Security Directory

A

Argent Australia

argentaust.com.au

52

Argent Australia is a well-established supplier of premium bathroom, kitchen, laundry, commercial, and smart living products in Australia, operating since 1958. The company partners with leading European brands and serves a diverse clientele including retail, project, and builder markets. Their website reflects a professional and consistent brand image with clear navigation and comprehensive product offerings. Technically, the site is built on Drupal CMS with modern JavaScript libraries and tracking tools, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and standard security practices, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is basic with cookie consent mechanisms and a privacy policy present but lacking GDPR-specific details. Overall, the website demonstrates high business credibility and trustworthiness.

E

EEistanbul

ee-istanbul.com

45

EE Istanbul is a medium-sized company specializing in project management, design, and consultancy services within the construction and real estate sectors. Their portfolio includes office buildings, retail stores, industrial facilities, and renovation projects primarily in Turkey. The website showcases a variety of completed projects and notable clients, indicating a solid market presence. Technically, the website uses a traditional tech stack including jQuery, Bootstrap, and ASP.NET MVC, with moderate performance and good mobile optimization. However, the absence of HTTPS and security headers significantly weakens the security posture. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the website is functional and professional but requires urgent security and compliance improvements.

S

SIPRIN, s.r.o.

siprin.sk

46

SIPRIN, s.r.o. is a well-established Slovak subsidiary of Siemens, specializing in industrial automation, maintenance outsourcing, and technical training. Founded in 1999, the company leverages Siemens technologies to provide engineering, maintenance, and educational services primarily to industrial clients. The website reflects a mature digital presence with comprehensive service and training descriptions, clear contact channels, and strong compliance messaging. Technically, the site uses a modern tech stack including Bootstrap and jQuery, with good mobile responsiveness and user experience. Security posture is solid with HTTPS and a detailed compliance program, though some security headers could be improved. No blocking or WAF interference was detected, allowing full content access. Overall, the site projects professionalism, trustworthiness, and alignment with Siemens corporate standards.

T

Trendwerk

trendwerk.at

6

Trendwerk is a well-established Austrian non-profit organization specializing in social-economic enterprises that activate potentials for job seekers and companies. Their services include a job portal, qualification courses, and personnel placement, targeting both individuals seeking employment and businesses facing staffing challenges. The organization maintains a consistent brand presence and partners with multiple social enterprises and official employment agencies, reinforcing its market position in Austria. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and FontAwesome, and includes accessibility features. However, the site lacks HTTPS in the provided HTML content, which is a significant security concern. SEO and mobile optimization are good, but the absence of security headers and incident response information indicates room for improvement in security maturity. The security posture is moderate to low due to missing HTTPS and security headers, though no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a privacy policy and cookie banner present, but no explicit consent mechanism is implemented. Business credibility is strong with clear contact information, certifications, and trust indicators. Overall, Trendwerk's website is professional and functional but requires urgent security enhancements to protect user data and improve trust. Strategic improvements in HTTPS deployment, security headers, and incident response readiness are recommended to elevate the security posture and compliance.

O

objectflor

wir-leben-boden.de

10

objectflor operates as a specialized flooring partner focusing on design, rubber, and vinyl flooring products. The company targets both consumers and professionals seeking quality flooring solutions, positioning itself as an established player in the manufacturing sector within Germany. The website content is well-structured, professionally designed, and provides relevant information about products, trends, and sustainability, supporting a positive market presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome. It employs Usercentrics CMP for cookie consent and Matomo for privacy-conscious analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image with moderate to good technical and security posture. Strategic improvements in security headers, incident response transparency, and terms of service publication would further strengthen the site’s compliance and trustworthiness.

K

Kantonsspital Graubünden

ksgr.ch

47

Kantonsspital Graubünden is a large, well-established healthcare institution serving the Southeast Switzerland region. The website reflects a professional medical center offering a wide range of medical and surgical services, with a strong focus on patient care and comfort. It also serves as a certified training center for medical professionals. The site is well-structured, multilingual, and provides comprehensive information for patients, visitors, and referring physicians. Technically, the site is built on Drupal CMS with modern web technologies, including Bootstrap and Matomo analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, which could be improved. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and certifications.

I

Istituto Ambiente Europa

ambienteeuropa.it

45

Istituto Ambiente Europa is a specialized Italian organization providing training and consultancy services focused on workplace safety, environmental protection, and compliance. Established in 1991, it offers both videoconference and in-person courses, consultancy services, and safety assistance, targeting professionals and organizations in need of environmental and occupational safety education. The website reflects a professional and consistent brand with clear navigation and relevant content for its audience. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Owl Carousel, with Google Analytics and Tag Manager for tracking. The site is mobile-optimized and presents a moderate performance profile. However, there is no evidence of advanced CMS usage or hosting provider details. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible security headers and explicit security policies or incident response contacts. HTTPS status is unknown from the HTML content alone, but no critical security issues or blocking mechanisms are detected. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy transparency. The domain registration details align well with the business claims, supporting legitimacy. Strategic enhancements in security headers, HTTPS enforcement, and incident response documentation would strengthen the security posture and trustworthiness.

B

BANDEX

bandex.com

8

BANDEX is a well-established Austrian manufacturing company specializing in curtain and decorative bands, with a history dating back to 1955. The company offers a range of textile products including curtain tapes and technical textiles, supported by an online shop and innovative digital tools such as configurators and a virtual showroom. Their target audience includes retail customers, interior decorators, and textile professionals. The website is primarily in German and reflects a medium-sized enterprise with consistent branding and a good level of content quality. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, with additional tools for user interaction and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, some technical details such as hosting provider and CMS are not explicitly identified. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. While no explicit security policies or incident response contacts are found, the site does not exhibit obvious vulnerabilities or exposed sensitive data. The use of third-party tracking services is moderate, and privacy compliance appears adequate. Security headers and advanced security practices could be improved. Overall, BANDEX presents a trustworthy and professional online presence with moderate risk. Strategic improvements in security policy transparency, incident response readiness, and security header implementation would enhance their security posture and compliance standing.

D

Diakon

diakon.org

35

Diakon is a well-established non-profit organization founded in 1868, providing a broad range of social services including adoption, foster care, behavioral health, affordable housing, and senior services. The organization targets children, youth, families, and older adults, serving nearly 70,000 individuals annually. Their market position is strong within the non-profit social services sector, supported by a consistent brand presence and multiple service offerings. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, indicating moderate digital maturity. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS usage and CSRF protections, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, with room for improvement in security and privacy transparency.

fab it Consulting GmbH is a small German company specializing in IT consulting and software development services tailored for the financial industry. Established in 1995, the company focuses on delivering market-oriented software solutions, particularly in interface and API development for front-, middle-, and back-office financial systems. Their target audience includes banks, insurance companies, investment firms, and financial departments of large industrial enterprises. The website content is professional and relevant, reflecting a niche market position with a clear business model centered on B2B IT services in finance. Technically, the website uses an older technology stack including Apache server, Bootstrap 3, and jQuery 3.1.1. The site lacks modern performance optimizations and accessibility features, and the absence of HTTPS severely impacts security and trust. The website is accessible without WAF or blocking mechanisms, but it lacks critical security configurations such as SSL/TLS, HSTS, and security headers. There is no evidence of privacy or cookie policies, GDPR compliance indicators, or contact emails and phone numbers, limiting user trust and regulatory compliance. From a security perspective, the site is at high risk due to the lack of HTTPS and modern security headers. DNS records show no DNSSEC or CAA records, and the SSL certificate is invalid or missing. No incident response or security policies are published. The WHOIS data aligns well with the business claims, showing consistent registration and legitimacy. Overall, the website scores low on security and privacy compliance, moderate on business credibility, and good on content quality. Strategic recommendations include immediate implementation of HTTPS with a valid certificate, addition of security headers, publication of privacy and cookie policies to meet GDPR requirements, and enhancement of contact information transparency. These steps will improve trust, security posture, and regulatory compliance, supporting the company’s professional image and business growth.

R

R-Tech Dental

rtechdental.com

39

R-Tech Dental is a small, regionally focused dental equipment repair and sales company based in Minnesota, established in 1985. The company offers a range of services including equipment repair, chair re-upholstery, handpiece repair, consultation, and maintenance training, targeting dental professionals and offices primarily in Minnesota. Their website is built on HubSpot CMS using Bootstrap and jQuery, providing a professional and well-structured user experience with clear navigation and relevant content. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. While basic security headers are present, modern TLS protocols and advanced DNS security features are missing. Privacy compliance is minimal, with no cookie consent mechanism and limited GDPR indicators. Contact information is clearly provided, and trust signals such as testimonials and a published founder article enhance credibility. Overall, the website demonstrates good business credibility and content quality but requires urgent improvements in security and privacy compliance to reduce risk and enhance user trust.

S

SW Umwelttechnik Stoiser & Wolschner AG

sw-umwelttechnik.com

34

SW Umwelttechnik Stoiser & Wolschner AG is a well-established manufacturer specializing in precast concrete products for infrastructure development, including civil engineering, traffic, and building sectors. The company operates across multiple Central and Eastern European countries with subsidiaries in Austria, Hungary, Romania, and Slovakia, positioning itself as a regional leader in sustainable construction materials. Their website reflects a professional and comprehensive digital presence, targeting infrastructure developers and construction companies. Technically, the site is built on TYPO3 CMS with PHP 8.1 and Bootstrap, offering good mobile optimization and accessibility, though performance is moderate due to lack of SSL and modern protocols. Security posture is weak, with no HTTPS enabled and missing critical SSL configurations, exposing the site to risks. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the business credibility is high, supported by detailed contact information, investor relations, and trust signals such as LinkedIn presence. Strategic improvements in security infrastructure are recommended to enhance trust and protect user data.

E

ELIX Polymers, S.L.U.

elix-polymers.com

40

ELIX Polymers, a member of Sinochem International, is a leading European manufacturer of ABS resins and derivatives, serving diverse industrial sectors including automotive, healthcare, and consumer goods. The company emphasizes innovation, sustainability, and customer service, operating globally with business relations in 40 countries. Their website reflects a professional and comprehensive digital presence with detailed corporate, product, and sustainability information. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted behind Cloudflare, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts security posture. Privacy and cookie policies are well implemented with GDPR compliance and active consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

T

Tech Gate Vienna

techgate.at

36

Tech Gate Vienna operates as a real estate business specializing in leasing office spaces and event rooms primarily targeting professionals, experts, and investors in Austria. The website content is in German and reflects a medium-sized business with a clear affiliation to STRABAG SE, a large construction and real estate group, as indicated by DNS and CDN usage. The technical infrastructure relies on legacy Lotus Domino servers with modern frontend libraries like jQuery and Bootstrap. However, the site lacks HTTPS, which is a critical security vulnerability. Cookie consent is implemented via OneTrust, showing GDPR compliance awareness. The absence of visible contact emails and phone numbers on the homepage limits direct user engagement. Overall, the website is professionally designed but technically outdated and insecure.

T

TCG Lifesciences Pvt. Limited

tcgls.com

40

TCG Lifesciences Pvt. Limited is a well-established global Contract Research and CDMO company specializing in pharmaceutical and biotech R&D services. Founded in 2001 and headquartered in India, the company operates internationally with subsidiaries such as Clininvent Research Pvt. Ltd. Their service portfolio includes chemistry synthesis, pharmacology, DMPK, analytical development, and manufacturing. The website reflects a mature digital presence built on WordPress with modern UI frameworks and SEO optimizations. However, the absence of a valid SSL/TLS certificate is a critical security gap that undermines user trust and data protection. While security headers are present, the lack of HTTPS and modern TLS protocols significantly reduces the security posture. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms and terms of service. Overall, the business credibility is strong, supported by certifications and social proof, but technical and security improvements are necessary to align with best practices.

Y

YUMMY Publishing GmbH

yummy.digital

35

YUMMY Publishing GmbH operates the digital publishing platform Yumpu.com, providing tools for converting documents into online magazines with a global user base. The company targets publishers and businesses seeking innovative digital publishing solutions, leveraging cloud hosting and advanced rendering technologies. The website presents a professional brand image with notable client logos and a clear business focus on digital content publishing. Technically, the site uses SilverStripe CMS and common frontend libraries but lacks HTTPS, which is a critical security gap. The absence of SSL/TLS and security headers exposes the site to risks and undermines user trust. Privacy compliance is minimal, with no cookie consent mechanism detected and only a basic privacy policy available. Overall, the site is functional and informative but requires urgent security improvements to meet modern standards.

J

John Cabot University

johncabot.edu

40

John Cabot University is an established American liberal arts university located in Rome, Italy, offering undergraduate and graduate degree programs along with study abroad opportunities. The website effectively targets prospective students, alumni, and academic professionals with comprehensive academic information, events, and community engagement content. The university maintains a consistent brand presence and trust indicators such as accreditation and testimonials. Technically, the site is built on ASP.NET with modern front-end libraries like jQuery and Bootstrap, hosted behind Cloudflare, and uses OmniUpdate CMS. However, performance metrics are missing, and the site lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. The site integrates marketing and analytics tools such as Google Analytics and HubSpot forms, indicating a mature digital marketing approach. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

N

North Flying A/S

northflying.com

23

North Flying A/S is a Danish air taxi and private jet charter company offering a range of aviation services including VIP and business flights, air ambulance services, air freight, and aircraft management primarily serving Scandinavia and Europe. The company emphasizes efficiency, safety, and personalized service, targeting business travelers, VIP clients, and emergency medical transport needs. Their market position is that of a reputable regional operator with certifications such as JAR 145 and memberships in industry organizations like Eurami and BACA. Technically, the website is built on ASP.NET with Bootstrap and jQuery, providing a responsive and user-friendly interface. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts security posture and user trust. The site includes cookie consent mechanisms but lacks advanced analytics or tracking scripts, indicating a minimal user tracking approach. From a security perspective, the absence of HTTPS, missing security headers, and permissive CORS settings present critical vulnerabilities. While no active malware or phishing indicators were found, these issues expose the site to potential risks. The company provides clear contact information and basic privacy policies, but lacks formal security policies or incident response contacts. Overall, the website is functional and professionally presented but requires urgent improvements in security configuration to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling security headers, restricting CORS origins, and formalizing security and incident response policies.

BFI Oberösterreich is a leading adult education provider in Upper Austria offering a wide range of vocational training, adult education courses, and customized corporate training programs. The website is built on TYPO3 CMS and incorporates modern frontend technologies such as jQuery and Bootstrap, providing a professional and accessible user experience. The business targets both private individuals and companies, emphasizing lifelong learning and workforce development. The site includes comprehensive course catalogs, contact information, and trust signals such as certifications and partnerships with official bodies. From a technical perspective, the website demonstrates good content quality, SEO, and accessibility, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. Security headers are partially implemented, but the lack of TLS protocols and HSTS reduces the overall security posture significantly. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional and credible but requires urgent improvements in SSL/TLS configuration to ensure secure communications and protect user data. Addressing these security gaps will enhance trust and compliance with modern web security standards.

T

Theater Regensburg

theaterregensburg.de

25

Theater Regensburg is a public theater institution located in Regensburg, Germany, offering a diverse range of cultural performances including music theater, dance, and plays. The website serves as a portal for event information, ticket sales, and community engagement, targeting local and regional audiences interested in cultural arts. The business operates primarily in the hospitality and cultural sector with a medium-sized organizational footprint. Technically, the website employs a modern frontend stack with libraries such as jQuery, Bootstrap, and Font Awesome, providing a good user experience and mobile optimization. However, the absence of a valid SSL certificate and missing DNS records represent significant technical and security shortcomings. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR. The site maintains active social media channels and provides clear contact information, enhancing business credibility. Overall, the website is functional and professional but requires urgent improvements in security infrastructure to protect user data and improve trust.

F

FLUSSBAU iC GesmbH

flussbau-ic.at

25

FLUSSBAU iC GesmbH is a specialized consulting company operating internationally with a focus on water and river engineering, including flood protection, hazard zone planning, and water infrastructure construction. The company offers comprehensive services from planning to execution and engages in research and development to maintain innovation. The website reflects a professional and consistent brand presence targeting professionals and organizations in the water engineering and environmental sectors. Technically, the website is built on TYPO3 CMS with common web technologies like jQuery and Bootstrap, providing a good user experience and mobile optimization. However, the absence of HTTPS is a critical security flaw that severely impacts the site's security posture. The site implements a cookie consent mechanism and provides clear contact information, but lacks advanced security headers and domain security features such as DNSSEC and CAA records. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and compliance are recommended to enhance trust and protect user data.

S

Strobl Bau – Holzbau GmbH

strobl.at

21

Strobl Bau – Holzbau GmbH is a well-established construction and wood construction company based in Austria, with a history dating back to 1964. The company specializes in residential, industrial, and commercial building projects using both massive and wood construction methods. It holds a leading position in the regional market of Steiermark, offering comprehensive services including planning, coordination, and quality control. The website reflects a professional and consistent brand image, targeting property developers and clients seeking high-quality construction solutions. Technically, the website is built on WordPress with a modern tech stack including Apache, jQuery, Bootstrap, and several specialized plugins for enhanced user experience and functionality. However, the site lacks a valid SSL certificate and does not support modern TLS protocols, which significantly impacts its security posture. Despite this, the site implements several security headers and has a good privacy and cookie policy framework with consent mechanisms, indicating a commitment to compliance. The security evaluation reveals critical vulnerabilities due to the absence of HTTPS, lack of strong cipher suites, and incomplete HSTS implementation. These issues pose risks to data confidentiality and user trust. The website provides multiple contact channels, including phone, email, and contact forms, along with active social media profiles, enhancing its business credibility. Overall, while the business and content quality are strong, the security shortcomings require urgent attention to protect users and maintain trust. Strategic improvements in SSL/TLS deployment and security configurations are recommended to elevate the site's security and compliance standards.

T

Tecan Trading AG

tecan.com

40

Tecan Trading AG is a well-established Swiss company specializing in healthcare innovation, laboratory automation, diagnostics, and OEM partnering services. Their website reflects a strong market position with comprehensive product offerings in life sciences and diagnostics, supported by detailed investor relations and corporate policies. The digital infrastructure is built on HubSpot CMS, leveraging modern marketing and analytics tools such as Google Tag Manager and Microsoft Clarity, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to an invalid or missing SSL certificate and lack of modern TLS protocol support, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

IntelliEdge GmbH is a technology company specializing in cloud, edge computing, AI, and IoT solutions, primarily targeting SMEs and organizations seeking digital transformation. The company is a TU Wien spin-off with strong academic and industry partnerships, delivering services such as sustainable engineering, AI and data solutions, agile project inception, and innovation advisory. Their market position is that of a young, innovative, and trusted technology partner with a focus on quality and agile delivery. Technically, the website uses modern frontend libraries and is hosted on AWS infrastructure but lacks a valid SSL certificate, resulting in no HTTPS availability and a slow performance profile. Security posture is weak due to missing SSL/TLS, lack of security headers, and no advanced domain security configurations. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanisms. Business credibility is strong with clear company information, testimonials, and partner listings. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and improve trust.

R

Rhema Gemeinde

rhema.at

40

Rhema Gemeinde is a small non-profit religious community based in Linz, Austria, focused on providing Christian church services, youth and children programs, and community events. The website serves as an informational and engagement platform for members and visitors, offering event details, livestream access, and contact options. The technical infrastructure is based on TYPO3 CMS with common web technologies such as Bootstrap and jQuery, hosted via easyname.eu. However, the site lacks HTTPS encryption, which is a critical security deficiency. Security headers are minimal, and no advanced security or incident response policies are evident. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professionally designed but requires urgent security improvements to protect user data and enhance trust.

P

planlicht GmbH&Co. KG

planlicht.com

40

PLANLICHT GmbH&Co. KG is an Austrian company specializing in architectural LED lighting solutions, serving sectors such as office, public, hospitality, and retail. Their website offers a comprehensive product catalog, customization options, and detailed technical documentation, targeting architects and lighting professionals. The company maintains a professional online presence with multilingual support and active social media channels. Technically, the website is built on WordPress with popular plugins and frameworks, providing a good user experience and moderate performance. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Business credibility is supported by clear contact information, job listings, and consistent branding. Overall, the site is functional and professional but requires urgent security improvements.

T

Ticket Gretchen GmbH

ticketgretchen.com

38

Ticket Gretchen GmbH operates a mobile application platform focused on providing fast and direct ticket sales for cultural events across Austria, including theater, musicals, concerts, and operas. The company targets cultural enthusiasts, especially younger demographics such as U27 and U30, offering exclusive promotions and original tickets without price surcharges. The website reflects a professional and well-branded presence with comprehensive event listings and user testimonials, positioning the company as a leading cultural ticketing service in Austria. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and WPBakery Page Builder. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, supporting moderate user tracking and marketing efforts. Hosting is provided via Amazon AWS DNS infrastructure. The site is mobile-optimized and SEO-friendly, delivering a good user experience. From a security perspective, the website lacks HTTPS encryption, which is a critical vulnerability exposing users to potential data interception. Security headers are minimal, and no advanced security policies or incident response information are published. While no immediate vulnerabilities or malware are detected, the absence of SSL/TLS and security best practices significantly lowers the security posture. Overall, the business is credible and trustworthy based on domain registration consistency, clear contact information, and positive user feedback. However, the lack of HTTPS and cookie consent mechanisms presents compliance and security risks. Strategic improvements in security infrastructure and privacy compliance are recommended to enhance user trust and regulatory adherence.

ConSol Consulting & Solutions Software GmbH is a medium-sized German IT service provider specializing in custom IT solutions and product solutions across the entire software lifecycle. The company has a strong market position with notable clients such as BMW Group, Union Investment, and Lidl, and holds ISO 9001 and ISO 27001 certifications. Their website is professionally designed, content-rich, and well-structured, targeting businesses seeking tailored IT and software services. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and integrates multiple analytics and marketing tools. However, the current lack of a valid SSL certificate and absence of HTTPS support represent critical security vulnerabilities that must be addressed promptly. The security posture is otherwise supported by appropriate security headers but lacks advanced SSL/TLS configurations. Overall, the website demonstrates good privacy compliance with comprehensive cookie and privacy policies and consent mechanisms. Strategic improvements in SSL/TLS implementation and security configurations are recommended to enhance trust and security.

LB-electronics GmbH is a market-leading distributor of high-quality and innovative broadcast technologies based in Austria. The company offers specialized system solutions including studio planning, lighting technology, mobile transmission, and video over IP, complemented by comprehensive service offerings. Their website targets broadcast technology professionals and media production companies, positioning them as a key player in the Austrian broadcast technology sector. Technically, the website is built on Joomla CMS with several modern libraries and plugins, but suffers from poor SSL/TLS configuration, lacking a valid certificate and modern protocols, which poses security risks. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing business credibility. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

Luxoft, a DXC Technology Company founded in 2000 and headquartered in Switzerland, is a global enterprise technology services provider specializing in software engineering and digital transformation. The company serves multiple industries including automotive, finance, telecommunications, energy, and retail, offering a broad portfolio of services such as cloud solutions, data analytics, machine learning, and legacy modernization. Luxoft positions itself as a trusted partner for enterprises seeking to modernize IT systems and achieve sustainable digital advantage. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting enterprise clients worldwide. Technically, the site uses modern frameworks and integrates advanced marketing and analytics tools with consent management, indicating a high level of digital maturity. However, the security posture is weakened by an invalid SSL certificate and lack of TLS support, which poses significant risks to secure communications and user trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Luxoft demonstrates strong business credibility and professionalism but should urgently remediate SSL/TLS issues to enhance security and trust.

I

ITH icoserve technology for healthcare GmbH

ith-icoserve.com

40

ITH icoserve technology for healthcare GmbH is a medium-sized company operating in the healthcare technology sector, specializing in innovative software solutions for medical data management and healthcare networking. As a subsidiary of Siemens Healthineers, it holds a strong market position as a leading software provider in Health IT. The website is professionally designed with good content quality and clear navigation, targeting healthcare providers and IT professionals. Technically, the site is built on TYPO3 CMS with modern frontend libraries, but lacks a valid SSL certificate, which is a critical security shortfall. Security headers are properly configured, but the absence of HTTPS significantly reduces the security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism via Cookiebot. Contact information is clearly presented, enhancing business credibility. Overall, the site is trustworthy but requires urgent security improvements.

E

Eyemaxx Real Estate AG

eyemaxx.com

38

Eyemaxx Real Estate AG is an established real estate development company operating primarily in Germany and Austria, with over 20 years of market presence. The company focuses on residential, micro and student apartments, hotels, urban quarters, retail, and logistics properties. It is publicly listed on the Frankfurt and Vienna Stock Exchanges and issues bonds, indicating a mature business model targeting investors and real estate clients. The website reflects a professional corporate presence with good content quality and consistent branding. Technically, the site uses standard web technologies such as Apache, Bootstrap, and Google Analytics, but lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols severely impacts the security posture. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism despite tracking usage. Contact information is not explicitly provided on the homepage, which may affect user trust and engagement. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to meet modern standards.

D

Der Grazer

grazer.at

37

Der Grazer is a regional online news media outlet focused on providing current news, event information, and photo galleries related to Graz, Austria. The website targets local residents and visitors interested in city news, politics, culture, and lifestyle. It operates primarily as an advertising-supported online news portal with additional services such as an e-paper and club membership. The site uses TYPO3 CMS and common web technologies like Bootstrap and jQuery, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and lack of HTTPS significantly weaken its security posture. While cookie consent and privacy policies are present, indicating GDPR awareness, no explicit security or incident response policies are found. Overall, the website is functional and professionally designed but requires urgent improvements in security to protect user data and enhance trust.

L

Lottomatica Group SpA

lottomaticagroup.com

40

Lottomatica Group SpA is a leading operator in the legal gaming sector in Italy, offering a comprehensive range of services including online gaming, sports betting, and franchising of gaming venues. The company emphasizes innovation, sustainability, and responsibility, targeting both consumers and investors within the Italian market. The website reflects a mature digital presence with clear navigation, professional design, and rich content focused on ESG commitments and corporate governance. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Kentico CMS, ensuring good mobile optimization and SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS, exposing users to potential risks. Security headers are partially implemented, but the SSL/TLS configuration is poor, significantly impacting the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is complete and professionally presented, enhancing business credibility. Overall, while the business and content quality are excellent, urgent improvements in security infrastructure are necessary to protect users and maintain trust.

J

Jobindex A/S

jobindex.dk

35

Jobindex A/S operates a leading Danish job portal that aggregates over 30,000 job listings daily, providing services for both job seekers and employers. The platform offers comprehensive job search capabilities, CV creation, job application guidance, and recruitment services, positioning itself as a key player in Denmark's employment market. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting Danish-speaking users primarily but also supporting English language options. Technically, the site employs modern JavaScript libraries and analytics tools such as jQuery, Bootstrap, Sentry, Google Tag Manager, and Piwik PRO, ensuring a robust digital infrastructure. However, the absence of a valid SSL certificate and disabled TLS protocols represent a critical security vulnerability that undermines user trust and data protection. Privacy compliance is well addressed with explicit cookie consent mechanisms and comprehensive privacy and cookie policies. Contact information and company legitimacy are clearly presented, enhancing business credibility.

The website for wimex.mr is minimalistic and primarily functions as a redirect landing page with limited content. It appears to target a French-speaking audience, likely in Mauritania, with a focus on technology or related services, as suggested by links to 'wimexTechnologie' and 'interlink.mr'. However, the lack of detailed business descriptions, contact information, or service listings limits the ability to fully understand the company's market position or business model. Technically, the site uses Apache server technology with jQuery and Bootstrap frameworks, but suffers from poor performance and basic mobile optimization. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and missing DNS records, which are critical for trust and operational stability. No privacy, cookie, or security policies are present, indicating poor compliance with data protection regulations. Overall, the site reflects a low maturity digital presence with significant gaps in security and compliance.

P

Paul & Partner Immobilien. Investments.

paulpartner.at

40

Paul & Partner Immobilien. Investments. is a small Austrian real estate agency specializing in property sales, rentals, and investments primarily in Vienna, Lower Austria, and Burgenland. The website presents a professional and well-structured digital presence using the Justimmo platform and Bootstrap framework, targeting property buyers, renters, and investors in the regional market. However, the technical infrastructure shows critical weaknesses, notably the absence of a valid SSL certificate and incomplete DNS configuration, which undermines security and trust. The site includes basic GDPR compliance elements such as a privacy policy and cookie consent modal but lacks comprehensive security policies or incident response information. Overall, the business credibility is moderate, supported by clear contact details and structured data markup, but the security posture is poor due to missing HTTPS and DNS records.

P

Pizzeria Uno Corporation

unos.com

21

Uno Pizzeria & Grill is a well-established restaurant brand known for inventing the original Chicago deep dish pizza in 1943. The website reflects a large hospitality business with a focus on dine-in, takeout, catering, and online ordering services. The brand maintains a consistent and professional online presence with good content quality and clear navigation. However, the technical infrastructure shows some weaknesses, including the absence of HTTPS, which is a critical security flaw. The site uses a variety of modern web technologies and marketing tools but suffers from slow performance and lacks a cookie consent mechanism. Security posture is basic with no valid SSL certificate, no HSTS, and no advanced security headers implemented. Privacy compliance is minimal with a basic privacy policy but no explicit cookie policy or consent. Business credibility is moderate with strong branding and social media presence but lacks explicit contact details on the main page. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

SCHOLLENBERGER Kampfmittelbergung GmbH is a specialized service provider in ordnance and explosive material recovery operating primarily in Austria and Germany. Established in 2009 and employing around 380 staff, the company offers comprehensive services including surface and depth probing, aerial image evaluation, and diving operations. It is part of the SOCOTEC Group, which enhances its market position and operational capabilities. The website presents detailed business information and service descriptions targeting industrial, governmental, and private clients requiring ordnance clearance and related environmental services. Technically, the site is built on TYPO3 CMS with modern frontend libraries but suffers from critical security shortcomings such as lack of HTTPS and DNS misconfigurations. These issues undermine trust and expose the site to risks. No privacy or cookie consent mechanisms are implemented, which may affect GDPR compliance. Overall, the business is credible and professional, but the digital infrastructure requires urgent security and technical improvements.

SEQIS GmbH is a specialized IT service provider based in Austria, focusing on software testing, IT analysis, and project management. The company offers a broad range of services including remote testing, DevOps, training, and quality assurance, targeting businesses seeking to improve their software quality and IT project outcomes. The website is professionally designed, content-rich, and well-structured, primarily in German, with clear navigation and active social media engagement. Technically, the website runs on a PHP 8.2.28 backend with nginx and uses the Contao CMS along with Bootstrap and jQuery for frontend functionality. Despite a modern tech stack, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Performance data is missing, but the site appears mobile-optimized and SEO-friendly. Security posture is weak due to the absence of HTTPS, no DNSSEC, and no CAA records, although several security headers are present. Privacy compliance is good with a comprehensive privacy policy and cookie consent via Cookiebot. Contact information is clearly provided, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the business location. Overall, the site is functional and professional but requires urgent security improvements, especially SSL/TLS implementation, to enhance trust and protect user data.

Z

Zertifizierungsstelle ERC

e-r-c.at

40

ERC is a European certification body specializing in the railway sector, offering comprehensive vehicle approval services primarily in the German-speaking region of Europe. Their key services include TSI conformity assessment as a Notified Body, ECM certification, and DeBo and AsBo evaluations. The website is professionally designed using Joomla CMS with a Bootstrap framework, providing clear navigation and relevant content in German with English alternatives. Technically, the site uses a valid SSL certificate but lacks modern TLS protocol support and advanced security headers, which slightly reduces its security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from security and privacy improvements.

R

R Systems

rsystems.com

40

R Systems is a large, established digital product engineering company specializing in cloud, AI, automation, and software modernization services across multiple industries including technology, healthcare, finance, manufacturing, and telecommunications. The company holds recognized certifications and partner statuses, positioning itself as a major contender in its market segment. Technically, the website is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile responsiveness. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses significant risks for data protection and user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a professional and trustworthy business front but requires urgent security improvements to meet industry standards.

The Stadtgemeinde Mödling website serves as the official digital portal for the city of Mödling, Austria, providing residents and visitors with comprehensive municipal information, news, events, and public services. The site targets local citizens and stakeholders, offering easy access to administrative contacts, service forms, and cultural activities. The business model is that of a government entity focused on transparency and community engagement. Technically, the website employs a custom RIS CMS platform with common web technologies such as jQuery, Bootstrap, and FontAwesome, and integrates Matomo for analytics. However, the absence of HTTPS is a critical security flaw that undermines user trust and data protection. Security headers are partially implemented, but the lack of SSL/TLS and modern protocols significantly lowers the security posture. Privacy compliance is moderate, with a clear privacy policy but no cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security upgrades.

J

Jung Eco Building Solutions GmbH

jung-ingenieure.com

37

Jung Eco Building Solutions GmbH is a specialized engineering consultancy focused on climate engineering, green building design, and energy consulting primarily serving clients such as builders, planners, and architects in Germany. The company offers tailored energy and climate concepts, building envelope optimization, and certification services for sustainable buildings. Their market position is that of a niche player in the energy and sustainability sector with a small company size and a professional online presence. Technically, the website is built on WordPress with common libraries like Bootstrap and jQuery, but lacks HTTPS and modern security configurations, which is a significant risk. The absence of cookie consent mechanisms and incident response information indicates partial GDPR compliance. Overall, the website is content-rich and professionally designed but requires urgent security improvements to protect user data and enhance trust.

The domain aisha.fi currently hosts a parked domain placeholder page provided by Hostinger, indicating no active business or website content. The page promotes Hostinger's hosting services and provides guidance for domain owners to set up hosting and manage nameservers. The technical infrastructure relies on Bootstrap, jQuery, Font Awesome, and Google Tag Manager, hosted on Hostinger with DNS managed by Cloudflare. However, the site lacks a valid SSL certificate and does not support HTTPS, which severely impacts security posture. No privacy, cookie, or terms of service policies are present, and no contact information or business details are provided, limiting trust and credibility. Overall, the site is non-operational as a business website and serves only as a parked domain.

B

BG/BRG/BORG Graz-Liebenau (HIB)

hib-liebenau.at

20

HIB Graz-Liebenau is a well-established federal secondary school in Graz, Austria, specializing in general education with emphases on languages, sports, and boarding facilities. The website provides comprehensive information about the school's programs, services, and extracurricular activities, targeting students, parents, and educators. Technically, the site is built on Joomla CMS with Bootstrap and UIkit frameworks, but suffers from critical security shortcomings including lack of HTTPS and missing privacy policies. The security posture is weak due to absence of valid SSL certificates and security headers, exposing the site to risks. Overall, while the content and business credibility are good, the technical and security aspects require urgent improvements to ensure trust and compliance.

Roll4You, s.r.o. is a Czech Republic-based manufacturer and distributor specializing in cigarette papers, filters, and tubes. As a member of the delfort group, a global leader in special and functional papers, Roll4You offers customized paper solutions and brand partnership services. The company targets rolling paper brands and distributors, operating primarily in the manufacturing sector with a B2B business model. The website reflects a professional presence with good content quality and consistent branding, supporting their market position and business operations. Technically, the site is built on WordPress with Bootstrap and jQuery, incorporating GDPR-compliant cookie consent and age verification mechanisms. However, the absence of HTTPS/SSL is a critical security gap that undermines user trust and data protection. Security headers and advanced security policies are also lacking, exposing the site to potential risks. Privacy policies are comprehensive and GDPR compliant, but incident response and security policy disclosures are missing. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to align with best practices and protect its users. Strategic recommendations include implementing SSL/TLS, enhancing security headers, and maintaining up-to-date software and plugins to mitigate vulnerabilities.

S

Solstein Film & Production Services

kultig.at

17

KULTIG Werbeagentur is a small full-service advertising agency based in Innsbruck, Austria, specializing in creative and regional marketing solutions. The company offers a broad range of services including strategy, graphic design, screen design, web development, content marketing, and event services. Their market position is that of a regional creative agency with a strong local presence and a diverse portfolio of projects. Technically, the website is built on WordPress using Elementor and several modern web technologies, but suffers from critical security misconfigurations such as the absence of a valid SSL certificate and missing DNS records, which impacts trust and security posture. The site is accessible without WAF or blocking mechanisms, but lacks cookie consent mechanisms despite using analytics tools. Contact information and social media presence are well presented, supporting business credibility. Overall, the website is professional in design and content but requires urgent improvements in security and privacy compliance to enhance trustworthiness and user safety.

KAICIID is an intergovernmental organization dedicated to promoting intercultural and interreligious dialogue to foster peace globally. The website reflects a mature organization with a clear mission, targeting religious leaders, educators, and policymakers. It offers capacity building, dialogue platforms, and regional initiatives. Technically, the site is built on Drupal 10 with modern frontend libraries and hosted on Pantheon, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly reduces the security posture. Privacy compliance is basic, with no cookie consent mechanisms despite tracking scripts. Contact information and social media presence are well established, supporting business credibility. Overall, the site is professional and content-rich but requires urgent security improvements.

E

EFM Versicherungsmakler AG

efm.at

24

EFM Versicherungsmakler AG is a leading insurance brokerage firm in Austria, serving both private and commercial clients with a wide range of insurance products and services. The company positions itself as the number one insurance broker in Austria with over 75 locations and more than 120,000 customers. Their business model focuses on independent insurance comparison and personalized local broker services. The website is built on TYPO3 CMS with Bootstrap and jQuery, featuring a professional design and good navigation, targeting German-speaking Austrian customers. However, the technical infrastructure shows weaknesses, notably the lack of a valid SSL certificate and the use of an outdated PHP version, which pose significant security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance efforts. The site integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, with moderate user tracking.