Security Directory

V

Veeva Systems

veevaconnect.com

74

Veeva Connect is a digital engagement platform likely operated by Veeva Systems, targeting enterprise clients in the life sciences or pharmaceutical sectors. The website serves as a portal or interface for their SaaS offerings, leveraging modern web technologies such as React and AWS CloudFront CDN for content delivery. The platform integrates third-party services like Wistia for video and Google Maps API for location services. From a technical perspective, the website demonstrates a solid security posture with HTTPS enforced, strong security headers including a nonce-based Content Security Policy, and no evident vulnerabilities. However, the site lacks visible privacy and cookie policies, contact information, and terms of service, which are important for compliance and user trust. The content on the landing page is minimal, suggesting the site is a single-page application requiring user authentication or further navigation to access substantive content. The domain registration is consistent and trustworthy, with a mature domain age of 5 years, registered through a reputable registrar without privacy protection, aligning with the business's founding date. No suspicious patterns or vulnerabilities were detected in the DNS or SSL configurations. Overall, the site is technically sound but could improve transparency and compliance aspects. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, publishing contact information and incident response channels, enabling HSTS preload, and adding a vulnerability disclosure policy to enhance security culture and trustworthiness.

C

CDO Magazine

cdomagazine.tech

63

CDO Magazine is a specialized media platform dedicated to providing insights, news, and leadership content in the fields of data, analytics, and artificial intelligence. The website targets C-level executives and data professionals, offering a mix of editorial content, executive interviews, and event information to foster community and industry knowledge sharing. Technically, the site is built on a modern stack including Next.js and React, hosted on WP Engine with Cloudflare CDN, ensuring fast performance and good mobile optimization. Security measures include HTTPS with TLS 1.3, OCSP stapling, and secure cookie attributes, though improvements such as enabling HSTS and publishing security policies are recommended. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site demonstrates a professional and trustworthy online presence with room for enhanced privacy and security transparency.

A

Auxality

fondlista.se

40

Auxality is a specialized SaaS provider focused on automating operational workflows and financial data management for asset managers. Their platform aims to simplify complex regulatory and reporting challenges in the financial industry. The company targets asset managers and financial institutions, offering automated reporting, platform transformation, data visualization, and advisory services. Technically, the website is built on a modern stack using Next.js and React, hosted on AWS infrastructure. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks. Privacy and cookie policies are well documented, and contact mechanisms are available via email and form, but no phone or physical address is provided. Overall, the site is professional and content-rich but requires urgent security improvements.

M

Mirantis

k8slens.dev

40

Lens, operated by Mirantis, is a leading Kubernetes IDE designed for developers and DevOps engineers to manage and troubleshoot Kubernetes clusters efficiently. With over 1 million users globally, Lens holds a strong market position as the most popular Kubernetes IDE, offering a comprehensive and intuitive context-aware UI. The website reflects a professional and enterprise-grade product with strong trust indicators such as ISO 27001 and SOC2 Type 1 certifications and testimonials from reputable organizations. Technically, the site is built on modern frameworks like Next.js and React, hosted on AWS infrastructure with CDN support, ensuring good performance and mobile optimization. However, a critical security concern is the invalid or missing SSL certificate, which undermines the security posture despite the presence of HSTS and other security headers. Privacy compliance is generally good with a comprehensive privacy policy and GDPR indicators, though no explicit cookie consent mechanism was detected. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, Lens demonstrates strong business credibility and technical maturity but must address SSL issues to enhance trust and security.

C

CODITY LLC

movilaesweb.com

37

The website movilaesweb.com serves as an online portal for AES El Salvador, focusing on providing customers with services related to electricity bill payments, outage reporting, and general information about AES El Salvador's energy services. The business appears to be a small-scale service portal operated or developed by CODITY LLC, targeting customers in El Salvador. The site uses modern web technologies such as React and is hosted on Amazon AWS infrastructure, indicating a moderate level of technical maturity. However, the website suffers from significant security shortcomings, most notably the absence of a valid SSL certificate and HTTPS support, which severely undermines user trust and data security. Additionally, the lack of privacy policies, cookie consent mechanisms, and contact information further detracts from compliance and user confidence. Overall, the site is functional but basic in content quality and technical implementation, with critical security improvements needed to meet industry standards and regulatory requirements.

B

Burgenland Energie

burgenlandenergie.at

40

Burgenland Energie is a regional energy provider based in Austria, specializing in renewable energy solutions such as photovoltaic systems, battery storage, heat pumps, and e-mobility services. The company targets private customers and municipalities within the Burgenland region, emphasizing energy independence and sustainability. Their market position is that of a trusted regional leader in renewable energy, supported by a comprehensive portfolio of products and services tailored to modern energy needs. Technically, the website is built on modern frameworks including React and Next.js, hosted on AWS infrastructure with Amazon S3 and CloudFront for content delivery. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good SEO practices. Integration with marketing and analytics tools like Google Tag Manager and Zoho CRM is implemented with user privacy in mind, including cookie consent mechanisms. From a security perspective, the site enforces HTTPS with a valid SSL certificate and uses AWS KMS for server-side encryption. OCSP stapling is enabled, but HTTP security headers like HSTS are not fully implemented, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's business objectives. Strategic recommendations include enhancing HTTP security headers, continuous monitoring of third-party scripts, and maintaining strong privacy compliance to further strengthen user trust and security posture.

I

IntegrityCounts

integritycounts.ca

65

IntegrityCounts operates a confidential and anonymous ethics reporting system aimed at organizations requiring secure ethics reporting solutions. The website is minimalistic, built using React and hosted on Microsoft Azure, indicating a modern but basic technical infrastructure. The site lacks visible content beyond the root container and does not provide privacy, cookie, or terms of service policies, nor contact information, which limits user engagement and trust. From a security perspective, the website enforces HTTPS with a valid SSL certificate and implements several important security headers such as Content-Security-Policy and X-Frame-Options. However, the absence of enabled HSTS, support for deprecated TLS 1.1, and lack of OCSP stapling reduce the overall security posture. No vulnerabilities or exposed sensitive data were detected, but the security configuration could be improved to meet best practices. Overall, the website presents a moderate risk profile due to limited content, lack of compliance documentation, and partial security best practices. The domain registration and DNS setup are consistent with a legitimate business presence, but the absence of contact details and policies impacts credibility and privacy compliance. Strategic improvements in transparency, security hardening, and user engagement are recommended to enhance trust and compliance.

N

Netz Burgenland GmbH

netzburgenland.at

35

Netz Burgenland GmbH operates as a regional energy network operator in Burgenland, Austria, providing reliable electricity and gas distribution services. The company emphasizes customer service and offers a range of services including smart metering, energy communities, and infrastructure support. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Next.js and React, hosted on AWS infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. While contact information and business legitimacy are clearly established, privacy compliance could be improved by implementing cookie consent mechanisms and publishing security policies. Overall, the site is content-rich and trustworthy but requires urgent security enhancements to protect user data and maintain trust.

N

NewMotoAsset GmbH

drivebeem.at

40

drivebeem is an Austrian company specializing in electric vehicle subscriptions, offering all-inclusive monthly plans that cover vehicle costs, insurance, maintenance, and charging solutions. The company targets both private customers and businesses, providing flexible subscription durations and additional services such as wallbox installations and photovoltaic energy solutions. The website is professionally designed with clear navigation and comprehensive content, including detailed FAQs and legal documentation. Technically, the site uses modern frameworks like Next.js and React, with content managed via a WordPress headless CMS. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are partially implemented, but critical TLS protocols and certificate transparency are missing. Privacy compliance is generally good with a clear privacy policy, though no cookie consent mechanism was detected. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires urgent security improvements to protect user data and build trust.

S

SONNENABO

sonnenabo.at

39

SonnenAbo is a regional energy service provider based in Austria offering local solar power subscriptions through community photovoltaic parks. The business model focuses on enabling residents to access renewable energy without upfront investment, promoting sustainability and energy community membership. The website is professionally designed using modern web technologies such as Next.js and hosted on AWS infrastructure. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical security vulnerability. Additionally, no cookie consent mechanism is present despite the use of Google Tag Manager, indicating partial privacy compliance. Contact information is available primarily as a physical address and contact page, but no direct emails or phone numbers are exposed. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

I

Interlink

interlink.mr

27

Interlink is a medium-sized technology company based in Mauritania, specializing in AI-powered digital solutions for businesses and government institutions. With 15 years of experience, they offer services in e-governance, e-health, software development, messaging, geolocation, and cybersecurity. The website is built on modern technologies like Next.js and React, providing a professional and user-friendly experience. However, technical issues such as missing DNS records and an invalid SSL certificate undermine the security posture. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site demonstrates solid business presence but requires urgent security and technical improvements.

E

ELEKTROMATERIAL.AT

elektromaterial.at

35

ELEKTROMATERIAL.AT is a business focused on supplying electrical materials, likely targeting professionals and companies in the energy sector within Austria. The website uses modern frontend technologies such as React and Next.js, with Craft CMS indicated as the backend content management system. However, the site lacks critical security features including a valid SSL certificate and HTTPS support, which severely impacts its security posture. No privacy or cookie policies are present, and no contact information is available on the homepage, limiting user trust and compliance with data protection regulations. The site employs Mixpanel for analytics, indicating moderate user tracking without visible consent mechanisms. Overall, the website demonstrates basic digital maturity but requires significant improvements in security and privacy compliance to meet industry standards and user expectations.

P

Pinterest

pinterest.info

40

Pinterest is a leading visual discovery and social media platform that enables users to explore and save creative ideas across various categories such as recipes, home decor, fashion, and more. The platform serves a broad audience including individual users, content creators, and businesses seeking advertising opportunities. Pinterest operates on an advertising-based business model with integrated e-commerce features, positioning itself as a key player in the technology and social media industry. The website demonstrates a high level of digital maturity with a modern tech stack primarily based on React and extensive use of cloud services and CDNs for content delivery. The design and user experience are professional and optimized for both desktop and mobile users, ensuring accessibility and SEO best practices are followed. Security-wise, the site implements several important HTTP security headers and a comprehensive content security policy, but it currently suffers from an invalid or missing SSL certificate and lacks support for modern TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, Pinterest's website is trustworthy and professional, but immediate attention is required to resolve SSL and TLS issues to enhance security and user trust.

E

Evelyn Partners Investment Management Services Limited

bestinvest.co.uk

40

Bestinvest is a well-established UK-based online investment platform offering a wide range of tax-efficient investment accounts including ISAs, SIPPs, and Junior ISAs. The company emphasizes free expert coaching, smart planning tools, and competitive pricing to help clients achieve their financial goals. The platform is supported by a mature technical infrastructure leveraging modern web technologies such as React and Next.js, hosted on Microsoft Azure, ensuring good performance and mobile optimization. However, the site currently suffers from critical SSL certificate issues and lacks support for modern TLS protocols, which significantly impacts its security posture. Privacy and cookie policies are comprehensive and indicate compliance with GDPR regulations. The business demonstrates strong credibility with FCA regulation, numerous awards, and positive Trustpilot reviews. Overall, the website is professional and user-friendly but requires urgent security improvements to ensure trust and compliance.

T

TUI Cruises GmbH

tuicruises.com

55

TUI Cruises GmbH operates the Mein Schiff® fleet, offering premium inclusive cruise vacations with a focus on comfort, excellent gastronomy, and a relaxed atmosphere. The company is positioned as a major player in the premium cruise market, supported by its parent company, TUI Group. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, with strong mobile optimization and user experience. Security measures include HTTPS, comprehensive security headers, and a cookie consent mechanism, reflecting a good security posture. Privacy policies are comprehensive and GDPR compliant, with clear user consent options. Overall, the site presents a professional and trustworthy image, supporting the company's market position.

G

Gebr. Heinemann SE & Co. KG

gebr-heinemann.com

45

Gebr. Heinemann SE & Co. KG is a globally recognized enterprise specializing in travel retail, operating both as a retailer and distributor across multiple channels including airports, border crossings, cruise ships, and diplomatic zones. The company collaborates with luxury brands and offers a diverse product portfolio ranging from cosmetics to fashion and accessories. Their market position is strong, supported by regional centers in Singapore and Miami, and a headquarters in Hamburg, Germany. Technically, the website leverages modern frameworks such as Next.js and React, with integrated cookie consent management via Usercentrics and analytics through Google Tag Manager. The site is well-optimized for mobile and SEO, providing a good user experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers and explicit incident response contacts are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

F

Freecharge Payment Technologies Pvt. Ltd.

freecharge.in

54

Freecharge Payment Technologies Pvt. Ltd. operates a comprehensive digital payments platform in India, offering services such as mobile recharge, bill payments, UPI transactions, credit score checks, and business payment solutions including merchant services and payment gateways. The company targets both consumers and businesses, positioning itself as a trusted and fast payment facilitator with a strong market presence. The website demonstrates a mature technical infrastructure leveraging modern frameworks like React and Next.js, supported by robust analytics and marketing tools such as Google Tag Manager and MoEngage. Security posture is strong with HTTPS enforcement, bank-grade security claims, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly available. Overall, the platform is professional, user-friendly, and trustworthy, though improvements in privacy compliance such as cookie consent mechanisms and vulnerability disclosure would enhance user trust and regulatory adherence.

M

Monster

monster.at

59

Monster.at is a well-established online job board primarily serving the Austrian and broader German-speaking job market. It offers a comprehensive platform for job seekers and employers, featuring job search, resume upload, career advice, and employer services. The site is part of the Monster brand, a pioneer in online recruiting, and maintains a strong market position with consistent branding and professional content. The platform targets job seekers and employers, providing a user-friendly and mobile-optimized experience with modern web technologies such as React and Gatsby. Security measures include HTTPS enforcement and bot protection via DataDome, complemented by a comprehensive cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response contacts are not evident, representing areas for improvement. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance and a trustworthy domain registration profile.

Johnson & Johnson Vision operates a professional website focused on refractive surgery and related eye health products. The company is a recognized leader in the ophthalmology healthcare sector, offering advanced surgical technologies such as iLASIK and femtosecond lasers. The website targets eye health professionals, providing detailed product information, educational resources, and access to ordering and support services. The business is positioned as a market leader with a strong brand presence and extensive industry experience under the Johnson & Johnson umbrella. Technically, the website leverages modern web frameworks including Next.js and React, integrates advanced analytics and marketing tools such as Google Tag Manager, Optimizely, and WalkMe, and employs robust cookie consent management via OneTrust. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance metrics. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA Enterprise to protect forms. Privacy compliance is strong, with clear privacy and cookie policies and user consent mechanisms. However, there is no explicit security policy or incident response contact information published, which could be improved. Overall, the website demonstrates a mature digital presence with strong business credibility and security posture. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and considering a vulnerability disclosure program to enhance transparency and trust.

Qualcomm Incorporated is a global leader in wireless technology innovation, pioneering 3G, 4G, and 5G technologies with a strong presence in the United Kingdom focused on design, research, development, and sales. The company serves a broad technology audience including automotive, computing, and IoT sectors. The website reflects a mature digital infrastructure leveraging modern technologies such as React and Adobe Experience Manager, supported by Cloudflare for hosting and security. Privacy and cookie compliance are well implemented with OneTrust, and the site includes official corporate documents enhancing transparency. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with relevant regulations.

M

ManpowerGroup

experis.com

63

Experis, a brand under ManpowerGroup, is a global leader specializing in IT staffing and project services. The company connects skilled IT professionals with organizations worldwide, offering flexible solutions that adapt to evolving technology demands. Their market position is strong, supported by a comprehensive portfolio of services including IT staffing, project services, business transformation, and cybersecurity expertise. The website reflects a mature digital presence with modern technologies and integrations such as HubSpot, Google Analytics, and Microsoft Azure B2C authentication, indicating a high level of digital maturity and customer engagement capabilities. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. Overall, the website and business demonstrate high professionalism, trustworthiness, and alignment with industry standards.

A

Aircargo.nl

aircargo.nl

41

Aircargo.nl is a Netherlands-based logistics company specializing in air freight and comprehensive transport solutions including time-critical shipments, routine shipments, road transport, storage, customs clearance, and live tracking. The company positions itself as a reliable and customer-focused provider emphasizing personal care and precision. The website reflects a professional and modern digital presence built on Next.js with React, leveraging Google reCAPTCHA for form security and Umami Analytics for privacy-conscious tracking. Hosting is provided via DigitalOcean infrastructure with CDN support. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a cookie consent mechanism and explicit security policies are noted compliance gaps. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, supporting a positive user experience and trustworthiness.

Niederberger Gruppe is a well-established German company specializing in facility services, including cleaning, technical services, and facility management. With over 90 years of experience, it holds a strong market position in Germany, serving a broad range of industries with tailored service offerings. The website reflects a professional and comprehensive presentation of their services and locations, targeting business clients across Germany. Technically, the site is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good SEO practices. Security measures include HTTPS enforcement, Google reCAPTCHA v3 integration, and a cookie consent mechanism that respects user privacy by not using cookies. The absence of exposed sensitive data and the presence of privacy and legal policies indicate a mature security posture. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, making it a reliable digital presence for the company.

T

The Natural History Museum

nhm.ac.uk

40

The Natural History Museum website serves as a comprehensive digital portal for one of the UK's leading educational and cultural institutions. It offers extensive information on exhibitions, scientific research, educational resources, and visitor services, targeting a broad audience including the general public, educators, and researchers. The site is well-branded, professionally designed, and provides clear navigation and rich content relevant to its mission. Technically, the website leverages modern web technologies such as React with Next.js and Adobe Experience Manager as its CMS, hosted on Microsoft Azure. While the site is mobile-optimized and accessible, performance is currently hindered by an invalid SSL certificate and lack of enabled TLS protocols, which also impacts the security posture. Security-wise, the site implements some security headers like HSTS and X-Frame-Options but lacks a valid SSL certificate and proper TLS support, which are critical for secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism in place. Social media integration and tracking tools like Google Tag Manager and Adobe DTM are used responsibly with privacy considerations. Overall, the website is trustworthy and professional but requires urgent remediation of SSL and TLS issues to ensure secure user interactions and improve its security score. Strategic improvements in SSL management and security best practices will enhance user trust and compliance.

A

amazee.io

amazee.com

40

amazee.io is a managed open source enterprise hosting platform provider targeting large enterprises with a focus on data sovereignty, flexibility, and security. The company offers a fully managed PaaS leveraging Kubernetes and modern infrastructure, aiming to reduce time-to-market and increase ROI for its customers. The platform supports a wide range of frameworks and technologies, including Drupal, Gatsby, React, and more. Technically, the website is built using modern technologies such as React and Gatsby, with integrations for analytics and marketing tools like Google Tag Manager and HubSpot. The security posture is moderate, with essential security headers in place but lacking a valid SSL certificate and modern TLS support, which are critical for secure communications. Privacy compliance is strong, with clear privacy and cookie policies and GDPR considerations. Overall, the website presents a professional and trustworthy image, supported by certifications like ISO 27001 and SOC_NonCPA, and a parent company relationship with Mirantis.

Smurfit Kappa is a globally recognized FTSE 100 company specializing in paper-based packaging solutions with operations in over 30 countries. The website reflects a mature business with a strong emphasis on sustainability, innovation, and customer-centric packaging services across multiple sectors. The digital infrastructure leverages modern technologies such as React and Sitecore CMS, supported by marketing and analytics tools including Google Tag Manager, Cookiebot, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which undermines the site's security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS issues to ensure secure user interactions.

B

Beontag

beontag.com

40

Beontag is a global manufacturing and technology company specializing in identification and digital transformation solutions, including graphics and label materials as well as RFID and IoT enablers. The company has a strong market presence with over 16 facilities worldwide and operations in more than 60 countries. Their website reflects a professional and comprehensive digital presence targeting businesses requiring advanced labeling and IoT solutions. Technically, the site is built on modern frameworks such as Next.js and hosted on AWS CloudFront, ensuring scalability and performance. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, which significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance and consent mechanisms. The site integrates analytics and marketing tools like Google Analytics and HubSpot, balancing user tracking with privacy considerations. Overall, while the business and technical maturity are strong, immediate attention to SSL/TLS implementation is necessary to enhance security and trust.

Burgenland Energie is a regional energy provider based in Austria, specializing in renewable energy solutions such as photovoltaic systems, battery storage, heat pumps, and e-mobility services. The company targets private customers, municipalities, and businesses within the Burgenland region, emphasizing energy independence and sustainability. Their digital presence includes a professional website with comprehensive product information, customer portals, and active social media channels. Technically, the website is built using modern web technologies including React and Next.js, hosted on AWS infrastructure with CloudFront and S3. While the site is mobile-optimized and well-structured for SEO and accessibility, performance metrics indicate slow loading times, which could be improved. The use of Google Tag Manager and Zoho CRM scripts indicates integration with marketing and customer relationship management tools. From a security perspective, the website lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability that undermines user trust and data security. Other security best practices such as HSTS, OCSP stapling, and session resumption are also missing. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism in place. Overall, the website presents a trustworthy and professional business with strong content and user experience but requires urgent improvements in SSL/TLS configuration to enhance security posture and protect user data effectively.

myClubs is a membership platform offering access to a wide variety of sports and fitness activities across multiple providers, primarily targeting sports enthusiasts seeking flexible and commitment-free training options. The website is built using modern web technologies such as React and Next.js and is served via Cloudflare CDN, indicating a contemporary digital infrastructure. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. While privacy and terms of service pages are present and appear comprehensive, the lack of a cookie consent mechanism despite the use of tracking scripts suggests incomplete privacy compliance. Overall, the site demonstrates good content quality and user experience but requires urgent security improvements to meet industry standards.

S

SHT WEBSHOP

sht.at

34

The website sht.at operates as an e-commerce webshop branded as SHT, targeting German-speaking customers. It offers online product sales but lacks detailed business information, contact details, or policies on the homepage. The technical infrastructure is based on modern web technologies such as Next.js and React, with Craft CMS APIs referenced, indicating a decoupled CMS backend. However, performance metrics are missing or incomplete, and mobile optimization and accessibility are basic. Security posture is poor due to the absence of a valid SSL certificate, no HTTPS support, and missing security headers, exposing the site to significant risks. Privacy compliance is lacking, with no privacy or cookie policies detected, and no GDPR indicators present. The domain's DNS configuration is suspiciously empty, raising concerns about legitimacy and operational maturity. Overall, the site scores low on trustworthiness and security, requiring urgent improvements in SSL deployment, policy transparency, and DNS configuration.

U

Uponor Suomi Oy

uponor.com

38

Uponor Suomi Oy is a leading international company specializing in building and infrastructure water transport solutions. The company offers a wide range of products and services including building technology, infrastructure products, project services, and customer support. It operates under the parent company Georg Fischer (GF) Group and targets professionals in construction, infrastructure planning, and homeowners. The website is well-designed, content-rich, and provides comprehensive information about products, services, and corporate policies. Technically, the site uses modern frameworks like React and Kentico CMS, with integrations for analytics and marketing tools. However, a critical security issue is the absence of a valid SSL/TLS certificate, exposing users to risks. Security headers are well implemented, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to ensure secure user interactions.

H

HOM Furniture

homfurniture.com

36

HOM Furniture is a large regional furniture retailer primarily serving the upper Midwestern United States, including Minnesota and surrounding states. The company offers a broad range of furniture, home décor, and design services both online and in physical stores. Their digital presence includes advanced features such as augmented reality visualization and room planning tools, indicating a moderate level of digital maturity. However, the website lacks a valid SSL certificate, which is a critical security shortfall that undermines user trust and data protection. While privacy policies are present, cookie consent mechanisms are missing despite the use of tracking and analytics tools. The site uses modern web technologies including MeteorJS and React, but performance data is lacking, suggesting potential optimization opportunities. Overall, the business appears legitimate and well-established, but security improvements are urgently needed to protect customer data and enhance trust.

P

Peschke

peschkedesign.at

31

Peschke Design GmbH is a well-established design agency based in Vienna, Austria, specializing in product design, UX/UI, app development, 3D visualization, and industrial design. With over 50 years of experience and a strong portfolio of reputable clients such as Carl Zeiss AG, ENGEL AUSTRIA GmbH, and Austrian Airlines, the company positions itself as a trusted partner for digital transformation and innovative design solutions. Their business model focuses on delivering comprehensive design and development services tailored to client needs, supported by a professional and content-rich website that targets businesses seeking high-quality design expertise. Technically, the website is built on WordPress, hosted on WP Engine, and uses Cloudflare as a CDN and proxy. It employs modern web technologies including React, jQuery, and Swiper.js, and supports multilingual content via WPML. SEO and accessibility are well addressed with Yoast SEO and adherence to WCAG guidelines. However, performance metrics are not available, though mobile optimization and navigation clarity are good. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. No TLS protocols are enabled, and security headers are minimal. While cookies are set with secure and HttpOnly flags, the absence of HTTPS exposes users to potential interception risks. Privacy compliance is strong with GDPR-aligned policies and a cookie consent mechanism. No explicit security or incident response policies are published. Overall, the website demonstrates high professionalism and business credibility but suffers from a critical security misconfiguration regarding SSL/TLS. Addressing this would significantly improve the security posture and trustworthiness of the site.

N

N26 SE

number26.de

40

N26 SE operates a leading mobile-first digital banking platform in Germany and Europe, offering a range of financial services including checking accounts, savings, investments, and a mobile telecom service branded as N26 SIM. The company holds a full banking license from BaFin, ensuring regulatory compliance and deposit protection up to 100,000 EUR. The website is professionally designed with excellent content quality and clear navigation, targeting consumers who prefer intuitive, app-based banking solutions. Technically, the site leverages modern web technologies such as React, Contentful CMS, and cloud hosting via AWS CloudFront, with integrated analytics and marketing tools like Datadog and Google Tag Manager. However, a critical security issue is the invalid SSL certificate and lack of modern TLS support, which undermines the security posture. Security headers and policies are well implemented, but SSL/TLS must be fixed to ensure trust and compliance. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent SSL remediation to maintain security and user trust.

M

Matin

matin-gallery.com

20

Matin is a small, specialized art gallery established in 2004 by Robert and Christina Odegard in Los Angeles, California. The business focuses on artisan jewelry, bronze sculptures, custom furniture, and contemporary art, targeting art collectors and design enthusiasts. The website reflects a professional design with consistent branding and a clear navigation structure, although content is somewhat limited to product categories and contact information. Technically, the site is built on the icompendium CMS platform with a React frontend and hosted on a DigitalOcean IP. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Privacy and cookie policies are absent, and Google Analytics is not fully configured, indicating gaps in privacy compliance and analytics maturity. Security headers are minimal, and modern TLS protocols are unsupported, exposing the site to potential risks. Overall, the site demonstrates moderate business credibility but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

A

A Place for Mom

aplaceformom.com

40

A Place for Mom is a leading senior living referral service that connects families with assisted living, memory care, independent living, home care, nursing homes, and other senior care options. The company operates a large network of communities and home care providers, offering personalized support through expert advisors at no cost to families. Their market position is strong, supported by extensive consumer reviews, award recognitions, and a broad geographic presence across major US cities. Technically, the website is built on modern frameworks such as Next.js and React, leveraging AWS CloudFront for content delivery and integrating advanced analytics and marketing tools like Segment, Optimizely, and Drift. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical vulnerability. While security headers are properly configured, the lack of TLS protocols and OCSP stapling reduces overall security. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for its business but requires urgent improvements in SSL/TLS implementation to ensure secure user interactions and maintain trust. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing DNS security measures.

K

KAUFMANN S.A

kaufmann.cl

36

Kaufmann S.A is a leading automotive company in Chile specializing in the sale and servicing of automobiles, commercial vehicles, and related products. The website reflects a comprehensive digital presence with extensive content covering various vehicle categories, after-sales services, and customer support. The company maintains a strong market position with a wide network of branches across Chile and partnerships with recognized brands and service providers. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as React and jQuery, but suffers from a critical lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. Security headers are present but insufficient without proper SSL/TLS implementation. Privacy compliance is moderate with a clear privacy policy but no visible cookie consent mechanism. Overall, the site offers good user experience and content quality but requires urgent security improvements to protect user data and enhance trust.

CME Group Inc. operates as a leading global derivatives marketplace, offering a diverse range of futures and options products for risk management across multiple asset classes including agriculture, energy, equity indices, FX, interest rates, and metals. The company serves a broad audience of traders, investors, and financial institutions, providing comprehensive market data, clearing services, and technology solutions. The website reflects a mature, enterprise-level organization with consistent branding and high-quality content tailored to its professional audience. Technically, the website leverages modern technologies such as React, jQuery, and Adobe Experience Manager, hosted via Akamai CDN, and integrates various marketing and analytics tools including Google Tag Manager, Evergage, and OneTrust for cookie consent. The site is well-optimized for mobile and accessibility, with good SEO practices evident in meta tags and structured data. From a security perspective, while the site employs important security headers and cookie protections, the SSL/TLS configuration appears incomplete or misreported in the provided data, lacking valid certificates and modern protocol support. This represents a significant security concern that should be addressed promptly to ensure secure communications and user trust. Overall, CME Group's website is professional, content-rich, and business credible, but requires immediate attention to its SSL/TLS implementation to align with best security practices and maintain its high trustworthiness in the financial sector.

Formula One World Championship Limited operates the official Formula 1 website, serving as the primary digital platform for F1 news, live timing, video content, and merchandise. The site targets motorsport enthusiasts globally, offering comprehensive coverage and subscription services. The technical infrastructure leverages modern web technologies including Next.js and React, hosted on AWS CloudFront, ensuring a scalable and responsive user experience. However, a critical security gap exists due to the absence of a valid SSL certificate, severely impacting the site's security posture. Despite this, the site maintains strong privacy compliance with clear policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to ensure user trust and data security.

E

EQUES Advisors

equesadvisors.com

36

EQUES Advisors is a boutique advisory firm based in Vienna, Austria, specializing in transforming potential into growth by connecting investors, projects, and ideas. The firm emphasizes trust, discretion, and strategic alignment to facilitate successful business partnerships. Their key services include investor search and selection, information and knowledge search, real estate advisory, and strategic business development. The website reflects a professional and consistent brand image targeting investors and businesses seeking advisory services. Technically, the site is built on the Wix platform using modern JavaScript frameworks like React, but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. The site has basic mobile optimization and SEO metadata but lacks comprehensive privacy and cookie policies, impacting privacy compliance. Security headers are partially implemented, but the absence of SSL and modern TLS protocols significantly lowers the security posture. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

B

BDO

bdo.com.qa

40

BDO Qatar operates as part of the global BDO network, providing professional audit, advisory, tax, and business outsourcing services. The firm targets businesses in Qatar and internationally, emphasizing exceptional client service and global connectivity. The website reflects a professional services firm with a consistent brand and good content quality. Technically, the site uses modern frameworks including React and Kentico CMS, hosted on Microsoft Azure, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Security headers are partially implemented, but the absence of HTTPS and TLS protocols severely impacts the security posture. Privacy and cookie policies exist but are basic, with a consent mechanism in place. Contact information is primarily via contact forms and social media, with no direct emails or phone numbers disclosed. Overall, the site is functional and professional but requires urgent security improvements to protect user data and build trust.

T

T3K-Forensics GmbH

t3k-forensics.com

38

T3K-Forensics GmbH operates the website t3k-forensics.com, presenting itself as a global leader in AI-powered digital forensic solutions, primarily serving law enforcement and private enterprises. Their key offerings include AI-based media classifiers designed to detect illicit content such as child sexual abuse material, terrorism-related content, and other harmful media. The company emphasizes its expertise in expert witness work and digital forensics consulting, leveraging machine learning to accelerate investigations and reduce emotional burdens on investigators. The website is professionally designed, with clear navigation and comprehensive content about their products and partnerships.

I

Insight Technology Solutions, LLC

insighttsi.com

40

Insight Technology Solutions, LLC is a well-established Federal contractor headquartered in the National Capital Region, with over 20 years of experience delivering management consulting, business operations, and engineering solutions to Federal agencies. The company holds multiple government contract vehicles and certifications such as ISO 9001:2015, ISO/IEC 20000-1:2018, and CMMI Maturity Level 3, demonstrating a commitment to quality and compliance. Their target audience primarily includes U.S. government agencies, particularly in sectors like maritime, IT, and cybersecurity services. Technically, the website is built on the Wix platform utilizing modern JavaScript frameworks like React and includes various Wix apps for enhanced functionality. While the site is moderately optimized for performance and basic mobile responsiveness, there is room for improvement in accessibility and SEO practices. The hosting is managed by Wix, with standard security headers present, but the SSL certificate is currently invalid, which poses a significant security risk. From a security perspective, the site implements some best practices such as HSTS and secure cookie attributes but lacks a valid SSL certificate and comprehensive security headers. No vulnerabilities or exposed sensitive data were detected, but the absence of a cookie consent mechanism and privacy compliance indicators suggests partial adherence to privacy regulations. Overall, the website presents a professional and trustworthy image with clear business information and contact details. However, critical security improvements, especially regarding SSL certification and privacy compliance, are necessary to enhance trust and protect user data effectively.

F

F-Secure Corporation

f-secure.com

40

F-Secure Corporation is a well-established Finnish cybersecurity company with over 35 years of experience and a global user base exceeding 30 million. The company offers a comprehensive suite of cybersecurity products including antivirus, VPN, identity protection, and scam protection, targeting both consumers and service providers. Their business model is subscription-based, emphasizing digital security and privacy. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and is hosted on Netlify, with good mobile optimization and SEO practices. However, the current SSL/TLS configuration is invalid or missing, which is a critical security concern that needs immediate remediation. Security headers are properly set, but the lack of valid HTTPS reduces the overall security posture. The site complies with GDPR and provides comprehensive privacy and cookie policies. Overall, the domain registration and WHOIS data align well with the company's identity, supporting high legitimacy and trust. Strategic recommendations include renewing SSL certificates, enabling modern TLS protocols, and enhancing security best practices to improve trust and compliance.

D

DCCS GmbH

dccs.at

40

DCCS GmbH is a large Austrian IT company specializing in business IT solutions, digital transformation, and AI applications primarily serving industrial and energy sectors. The company operates multiple offices across Austria, Germany, and Bosnia and Herzegovina, employing over 330 professionals. Their website reflects a mature digital presence with comprehensive service offerings and strong branding. Technically, the site uses modern frameworks such as Liferay and React, with integrated analytics and captcha services. However, a critical security gap exists due to the lack of a valid SSL certificate and proper HTTPS configuration, which undermines user trust and data security. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to meet security best practices.

P

Playerhunter

playerhunter.com

32

Playerhunter is a digital transfer matching platform designed to connect football clubs and players through a smart algorithm. The website presents a niche service targeting the sports technology sector, focusing on facilitating player transfers. The platform uses modern web technologies including React, Cloudinary for media management, Google Maps API for location services, and customer engagement tools like Intercom and Facebook SDK. However, the technical infrastructure shows significant gaps, particularly in security, with no valid SSL certificate and lack of HTTPS enforcement, which severely impacts user trust and data protection. The absence of privacy and cookie policies, as well as contact information, further undermines compliance and credibility. Overall, the site is functional but basic in content and design, with slow performance indicators and minimal SEO and accessibility features.

Chalmers tekniska högskola is a prestigious Swedish technical university founded in 1829, specializing in education and research in technology, natural sciences, transportation, and energy sectors. The institution offers a wide range of undergraduate and graduate programs, conducts cutting-edge research, and actively collaborates with industry and society. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency, targeting students, researchers, and partners. Technically, the site leverages modern frameworks such as Next.js and React, with a CMS likely based on Umbraco. However, performance data is limited, and some improvements could be made in hosting and optimization. Security posture is weakened by the lack of a valid SSL certificate and absence of DNSSEC and CAA records, which are critical for protecting user data and ensuring trust. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security enhancements to meet best practices.

The website overthefuckingtop.com serves as a login gateway redirecting users to Instagram's official login page, which is owned and operated by Meta Platforms, Inc. It primarily facilitates user authentication for Instagram services. The site exhibits professional branding consistent with Instagram and Meta, targeting Instagram users who need to log in to access their accounts. The business model revolves around social media platform user authentication, supporting Instagram's global social networking services. Technically, the site employs modern web technologies including React, JavaScript, and GraphQL, hosted on Meta's infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security headers are well implemented, including strict content security policies and frame denial, but the absence of a valid SSL certificate is a critical vulnerability that undermines the security posture. Privacy and cookie policies are not found on this domain, which is typical for a login redirect page but limits privacy compliance. Overall, the domain is legitimate and consistent with Instagram's operations, but the lack of SSL must be addressed to ensure secure user interactions.

B

Blue Tomato

blue-tomato.com

71

Blue Tomato is a well-established European e-commerce and retail company specializing in boardsport and lifestyle products including snowboarding, skateboarding, surfing, freeski, and streetwear. With over 30 years of experience and more than 70 physical shops across Europe, the company offers a comprehensive product range from over 500 brands, supported by community engagement and specialized services such as snowboard schools and rental shops. The website is professionally designed, highly localized, and optimized for performance and user experience across devices. Technically, the website employs modern web technologies including React and Preact frameworks, utilizes Cloudflare for hosting and security, and integrates advanced analytics and consent management tools. The site demonstrates good SEO and accessibility practices, ensuring broad reach and compliance with relevant regulations. From a security perspective, the site uses a valid SSL certificate but lacks modern TLS protocol support and some security headers like HSTS and OCSP stapling. No critical vulnerabilities were detected, but improvements are recommended to enhance security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Blue Tomato presents a low-risk profile with strong business credibility, good technical infrastructure, and adequate security measures. Strategic recommendations include enhancing SSL/TLS configurations, enabling additional security headers, and implementing domain protection locks to further secure the domain registration.

D

Dr. Reddy’s Laboratories

drreddys.com

64

Dr. Reddy’s Laboratories is a leading multinational pharmaceutical company based in India, focused on providing affordable and innovative medicines globally. The website serves as a corporate presence with branding and basic business description but lacks visible contact or policy pages in the provided snapshot. The technical infrastructure includes modern JavaScript frameworks (React), third-party analytics and consent management tools, and is hosted behind Cloudflare. Security headers are implemented, but TLS protocols are not enabled, indicating a need for SSL/TLS configuration improvements. The cookie consent mechanism is active, supporting GDPR compliance to some extent, though no explicit privacy or terms of service pages were found. Overall, the website demonstrates moderate digital maturity with room for improvement in content richness, security hardening, and compliance transparency.