Security Directory

E

Evitec Solutions

evitec.se

44

Evitec Solutions is a Nordic technology company specializing in software solutions and consultancy services for the finance sector. Established in 1992, it serves banks, insurers, and financial institutions with a broad portfolio including AI, cloud, data analytics, and tailored IT operations. The company positions itself as a challenger and innovator in the Nordic fintech market, emphasizing long-term customer partnerships and modern technology adoption. Technically, the website is built on WordPress with Yoast SEO and Piwik PRO analytics, demonstrating good digital maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a professional and trustworthy business with strong compliance and user experience focus.

U

Unomaly AB

unomaly.com

44

Unomaly AB is a Swedish technology company specializing in algorithmic log monitoring solutions designed for modern IT teams and data centers. The company focuses on ingesting and analyzing log data from diverse sources without requiring predefined formats, enabling anomaly detection, root cause analysis, and consistent environment modeling. Since its acquisition by LogicMonitor in January 2020, Unomaly has ceased independent development to integrate its vision into LogicMonitor's platform. The website reflects this transition and provides resources for existing customers. Technically, the site is built using modern frameworks such as Next.js and Prismic CMS, with embedded multimedia content and responsive design. Security posture is moderate, with HTTPS presumably enabled but lacking explicit security headers and policies. Privacy compliance is basic, with cookie consent implemented but no detailed GDPR compliance statements or data protection officer information. Overall, the website is professional and informative but could improve in security transparency and privacy details.

T

Tickets for events across the Nordic region

tickster.com

45

Tickster.com is an online ticketing platform focused on providing tickets for concerts, festivals, theater performances, and other events across the Nordic region. The website targets consumers in Nordic countries such as Norway, Sweden, and Denmark, offering localized access points for each country. The business model centers on event ticket sales and serves as a regional player in the event ticketing market. The site presents a professional and consistent brand image with good design and user experience, supporting mobile optimization and clear navigation. From a technical perspective, the website leverages modern technologies including Google Tag Manager, Cloudflare Insights, and Google Fonts, hosted via AWS Cloudfront CDN. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. However, explicit security headers are not visible in the HTML content, and no CMS or frameworks are clearly identified. Performance is moderate with good mobile responsiveness and basic accessibility features. Security posture is generally good with HTTPS enforced and cookie consent implemented via Cookiebot, indicating some privacy compliance efforts. However, the absence of visible privacy policy, terms of service, and contact information for security incidents reduces compliance confidence. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain uses privacy protection for WHOIS data, which is justified for this commercial platform. Overall, the site appears legitimate and trustworthy but could improve transparency and security practices. The overall risk assessment is moderate with recommendations to publish privacy and terms policies, add security headers, provide clear contact channels for incident response, and enhance accessibility. These improvements would strengthen compliance, user trust, and security posture.

T

Trafikverket

trafikverket.se

46

Trafikverket is the Swedish government agency responsible for the long-term planning and management of the country's transport systems, including road traffic, railways, shipping, and aviation. The website trafikverket.se serves primarily private individuals with comprehensive information on traffic conditions, driving licenses, and ongoing infrastructure projects. The agency holds a strong national position as the authoritative source for transport infrastructure in Sweden, offering key services such as traffic information, booking for driving tests, and updates on major construction projects. Technically, the website is built on the EPiServer CMS platform and utilizes modern web technologies including Bootstrap for responsive design and SVG for graphics. The site demonstrates good performance and accessibility, with clear navigation and mobile optimization. Privacy and cookie policies are well implemented, featuring a consent mechanism and detailed information pages. Analytics are handled via a proprietary Trafikverket Analytics Tag Manager, with moderate user tracking. From a security perspective, the site enforces HTTPS, employs strict referrer policies, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The WHOIS data confirms the domain's legitimacy as a Swedish government entity, consistent with the website's content and business claims. Overall, Trafikverket.se is a professional, trustworthy, and well-maintained government website with strong content quality and technical implementation. Strategic recommendations include publishing formal security and incident response policies, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

F

Fraport AG

fraport.com

51

Fraport AG is a globally leading airport operator active at 29 airports across four continents, headquartered in Frankfurt, Germany. The company provides comprehensive airport and terminal operations, including ground handling, security, and infrastructure development. Their business model includes airport investments, consulting, and service offerings, with a strong emphasis on sustainability and digital transformation. The website reflects a mature digital presence with modern CMS technology, comprehensive content, and clear navigation tailored to investors, passengers, and partners. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be explicitly confirmed. Privacy compliance is robust with clear policies and GDPR adherence. WHOIS data confirms legitimacy and consistency with the company's public profile. Overall, the site demonstrates professionalism, trustworthiness, and a strategic focus on innovation and sustainability.

R

Rational Intellectual Holdings Limited

pokerstars.com

58

PokerStars, operated by Rational Intellectual Holdings Limited and owned by Flutter Entertainment, is a leading global online poker platform established in 2001. The website offers a comprehensive range of poker games, tournaments, and casino services, targeting online poker enthusiasts worldwide. It holds multiple licenses and certifications, including from the Malta Gaming Authority, ensuring regulatory compliance and player protection. The platform emphasizes secure transactions, responsible gaming, and player fund segregation, reinforcing its market leadership and trustworthiness. Technically, the website employs modern web technologies such as React, Google Tag Manager, Optimizely for A/B testing, and OneTrust for cookie consent management. The site is well-optimized for mobile devices, features fast loading times, and includes accessibility considerations. The content is professionally curated with clear navigation and SEO best practices, supporting a high-quality user experience. From a security perspective, PokerStars enforces HTTPS, implements strong security headers, and provides granular cookie consent options. The site does not expose sensitive data or use vulnerable libraries. However, it lacks a dedicated security policy page and explicit incident response contact details, which are recommended for enhanced transparency and readiness. Overall, PokerStars presents a robust, professional, and secure online poker environment with strong compliance and trust indicators. Strategic improvements in publishing security policies and incident response information would further strengthen its security posture and user confidence.

F

FLITEDECK

flite.bike

57

FLITEDECK is a specialized company offering an innovative smart handlebar product that integrates navigation, connectivity, lighting, and performance tracking tailored for cyclists. The website presents a professional and modern e-commerce platform built using Framer and Shopify technologies, showcasing detailed product information, media coverage, and a clear roadmap. The technical infrastructure leverages Shopify's Storefront API with GraphQL, ensuring dynamic product data management and a responsive user experience. Security posture is strong with HTTPS and no exposed sensitive data, though some security headers and explicit policies are missing. Privacy compliance is basic, with a privacy policy present but lacking detailed GDPR statements and no cookie consent mechanism. Overall, the site is trustworthy and well-positioned in the niche cycling technology market, but could improve in privacy and security transparency.

B

Butter Supply Inc.

framercommerce.com

64

Framer Commerce is a specialized SaaS platform that enables users to design and launch custom Shopify e-commerce stores using the Framer design tool. Positioned as an award-winning plugin, it targets Shopify store owners and no-code builders seeking advanced e-commerce capabilities integrated with a visual design environment. The platform offers features such as live product filtering, multi-currency support, subscription management, and analytics integration, positioning itself as a modern e-commerce stack solution. Technically, the website leverages Framer's framework, Shopify's Storefront API via GraphQL, and integrates analytics tools like Google Analytics and Hotjar, demonstrating a mature and modern digital infrastructure. Security practices include HTTPS enforcement, use of access tokens with limited scope, and secure form handling, although explicit security policies and incident response information are not publicly available. Overall, the site is professional, well-designed, and trustworthy, with minor gaps in privacy compliance such as the absence of a cookie consent mechanism. Strategic recommendations include enhancing privacy compliance, publishing security policies, and providing clearer contact channels to further strengthen trust and compliance.

G

GABALS DNA

gabals.lv

52

Gabals. lv is a Latvian real estate property evaluation platform launched in 2024, providing detailed property reports by aggregating data from multiple authoritative sources such as the State Land Service, Ministry of Agriculture, and environmental registries.

B

Bernd Gruber GmbH

bernd-gruber.at

24

Bernd Gruber GmbH operates as a boutique interior design and craftsmanship firm based in Austria, specializing in high-end interior architecture and handcrafted furniture. The company leverages a rich heritage of 60 years in woodworking combined with 20 years of interior design experience, targeting affluent clients seeking bespoke design solutions. Their business model includes both service delivery through projects and product sales via an online shop. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting their market positioning as a premium provider in the real estate and hospitality sectors. Technically, the website is built on TYPO3 CMS and hosted on Conova infrastructure, utilizing modern web technologies such as SVG graphics and Google Tag Manager for analytics and marketing. However, the site suffers from a critical security shortfall due to the absence of HTTPS, which severely impacts its security posture. Performance metrics are not optimal, indicating room for improvement in loading speed and technical optimization. Mobile responsiveness and SEO are adequately addressed. Security-wise, the lack of SSL/TLS encryption is a major vulnerability, exposing users to potential data interception risks. While some security headers are present, the overall security configuration is basic and requires urgent enhancement. Privacy compliance is well managed with a comprehensive cookie consent mechanism and clear privacy policy, aligning with GDPR requirements. Contact information is transparent and easily accessible, enhancing business credibility. Overall, the website presents a trustworthy and professional front but must prioritize implementing HTTPS and improving security configurations to protect user data and maintain compliance. Strategic recommendations include securing the site with a valid SSL certificate, enabling modern TLS protocols, and enhancing security headers. These steps will significantly improve the site's security score and user trust, supporting the company's premium market positioning.

W

Wolfram

wolfram.com

40

Wolfram is a well-established technology company specializing in computational software, cloud services, and educational programs. With a strong market position and a broad target audience including researchers, educators, developers, and enterprises, Wolfram offers a comprehensive suite of products such as the Wolfram Language, Mathematica, and Wolfram|Alpha. The website reflects a mature digital presence with professional design, clear navigation, and extensive content showcasing their offerings and community engagement. Technically, the site uses a custom framework with modern JavaScript libraries and SVG graphics, but lacks a valid SSL certificate, which is a critical security gap. The absence of HTTPS and security headers reduces the overall security posture and exposes users to potential risks. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting good privacy practices. Overall, the site demonstrates high business credibility and trustworthiness but requires urgent security improvements to protect user data and enhance trust.

A

Altstoff Recycling Austria

ara.at

34

Altstoff Recycling Austria (ARA) is a leading non-profit organization in Austria specializing in circular economy and recycling services, particularly for packaging, electrical devices, and batteries. The website presents comprehensive information about their services, target audiences (businesses and consumers), and their role as a market leader in Austria. The technical infrastructure uses modern web technologies such as nginx, htmx, and lazy loading, hosted on Azure DNS. However, the site lacks HTTPS, which is a critical security deficiency. Security headers are well configured, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to enable HTTPS and enhance user trust.

P

Paradigma Digital

paradigmadigital.com

40

Paradigma Digital is a Spanish technology consulting firm specializing in digital transformation through strategy, technology, and talent experience. Established in 2007, it positions itself as a boutique with a strong focus on cloud native, strategic design, data intelligence, and digital DNA services. The company maintains partnerships with major technology providers such as Google Cloud, Red Hat, AWS, and Microsoft, enhancing its market credibility. Technically, the website uses Apache hosting on Google Cloud infrastructure, modern JavaScript, and SVG graphics, but lacks a valid SSL certificate, which is a critical security gap. Privacy and cookie policies are well implemented with consent mechanisms, reflecting GDPR compliance. The site features extensive social media integration and marketing tools like Google Tag Manager and HubSpot forms, indicating moderate user tracking. Overall, the website is professionally designed with excellent content quality and user experience but requires urgent security improvements to enable HTTPS and modern TLS protocols.

B

Bombardier

bombardier.com

52

Bombardier is a mature enterprise specializing in the design, manufacture, and maintenance of ultra-long-range business jets and specialized defense aircraft. The company targets discerning individuals, businesses, and governments globally, maintaining a strong market position with a comprehensive portfolio of aircraft and support services. The website reflects a high level of professionalism, rich multimedia content, and consistent branding aligned with Bombardier's industry stature. Technically, the site leverages Drupal CMS, modern JavaScript frameworks, and monitoring tools like New Relic, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. However, the absence of HTTPS and security headers presents significant vulnerabilities. Overall, the domain registration is consistent with the business history, reinforcing legitimacy. Strategic improvements in SSL deployment and security configurations are essential to enhance trust and compliance.

M

mohemian services GmbH

mohemian.com

32

mohemian services GmbH is a small Austrian technology consultancy specializing in translating business needs into technology solutions. Their offerings include business strategy, entrepreneurial thinking, experience design, corporate governance, and technical architecture and development. The company targets tech startups, corporate ventures, and clients seeking innovative digital product development. Their market position is that of a niche, visionary technology partner with a focus on professional execution and agile processes. Technically, the website is built on GravCMS, hosted on Hetzner infrastructure, and uses nginx as the web server. The site includes modern SVG graphics and several Grav plugins for markdown notices, forms, and login functionality. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Performance metrics are missing, but the site appears to have good mobile optimization and basic accessibility features. From a security perspective, the site implements several security headers such as HSTS, X-Frame-Options, and X-XSS-Protection, but the absence of HTTPS and TLS protocols severely undermines security posture. No incident response or security policy information is provided, and no vulnerability disclosure or security.txt file is found. Email security could be improved by adding a DMARC record. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy in terms of business presentation but requires urgent improvements in security infrastructure, especially enabling HTTPS with a valid certificate. Adding cookie consent and incident response information would enhance compliance and trust. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include securing the website with HTTPS, implementing cookie consent, publishing security policies, and improving email security.

C

CONFIDA Steiermark Steuerberatung GmbH

confida.at

39

CONFIDA Steiermark Steuerberatung GmbH is a professional tax advisory and auditing firm with a strong regional presence in Austria and Southeast Europe, including Croatia, Serbia, and Slovenia. The company offers a broad range of services such as tax consulting, auditing, corporate consulting, payroll accounting, and controlling. Their market position is that of an established medium-sized firm with multiple subsidiaries and offices, targeting businesses and individuals requiring financial and tax services. The website reflects a professional business model focused on client service and regional expertise. Technically, the website is hosted on an nginx server with DNS managed by net4you.net and uses Matomo analytics for privacy-conscious user tracking. The site employs modern web technologies including SVG graphics and JavaScript modules, and it is optimized for mobile devices with good accessibility and SEO practices. However, performance metrics indicate slow loading times, which could be improved. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability impacting user trust and data protection. While some security headers are present, the absence of TLS protocols and OCSP stapling reduces the overall security posture. Privacy policies and cookie consent mechanisms are implemented, indicating compliance with GDPR requirements, but no explicit security policy or incident response information is provided. Overall, the website is professionally designed and content-rich, supporting the company's credibility and trustworthiness. The main risk lies in the missing SSL/TLS configuration, which should be addressed urgently to protect users and improve the security score. Strategic recommendations include implementing HTTPS, enhancing SSL configuration, and adding security and incident response documentation to strengthen compliance and trust.

D

dwarfs and Giants eG

dwarfsandgiants.org

40

dwarfs and Giants eG is a small Austrian cooperative consultancy specializing in organizational development and new work methodologies. Their website, built on Drupal 10, offers comprehensive content including workshops, client stories, and toolboxes aimed at helping organizations improve work culture and self-organization. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. However, the technical infrastructure lacks a valid SSL certificate and does not support modern TLS protocols, significantly weakening the security posture. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Overall, the business presents itself as credible and trustworthy, but the lack of HTTPS is a critical security gap that must be addressed.

M

Metso

metso.com

40

Metso is a global enterprise specializing in sustainable technologies and end-to-end solutions for aggregates production, mining, and metals refining industries. The company positions itself as a partner for positive change, focusing on improving energy and water efficiency, productivity, and reducing environmental risks. Their offerings include products, parts, services, and advanced digitalization solutions integrating AI and cloud technologies. The website reflects a mature digital presence with comprehensive business information, investor relations, and sustainability commitments. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which poses significant risks to user data and trust. The site employs modern web technologies such as ASP.NET and Vue.js, and integrates analytics tools including Microsoft Application Insights and Hotjar, indicating a moderate level of digital maturity. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website is professional and trustworthy but requires urgent security improvements to enable HTTPS and strengthen its security posture.

S

seele

seele.com

26

Seele is a globally recognized technology leader specializing in façade construction and building envelopes, serving architects, developers, and construction companies with innovative glass façade solutions. The company operates with over 1,000 employees worldwide and maintains a strong market position in the manufacturing and real estate sectors. The website reflects a professional and consistent brand image with comprehensive business information and a clear focus on façade technologies and projects. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics, indicating a moderate level of digital maturity. However, the absence of HTTPS and modern security protocols represents a significant security risk. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

S

Shell Österreich

shell.at

40

Shell Österreich operates a comprehensive website targeting private and business customers in Austria, offering fuel products, electric vehicle charging, car care, and loyalty programs. The website is professionally designed with excellent content quality, clear navigation, and strong brand consistency. The technical infrastructure is based on Adobe Experience Manager with modern web technologies, but suffers from slow load times and lacks a valid SSL/TLS certificate, resulting in no HTTPS support. This is a critical security vulnerability that significantly impacts the site's security posture. Privacy and cookie policies are well documented and GDPR compliant, but no explicit security or incident response policies are found. Overall, the website is trustworthy and credible but requires urgent security improvements.

C

Chemgineering Holding AG

chemgineering.com

25

Chemgineering Holding AG is a well-established consulting and engineering firm specializing in the life sciences sector, particularly in GxP-regulated environments such as pharmaceuticals, biotechnology, fine chemicals, medical technology, cosmetics, diagnostics, and food industries. With over 300 employees and a mature domain age of 27 years, the company positions itself as a preferred partner for multinational and local companies across Europe. Their service offerings include project management, construction management, commissioning, process planning, qualification and validation, and GMP compliance consulting, among others. The website reflects a professional and consistent brand image with detailed project case studies and a clear focus on their target industries.

ReSound Brazil, operated under the global GN Hearing A/S brand, specializes in manufacturing and retailing advanced hearing aids and wireless accessories. The website targets Brazilian consumers and hearing professionals, offering product information, support, and professional services. The company is well-established with a history dating back to 1943 and maintains a strong market position in the healthcare sector. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and consent management, hosted likely on Microsoft Azure infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing user trust. Overall, the site is professional and user-friendly but requires urgent security improvements to protect user data and maintain credibility.

B

BearingPoint

bearingpoint.com

40

BearingPoint is a global management and technology consultancy with European roots, operating in over 70 countries with 13,000 employees. The company offers a broad range of consulting services, products, and capital advisory, targeting enterprises across multiple industries including technology, finance, manufacturing, and government sectors. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to enterprise clients. Technically, the site uses Apache server technology, modern JavaScript frameworks, and cookie consent management tools, but lacks a valid SSL certificate and has disabled TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols.

C

Coface

coface.com

40

Coface is a global leader in trade credit insurance, debt collection, and business information services, supporting over 100,000 clients across approximately 200 countries. Founded in 1946 and headquartered in France, the company offers comprehensive solutions to help businesses manage credit risks and optimize credit management. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience of businesses seeking credit risk solutions. Technically, the site uses modern web technologies including a CDN (CloudFront), a CMS (Ibexa), and integrates advanced consent management and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which is a critical issue that must be addressed to ensure secure communications. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Coface's website demonstrates high business credibility and professionalism but requires urgent SSL/TLS remediation to improve security and trust.

C

Casinos Austria AG

casinos.at

40

Casinos Austria AG operates a comprehensive network of casinos across Austria, providing a wide range of gaming options including poker, slot machines, and table games, complemented by hospitality services such as restaurants and event locations. The website serves as the official digital presence, targeting casino visitors and players with detailed information on locations, events, membership benefits, and promotional packages. The company holds a strong market position as a leading casino operator in Austria, supported by consistent branding and trust indicators such as recognized certifications and responsible gaming initiatives. Technically, the website is built on TYPO3 CMS and employs modern web technologies including JavaScript and SVG graphics. It integrates multiple analytics and marketing tools with user consent mechanisms, ensuring good digital maturity. The site is mobile-optimized and accessible, with good SEO practices and clear navigation enhancing user experience. From a security perspective, while the site implements several important security headers and content security policies, it currently lacks a valid SSL certificate and does not support modern TLS protocols, significantly weakening its security posture. This exposes the site to risks related to unencrypted traffic and potential interception. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The presence of a responsible disclosure page indicates a proactive approach to vulnerability management. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to secure user data and maintain trust. Strategic recommendations include obtaining a valid SSL certificate, enabling TLS 1.2 or higher, and fully activating HSTS. These steps will enhance security, compliance, and user confidence, supporting the company’s strong market presence and digital strategy.

Sullissivik.gl is the official government portal for public services in Greenland, targeting both citizens and businesses. It provides a centralized platform for accessing self-service forms, information on cultural, housing, equality, and transport topics, and digital communication channels. The site is primarily in Greenlandic with options for Danish and English, reflecting its public service nature. The portal is positioned as a key digital interface for government-citizen interaction in Greenland. Technically, the site uses modern JavaScript libraries, SVG icons, and integrates Matomo analytics for user tracking. However, the site suffers from a critical lack of a valid SSL certificate and HTTPS enforcement, which severely impacts its security posture. No advanced security headers or policies are detected, and privacy compliance is basic with only a cookie policy present. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and build trust.

M

Maiaspace

maia-space.com

54

Maiaspace is a small European space transportation company focused on designing, manufacturing, and operating eco-responsible reusable mini launchers for space mobility services. Their business model targets satellite operators and space industry customers requiring flexible launch solutions to Low Earth Orbit and other orbits. The website is built on WordPress with good SEO practices and mobile optimization but lacks a valid SSL certificate, resulting in no HTTPS support. Security posture is weak due to missing TLS protocols and security headers beyond HSTS. Privacy compliance is minimal with no visible privacy or cookie policies. Contact information is limited to a contact page without direct emails or phone numbers. Overall, the site presents a professional image with consistent branding and relevant content but requires urgent security and privacy improvements.

A

Arianespace

arianespace.com

50

Arianespace is a leading global satellite launch company providing a versatile family of launch vehicles including Ariane 6, Soyuz, and Vega C. The company serves commercial and institutional customers worldwide, offering launch services to various orbits and ground services expertise. The website reflects a mature digital presence with comprehensive content, strong SEO, and active social media engagement. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which poses a critical risk to secure communications. Privacy compliance is supported by clear policies but lacks an explicit cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

W

WebBuilds B.V.

documentator.io

40

Documentator is a technology SaaS company providing a documentation platform designed to simplify the creation and management of product and developer documentation. Positioned as an affordable alternative to established documentation tools, it targets developers and product teams seeking an easy-to-use, flexible solution with features like custom domains, translation support, and analytics. The business operates under WebBuilds B.V., founded in 2020, and offers tiered subscription plans with a free trial to attract users. Technically, the website employs modern JavaScript frameworks (likely Vue.js), Cloudflare DNS services, and Matomo analytics configured for privacy. However, the site suffers from a critical security shortfall due to an invalid SSL certificate and lack of HTTPS enforcement, which significantly impacts its security posture. Performance is moderate to slow, with good mobile optimization and basic accessibility features. Security-wise, the absence of HTTPS, missing security headers, and lack of DNS security records (DMARC, CAA) present vulnerabilities that could expose users to risks. Privacy compliance is reasonably addressed with a comprehensive privacy policy and GDPR references, but no cookie consent mechanism is implemented. Business credibility is supported by clear policies, testimonials, and transparent pricing. Overall, Documentator is a functional and professional SaaS platform with solid business fundamentals but requires urgent improvements in security infrastructure to protect user data and enhance trust.

A

ArianeGroup

ariane.group

49

ArianeGroup is a leading European aerospace company specializing in civil and military space transportation, including the development and manufacturing of launchers such as Ariane 6 and Maia. The company positions itself as a global industrial leader supporting Europe's independence and security in space. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation targeting aerospace industry stakeholders, government entities, and potential employees. Technically, the site is built on WordPress with SEO optimizations and uses modern web technologies, but suffers from slow load times and lacks a valid SSL certificate, which impacts security posture. Security-wise, the absence of HTTPS and security headers is a critical vulnerability, although no WAF or blocking mechanisms are detected. Privacy compliance is supported by a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the site is professional and trustworthy but requires urgent improvements in security configurations to protect user data and enhance trust.

L

Laracon

laracon.us

40

Laracon.us is the official website for Laracon 2025, the flagship Laravel conference targeting Web Artisans and the global PHP developer community. The site provides comprehensive information about the event, including dates, venue, speakers, accommodations, and sponsors, positioning itself as a key industry event in the technology sector. The business model revolves around event organization and community engagement, with a strong emphasis on sponsorship and ticket sales through third-party platforms.

D

dmarcian

dmarc.io

61

dmarc.io is a specialized resource center focused on DMARC (Domain-based Message Authentication, Reporting & Conformance) compliance and email security. Powered by dmarcian.com, it provides public information about DMARC sources, forwarders, and best practices for sending email on behalf of others. The site targets deployers, operators, and developers interested in DMARC deployment and compliance. It operates as a niche information repository with a clear focus on email authentication and security standards. Technically, the website uses modern JavaScript modules and integrates analytics tools such as Google Tag Manager and Hotjar for user behavior tracking. Hosting and DNS services are provided by Google Cloud DNS. However, the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, which is a significant security shortfall. Performance is moderate, with a page load time of approximately 3.7 seconds and a moderate number of resources. From a security perspective, the site enforces a strict DMARC policy at the DNS level with a reject policy, which is a strong positive indicator for email security. However, the absence of HTTPS, lack of security headers, and missing advanced TLS protocols reduce the overall security posture. No privacy or cookie policies are present, and no contact forms or direct contact information are provided on the site, limiting transparency and compliance with privacy regulations. Overall, dmarc.io serves as a valuable technical resource for DMARC-related information but requires significant improvements in web security practices, privacy compliance, and transparency to enhance trustworthiness and user confidence.

S

SIDN fonds : een sterk internet voor iedereen

sidnfonds.nl

40

SIDN fonds is a Dutch non-profit organization dedicated to supporting innovative internet projects that contribute to a safer and more inclusive internet. With over 400 projects funded since 2015, it holds a strong position within the Dutch internet community, focusing on themes such as cybersecurity, digital accessibility, and public values. The website provides comprehensive information about its mission, funding opportunities, and supported projects, targeting innovators and organizations involved in internet initiatives. Technically, the website is hosted on Google Cloud infrastructure using OpenResty as the web server. It employs a robust Content Security Policy and integrates multiple analytics and marketing tools including Piwik PRO and Google Analytics. The site is mobile-optimized with good accessibility and SEO practices. However, a critical security gap is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the security posture. Security-wise, while several security headers are implemented, the lack of HTTPS and disabled TLS protocols expose the site to risks such as data interception and man-in-the-middle attacks. No explicit security or incident response policies are published, and no vulnerability disclosure mechanisms are evident. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, the site is professionally designed and content-rich but requires urgent improvements in SSL/TLS deployment to enhance security and trustworthiness. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing security headers to protect users and data effectively.

M

Munich Urban Colab GmbH

munich-urban-colab.de

40

Munich Urban Colab GmbH operates a prominent innovation and coworking space in Munich, Germany, focused on developing and testing solutions for the future city through interdisciplinary and cross-sector collaboration. Positioned as one of Europe's largest startup centers, it serves startups, entrepreneurs, researchers, and public sector entities with services including coworking spaces, event venues, and community building. The website reflects a professional and well-branded digital presence with strong partnerships from major corporations and academic institutions. Technically, the site uses modern JavaScript modules, animation libraries, and a cookie consent management platform, but suffers from slow load times and lacks a valid SSL certificate, which impacts security posture. Security practices are basic, with no security headers or HSTS enabled, and no incident response or vulnerability disclosure policies found. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional but requires urgent improvements in SSL and security configurations to enhance user trust and compliance.

G

GMX

gmx.de

68

GMX is a leading German FreeMail and media portal offering a wide range of services including free email accounts, cloud storage, news, entertainment, and affiliate cashback programs. The website targets German-speaking users and maintains a strong market position with comprehensive content and service offerings. Technically, the site employs modern JavaScript frameworks, modular scripts, and SVG graphics, hosted primarily by 1&1 IONOS. However, the SSL/TLS configuration is currently invalid, which poses a significant security risk. The site implements good privacy and cookie policies compliant with GDPR, but lacks explicit public security or incident response policies. Advertising and tracking are extensively used, including Adition and Criteo networks. Overall, the website is professionally designed with good user experience and content relevance, but requires urgent security improvements to protect user data and trust.

U

Unified Streaming

unified-streaming.com

70

Unified Streaming is a specialized technology company focused on video delivery solutions that simplify and optimize streaming content for global clients. Their product suite addresses various streaming needs including VOD packaging, live streaming, ad insertion, and media processing, positioning them as a key player in the media technology industry. The website reflects a mature digital presence with strong branding, comprehensive content, and a user-friendly interface. Technically, the site is built on Webflow CMS, leveraging Cloudflare CDN and modern JavaScript frameworks, with good mobile optimization and fast performance. Security posture is solid with proper HTTPS enforcement, security headers, and cookie consent mechanisms, though improvements are needed in TLS protocol support and DNS security. Overall, the company demonstrates a professional and trustworthy online presence with room for enhanced security transparency and compliance documentation.

V

Virgin Money UK PLC

cybg.com

75

The website demonstrates a generally sound security posture with no critical vulnerabilities detected and strong scores in email security, network security, and DNS health. However, significant gaps exist in compliance with GDPR and NIS2 regulations, reflected by low module scores of 43 and 25 out of 100 respectively. Key risks include the absence of cookie policies and consent mechanisms, lack of comprehensive security and incident response documentation, and missing critical headers. These deficiencies expose the business to regulatory penalties, reputational damage, and increased risk of data breaches. SSL/TLS configurations need attention to ensure trust and secure communications. Addressing these issues will mitigate compliance risks and strengthen the overall security framework. Prioritizing governance and policy implementation will have the greatest business impact. Immediate action is recommended to avoid escalating risks and regulatory scrutiny.

E

Encore®

psav.com

42

The website's overall security posture is critically weak, with numerous high and critical severity issues identified, particularly in encryption, security headers, and regulatory compliance. The absence of HTTPS encryption represents a fundamental risk, exposing all data exchanges to interception and undermining trust. Key security headers are missing, increasing vulnerability to attacks such as clickjacking, content injection, and cross-site scripting. Compliance with GDPR and NIS2 regulations is severely lacking, with missing cookie policies, consent mechanisms, and security governance documentation, exposing the business to potential legal and financial penalties. While network security and DNS health show relatively better scores, critical gaps remain, especially in email security protocols. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and preserve brand reputation. Without urgent action, the business faces increased risks of data breaches, regulatory fines, and loss of customer trust.

E

Edmond de Rothschild

edmond-de-rothschild.fr

49

The website's overall security posture is critically deficient, primarily due to the complete lack of HTTPS encryption, which exposes all data transmissions to interception and undermines user trust. Compliance with GDPR is severely lacking, with missing privacy and cookie policies, absence of a consent banner, and inadequate privacy measures for EU users, creating significant legal and reputational risks. The NIS2 compliance score is extremely low, indicating insufficient organizational security frameworks, policies, and incident response readiness, which heightens vulnerability to cyber incidents and regulatory penalties. While network security and DNS health show relatively strong results, essential protections like DNSSEC are not fully implemented. Security headers are mostly present but missing critical components such as the X-XSS-Protection header. Email security has gaps with missing DKIM records, potentially impacting email deliverability and phishing protections. Immediate remediation is needed to address encryption, privacy compliance, and governance frameworks to safeguard user data, maintain regulatory compliance, and protect business continuity. Without urgent action, the organization risks data breaches, regulatory fines, and loss of customer trust.

D

Dealertrack CentralDispatch, LLC

centraldispatch.com

69

CentralDispatch.com exhibits significant security gaps primarily in HTTP security headers, GDPR compliance, and organizational security frameworks, resulting in an overall unknown risk score. While network and email security postures are strong, critical improvements are needed to protect user data, comply with regulations, and establish robust incident response capabilities.

The website exhibits significant security and compliance weaknesses, particularly in governance frameworks and regulatory adherence, which could expose the organization to legal risks and operational disruptions. While network security and email security show strong posture, critical gaps in GDPR compliance and information security policies pose high business risks and undermine trust with users and regulators.