Security Directory

E

EIVA a/s

eiva.com

70

EIVA a/s is a well-established engineering company specializing in software and hardware solutions for maritime survey, offshore, and shallow water construction industries. With over 45 years of experience, EIVA offers a comprehensive portfolio including software products, equipment sales and rental, integrated system solutions, 24/7 support, and professional training services. Their market position is strong, supported by a professional website, active social media presence, and a broad customer base in the energy and transportation sectors. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security headers and a public security policy or incident response information, which are areas for improvement. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust in domain registration transparency, though the overall business credibility remains high. Strategic recommendations include publishing a dedicated security policy, enhancing security headers, and providing incident response contacts to strengthen trust and compliance.

G

Google Transparency

transparency.google

61

The Google Transparency Center website serves as a comprehensive resource detailing Google's product policies, enforcement actions, and commitment to user safety and transparency. It targets a broad audience including users, developers, creators, and researchers, providing clear and accessible information about Google's approach to policy development and enforcement. The site reflects Google's position as a global technology leader with a strong emphasis on transparency and trust. Technically, the website is built on a modern, performant infrastructure leveraging Google's internal frameworks, Google Cloud hosting, and best practices in web development including responsive design, accessibility, and SEO optimization. The use of Google Tag Manager and Analytics indicates a mature digital analytics setup. From a security perspective, the site demonstrates excellent security posture with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. However, direct contact information for security or incident response is not prominently provided. Overall, the website is highly professional, trustworthy, and secure, reflecting Google's commitment to transparency and user protection. No critical issues or blocking mechanisms were detected, allowing for a full and detailed analysis.

R

RASTREATOR COMPARADOR CORREDURÍA DE SEGUROS S.L.U

rastreator.com

64

Rastreator.com is a well-established Spanish online comparison platform specializing in insurance, energy tariffs, finance products, and telecommunications offers. Founded in 2009, it serves consumers by providing transparent price comparisons and expert advisory services to help users select the best products in sectors such as car insurance, health insurance, mortgages, and energy. The website demonstrates a professional and consistent brand presence with comprehensive content and a user-friendly interface optimized for mobile devices. Technically, the site uses modern web technologies including lazy loading scripts and Google Tag Manager for analytics and marketing, hosted on a secure HTTPS platform. Security posture is strong with no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partially met with a cookie consent mechanism but lacks a visible privacy policy and terms of service in the provided content. The WHOIS data is notably absent, which slightly reduces trustworthiness but does not negate the legitimacy indicated by the website content and structured data. Overall, Rastreator.com is a credible and professional service with room for improvement in transparency and security documentation.

G

GGD Rotterdam-Rijnmond

ggdrotterdamrijnmond.nl

69

GGD Rotterdam-Rijnmond is a regional public health organization dedicated to protecting and promoting the health of residents in the Rotterdam-Rijnmond area. The website serves as an official portal providing health information, vaccination services, sexual health testing, travel health advice, and public health research. It targets residents, healthcare professionals, and travelers, positioning itself as a trusted government health authority. The site is well-branded with municipal affiliation and maintains active social media channels for outreach. Technically, the website is built on modern frameworks including Next.js and React, with evidence of Drupal CMS usage for content management. It employs accessibility features such as ReadSpeaker for text-to-speech and is optimized for mobile devices. Performance is fast, and SEO best practices are followed with proper meta tags and structured content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain registration aligns with the organization's public nature, reinforcing legitimacy. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen security posture.

V

Veiligheidsregio Gelderland-Zuid

vrgz.nl

69

Veiligheidsregio Gelderland-Zuid (VRGZ) is a governmental regional safety organization in the Netherlands, serving 14 municipalities with integrated emergency services including fire brigade, ambulance care, and crisis management. The website reflects a mature and professional digital presence, leveraging WordPress CMS with modern SEO and analytics tools. The organization positions itself as a key public safety entity within the Dutch safety region framework, providing timely incident updates, risk information, and community engagement through social media and news updates. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with DNSSEC for domain security. However, explicit security policies and vulnerability disclosure mechanisms are absent, and cookie consent mechanisms could be improved for full GDPR compliance. Overall, the website demonstrates a strong security posture and business credibility appropriate for a public sector entity.

S

SIA "Optimera Latvia"

buvniecibas-abc.lv

61

Būvniecības ABC, operated by SIA "Optimera Latvia", is a leading Latvian retailer specializing in construction materials, tools, and garden equipment. The company offers a broad product catalog accessible via an online store and supports customer loyalty programs and rental services. The website demonstrates a solid market position within Latvia's retail construction sector, targeting both consumers and professional clients. Technically, the site leverages modern web technologies including Cloudflare hosting, Google Tag Manager, and Facebook SDK for analytics and marketing. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS usage and CSRF tokens, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

T

The Royal College of Ophthalmologists

rcophth.ac.uk

40

The Royal College of Ophthalmologists is a UK-based professional membership organisation and charity dedicated to promoting and supporting the ophthalmic profession nationally and internationally. The website serves as a comprehensive resource for members, trainees, researchers, and patients, offering information on training, examinations, research, policy, and events. The organisation holds a strong market position as the authoritative body for ophthalmology in the UK, with a clear focus on education, professional development, and advocacy. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and cookie consent tools. It demonstrates good digital maturity with responsive design, accessibility considerations, and SEO optimization. Performance is moderate, with room for improvement in hosting and caching strategies. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations to enhance security headers and publish security policies. The domain registration data aligns well with the organisation's claims, supporting legitimacy and trustworthiness.

S

Siemens Digital Industries Software

mentor.com

49

Siemens Digital Industries Software operates a comprehensive and professional website dedicated to Electronic Design Automation (EDA) solutions. The company offers a broad portfolio of software, hardware, and services aimed at streamlining the design, verification, and manufacturing of integrated circuits and electronic systems. Siemens holds a strong market position as a leading provider in the technology and manufacturing sectors, supported by its parent company Siemens AG. The website targets professionals in electronic design, manufacturing, and related industries, providing detailed product information, training, and consulting services. Technically, the website employs modern web technologies including custom web components, advanced video players, and a robust content delivery network. It demonstrates excellent performance, mobile optimization, and accessibility features. The use of structured data and Open Graph metadata enhances SEO and social media integration. Consent management is implemented via Usercentrics, reflecting a commitment to privacy compliance. From a security perspective, the site enforces HTTPS and integrates security best practices such as trusted script sources and consent management. However, explicit security headers and a public security policy are not evident, suggesting areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is highly professional, trustworthy, and well-aligned with Siemens' corporate identity. It effectively serves its target audience with rich content and a strong technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving privacy policy visibility to further strengthen compliance and trust.

V

Version 1

version1.com

59

Version 1 is a large, established technology consulting and managed services provider focused on digital transformation, cloud, AI, and business transformation frameworks. The company positions itself as a strategic partner for businesses seeking to modernize applications, optimize cloud infrastructure, and leverage AI-driven insights. Their website reflects a mature digital presence with comprehensive content, strong SEO, and professional design. Technically, the site is built on WordPress with modern fonts, SVG icons, and Google Tag Manager for analytics. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its target audience of enterprise clients.

H

Horst Brandstätter Group

playmobil.fr

52

PLAYMOBIL® France operates as the official e-commerce platform for the Playmobil brand in France, offering a wide range of toys and related products targeting children and families. The website is well-branded, consistent with the parent company Horst Brandstätter Group, and provides comprehensive product information, promotions, and customer engagement features such as newsletters and wishlists. The platform leverages modern e-commerce technologies including Salesforce Commerce Cloud, Amplience for media management, and OneTrust for privacy compliance. Security measures such as CSRF tokens and HTTPS are implemented, and the site includes a robust cookie consent mechanism aligned with GDPR requirements. While explicit security policies and incident response contacts are not found, the overall security posture is strong with no critical vulnerabilities detected. The website demonstrates a high level of professionalism, good user experience, and compliance with privacy regulations, positioning it as a trustworthy and credible retail platform.

H

HealthPartners

healthpartners.com

49

HealthPartners is a large, top-rated healthcare and insurance provider serving Minnesota and Wisconsin. The company offers a comprehensive range of services including health insurance plans, clinics, hospitals, pharmacy services, and wellness programs. Their market position is strong regionally, supported by a professional and well-branded website that clearly communicates their offerings and mission. The technical infrastructure leverages modern web technologies such as Web Components and Adobe Experience Manager, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit cookie consent mechanisms. Overall, the website reflects a mature digital presence aligned with industry standards and compliance requirements.

Z

Zalando

zalando.lv

50

Zalando.lv is a leading online fashion retail platform targeting Latvian consumers with a wide assortment of clothing, footwear, and accessories for women, men, and children. The website showcases a strong brand presence with multiple well-known fashion brands and offers key services such as free delivery and returns, personalized recommendations, and a user-friendly shopping experience. The platform is part of the larger Zalando SE group, a major European e-commerce player. Technically, the site employs modern web technologies including React, RequireJS, and a consent management platform, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and service workers implemented, though explicit security headers and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in the e-commerce fashion market.

G

Glove Technologies, Inc.

glove.fit

52

Glove Technologies, Inc. operates the website glove.fit, offering a SaaS platform that converts website visitors into qualified leads through real-time AI-driven personalization and visitor tracking. Their technology focuses on understanding visitor behavior, building visitor signal maps, and dynamically personalizing content to optimize lead conversion for B2B SaaS companies and enterprise clients. The platform emphasizes ease of installation with a single script tag and promises significant improvements in inbound lead generation. Technically, the website leverages modern JavaScript frameworks, likely React, and integrates third-party services such as HubSpot forms and Contentsquare for analytics and tracking. The site is hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, it lacks visible security headers, a published security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the website presents a professional and functional digital presence with moderate security and privacy maturity. Strategic improvements in privacy compliance, security policy transparency, and accessibility would enhance trust and compliance posture.

Upify is a small technology company operating a SaaS behavioral analytics platform that provides comprehensive tools such as heatmaps, session recordings, funnels, surveys, and feedback mechanisms to help businesses understand user behavior and improve conversion rates. The website is professionally designed with clear navigation and mobile optimization, targeting business users and analysts seeking actionable insights. Technically, the site employs modern JavaScript frameworks, integrates with major analytics and marketing platforms like Google Analytics and Facebook Pixel, and uses a cookie consent management system to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

S

Sikri AS

ambita.no

73

Ambita, operated by Sikri AS, is a leading Norwegian company specializing in digital solutions for the real estate market. Their website showcases a comprehensive portfolio of services including property information portals, digital registration (tinglysing), and collaborative digital tools aimed at streamlining property transactions and management. The company targets a broad audience including real estate professionals, financial institutions, municipalities, and private individuals, positioning itself as a key technology enabler in the Norwegian property sector. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Analytics 4, Piwik PRO for analytics, Cookiebot for cookie consent management, and Zendesk for customer support. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers to protect users. The presence of a detailed cookie consent mechanism and privacy policy indicates compliance with GDPR and related privacy regulations. However, no explicit security policy or incident response information is published, which could be improved. Overall, Ambita's website reflects a professional, trustworthy, and well-managed digital presence with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further enhance trust and security transparency.

M

Magnus Pettersson

statistikkonsulterna.se

40

Statistikkonsulterna Väst AB is a specialized consulting company based in Sweden, focusing on statistical methods, mathematics, and advanced programming. They provide expert statistical guidance and creative solutions primarily to researchers and developers, aiming to deliver high-quality decision support based on quantitative data. The company positions itself as a competence center in its niche market with a small but professional presence since 2017. The website reflects a well-structured and professionally designed digital presence using WordPress with SEO and translation capabilities, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks published security policies and advanced security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and compliance to enhance user trust and security.

EasyFill AB is a Swedish publicly listed company specializing in innovative retail shelving solutions designed to optimize store efficiency, reduce food waste, and increase sales. Their flagship products include the TurnLoader™ and RotoShelf® systems, which implement a First In, First Out (FIFO) approach to product replenishment. The company targets retail operators seeking smarter shelving solutions that reduce labor and improve profitability. The website is professionally designed using HubSpot CMS, featuring rich content, customer testimonials, and clear navigation. It is mobile-optimized and incorporates modern web technologies and marketing tools. Security posture is strong with HTTPS enforced and no exposed sensitive data, though some security headers and policies could be improved. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the website reflects a mature digital presence aligned with the company's market position and business goals.

F

Fellowshop AB

fellowshop.se

43

Fellowshop AB is a Swedish communications agency specializing in strategic and creative communication services including branding, copywriting, and campaign management. The company positions itself as a small but effective agency emphasizing collaboration and impactful communication. The website is professionally designed using Squarespace, with good mobile optimization and clear navigation. Security-wise, the site uses HTTPS with HSTS enabled, indicating strong SSL configuration. However, it lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trust. No incident response or vulnerability disclosure information is provided. Overall, the site reflects a legitimate small agency with room for improvement in privacy and security transparency.

A

Adda AB

sklkommentus.se

47

Adda AB operates as a specialized service provider supporting the Swedish public sector through framework agreements, procurement support, competence development, and training. The company targets employees within municipalities, regions, and other public organizations, offering both digital and printed resources to facilitate efficient public procurement and workforce development. The website reflects a mature market position with clear service offerings and a professional digital presence. Technically, the website employs modern web technologies including Vue.js, Microsoft Application Insights for telemetry, and Google reCAPTCHA v3 for bot protection. The site is built on the Episerver CMS platform, ensuring structured content management and good SEO practices. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site benefits from HTTPS encryption, cookie consent mechanisms, and monitoring tools. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No critical vulnerabilities or blocking mechanisms were detected, indicating a solid security posture overall. The overall risk profile is low with recommendations to enhance transparency around security policies and incident handling. Strategic improvements in security headers and vulnerability disclosure would further strengthen trust and compliance.

N

Nacka kommun

nacka.se

38

Nacka kommun operates as the official municipal government website serving over 100,000 residents in Nacka, Sweden. The site provides comprehensive information about municipal services including education, social support, urban development, and local politics. It targets residents, businesses, and visitors seeking municipal resources and engagement opportunities. The business model is public sector focused, delivering essential community services and governance information. Technically, the website is built on the EPiServer CMS platform, leveraging modern JavaScript frameworks, SVG icons, and Azure Application Insights for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting appears to be on Microsoft Azure infrastructure, ensuring reliability and scalability. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully documented in the HTML, best practices are implied. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy or incident response contact, which could enhance transparency and trust. Overall, Nacka kommun's website is a professional, trustworthy, and well-maintained digital presence for a government entity. It balances user experience, compliance, and technical robustness effectively, supporting its role as a key information and service portal for the municipality.

V

Västtrafik AB

vasttrafik.se

52

Västtrafik AB operates as the regional public transportation authority for Västra Götaland, Sweden, providing comprehensive travel planning, ticketing, and traffic information services. The website serves a broad audience of public transport users in the region, offering tools and information to facilitate travel across multiple modes including bus, tram, train, and ferry. The business is positioned as a key regional transport provider under the Västra Götalandsregionen umbrella, with a large operational scale and a focus on sustainable and accessible mobility solutions. Technically, the website is built on the EPiServer CMS platform, leveraging modern JavaScript frameworks and libraries, including Matomo for analytics and EPiServer Forms for user feedback and contact forms. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate to fast performance profile. Hosting appears to be managed by the regional government infrastructure, ensuring reliability and alignment with public sector standards. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements cookie consent mechanisms compliant with GDPR. While explicit security policies and incident response contacts are not published, the site shows adherence to best practices with no visible vulnerabilities or exposed sensitive data. The use of nonce attributes in scripts and consent-based tracking further enhance security and privacy. Overall, Västtrafik's website reflects a mature digital presence with strong business credibility, good technical implementation, and a solid security posture. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure guidelines to further enhance trust and compliance.

Ö

Östersunds kommun

ostersund.se

44

Östersunds kommun operates as the official municipal government website for the city of Östersund, Sweden, providing comprehensive information and services related to education, care, culture, infrastructure, business, and politics. The website targets residents and visitors, offering e-services, news updates, and contact channels to facilitate community engagement and service delivery. The site holds a strong market position as a trusted government portal with consistent branding and clear communication of municipal functions. Technically, the website is built on the SiteVision CMS platform, utilizing jQuery and standard web technologies. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of cookie consent mechanisms and Google site verification indicates a reasonable level of digital maturity. From a security perspective, the site uses HTTPS and includes some security best practices such as CSRF token placeholders and cookie consent. However, it lacks explicit security headers, published security policies, and incident response contacts, which are areas for improvement. Tracking is performed via Vizzit analytics, with moderate user tracking levels. Overall, the website is professional, trustworthy, and well-suited for its public sector role. Strategic enhancements in security policy transparency and technical security controls would further strengthen its posture and compliance.

K

Karlstads universitet

kau.se

47

Karlstads universitet is a well-established Swedish university providing higher education, research, and collaboration services primarily in the education sector. The website targets students, staff, alumni, and the press, offering comprehensive information about programs, research, and university news. The institution maintains a strong market position as a regional university with a focus on quality education and societal collaboration. Technically, the website is built on Drupal CMS, uses Matomo for privacy-conscious analytics, and is well-optimized for mobile and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Statens geotekniska institut

swedgeo.se

52

Statens geotekniska institut (SGI) is a Swedish government expert agency specializing in geotechnical issues, focusing on safe and sustainable construction and land use. The website serves as a comprehensive resource for government bodies, municipalities, researchers, and professionals in construction and environmental sectors. SGI maintains a strong market position as a national authority with active research, consultancy, and public service offerings. The site features extensive content including news, guidance, maps, and laboratory services, reflecting a mature digital presence. Technically, the website employs modern JavaScript modules, Cookiebot for consent management, and Piwik PRO and Vizzit for analytics, indicating a well-structured and privacy-conscious infrastructure. Security posture is solid with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site demonstrates high professionalism, accessibility, and compliance with GDPR, supporting trustworthiness and user confidence.

D

DNB Bank ASA

dnb.no

55

DNB Bank ASA is Norway's largest financial institution, offering a comprehensive range of banking and financial services to both private individuals and businesses. The website reflects a strong market position with clear navigation and extensive service offerings including loans, savings, insurance, pensions, and investment solutions. The company maintains a consistent and professional brand image across its digital presence. Technically, the site is built on modern frameworks such as React and Gatsby, with performance optimizations and mobile responsiveness. Security measures include HTTPS, use of security headers, and secure form handling, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with active consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and digital maturity.

S

Socialstyrelsen

socialstyrelsen.se

51

Socialstyrelsen is the Swedish National Board of Health and Welfare, serving as the authoritative knowledge agency for healthcare and social services in Sweden. The website provides comprehensive access to guidelines, statistics, educational resources, and application services aimed at healthcare professionals, social workers, and the general public. It holds a strong market position as a government entity ensuring equitable access to quality care and social support. The digital infrastructure is modern, leveraging React and Episerver CMS, with good mobile optimization and accessibility features. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. Overall, the site is professional, trustworthy, and well-maintained, reflecting its role as a key government resource.

I

IT informa AB

itinforma.se

30

IT informa AB is a small Swedish IT consulting company specializing in the development and maintenance of business-critical IT systems. Their website presents a professional image with clear descriptions of their services, regional focus in the Öresund area, and a consistent brand presence. The company leverages WordPress with modern plugins such as Yoast SEO and Astra theme to deliver a well-structured and SEO-optimized site. Social media presence on Facebook and LinkedIn supports their business credibility. Technically, the site is well implemented with HTTPS and modern web standards, though some security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the security posture is good but can be improved with additional policies and headers. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistency.

Stockholms stad operates an official municipal website serving over 960,000 residents and approximately 40,000 employees. The website provides comprehensive access to city services, including education, family support, cultural activities, traffic information, and business resources. It targets residents, businesses, and visitors, positioning itself as the authoritative digital portal for Stockholm city government. The site is well-branded, professionally designed, and offers clear navigation and accessibility features. Technically, the website employs modern web technologies including JavaScript, SVG icons, React components, and Piwik PRO analytics. The presence of Episerver CMS is inferred from script paths. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Performance is moderate, with asynchronous script loading and structured content. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms with granular controls, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found. Security headers are not explicitly detected in the HTML content, suggesting room for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data aligns with the official city ownership, reinforcing legitimacy. No blocking or WAF interference was detected, allowing full content access and analysis.

A

Affinity Group Limited

affinity.co.im

38

Affinity Group Limited is a well-established corporate and private wealth services provider founded in 2004 and headquartered in the Isle of Man. The company offers a broad range of services including corporate services, private wealth management, regulated industry support, and specialized sectors such as yachting, aviation, and sports professionals. Their market position is strong, supported by multi-award-winning recognition and trusted asset management exceeding £2 billion. The website reflects a mature digital presence built on the Webflow platform, featuring modern design, multimedia content, and clear navigation. However, the absence of explicit privacy and cookie policies, as well as security headers, indicates areas for improvement in compliance and security transparency. Overall, the company demonstrates a high level of professionalism and trustworthiness with a global footprint.

W

Wirtschaftskammer Österreich (WKO)

wkoecg.at

40

The website wkoecg.at serves as an official business directory for Austrian companies, operated by the Wirtschaftskammer Österreich (WKO), the Austrian Chamber of Commerce. It provides a comprehensive and up-to-date listing of over 600,000 Austrian businesses, targeting business users and the general public seeking company information. The platform offers additional services such as ECG compliance support and eServices, positioning itself as a central hub for business-related information in Austria. Technically, the site is built on an ASP.NET WebForms framework with modern JavaScript enhancements, including Google Tag Manager and a consent management platform to comply with privacy regulations. The site demonstrates good accessibility and SEO practices, with structured navigation and mobile optimization. However, performance metrics are unavailable, and the hosting provider is not explicitly identified. From a security perspective, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS availability, which is a critical vulnerability exposing users to potential data interception. While security headers such as HSTS, X-Frame-Options, and secure cookie flags are implemented, the absence of HTTPS severely undermines the overall security posture. Privacy policies and cookie consent mechanisms are present and appear comprehensive, supporting GDPR compliance. Overall, the site is a credible and authoritative business resource with strong content and privacy compliance but suffers from a critical security flaw due to missing valid HTTPS. Addressing this issue is paramount to protect user data and maintain trust. Strategic improvements in SSL deployment and ongoing security audits are recommended to elevate the site's security and user confidence.

B

BENTELER

benteler.de

47

BENTELER is a well-established enterprise specializing in metal processing with a strong focus on automotive and industrial sectors. Founded in 1876, the company has a significant global presence with 90 locations worldwide, offering a diverse range of products including automotive components, steel/tube products, mechanical engineering, and glass processing equipment. The website reflects a mature business model targeting industrial clients and partners, with a clear emphasis on sustainability and innovation. Technically, the website is built on TYPO3 CMS, utilizing modern web technologies such as ES6 JavaScript modules, lazy loading, and SVG icons. It demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a fast and user-friendly experience. The presence of comprehensive meta tags, structured data, and multi-language support further enhance its digital maturity. From a security perspective, the site enforces HTTPS, employs Google reCaptcha for bot prevention, and implements a granular cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response contact details are not prominently available, suggesting areas for improvement. Overall, BENTELER's website is professional, secure, and compliant, reflecting its enterprise status and global operations. Strategic enhancements in security transparency and incident response readiness could further strengthen its trustworthiness and compliance posture.

L

LSRT Associates

lsrtassociates.com

43

LSRT Associates is a small consulting firm specializing in Veracross software implementation, philanthropic consulting, and fractional CIO services primarily targeting independent schools and philanthropic organizations in the Saint Louis area. The website presents a professional and consistent brand image with clear service offerings but lacks direct contact details such as emails or phone numbers, relying on a contact form instead. The technical infrastructure is based on a modern WordPress CMS hosted on GoDaddy, utilizing contemporary plugins and themes with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks important security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is accessible without WAF or blocking mechanisms, but privacy compliance and security policy transparency are areas needing enhancement.

Hexagon AB is a global leader in industrial measurement technologies and digital solutions, serving a wide range of sectors including manufacturing, energy, transportation, and government. The website reflects the integration of Intergraph into Hexagon, highlighting divisions such as Asset Lifecycle Intelligence and Safety, Infrastructure & Geospatial. The company offers comprehensive products and services aimed at improving operational efficiency, safety, and sustainability. The digital infrastructure is modern, leveraging technologies like Bootstrap, Sitecore CMS, and advanced analytics tools with strong privacy compliance mechanisms. Security posture is robust with HTTPS enforcement and cookie consent management, though explicit security headers should be verified. Overall, the website demonstrates a mature digital presence aligned with enterprise standards.

ExpiredDomains.com operates as a specialized platform aggregating expired and expiring domain names, providing users with advanced search and filtering tools, domain metrics, and real-time data. The platform targets domain investors, SEOs, marketers, and businesses seeking valuable domain assets. It holds a strong market position as a leading expired domain marketplace aggregator, leveraging partnerships with registrars like GoDaddy to facilitate domain purchases. Technically, the website employs modern web standards with a custom-built interface, SVG icons, and JavaScript enhancements. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the platform uses HTTPS and CSRF tokens for form protection and implements cookie consent mechanisms, but lacks published security policies or advanced security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though there is room for improvement in formal security disclosures and accessibility.

T

tipp3 Sportwetten Österreich

tipp3.at

40

tipp3.at is a well-established Austrian sports betting platform, operating since 2001 and owned by Österreichische Lotterien. It offers a wide range of sports betting options including live betting, classic bets, and special bet types, targeting primarily Austrian sports bettors. The website features a professional design with clear navigation and extensive content covering numerous sports and events. Technically, the platform uses modern JavaScript frameworks and integrates with Sportradar for live data, but lacks a valid SSL certificate and proper TLS support, which is a significant security concern. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the site is trustworthy and professional but needs urgent improvements in its security infrastructure.

plenum AG Management Consulting is a well-established German management consulting firm specializing in transformation advisory services primarily for the finance, insurance, and energy sectors. With over 35 years of experience, the company holds a strong market position supported by industry awards and a professional digital presence. The website reflects a mature digital infrastructure built on TYPO3 CMS, featuring comprehensive content, clear navigation, and multi-channel engagement including social media and newsletters. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing the site to risks and undermining user trust. Privacy policies and cookie consent mechanisms are well implemented, aligning with GDPR requirements. Overall, the business demonstrates high credibility and professionalism but must urgently address its HTTPS deficiency to improve security posture and user confidence.

A

Allnex GMBH

allnex.com

40

Allnex GmbH is a global leader in the manufacturing of industrial coating resins, adhesives, sealants, and specialty coatings. The company targets industrial manufacturers and formulators in the chemical and coatings industries, offering a broad portfolio of products and technical support. The website reflects a mature enterprise-grade digital presence with comprehensive content, clear navigation, and multi-language support, indicating a global market reach. Technically, the site is built on ASP.NET with Kentico CMS, hosted likely on Microsoft Azure, and employs modern web technologies including lazy loading and SVG icons. However, the security posture is weak due to an invalid SSL certificate and lack of TLS protocol support, which critically impacts trust and data protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to ensure safe user interactions and data protection.

H

Helvetia Versicherungen AG

helvetia.at

40

Helvetia Versicherungen AG is a well-established insurance provider in Austria with over 165 years of experience and a large customer base exceeding 650,000. The company offers a wide range of insurance and pension products tailored to private customers, including accident, vehicle, household, and life insurance. The website is professionally designed, content-rich, and provides comprehensive navigation and contact options, reflecting a mature digital presence. Technically, the site uses Adobe Experience Manager CMS and integrates Adobe DTM for analytics and marketing. However, a critical security gap exists as no valid SSL certificate is detected, resulting in no HTTPS support, which significantly impacts the security posture. Security headers are properly configured, but the lack of HTTPS is a major vulnerability. Privacy and cookie policies are present and comprehensive, indicating good compliance with GDPR. Overall, the website is trustworthy and credible but requires urgent security improvements to protect user data and maintain trust.

C

Ceramiche Atlas Concorde S.p.A.

atlasconcorde.com

40

Atlas Concorde is a well-established Italian manufacturer specializing in ceramic and porcelain tiles for floors, walls, outdoor spaces, furniture, and related products. The company has a mature market presence with 25 years of experience and offers a comprehensive product system including various collections and innovative technologies. The website demonstrates a high level of digital maturity with a modern tech stack based on Next.js and Vercel hosting, providing a professional and user-friendly experience across multiple languages. Security measures are in place with several HTTP security headers configured; however, the absence of a valid SSL certificate and lack of advanced SSL features like OCSP stapling reduce the overall security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website reflects a credible and professional business with a solid online presence.

D

Die Wiener Volkshochschulen GmbH

vhs.at

40

Die Wiener Volkshochschulen GmbH operates the largest adult education platform in Vienna, offering a wide range of courses including languages, health, arts, and professional development. The website is well-designed, content-rich, and targets adult learners, families, and seniors in Vienna. It maintains a strong market position as a non-profit educational institution with official certifications and a comprehensive course catalog. Technically, the site uses Apache server technology, JavaScript modules, and integrates Cookiebot for consent management and Matomo for analytics. Accessibility and SEO are well addressed, with responsive design and clear navigation. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which is a critical issue for user trust and data protection. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS security to enhance protection and user confidence.

P

POLOPLAST GmbH & Co KG

poloplast.com

40

POLOPLAST GmbH & Co KG is a well-established Austrian manufacturer specializing in plastic pipe systems with a strong presence across Europe. The company emphasizes sustainability, innovation, and quality, offering a broad range of products including multilayer pipe systems, building drainage, and wastewater disposal solutions. Their market position is that of a technology leader with a large operational scale and a parent company affiliation with Wietersdorfer. The website reflects a professional business with clear contact information and comprehensive privacy and cookie policies, supporting GDPR compliance. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Bootstrap for responsive design. However, the site suffers from slow performance and lacks HTTPS support, which is a critical security concern. The absence of SSL/TLS encryption and security headers exposes the site to potential risks and undermines user trust. Analytics and tracking tools such as Google Analytics and LeadFeeder are used with appropriate cookie consent mechanisms. Security posture is weak due to the lack of HTTPS and security headers, though no active vulnerabilities or malware were detected. Privacy compliance is strong with clear policies and consent banners. Business credibility is high given the detailed company information and social media presence. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate implementation of a valid SSL certificate, addition of security headers, performance optimization, and enhancement of incident response information to strengthen security culture and compliance.

D

Dr. Schär AG / SPA

drschaer.com

29

Dr. Schär is a well-established company specializing in products for people with special nutritional needs, particularly in gluten-free and related dietary areas. The company has a strong market position with over 100 years of experience and multiple specialized brands. Their website reflects a professional and consistent brand image, targeting consumers and healthcare professionals. Technically, the site is built on Drupal 9 with the Thunder distribution and incorporates modern web technologies and marketing tools such as Google Tag Manager. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness that significantly impacts the site's security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

555photography is a small professional photography business specializing in wedding, family, engagement, and event photography. The business leverages the SmugMug platform to showcase its portfolio and manage client galleries, positioning itself as a niche service provider in the media sector. The website content is relevant and well-structured, targeting individuals and families seeking professional photography services. The business model relies on online presence and client engagement through SmugMug's infrastructure. Technically, the website is hosted on SmugMug's infrastructure using nginx and Amazon CloudFront CDN, with modern JavaScript frameworks and responsive design ensuring good mobile optimization and user experience. However, performance metrics are limited, and some technical debt is evident in the use of older YUI libraries alongside modern modules. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability impacting user trust and data protection. While some security headers are present, the absence of HTTPS and other advanced security features significantly lowers the security posture. Privacy policies and terms of service are available on the SmugMug domain, indicating compliance with GDPR and cookie consent mechanisms, but no explicit security or incident response policies are found. Overall, the website presents a moderate risk profile primarily due to missing HTTPS and limited direct business contact information. Strategic improvements in SSL implementation, security policy publication, and direct contact channels would enhance trust and compliance.

K

Knorr-Bremse AG

knorr-bremse.com

40

Knorr-Bremse AG is a global leader in manufacturing braking systems and safety-critical sub-systems for rail and commercial vehicles. With a history spanning over 28 years, the company holds a strong market position as an innovator in mobility and transport technologies. Their business model focuses on delivering advanced braking and safety solutions, complemented by comprehensive investor relations and career development programs. Technically, the website is built on a modern Angular framework, hosted on Nginx and Amazon CloudFront, with good SEO and accessibility features. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the security posture. The site implements strong security headers and content policies but lacks advanced SSL configurations and session management. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent SSL deployment to enhance security and user trust.

D

DIETZEL GmbH

dietzel-univolt.com

28

Dietzel Univolt is a medium-sized, independent family-owned manufacturing and distribution company specializing in electrical installation materials and related civil engineering products. With production facilities in Austria, Slovakia, and China, the company serves professional customers internationally, including regional subsidiaries in the UK and Hungary. The website reflects a professional and consistent brand presence with comprehensive product and service information, supporting a strong market position in manufacturing. Technically, the site uses a modern CMS and common web technologies but suffers from critical security shortcomings due to the lack of a valid SSL certificate and HTTPS support, which exposes users to risks. Privacy compliance is well addressed with clear cookie consent and privacy policies, aligning with GDPR requirements. Overall, the site is functional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

A

Amgen Inc.

amgen.com

40

Amgen Inc. is a leading global biotechnology company focused on developing innovative biologic medicines to treat serious illnesses. The website reflects a mature enterprise with comprehensive content covering its science, products, corporate responsibility, and investor relations. The target audience includes healthcare professionals, patients, investors, and partners. The business model centers on research, development, manufacturing, and delivery of biologic therapeutics, positioning Amgen as a pioneer in biotechnology with a strong market presence. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, uses lazy loading for images, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is via Amazon CloudFront CDN, supporting global content delivery. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site implements several security headers including Content Security Policy and X-Frame-Options. However, a critical issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. No TLS protocols are enabled, and HSTS is not properly configured. These gaps expose users to potential risks and undermine trust. Overall, the website is professionally designed and content-rich, but the lack of HTTPS and valid SSL certificate is a major security concern. Strategic improvements in SSL/TLS deployment and enhanced security configurations are essential to protect user data and maintain trust. Privacy compliance is well addressed with Cookiebot and clear privacy and cookie policies. Business credibility is high, supported by consistent branding and comprehensive corporate information.

Salzburg AG operates a comprehensive utility and telecommunications service platform primarily serving the Salzburg region in Austria. The company offers high-speed internet services under the CableLink brand, including fiber and wireless options, alongside TV and telephony services. It also provides energy supply and transportation services, positioning itself as a regional market leader with a large operational footprint. The website reflects a mature digital presence with extensive content, clear navigation, and multiple customer engagement channels. Technically, the site uses modern web technologies and analytics tools, though it currently lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but should address SSL issues to enhance security and user trust.

W

Wüstenrot

wuestenrot.at

38

Wüstenrot is a well-established Austrian financial services provider with a 100-year history, offering integrated banking, insurance, and savings products. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to private customers in Austria. Technically, the site is built on Adobe Experience Manager and uses modern web technologies and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate and enabled TLS protocols, exposing users to potential risks. Privacy compliance is strong with GDPR-aligned cookie consent and detailed privacy policies. Overall, the business is credible and trustworthy, but urgent security improvements are needed to protect user data and maintain trust.

D

DONAU Versicherung AG Vienna Insurance Group

donauversicherung.at

40

DONAU Versicherung AG Vienna Insurance Group is a large Austrian insurance company offering a broad range of insurance products including health, pension, car, home, and legal protection insurance for private and business customers. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. It uses TYPO3 CMS and integrates modern tools such as TagCommander for tag management and Empathy Portal for live chat support. Despite these strengths, the website suffers from a critical security issue: the SSL certificate is invalid or missing, which undermines user trust and security. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. The company demonstrates strong business credibility with certifications and high customer ratings. Overall, the site is functional and trustworthy but requires urgent SSL certificate remediation to improve security posture.

Swiss Post Ltd is a mature, enterprise-level national postal and logistics service provider in Switzerland, offering a broad range of physical and digital services including mail, parcels, financial services, and business solutions. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service information targeting both private and business customers. Technically, the site uses modern JavaScript libraries, Sitecore CMS, and integrates advanced search and monitoring tools, but suffers from a critical SSL certificate issue that undermines its security posture. Security headers are well implemented, but the lack of a valid SSL certificate and absence of cookie consent mechanisms are notable gaps. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and credible but requires urgent security improvements to ensure user trust and compliance.