Security Directory

CNH Industrial N.V. is a leading global manufacturer and technology provider in the agriculture and construction sectors, operating through well-known brands such as Case IH, New Holland, and CASE. The company is publicly listed on the New York Stock Exchange, reflecting its strong market position and investor focus. The website provides comprehensive investor relations content, sustainability reporting, and career opportunities, targeting investors, industry professionals, and customers in agriculture and construction. Technically, the site is built on modern frameworks including React and Sitecore CMS, leveraging Akamai CDN for hosting and performance. However, a critical security gap exists due to the absence of a valid SSL certificate, exposing users to risks and undermining trust. Security headers and policies are well implemented, but the lack of HTTPS significantly impacts the overall security posture. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. Overall, the site is professional and content-rich but requires urgent remediation of SSL issues to ensure secure user interactions.

G

Geberit Gruppe

geberit.com

40

Geberit Gruppe is a leading European manufacturer of sanitary products, recognized as a market leader with a comprehensive product portfolio including installation and flushing systems, piping systems, and bathroom systems. The company targets professionals in the sanitary industry, investors, media, and career seekers, emphasizing innovation, quality, and sustainability. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Microsoft Azure, and includes a consent management system for privacy compliance. Security headers are implemented; however, the SSL certificate is currently invalid, and no modern TLS protocols are enabled, which poses a security risk. Overall, the website is professional, well-structured, and trustworthy, but the SSL issues should be addressed promptly to enhance security and user trust.

M

ManpowerGroup

manpower.com

40

ManpowerGroup operates a comprehensive workforce solutions platform primarily targeting job seekers and employers in the United States. The company offers staffing, recruitment, and workforce management services across multiple sectors including transportation, logistics, engineering, and financial services. The website reflects a mature digital presence with a modern React and Sitecore CMS infrastructure, supported by Cloudflare for hosting and CDN services. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR and related regulations. However, the website's security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which are critical issues that must be addressed to protect user data and maintain trust. Overall, the site is professionally designed with excellent content quality and strong business credibility, supported by consistent WHOIS data and recognized certifications.

S

SoftwareOne Österreich GmbH

comparex.at

40

SoftwareOne Österreich GmbH is a leading enterprise software and cloud solutions provider with a strong global presence and local expertise in Austria. The company offers a broad range of services including cloud migration, application modernization, IT asset management, software sourcing, and customer training. Their business model focuses on B2B services, supporting digital transformation initiatives for enterprises across multiple industries. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates advanced cookie consent and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses a significant risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent improvements in SSL/TLS configuration to enhance security.

C

Ceramiche Atlas Concorde S.p.A.

atlasconcorde.com

40

Atlas Concorde is a well-established Italian manufacturer specializing in ceramic and porcelain tiles for floors, walls, outdoor spaces, furniture, and related products. The company has a mature market presence with 25 years of experience and offers a comprehensive product system including various collections and innovative technologies. The website demonstrates a high level of digital maturity with a modern tech stack based on Next.js and Vercel hosting, providing a professional and user-friendly experience across multiple languages. Security measures are in place with several HTTP security headers configured; however, the absence of a valid SSL certificate and lack of advanced SSL features like OCSP stapling reduce the overall security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website reflects a credible and professional business with a solid online presence.

C

Capgemini

capgemini-consulting.com

40

Capgemini Invent is a prominent management consultancy brand under the Capgemini group, specializing in innovative consulting services that combine strategy, technology, data science, and design to help businesses transform and grow. The website reflects a mature, enterprise-level digital presence with comprehensive content, strong branding, and a wide range of services targeting C-level executives and large enterprises. Technically, the site is built on WordPress with modern frameworks like React and Bootstrap, indicating a contemporary and scalable infrastructure. However, a critical security issue is the lack of a valid SSL certificate, which undermines the site's security posture despite the presence of several security headers. Privacy and cookie policies are well implemented, showing good compliance with GDPR and related regulations. Overall, the site is professional and trustworthy but requires immediate attention to SSL configuration to enhance security and user trust.

ABF Pharmaceutical Services GmbH, part of the GBA Group, specializes in providing comprehensive logistical support for clinical trials, including GMP-certified pharmaceutical services such as kit production, labeling, packaging, storage, and distribution. The company operates internationally with a strong presence in Europe, the USA, and Asia, serving pharmaceutical and biotechnology companies. Their technical infrastructure is modern, leveraging React and Gatsby frameworks hosted on Netlify, with content managed via Storyblok CMS. However, the website lacks a valid SSL/TLS certificate, which significantly impacts its security posture. While security headers are present, the absence of HTTPS and modern TLS protocols exposes the site to risks. Privacy compliance is partially addressed with a cookie consent mechanism but lacks comprehensive GDPR indicators. Overall, the business credibility is strong, supported by clear contact information, certifications, and consistent WHOIS data. Strategic improvements in SSL configuration and security policies are recommended to enhance trust and compliance.

B

Berlitz Corporation

berlitz.com

40

Berlitz Corporation is a well-established language education provider offering a wide range of language and cultural training services for adults, children, businesses, and government entities. The company holds a strong market position, recognized for its customer service excellence and comprehensive language training solutions. The website reflects a mature digital infrastructure leveraging modern technologies such as React, Gatsby, and AWS hosting, providing a responsive and accessible user experience. Security measures include appropriate HTTP headers and HSTS, although the SSL certificate is currently invalid, which is a critical issue to address. Privacy compliance is good with clear privacy and terms of service policies, but lacks a cookie consent mechanism. Overall, the site demonstrates professionalism and trustworthiness, supported by social media presence and industry certifications.

C

CYLEDGE

cyledge.com

40

CYLEDGE is a consulting firm specializing in collaboration, customer centricity, and incremental innovation to create sustainable value. With over 20 years of market experience, the company offers tailored advisory services including value proposition design, organizational development, customer experience, and coaching. Their client portfolio includes notable companies such as VW, Siemens, and Redbull, indicating a strong market position in the technology and consulting sectors. Technically, the website is built on the Wix Studio platform using modern React 18 technology, with integrated Wix Blog and Forms for content and user engagement. However, the site suffers from slow performance and lacks a valid SSL certificate, which impacts security and user trust. Mobile optimization and accessibility are well addressed, but SEO could be improved. From a security perspective, the site lacks HTTPS and advanced security headers, which is a significant risk. No explicit security or incident response policies are found, and no vulnerabilities are detected in the current analysis. Privacy compliance is adequate with clear privacy and cookie policies, including consent mechanisms. Overall, CYLEDGE presents a professional and trustworthy business with a strong digital presence but should prioritize improving security configurations and website performance to enhance user trust and compliance.

S

Saffron Brand Consultants

saffron-consultants.com

32

Saffron Brand Consultants is a well-established global brand consultancy specializing in creating memorable brand experiences through strategy, design, and product delivery. With multiple international offices and a strong portfolio of clients in technology and other sectors, Saffron positions itself as a leader in brand identity and experience ecosystems. The website reflects a professional and consistent brand image with rich multimedia content and comprehensive policy documentation. Technically, the site uses modern frameworks such as Next.js and React, with CDN and video hosting integrations, but lacks HTTPS which is a critical security gap. Security headers are partially implemented but the absence of SSL/TLS severely impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, but urgent security improvements are needed to protect user data and trust.

B

Bit Inc

bit-inc.net

39

Bit Inc is a small technology integration company based in the United States, specializing in network system integration services including copper and fiber cabling, WiFi systems, surveillance, access control, and distributed audio/video solutions. The company positions itself as a reliable service provider with a focus on quality and customer service, partnering with reputable vendors and offering warranties. The website is built on the Wix platform, utilizing modern web technologies such as React and various Wix apps for enhanced user experience. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Additionally, no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site demonstrates good content quality and business professionalism but requires urgent security and compliance improvements.

B

Bank Gutmann

gutmann.at

40

Bank Gutmann is a well-established private banking institution based in Austria, specializing in wealth management, investment advice, and tailored investment solutions since 1922. The website reflects a professional and content-rich digital presence targeting private and institutional banking clients. The technical infrastructure is built on the Liferay CMS platform with modern JavaScript frameworks such as React and Clay UI, indicating a mature digital environment. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture of the website, exposing users to potential risks. Privacy and cookie policies are present and GDPR compliant, with a moderate level of user tracking via Piwik PRO analytics. Overall, the website demonstrates good business credibility and user experience but requires urgent security improvements to protect client data and maintain trust.

A

Austria Center Vienna

acv.at

39

Austria Center Vienna (ACV) is Austria's largest congress center, offering extensive event spaces and modern technology in a central location in Vienna. It serves a wide range of event types including congresses, exhibitions, corporate events, product presentations, galas, and e-sports, targeting both national and international clients. The business is operated by the public company IAKW-AG and holds a strong market position with numerous awards and certifications, emphasizing sustainability and innovation. Technically, the website is built on modern frameworks like Next.js and React, hosted via Cloudflare, and integrates consent management tools such as Usercentrics. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical issue. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to protect user data and enhance trust.

R

Ricoh USA, Inc.

ricoh-usa.com

40

Ricoh USA, Inc. is a leading enterprise providing digital business services and printing solutions primarily targeting businesses, government agencies, and educational institutions in the United States. The company offers a comprehensive portfolio including managed print services, cloud and IT infrastructure, cybersecurity, and business process automation. Their market position is reinforced by industry recognitions such as being named a leader in cloud print services by Quocirca and IDC MarketScape. Technically, the website is built on modern frameworks like React and Next.js, managed via Contentful CMS, and hosted with Cloudflare DNS services. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy and cookie policies are well implemented with consent mechanisms, and contact information is readily available through multiple channels. Overall, the website demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

D

durchblicker GmbH

durchblicker.at

37

durchblicker GmbH operates Austria's largest tariff comparison portal, specializing in consumer savings on household fixed costs such as insurance, energy, finance, and telecommunications. The platform offers a broad range of comparison calculators and personalized expert consultations, positioning itself as a trusted advisor for Austrian consumers. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a strong market presence. Technically, the site leverages modern frameworks like Next.js and React, hosted on Google Cloud infrastructure with Cloudflare DNS services. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of support for modern TLS protocols, exposing users to potential risks. Privacy compliance is well addressed with clear policies and consent mechanisms, and business credibility is reinforced by strong trust signals including eKomi ratings and industry awards. Strategic improvements in SSL/TLS implementation and DNS security would significantly enhance the overall security and trustworthiness of the platform.

M

MeltPrep GmbH

meltprep.com

40

MeltPrep GmbH is a specialized company focused on providing hot-melt extrusion (HME) screening technology, primarily targeting pharmaceutical and material science professionals. Their core offering is the MeltPrep VCM Technology, which enables rapid and lossless sample preparation of thermoplastic materials. The company operates as a small-sized B2B technology provider based in Austria, with a clear market niche in HME screening. The website is built on the Wix platform, leveraging modern web technologies such as React and various Wix apps to deliver content and services. While the site demonstrates good design quality and user experience, it lacks a valid SSL certificate, which is a critical security concern. Basic privacy and cookie policies are present, but no explicit security or incident response policies were found. Overall, the website is professional and trustworthy but requires urgent improvements in security posture to protect user data and enhance trust.

iSi GmbH is a well-established global manufacturer specializing in pressurized gas chargers and related solutions across automotive, components, and culinary sectors. Founded in 1867 in Vienna, the company has a strong market presence with operations in over 90 countries. The website reflects a professional digital presence using modern web technologies such as Next.js and React, supported by a Shopware 6 CMS backend. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact the security posture and user trust. Privacy compliance is well addressed with comprehensive policies and a consent management platform. The company maintains transparency through corporate policies and whistleblower mechanisms, and engages users via social media and career portals.

C

CPB Contractors

cpbcon.com.au

40

CPB Contractors is a well-established major contractor specializing in critical and complex infrastructure projects across Australia and New Zealand. The company operates as a subsidiary of the CIMIC Group and holds a leading market position in sectors such as transport, energy, and construction. Their website reflects a professional business model focused on large-scale infrastructure delivery, with key services including rail, tunneling, roads, water, and new energy projects. The target audience includes government agencies, industry partners, and prospective employees. Technically, the website is built on modern frameworks including Next.js and Material-UI, integrated with Sitecore CMS, and employs Google Analytics and Tag Manager for tracking. However, the site suffers from slow load times and lacks a valid SSL certificate, which critically impacts security and user trust. Mobile optimization and SEO are adequately addressed, but accessibility features are basic. From a security perspective, the absence of HTTPS and security headers represents a significant vulnerability. No explicit security policies or incident response contacts are published, and privacy compliance is limited despite the presence of a privacy policy. The site uses tracking technologies but lacks cookie consent mechanisms, indicating partial privacy compliance. Overall, the website is functional and professional but requires urgent security improvements, especially SSL implementation and enhanced privacy compliance, to reduce risk and improve trustworthiness.

G

GEA Group Aktiengesellschaft

gea.com

40

GEA Group Aktiengesellschaft is a leading global supplier of systems and components primarily serving the food, beverage, and pharmaceutical industries. Founded in 1881 and headquartered in Germany, GEA offers a comprehensive portfolio including machinery, plants, advanced process technology, components, and services. The company is publicly listed and recognized for its sustainability efforts, being part of major sustainability indices. Technically, the website is built on modern frameworks such as Next.js and hosted on Microsoft Azure, with a Sitecore CMS backend, providing a rich and well-structured user experience across multiple languages. However, the security posture is currently weak due to the absence of a valid SSL/TLS certificate and lack of HTTPS support, which poses significant risks to data integrity and user trust. Privacy and cookie policies are well implemented and GDPR compliant, reflecting a strong commitment to data protection. Overall, the website demonstrates high professionalism and business credibility but requires urgent improvements in its security infrastructure to align with best practices and protect its users.

S

Simplity

simplity.eu

40

Simplity is a medium-sized consultancy specializing in data intelligence and customer analytics services, targeting companies of all sizes, particularly in e-commerce and financial services sectors. The company leverages a modern technical infrastructure including React, Gatsby, and Storyblok CMS, hosted on Cloudflare, and employs Google Tag Manager and Cookiebot for analytics and privacy compliance. While the website is professionally designed with excellent content quality and user experience, a critical security issue is the invalid SSL certificate, which undermines the security posture. Privacy and cookie policies are well implemented with consent mechanisms, but no direct contact emails or phone numbers are provided, relying on forms for communication. Overall, Simplity presents a credible and trustworthy business presence with room for security improvements.

B

Bona AB

bona.com

38

Bona AB is a well-established family-owned company founded in 1919, specializing in manufacturing and distributing premium floor installation, renovation, and maintenance products globally. The company operates in over 90 countries with a strong focus on sustainability and product quality. Their website targets professional installers, homeowners, and distributors, offering comprehensive product lines and training. Technically, the website uses modern JavaScript frameworks (React), integrates multiple analytics and marketing tools, and is hosted behind Cloudflare. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is strong with clear policies and cookie consent mechanisms. Business credibility is high with transparent contact information and consistent branding. Overall, the site is professional but requires urgent security improvements.

S

SimCorp A/S

simcorp.com

40

SimCorp A/S is an established enterprise software provider specializing in integrated, multi-asset investment management solutions for leading asset managers globally. The company offers a comprehensive platform, SimCorp One, alongside specialized point solutions such as Axioma risk models. The website reflects a mature business with a strong market position, supported by numerous industry awards and client testimonials. Technically, the site is built on modern frameworks including Next.js and hosted on Vercel, with a headless Sitecore CMS backend, ensuring good digital maturity and user experience. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks to data confidentiality and user trust. Privacy and legal compliance are well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional and credible but requires urgent security improvements to align with best practices.

I

International Workplace Group plc

iwgplc.com

40

International Workplace Group plc (IWG) is a global leader in providing hybrid working solutions through an extensive network of office spaces, coworking locations, virtual offices, and meeting rooms. The company targets businesses and professionals seeking flexible workspace options worldwide, positioning itself as the premier provider in the real estate sector for hybrid work environments. Their business model revolves around workspace-as-a-service, offering scalable and customizable solutions to meet diverse client needs. Technically, the website leverages modern frameworks such as Next.js and Sitecore CMS, hosted on Azure, with integrations including OneTrust for privacy management and Google Tag Manager for analytics. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, although performance metrics are moderate due to lack of explicit data. From a security perspective, the site exhibits several best practices including comprehensive security headers and secure cookie attributes. However, a critical issue is the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly impacts the security posture. Other vulnerabilities include disabled TLS protocols and missing HSTS enforcement. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, while the business and technical aspects of the website are robust and professional, the critical security gaps related to SSL/TLS must be addressed promptly to ensure user trust and data protection. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security headers to elevate the security posture.

EssenceMediacom is a global media agency specializing in creating breakthroughs for brands across diverse industries. With over 10,000 employees operating in 96 markets, the company offers integrated media solutions, analytics, creative futures, and specialist B2B marketing services. The website reflects a strong market position supported by a comprehensive service portfolio and global reach. Technically, the site is built on modern frameworks such as Next.js and React, hosted via Cloudflare, and uses DatoCMS for content management. While the site demonstrates good mobile optimization, accessibility, and SEO practices, performance metrics indicate slower load times that could be improved. Security posture is moderate; although security headers and content security policies are well implemented, the lack of a valid SSL certificate and disabled TLS protocols represent significant vulnerabilities. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is professional and trustworthy but requires urgent SSL and TLS improvements to enhance security and user trust.

fiskaly GmbH is a technology company specializing in cloud-based fiscalization solutions tailored for European markets including Germany, Austria, Spain, Italy, and France. Their services focus on enabling retailers and POS providers to comply with complex fiscal regulations through APIs and cloud services. fiskaly holds a strong market position as a leading provider of cloud TSS solutions in Germany and is expanding its footprint across Europe. The website demonstrates a professional, well-branded presence with comprehensive content, customer testimonials, and partner endorsements. Technically, the website is built on a modern Next.js framework hosted on Netlify, leveraging React and various marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security issue is present due to an invalid or missing SSL certificate and disabled TLS protocols, which significantly impacts the security posture. Security-wise, fiskaly implements several best practices including HSTS and security headers, and holds ISO 27001 certification, indicating a mature security framework. Despite this, the lack of a valid SSL certificate and TLS support is a major vulnerability that must be addressed urgently to protect user data and maintain trust. Overall, fiskaly presents a credible and professional business with strong compliance and technical capabilities but must remediate critical SSL/TLS issues to ensure secure and trustworthy operations online.

E

Eversheds Sutherland

eversheds.at

40

Eversheds Sutherland is a global law firm with a strong presence in Austria, offering a wide range of legal services across multiple sectors including banking, energy, technology, and real estate. The firm positions itself as a responsible business focused on helping clients, people, and communities to thrive. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to business clients seeking legal expertise. Technically, the site is built on a modern stack including React and Sitecore CMS, hosted on Microsoft Azure, and integrates various analytics and marketing tools. However, performance is currently slow, and there is room for improvement in SSL/TLS configuration and security hardening. Security posture is a concern due to the invalid SSL certificate and lack of enabled TLS protocols, which exposes users to risks and undermines trust. Despite strong security headers and content security policies, the absence of proper HTTPS implementation is a critical vulnerability. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and maintain compliance. Strategic recommendations include fixing SSL issues, enabling modern TLS, and enhancing session security to align with best practices.

Broadcom Inc. is a global leader in technology, specializing in semiconductor products, enterprise software, and security solutions. The website reflects a professional and consistent brand presence targeting enterprise customers and technology professionals. The technical infrastructure leverages modern web technologies such as React and Cloudflare CDN, with extensive use of third-party marketing and analytics tools to support business operations and user engagement. However, the website currently suffers from a critical security shortfall due to the absence of a valid SSL certificate and lack of TLS protocol support, which significantly impacts its security posture. While security headers are well configured, the lack of HTTPS undermines user trust and data protection. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site demonstrates good business credibility but requires urgent security improvements to align with best practices.

I

Immobilien Scout GmbH

immobilien.net

37

Immobilien.net is a well-established Austrian real estate platform operated by Immobilien Scout GmbH, offering a broad range of residential and commercial property listings. The website targets individuals and investors seeking to rent or buy properties in Austria, providing expert services and a knowledge portal. Technically, the site uses modern frontend technologies such as React and is hosted on AWS CloudFront CDN, ensuring good mobile optimization and SEO. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw, severely impacting the site's security posture. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, while the business and content quality are good, the lack of HTTPS significantly reduces trust and security.

Electrolux is a globally recognized leader in household appliances, offering a wide range of products including cooking, cooling, laundry, vacuum cleaners, and small kitchen appliances. The website targets Finnish consumers, providing comprehensive product information, promotions, and support services. The digital infrastructure is built on modern technologies such as Next.js, ensuring a responsive and user-friendly experience. While the site employs multiple analytics and marketing tools for personalization and tracking, it maintains good privacy compliance with clear cookie and privacy policies. Security headers are implemented, but the absence of a valid SSL certificate and some advanced security features reduces the overall security posture. The domain registration aligns well with the business identity, confirming legitimacy. Strategic improvements in SSL management and enhanced security practices are recommended to strengthen trust and compliance.

U

Ubisoft Nadeo

nadeo.com

40

Ubisoft Nadeo is a well-established video game development studio based in Paris, France, known for its innovative multiplayer games such as Trackmania and Shootmania. As a subsidiary of Ubisoft, it benefits from a strong market position and a mature digital presence. The website content is professional, well-structured, and targets gamers interested in competitive and virtual reality gaming experiences. Technically, the site uses modern frameworks like React and Express, hosted on AWS infrastructure with CDN support, but lacks a valid SSL certificate and HTTPS enforcement, which is a critical security gap. Security headers are partially implemented, and no major vulnerabilities are detected, but the absence of TLS protocols and HSTS reduces the security posture significantly. Privacy compliance is good with clear privacy and cookie policies, and GDPR considerations are addressed. Contact information is primarily via support portals and social media, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

D

Dunelm

dunelm.com

40

Dunelm is a prominent UK-based retailer specializing in homeware, furniture, and related products, offering a comprehensive e-commerce platform alongside physical stores. The website demonstrates a mature digital presence with extensive product categories, clear navigation, and strong branding. Technically, the site leverages modern technologies including React, Algolia for search, and integrates multiple third-party services for payments, analytics, and marketing. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. While security headers are present, the lack of proper TLS configuration exposes the site to significant risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR. Overall, the site is professional and trustworthy from a business perspective but requires urgent remediation of its SSL/TLS configuration to ensure user data protection and trust.

F

Freshfields

freshfields.com

40

Freshfields is a leading global law firm serving the world’s biggest international organizations with comprehensive legal advisory services. The firm is well-positioned in the market with elite rankings and a strong brand presence. Their website reflects a mature digital infrastructure using modern web technologies such as React and Next.js, hosted on Cloudflare with extensive use of analytics and marketing tools. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses a critical risk to secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure client interactions.

C

CloudBees, Inc.

cloudbees.com

40

CloudBees, Inc. is a leading enterprise software company specializing in continuous integration and continuous delivery (CI/CD) solutions, primarily based on Jenkins. The company offers a comprehensive suite of DevOps tools and platforms designed to accelerate software delivery, improve developer productivity, and ensure security and compliance at scale. CloudBees holds a strong market position as the #1 Jenkins enterprise CI/CD platform provider, serving large enterprises globally with a focus on technology sectors. Their business model includes SaaS and on-premises offerings, targeting enterprise development teams and IT executives. Technically, CloudBees employs modern web technologies such as React and Next.js, hosted on AWS infrastructure with integrations to major cloud providers. The website demonstrates good digital maturity with responsive design, SEO optimization, and accessibility considerations. Marketing and analytics tools are implemented with user consent mechanisms, reflecting privacy compliance. From a security perspective, while the website implements multiple security headers and policies, a critical issue is the invalid or missing SSL certificate and disabled TLS protocols, which significantly impact the security posture. The company maintains security policies, incident response contacts, and certifications such as SOC 2 and ISO 27001, indicating a mature security framework. However, immediate remediation of SSL and TLS configurations is necessary to protect user data and maintain trust. Overall, CloudBees presents a professional and trustworthy online presence with strong business credibility and technical infrastructure. Addressing the SSL and TLS issues will elevate their security posture and align with their enterprise-grade offerings.

M

Merkur Versicherung AG

merkur.at

40

Merkur Versicherung AG is Austria's oldest insurance company, specializing in private health, accident, life, property, and legal protection insurance. Positioned as the second largest private health insurer in Austria, it serves a broad audience including private customers, employees, and businesses. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on Liferay DXP with React and Clay UI components, but suffers from critical SSL misconfiguration that undermines its security posture. Security headers are well implemented, but the lack of a valid SSL certificate and disabled TLS protocols present significant risks. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent remediation of SSL issues to ensure secure user interactions.

U

UNTHA shredding technology GmbH

untha.com

29

UNTHA shredding technology GmbH is a well-established manufacturer specializing in industrial shredding machines for various waste and recycling applications. With over 50 years of experience and a global presence including subsidiaries in the US, the company offers tailored shredding solutions for materials such as residual wood, metal, plastics, electronic waste, and more. The website reflects a professional and comprehensive digital presence with detailed product information and customer testimonials. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS CloudFront, and integrates privacy and analytics tools such as Cookiebot, Google Tag Manager, and Matomo. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that significantly impacts the site's security posture. Security headers are properly configured, but the lack of TLS protocols and certificate transparency compliance are notable vulnerabilities. Overall, the site is trustworthy and business credible but requires urgent security improvements to protect user data and enhance trust.

D

Dorner Electronic GmbH

dorner.at

35

Dorner Electronic GmbH is a medium-sized Austrian company specializing in technology and software solutions for concrete manufacturers, including ready-mix, precast concrete, dry batch, and bulk material sectors. The company positions itself as a European market leader with a global presence through subsidiaries and partner networks. Their offerings include automation solutions, software products, and apps that digitalize and optimize production processes from order to invoicing. Technically, the website is built on modern frameworks such as Next.js and React, hosted on HostingHub Cloud, and demonstrates good mobile optimization and SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

Tommy Hilfiger is a globally recognized fashion brand offering a wide range of apparel and accessories for men, women, and children through its official online shop. The website targets fashion-conscious consumers and provides a comprehensive e-commerce platform with seasonal collections, sales, and a membership program. The technical infrastructure leverages modern web technologies including Next.js, React, and Contentstack CMS, supported by a robust CDN via Akamai and integrated with multiple third-party services for analytics, marketing, and payment processing. Despite strong security header implementations, the absence of a valid SSL certificate and lack of HTTPS significantly undermines the security posture of the site. Privacy and cookie policies are well documented and indicate GDPR compliance. Overall, the website demonstrates a high level of professionalism and business credibility but requires urgent attention to its SSL configuration to ensure secure user interactions.

P

ProSiebenSat.1 PULS 4

atv.at

37

ATV.at is the official website of the Austrian TV channel ATV, operated under the parent company ProSiebenSat.1 PULS 4. The site offers streaming of live TV, video on demand, and detailed program guides, targeting German-speaking audiences interested in entertainment and reality TV. The business model is primarily advertising-driven, leveraging partnerships with streaming platforms like JOYN to deliver content. The website demonstrates a high level of digital maturity with modern web technologies such as React and Next.js, providing a responsive and user-friendly experience across devices. However, the site currently lacks a valid SSL certificate, which is a critical security gap. While privacy and legal policies are comprehensive and GDPR compliant, the absence of HTTPS and security headers reduces the overall security posture. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in SSL implementation and security headers are recommended to enhance user trust and compliance.

W

WAFF

waff.com

40

WAFF is a well-established local media company serving Huntsville, Alabama, providing comprehensive news, weather, and sports coverage. The website demonstrates a strong digital presence with rich content, video integration, and community engagement features. The technical infrastructure leverages modern web technologies and Arc Publishing CMS, ensuring good performance and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly impacts the security posture, exposing users to potential risks. Privacy policies and terms of service are well documented, indicating compliance awareness, though cookie consent mechanisms are lacking. Overall, WAFF presents a professional and trustworthy media outlet with room for security enhancements.

T

The United Nations in Vienna

unvienna.org

36

The United Nations in Vienna website serves as the official digital presence of the UN's Vienna-based offices and agencies. It provides comprehensive information about the UN family in Vienna, their initiatives, sustainable development goals, and visitor information. The site targets a broad audience including diplomats, researchers, media, and the general public interested in UN activities. The business model is informational and public service-oriented, reflecting the UN's governmental and non-profit nature. The website is well-branded, consistent, and authoritative in its domain space. Technically, the site uses a combination of AngularJS and React frameworks, served via Apache, with integration of Google Tag Manager for analytics. The site is mobile optimized and has good navigation and content quality. However, performance metrics are unavailable, and accessibility is basic. SEO is moderately implemented with proper meta tags and Open Graph data. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. While some security headers are present, the absence of TLS protocols, cipher suites, DMARC, DNSSEC, and CAA records indicates a weak security posture. No incident response or vulnerability disclosure information is publicly available. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the website is trustworthy and credible given its UN affiliation and mature domain. However, the lack of HTTPS and modern security practices significantly lowers its security score and poses risks to users. Strategic improvements in SSL deployment, email security, and privacy compliance are recommended to enhance trust and security.

R

Reppublika Research

mindtake.com

40

Reppublika Research is a well-established full-service market research institute specializing in data-driven media and consumer research across Germany, Austria, and the CEE region. With over two decades of experience, the company offers comprehensive quantitative, qualitative, and behavioral research services, supported by proprietary panels and advanced technical capabilities. Their client portfolio includes major corporations such as Google, IKEA, and Allianz, underscoring their strong market position and credibility. Technically, the website is built on the Wix platform, leveraging a modern tech stack including React 18 and various Wix apps, ensuring a professional and content-rich online presence. However, the security posture is currently limited by the absence of a valid SSL certificate and proper HTTPS configuration, which poses a significant risk and impacts user trust. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the company demonstrates strong business credibility and digital maturity but should prioritize improving its security infrastructure to enhance trust and protect user data.

Digital Realty Trust operates a global platform of data centers and colocation services under the PlatformDIGITAL® brand, serving a broad range of enterprise, cloud, and network customers. The company is a market leader with a large global footprint, extensive certifications, and a strong partner ecosystem including AWS, Google Cloud, IBM, Oracle, NVIDIA, HPE, and Microsoft Azure. The website content is rich, professionally designed, and well-structured, targeting enterprises needing secure, scalable, and interconnected IT infrastructure. Technically, the site uses modern frameworks like Next.js and React, with integrations for marketing and analytics tools such as Marketo and VWO. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that impacts trust and security. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the site demonstrates high business credibility but requires urgent improvements in SSL/TLS configuration to enhance security.

D

DS Smith

dssmith.com

40

DS Smith is a leading international manufacturer specializing in sustainable packaging solutions, paper products, and recycling services. The company positions itself as a global leader in sustainability within the packaging industry, targeting businesses seeking eco-friendly and innovative packaging and recycling options. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistency. Technically, the site uses modern web technologies including React, Google Tag Manager, Google Analytics, and Microsoft Application Insights, hosted behind Cloudflare for performance and security. However, the SSL certificate is currently invalid or missing, which undermines the security posture. The site implements strong security headers and content security policies but has a notable subdomain takeover vulnerability on shop.dssmith.com. Privacy and cookie policies are present with consent mechanisms, indicating good GDPR compliance. Contact information is primarily via forms and physical address, with no explicit emails or phone numbers on the homepage. Social media presence is robust and consistent with corporate branding.

A

at-visions GmbH

at-visions.com

35

at-visions GmbH is a medium-sized Austrian company specializing in hospitality technology solutions including mobile apps, hotel TV, professional WIFI, and digital signage. The company targets hotels and hospitality businesses, offering integrated guest experience platforms and IT consulting services. Their website demonstrates a strong market position with numerous reputable hotel clients and technology partners. Technically, the website is built on WordPress with modern frameworks and includes accessibility and SEO optimizations. However, the absence of a valid SSL certificate and lack of modern TLS protocols represent critical security weaknesses. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the business appears credible and professional, but urgent improvements in security infrastructure are recommended.

G

GE HealthCare

gehealthcare.com

40

GE HealthCare is a leading enterprise in the healthcare technology sector, specializing in precision health solutions including imaging systems, ultrasound, patient care, pharmaceutical imaging agents, and digital healthcare solutions. The company targets healthcare providers and clinicians, offering integrated technologies to improve patient outcomes and operational efficiency. The website reflects a mature, well-established business with a strong market position and comprehensive service offerings. Technically, the website is built on a modern stack including React and Sitecore CMS, with extensive use of analytics and marketing tools such as Google Tag Manager, Adobe Marketing Cloud, and New Relic. The site is well-optimized for mobile and accessibility, though performance is moderate due to large page size and resource count. Security posture is a concern due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical issue. Other security best practices like HSTS and OCSP stapling are also missing. The domain is mature and registered consistently with the business claims, enhancing trustworthiness. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling modern TLS protocols, and improving security headers and mechanisms.

Takeda Pharmaceutical Company Limited is a leading global biopharmaceutical company headquartered in Japan, focused on research, development, and commercialization of innovative medicines across multiple therapeutic areas including oncology, rare diseases, neuroscience, and vaccines. The website serves a diverse audience including patients, healthcare professionals, investors, and job seekers, offering comprehensive corporate, scientific, and investor information. Technically, the site is built on modern frameworks such as Next.js and hosted on Vercel with Cloudflare CDN, ensuring good performance and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. Privacy and cookie policies are well implemented with consent mechanisms, and the site demonstrates good compliance with GDPR. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

J

JOANNEUM RESEARCH Forschungsgesellschaft mbH

joanneum.at

27

JOANNEUM RESEARCH Forschungsgesellschaft mbH is a leading Austrian research institution specializing in applied research and technology development across multiple sectors including healthcare, digital technologies, robotics, and environmental sciences. The organization serves industry, government, and research partners with innovative solutions and maintains a strong market position supported by international collaborations and a large workforce. The website reflects a mature digital presence with comprehensive content and professional design, targeting stakeholders in research and industry. Technically, the site is built on WordPress with Elementor and uses modern web technologies, but suffers from a critical lack of HTTPS due to an invalid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are well implemented, indicating good GDPR compliance. However, the absence of explicit security policies and incident response information suggests room for improvement in security governance. Overall, the site is trustworthy and professional but requires urgent security enhancements to protect user data and improve trust.

W

wikifolio Financial Technologies AG

wikifolio.com

37

wikifolio Financial Technologies AG operates a sophisticated online investment platform focused on European stocks and social trading. The platform enables investors worldwide to access trading ideas, create virtual portfolios, and invest in wikifolio certificates listed on stock exchanges in Germany, Austria, and Switzerland. The company is well-positioned in the European finance sector with a medium-sized operation and a strong brand presence supported by partnerships and positive testimonials. Technically, the website leverages modern web technologies including React, Next.js, and Chakra UI, hosted on Azure infrastructure with CDN support for performance. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a professional user experience. From a security perspective, the site currently lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability. Security headers are partially implemented but key features like HSTS and OCSP stapling are missing. Privacy compliance is strong with comprehensive policies and clear contact information, but incident response and security policy disclosures are absent. Overall, the website presents a trustworthy and professional business front but requires urgent improvements in SSL/TLS security to protect user data and maintain trust. Strategic recommendations include immediate SSL certificate installation, enabling TLS 1.2+, and enhancing security headers and incident response readiness.

T

TRIGO GmbH

trigo.at

39

TRIGO GmbH is a specialized technology company focused on delivering tailored software solutions that bridge user-centric design with technical expertise. Their market position is that of a cloud-native expert, offering key services such as Data System Development (notably Exosphere), OpenShift consulting and migration, and Single Sign-On solutions leveraging Keycloak. The company targets businesses seeking to scale IT infrastructure, integrate applications, and leverage data effectively. Technically, the website is built on modern frameworks like Next.js and Chakra UI, hosted on Vercel, but lacks HTTPS which is a critical security shortfall. The absence of SSL/TLS exposes the site to risks and undermines trust. Security headers are present but insufficient without HTTPS. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

T

TopLab - Toplak Laboratory

toplab.at

19

TopLab - Toplak Laboratory is a small Austrian technology consulting and research business specializing in cybernetics, app creation, technology scouting, and contract research. The website presents a professional image with detailed descriptions of services and a focus on niche technological fields such as artificial intelligence, robotics, and neural modeling. The target audience includes investors, potential partners, and clients seeking specialized consulting and development services. Technically, the website is built using React and JavaScript but suffers from slow load times and basic mobile optimization. Security posture is weak due to the absence of HTTPS, lack of security headers, and no advanced DNS security features. Privacy compliance is poor with no visible privacy or cookie policies and no GDPR indicators. Contact information is minimal, relying on LinkedIn for direct communication. Overall, the site is functional but requires significant improvements in security and compliance to enhance trust and protect users.