNSSEC are recommended. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

Z

Zone Media Oy

zone.fi

40

Zone Media Oy operates the website zone.fi, providing domain registration, web hosting, email, and virtual server services primarily targeting Finnish businesses, associations, and private individuals. With over 25 years of experience and a customer base exceeding 50,000 web hosting accounts and 145,000 domains, Zone holds a strong market position as a reliable and comprehensive hosting provider in Finland. Their service portfolio includes WordPress-optimized hosting, managed virtual servers, and security monitoring, emphasizing local data center hosting in Finland for data protection and compliance. Technically, the website is built on WordPress with modern technologies such as TLS 1.3, OCSP stapling, and integrates multiple third-party tools including Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. The site demonstrates good performance and mobile optimization, with clear navigation and professional design. SEO practices are well implemented with Yoast SEO plugin and structured data. From a security perspective, the site enforces HTTPS with strong TLS protocols, has SPF and DMARC email authentication configured with reject policies, and shows no critical vulnerabilities. Cookie consent mechanisms are in place, ensuring GDPR compliance. However, improvements are recommended in enabling HSTS, fixing CAA records, and publishing a security.txt file to enhance security posture further. Overall, zone.fi presents a trustworthy, professional, and secure online presence with strong compliance and user experience. The domain registration details align with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing HTTPS enforcement, improving transparency in vulnerability disclosure, and maintaining up-to-date security practices to sustain trust and compliance.

E

E-COMMERCE BROKER SIA

finlat.lv

40

Finlat.lv is a Latvian-based credit comparison and brokerage platform operated by E-COMMERCE BROKER SIA, founded in 2021. The platform offers a wide range of financial services including consumer loans, mortgage-backed loans, auto loans, business loans, refinancing, and credit consolidation. It serves individuals and businesses in Latvia, providing a convenient one-application process to access multiple lenders. The website is well-structured with clear navigation, client testimonials, and partner logos enhancing its credibility. Technically, it is built on WordPress with Elementor and uses modern web technologies, but lacks a valid SSL certificate, which is a critical security concern. The absence of a cookie consent mechanism also poses potential GDPR compliance issues. The platform integrates several analytics and marketing tools such as Google Analytics, Yandex Metrica, and Facebook Pixel, indicating moderate user tracking. Overall, the business appears legitimate with consistent WHOIS data and transparent contact information, but needs to address security and privacy compliance gaps to improve trust and security posture.

E

efficy

tribecrm.no

59

Tribe CRM, operated by efficy, is a modern, no-code CRM platform designed to help businesses grow by providing customizable tools for sales, marketing, and customer service. The platform integrates AI features and workflow automation to enhance productivity and customer engagement. Positioned as a flexible and scalable solution, Tribe CRM serves over 10,000 customers and offers tiered subscription plans with a free trial option. Technically, the website is built on WordPress with a suite of modern plugins and analytics tools, including Piwik PRO and Cookiebot for privacy compliance. However, a critical security gap exists as the site lacks a valid SSL certificate and does not serve content over HTTPS, exposing users to potential risks. The site is well-designed, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a strong commitment to GDPR compliance. Overall, while the business and technical maturity are solid, urgent improvements in security infrastructure are necessary to protect user data and enhance trust.

P

Pantheon Systems, Inc.

pantheon.io

56

Pantheon Systems, Inc. operates Pantheon.io, a leading WebOps platform designed for building, hosting, and managing high-impact websites primarily using WordPress, Drupal, and Next.js. The company positions itself as a comprehensive solution provider integrating operations, workflows, and governance to enable agile teams and fast digital launches. Their market position is strong, supported by recognized industry badges and a broad partner ecosystem including Google Cloud. Technically, the website is built on Drupal 10 and leverages modern marketing and analytics tools such as Marketo, Segment, and VWO, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is well addressed with comprehensive policies and consent mechanisms via OneTrust. Overall, Pantheon.io demonstrates a professional, enterprise-grade web presence with excellent content and user experience but requires urgent improvements in SSL configuration to enhance security and trust.

P

Pagely

pagely.com

61

Pagely is a pioneering managed WordPress hosting provider established in 2009, serving enterprise clients, media companies, agencies, and higher education institutions. Their hosting platform is built on AWS infrastructure, emphasizing high availability, security, and expert support. The website content is professionally designed, rich in relevant information, and optimized for SEO, targeting discerning customers who require scalable and secure WordPress hosting solutions. Technically, the site leverages WordPress with modern tools like Gutenberg, Yoast SEO, and integrates marketing and analytics services such as HubSpot, Google Analytics, and Microsoft Clarity. However, a critical security gap is the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture and trustworthiness. The site also exhibits slow load times and lacks security headers, which are areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Pagely presents a strong business and technical profile but must urgently address its SSL/TLS configuration to ensure secure user interactions and maintain its enterprise-grade reputation.

A

Agilera Pharma AS

agilera.no

40

Agilera Pharma AS is a Norwegian-based contract development and manufacturing organization (CDMO) specializing in radio-pharmaceuticals, providing comprehensive services from preclinical development to commercial production and global distribution. The company holds regulatory approvals across major global markets including the USA, Japan, Europe, Latin America, and China, positioning itself as a key player in the healthcare sector focused on cancer medicine. Their website reflects a professional and consistent brand image targeting pharmaceutical companies and researchers worldwide. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery and Swiper.js. However, performance is suboptimal with slow load times and a large page size. Mobile optimization is good, but accessibility features are basic. SEO practices are adequately implemented with proper meta tags and language alternates. From a security perspective, the site lacks a valid SSL certificate and does not support any TLS protocols, which is a critical vulnerability impacting user trust and data security. While SPF and DMARC email security measures are in place, other security headers and best practices are missing. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, aligning with GDPR requirements. Overall, the website presents moderate business credibility and good content quality but suffers from critical security shortcomings. Immediate remediation of SSL/TLS issues is essential to improve security posture and user trust. Strategic enhancements in performance and security headers would further strengthen the site’s resilience and professionalism.

3

3dids.com Agencia de Marketing

3dids.com

56

3dids.com Agencia de Marketing is a well-established digital marketing and ecommerce agency based in Spain, specializing in Shopify platform services and ecommerce internationalization. As part of the Publicis Group, it leverages extensive industry experience and a broad partner ecosystem to deliver comprehensive digital strategies, CRM activation, SEO, and AI-driven productivity enhancements. The website reflects a mature digital presence with rich content, client testimonials, and strong branding. Technically, the site is built on Shopify with Cloudflare hosting and uses modern JavaScript libraries and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses a critical risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by strong trust signals and transparent domain registration.

I

Iceberg Cultures of Inclusion

icebergci.com

23

Iceberg Cultures of Inclusion is a consulting firm specializing in strategic management of diversity, equity, and inclusion (DEI) across Latin America. The company positions itself as a leader in this niche market, offering services such as DEI strategy development, inclusive ecosystem design, training, and cultural intelligence development. Their client base includes major multinational corporations, indicating a strong market presence and trust. Technically, the website uses modern frontend technologies including Bootstrap, Alpine.js, and jQuery, hosted on Apache with October CMS as the content management system. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. No privacy or cookie policies are found, and no incident response or security policies are published, indicating gaps in compliance and security transparency. Overall, the website is professionally designed with good content quality and user experience but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

S

sequa gGmbH

sequa.de

38

sequa gGmbH is a German non-profit development organization specializing in private sector development and vocational training projects worldwide. The website provides comprehensive information about their projects, partnerships, and services, targeting chambers, associations, and stakeholders involved in development cooperation. The site is built on TYPO3 CMS and uses modern frontend technologies but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. However, contact information is primarily available via forms rather than direct emails or phone numbers. The WHOIS data aligns well with the organization's profile, showing consistent registration without privacy protection, supporting transparency. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

EnergyEfficiency4SMEs is an EU co-funded project coordinated by Eurochambres, focused on increasing energy efficiency uptake in SMEs across sectors such as Accommodation and Food services, Agri-food, and Metalwork. The project delivers capacity building, energy audits, financial guidance, and scoping studies to support SMEs in improving energy efficiency. The website is built on WordPress using the OceanWP theme and Elementor, featuring a moderate level of technical maturity but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Contact information and partner logos are clearly presented, enhancing business credibility. However, the absence of HTTPS and security headers exposes the site to risks and undermines user trust.