Security Directory

E

Emerson Electric Co.

flexim.com

40

The website flexim.com serves as a comprehensive brand page for Flexim, a division of Emerson Electric Co., specializing in non-intrusive, clamp-on ultrasonic flow meters for liquids, gases, and steam. The site positions Flexim as an industry leader with a strong focus on industrial and energy sectors, offering a wide range of products, services, and customer support resources. The content is rich, professionally designed, and well-structured, targeting industrial customers and professionals seeking advanced flow measurement solutions. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, and Visual Website Optimizer, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, significantly impacting the site's security posture. Privacy and compliance measures are well addressed with clear privacy and cookie policies, and incident response channels are available. Overall, the site demonstrates high business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions and maintain trust.

T

TeCoB GmbH

tecob.at

22

TeCoB GmbH's website is currently under construction and provides minimal information about the company or its services. The site uses WordPress with an under construction plugin and basic frontend technologies such as Bootstrap and Font Awesome. The domain is registered in Austria and DNS records are properly configured, including MX records pointing to Outlook mail protection. However, the website lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security and trust. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available, limiting user engagement and compliance with data protection regulations. Performance is poor with a very slow load time, and no analytics or tracking technologies are detected.

N

NGS Global

ngs-global.com

25

NGS Global is a partner-led executive search and leadership advisory firm with a global presence spanning the Americas, Europe, Asia Pacific, Africa, and the Middle East. The company offers personalized executive search services leveraging a mid-sized platform that combines the resources of major global firms with high-touch client service. Their key services include executive search, leadership consulting, and industry-specific expertise across multiple sectors. Technically, the website is built on Joomla CMS with modern JavaScript libraries and frameworks such as jQuery and Bootstrap, but suffers from a lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security posture. The site implements cookie consent via Cookiebot and uses Google Analytics and ZoomInfo for tracking, indicating moderate digital maturity. Security headers are partially implemented, but critical vulnerabilities exist due to the absence of SSL/TLS encryption. Overall, the website presents professional content and a clear business model but requires urgent security improvements to protect user data and enhance trust.

H

Hair & Makeup by Lois Poulsen

hairandmakeup.com.au

24

Hair & Makeup by Lois Poulsen is a small Australian business specializing in professional hair and makeup services primarily for weddings, formals, special events, and photo shoots in the Brisbane and Gold Coast regions. The website presents a clear business focus with detailed service descriptions and customer testimonials, targeting individuals seeking mobile and venue-based beauty services. The technical infrastructure is based on Joomla CMS with modern frontend libraries such as Bootstrap and jQuery, hosted on a LiteSpeed server. However, the website lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security and trustworthiness. Security headers are minimal, and no advanced security or privacy policies are present. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Overall, the site is functional and professionally presented but requires urgent security and compliance improvements.

R

Research Industrial Systems Engineering (RISE)

rise-world.com

40

Research Industrial Systems Engineering (RISE) is a well-established independent IT service provider and system integrator based in Austria, with a strong European presence and multiple offices across Europe. The company specializes in planning and implementing large-scale IT systems, offering a broad range of engineering, operational, and research services. Their key markets include energy, transportation, banking, healthcare, telecommunications, and government sectors. RISE emphasizes 100% European value creation and maintains a large team of highly qualified technical experts. Technically, the website uses modern frameworks and libraries such as Bootstrap, jQuery, GSAP, Swiper, and Lottie Player, and employs Matomo for analytics, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines the overall security posture. Security headers are present but cannot compensate for the lack of encryption. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent improvements in security to protect users and data.

A

AirPlus

airplus.com

40

AirPlus operates as a global enterprise specializing in corporate travel payment and expense management solutions. The company targets business travelers and corporate clients worldwide, offering localized website versions for multiple countries and languages. The business model focuses on B2B services within the transportation sector, positioning AirPlus as an established player in the corporate travel payment industry. Technically, the website is hosted on an Apache server with Akamai CDN support, utilizing JavaScript and Bootstrap frameworks for frontend presentation. While the site offers multilingual support and country-specific content, performance metrics are not provided, and the site shows basic mobile optimization and accessibility features. The technical stack is modern but lacks advanced CMS or platform indicators. From a security perspective, the website lacks a valid SSL certificate and does not enable any TLS protocols, which is a critical vulnerability. Although several security headers are present, some important protections like X-XSS-Protection are disabled, and HSTS is not fully configured. The site uses multiple external tracking and advertising services, leading to extensive user tracking without visible privacy or cookie policies, indicating poor privacy compliance. Overall, the website demonstrates moderate business credibility but suffers from significant security and privacy shortcomings. Strategic improvements in SSL/TLS configuration, privacy policy implementation, and security header enhancements are essential to reduce risk and improve trustworthiness.

F

Foggia Città Aperta

foggiacittaaperta.it

33

Foggia Città Aperta is a local news media website providing news, videos, blogs, and event information focused on the Foggia province in Italy. Established in 2012, it serves a regional audience with content spanning politics, sports, culture, and society. The website demonstrates a consistent brand presence and active social media engagement. Technically, the site uses a variety of JavaScript libraries and frameworks such as jQuery and Bootstrap, hosted on Aruba infrastructure. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Cookie consent is implemented, but privacy policies are basic and lack comprehensive GDPR compliance indicators. No explicit security or incident response policies are found. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and enhance trust.

P

Phoenix

theater-phoenix.at

37

Theater Phönix is a cultural non-profit theater organization based in Linz, Austria, offering a diverse range of stage performances with a focus on contemporary and socially relevant works. The website presents a professional and well-structured digital presence with clear navigation, social media integration, and community engagement features such as newsletters and surveys. However, the technical infrastructure shows critical security gaps, notably the absence of HTTPS and a valid SSL certificate, which significantly impacts the site's security posture. The lack of published security policies and incident response information further highlights areas for improvement. Overall, the business appears legitimate and consistent with its domain registration, but urgent security enhancements are recommended to protect user data and improve trust.

G

GeoVille Information Systems and Data Processing GmbH

geoville.com

26

GeoVille Information Systems and Data Processing GmbH is a medium-sized Austrian technology company specializing in satellite-based Earth Observation services. With over 25 years of experience and a global footprint spanning 140 countries and 510 implementations, GeoVille offers a range of services including satellite imagery, data access, land monitoring analytics, platform interfaces, and advisory capacity building. Their target audience includes government agencies, environmental organizations, and sectors such as energy, security, and urban planning. The website is built on TYPO3 CMS with modern frontend technologies and demonstrates good design and navigation, though performance data is limited. From a technical perspective, the website uses Apache server technology and integrates libraries such as Bootstrap, jQuery, FontAwesome, and Google Tag Manager. However, the site lacks HTTPS encryption, which is a critical security deficiency. Security headers are minimal, and no advanced security mechanisms like HSTS or OCSP stapling are enabled. Privacy compliance is basic, with a privacy policy page present but no cookie consent mechanism detected. Contact information is limited to a contact form, with no direct emails or phone numbers published. The security posture is weak due to the absence of SSL/TLS, exposing users to potential interception risks. No incident response or vulnerability disclosure policies are published, which could impact trust. The domain registration data is consistent with the company's claims, showing a long-established presence since 1998. Social media presence is strong, supporting business credibility. Overall, the website is professionally designed and content-rich but requires urgent security improvements, especially enabling HTTPS and enhancing privacy compliance. Strategic recommendations include installing a valid SSL certificate, implementing cookie consent mechanisms, publishing security policies, and improving contact transparency to enhance trust and compliance.

P

pheron technologies group GmbH

pheron.com

22

pheron technologies group GmbH is a specialized software house focused on providing uninterrupted IT infrastructure solutions primarily for German-speaking business customers. Their offerings include high availability and disaster recovery, monitoring, security and compliance, migration services, installation, training, product consulting, and managed services. The company positions itself as a platform- and vendor-independent IT service provider with a niche market focus. Technically, the website is built on Joomla CMS using the Helix framework and incorporates modern frontend libraries such as jQuery and Bootstrap, along with the Revolution Slider for visual presentation. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. The cookie consent mechanism and privacy policy indicate some level of GDPR compliance, but the absence of contact details and security policies limits transparency. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

H

Harouge Oil Operations

harouge.com

40

Harouge Oil Operations is a Libyan energy company specializing in the development and exploitation of oil fields. The company operates under international agreements and OPEC directives, focusing on safe and efficient oil extraction and export. Their website provides corporate information, news, tenders, and operational details primarily targeting industry stakeholders and partners. Technically, the site is built on Joomla CMS with K2 content management and uses common web technologies like jQuery and Bootstrap. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which critically impacts security posture. Security headers are partially implemented but insufficient without proper TLS. Privacy compliance is weak, with no cookie consent or detailed privacy policy. Contact information is limited to a contact form and webmail link, with no explicit emails or phone numbers. Overall, the website is functional but requires significant improvements in security and privacy to meet modern standards.

Hitachi Vantara LLC is a leading enterprise technology company specializing in sustainable data infrastructure and hybrid cloud solutions. The company offers a broad portfolio including storage platforms, data management, infrastructure as a service, and integrated systems, supported by a strong partner ecosystem and customer success services. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation targeting enterprise IT professionals. Technically, the site is built on Adobe Experience Manager hosted on AWS, utilizing modern frameworks and third-party integrations for video and analytics. However, the absence of a valid SSL certificate and missing security headers represent significant security weaknesses that reduce the overall security posture. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by structured data, customer testimonials, and clear contact information. Overall, the site is trustworthy and professional but requires urgent improvements in SSL and security headers to enhance user trust and security.

G

GTW Management Consulting GmbH

gtw-mc.com

24

GTW Management Consulting GmbH is an established international IT consulting firm specializing in SAP-based mass customer billing and related services. With offices in Austria, Switzerland, and Germany, the company serves a broad range of industries including transport, energy, telecommunications, finance, and manufacturing. Their key offerings include SAP BRIM consulting, subscription billing, credit management software, and data migration tools. The website reflects a professional and consistent brand presence with strong client testimonials and partnership with SAP. Technically, the site is built on TYPO3 CMS with common JavaScript libraries, but lacks a valid SSL certificate, which is a critical security shortfall. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the company demonstrates solid business credibility but must urgently address its security posture to protect user data and maintain trust.

POLYTEC Holding AG is a well-established Austrian manufacturing company specializing in the development and production of high-quality plastic solutions, primarily serving the automotive and non-automotive sectors. Founded in 1986, the company has grown to a large enterprise with approximately 3,900 employees worldwide. Their business model focuses on providing comprehensive plastic solutions from conception to logistics, leveraging strong technological and material expertise. The website reflects a professional and consistent brand image with clear navigation and rich content, targeting industrial clients and partners. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and includes advanced UI components such as sliders and accordions. However, the absence of HTTPS and modern SSL/TLS configurations represents a significant security risk. The company maintains a moderate level of privacy compliance with a clear privacy and cookie policy, and uses analytics and marketing tools responsibly. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

École polytechnique is a prestigious French engineering school offering a wide range of educational programs including Bachelor, Master, Doctorate, and Executive Education. It is a founding member of the Institut polytechnique de Paris and focuses on research, innovation, and entrepreneurship. The website targets students, researchers, entrepreneurs, alumni, and corporate partners, providing comprehensive information about academic programs, research labs, innovation centers, and community engagement. Technically, the site is built on Drupal CMS with modern frontend technologies but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Social media presence is strong with official accounts on Facebook, YouTube, LinkedIn, and Instagram. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and modern TLS protocols.

A

ARCOTEL Hotels

arcotelhotels.com

35

ARCOTEL Hotels is a medium-sized hospitality group operating multiple hotels across Austria and Germany, focusing on urban locations and sustainable hospitality practices. The website presents a professional and consistent brand image with comprehensive content about their services, sustainability certifications, and direct booking advantages. Technically, the site uses a mix of legacy and modern technologies, including PHP 5.6.40, Bootstrap 4, and various JavaScript libraries, hosted on Amazon CloudFront CDN. However, the absence of a valid SSL certificate and use of outdated PHP versions represent significant security risks. Privacy and cookie policies are well implemented with consent mechanisms, and analytics usage is moderate with Google services. Overall, the site is functional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

O

Open Knowledge Maps

openknowledgemaps.org

30

Open Knowledge Maps is a well-established non-profit organization founded in 2014, focused on revolutionizing scientific knowledge discovery through AI-based search and visualization tools. Their platform serves researchers and the scientific community by providing an accessible and open infrastructure for literature search and concept identification. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and D3.js, and is hosted on Contabo servers. However, the absence of HTTPS is a critical security gap that undermines user trust and data protection. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms, alongside the use of privacy-respecting analytics (Matomo). Business credibility is supported by testimonials, awards, and open source transparency. Overall, the site is content-rich and professionally designed but requires urgent security improvements.

S

Storyclash GmbH

storyclash.com

40

Storyclash GmbH operates a sophisticated AI-powered influencer marketing platform targeting marketers, brands, and agencies. The platform offers comprehensive services including influencer discovery, market insights, campaign management, and performance tracking across major social media platforms like Instagram, TikTok, and YouTube. The company is positioned as a leading solution in the influencer marketing space with strong brand partnerships and positive customer testimonials. Technically, the website employs modern frameworks such as Bootstrap and integrates multiple analytics and marketing tools including Amplitude, Google Tag Manager, HubSpot, and Intercom, reflecting a mature digital infrastructure. However, the absence of a valid SSL certificate and lack of essential security headers represent significant security vulnerabilities that could impact user trust and data protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent security improvements to enhance its security posture and user trust.

S

Starlinger & Co GmbH

starlinger.com

39

Starlinger & Co GmbH operates as a world-leading supplier of machinery for woven plastic packaging production and plastics recycling. The company offers comprehensive turnkey solutions covering the entire packaging lifecycle, including engineering, financing, after-sales service, and training. Their website reflects a mature B2B business model targeting manufacturers and recyclers globally, with a strong emphasis on sustainability and closed-loop packaging solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes tracking and consent management tools such as Google Tag Manager and Cookiebot. However, the website suffers from a critical security weakness due to the absence of a valid SSL certificate and lack of HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

A

ace Neue Informationstechnologien GmbH

ace.at

26

ace Neue Informationstechnologien GmbH is an established Austrian IT company with over 25 years of experience specializing in digital transformation solutions, including foundation management software, CRM based on Microsoft Dynamics 365, and business applications leveraging Microsoft Azure. Their market position is that of a trusted regional provider targeting foundations, public sector entities, and businesses seeking efficient CRM and digital solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses a modern frontend stack with SilverStripe CMS and popular JavaScript libraries, but lacks HTTPS, which is a critical security shortfall. The cookie consent mechanism and privacy policy indicate good GDPR compliance. Security posture is basic with no advanced headers or incident response information published. Overall, the site is functional and professional but requires urgent SSL implementation to improve security and trust.

L

Lee Enterprises

oanow.com

40

Opelika Auburn News (oanow.com) is a regional news media website operated by Lee Enterprises, providing comprehensive local news, sports, weather, opinion, and lifestyle content for Opelika, Auburn, Lee County, and East Alabama. The site targets local residents and community members, offering both free content and subscription-based digital and print editions. The business model relies heavily on advertising revenue supplemented by subscription services. The website is professionally designed with consistent branding and good content quality, supported by a modern CMS platform (BLOX) and a robust advertising ecosystem integrating multiple ad networks and tracking technologies. Privacy compliance is addressed through the use of Osano consent management, indicating GDPR adherence.

Walstead Leykam Druck GmbH is a prominent European printing company specializing in roll offset printing with a strong market presence in Austria and neighboring countries. The company offers a wide range of print products and services, supported by a large workforce and significant annual revenue. The website is built on TYPO3 CMS and uses several JavaScript libraries for UI enhancements. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. While security headers are properly configured, the lack of HTTPS and cookie consent mechanisms are notable compliance gaps. Business information is comprehensive and trustworthy, supported by multiple certifications and awards. Overall, the website provides good content and user experience but requires urgent security improvements.

zeb.rolfes.schierenbeck.associates gmbh is a leading European strategy, management, and IT consulting firm specializing in the financial services industry. The company offers a broad range of consulting services including transformation, regulatory compliance, and corporate education, targeting banks, insurance companies, and financial technology specialists. Their market position is strong within Europe, supported by multiple subsidiary domains and partner sites across key financial markets. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience and strong brand consistency. Technically, the website is built on Drupal 11 with modern frameworks such as Bootstrap and integrates analytics tools like Matomo and Google Tag Manager. Accessibility features and cookie consent mechanisms are implemented, reflecting good digital maturity. However, the website suffers from critical security issues due to the absence of a valid SSL certificate and lack of HTTPS support, which significantly impacts the security posture and overall trustworthiness. Security headers are well configured, but the lack of TLS protocols and OCSP stapling are notable vulnerabilities. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. The company maintains active social media channels and provides clear contact information, enhancing business credibility. Overall, while the business and content aspects are excellent, urgent improvements in SSL/TLS configuration are necessary to elevate the security posture and user trust.

The Würth Group is a globally established enterprise specializing in the development, manufacturing, and distribution of assembly and fastening materials. With over 400 companies in 80 countries and more than 2,800 branches, it holds a world market leader position in its core business. The website reflects a mature digital presence with consistent branding and comprehensive corporate information primarily targeting industrial and business clients. Technically, the site employs modern web technologies including Bootstrap, jQuery, and the FirstSpirit CMS, ensuring good mobile optimization and user experience. However, a critical security deficiency is the absence of a valid SSL certificate and enabled TLS protocols, severely impacting the site's security posture. Privacy and cookie policies are present and GDPR compliant, indicating attention to data protection regulations. Overall, the site is professional and credible but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and maintain trust.

BEST - Bioenergy and Sustainable Technologies GmbH is a medium-sized Austrian research organization specializing in sustainable bioenergy technologies. The company focuses on developing biomass-based biorefineries, digital methods for energy systems, and sustainable supply and value chains. Their market position is that of a technological leader and research center in Austria and Central Europe, serving research institutions, industry partners, and policymakers. The website provides comprehensive information on projects, publications, and company offices, targeting stakeholders interested in renewable energy and bioeconomy. Technically, the website uses a CakePHP CMS with Bootstrap and common JavaScript libraries but lacks HTTPS, which is a critical security gap. The site is mobile-optimized and has good content quality and navigation but suffers from slow performance and basic SEO and accessibility. Security posture is weak due to missing SSL/TLS and modern security headers, though session cookies are set with secure flags and X-Frame-Options is enabled. Privacy compliance is basic with a cookie consent banner and a privacy policy PDF in German. Contact information is clearly presented with multiple Austrian office locations and verified company emails and phone numbers. Analytics tools include Google Analytics and Matomo, indicating moderate user tracking. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance security headers.

Crystalline Mirror Solutions is a small technology company specializing in crystalline mirror products, currently operating as a subsidiary of Thorlabs. The website serves primarily as a landing page announcing the acquisition by Thorlabs and providing links to products and press releases hosted on the parent company's domain. The technical infrastructure is basic, utilizing Bootstrap for styling and conditional loading of Google Tag Manager for analytics. However, the site lacks HTTPS, which severely impacts its security posture. Security headers are minimal, and no privacy or cookie policies are present, indicating low privacy compliance. The absence of contact information and business details on the site further limits its credibility and user trust. Overall, the website is functional but minimalistic, with significant room for improvement in security, privacy, and content richness.

A

Audit Partner Austria Wirtschaftsprüfer GmbH

auditpartner.at

26

Audit Partner Austria Wirtschaftsprüfer GmbH is a professional services firm specializing in tax consulting and auditing services primarily serving Austrian businesses and professionals. The company emphasizes expertise, personal consultation, and proactive advisory services. Their website reflects a medium-sized firm with a consistent brand and a clear focus on finance-related services. The technical infrastructure is based on WordPress with common web technologies such as jQuery and Bootstrap, hosted on Austrian DNS infrastructure. However, the website lacks a valid SSL certificate, which significantly impacts its security posture. While basic security headers like HSTS are present, they are ineffective without HTTPS. The site provides comprehensive contact information and privacy policies, but lacks cookie consent mechanisms and explicit security or incident response policies. Overall, the website is professional and trustworthy but requires urgent improvements in SSL configuration and security transparency.

Dynea AS is a Norwegian-based manufacturer specializing in wood adhesives and related chemical solutions, serving primarily the European market with additional sales in Asia, Africa, and the Americas. The company offers a broad portfolio of products including amino-based resins, polyurethanes, emulsion polymers, and hot melt adhesives, complemented by services such as consulting, tank cleaning, and toll production. Established in 1947, Dynea maintains a strong market position as a leader in the European wood adhesives sector with multiple production sites and subsidiaries. Technically, the website employs modern front-end technologies such as Bootstrap, AOS, and Swiper, providing a good user experience with responsive design and clear navigation. However, the site lacks HTTPS support and a valid SSL certificate, which critically undermines its security posture. The absence of cookie consent mechanisms and limited privacy compliance features further highlight areas for improvement. From a security perspective, the site shows no evidence of common vulnerabilities like Heartbleed or POODLE but suffers from the lack of encryption and security headers. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims, supporting trustworthiness despite technical security shortcomings. Overall, Dynea's website reflects a professional and established business with solid content and branding but requires urgent security enhancements to protect user data and comply with modern web security standards.

Grayling is a large, international PR and public affairs agency operating in over 30 countries with a strong global network of offices and affiliates. The company specializes in brand communications, corporate affairs, and public affairs, serving a diverse range of clients including major global brands. Their website reflects a professional and consistent brand image, with comprehensive content showcasing their services, case studies, and client portfolio. Technically, the site is built on WordPress with modern frontend frameworks and integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, and OneTrust for cookie consent management. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of HTTPS support, which poses significant risks to user data and trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect visitors and maintain trust.

Suomen Euromaster Oy operates a comprehensive automotive service website focused on tire sales, installation, and vehicle maintenance services across Finland. The company serves both individual consumers and business clients with a wide network of over 80 service points. The website is professionally designed, localized primarily in Finnish, and integrates modern web technologies and marketing tools. However, the site suffers from a critical security flaw due to an invalid SSL certificate and lack of TLS protocol support, which significantly impacts its security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, supporting business credibility. The domain registration data aligns well with the business claims, indicating legitimacy.

I

Informa Connect Australia

informa.com.au

40

Informa Connect Australia is a leading event organiser specializing in conferences, exhibitions, and corporate training services primarily targeting business professionals in Australia. As part of the global Informa PLC group, it holds a strong market position with a large-scale operational footprint. The website reflects a professional business model focused on event management and corporate learning, supported by a consistent brand presence and trust indicators such as testimonials and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and frameworks, although performance metrics are unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS support, despite the presence of some security headers and Cloudflare protection. Privacy compliance is moderate with clear privacy and cookie policies and consent mechanisms, but lacks explicit GDPR compliance indicators or security policies. Overall, the site is functional and credible but requires urgent improvements in security infrastructure to protect user data and enhance trust.

KAUN GmbH is a medium-sized carpentry business based in St.Florian, Upper Austria, specializing in manufacturing and installation of windows, doors, furniture, sun protection, and window renovation services. The company targets residential and commercial customers within the region, emphasizing quality craftsmanship and sustainability. The website is built on Joomla CMS using the Helix Ultimate framework and incorporates modern frontend technologies such as Bootstrap and jQuery. However, the site lacks HTTPS, which is a critical security deficiency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Social media presence on Instagram and Facebook supports customer engagement. Overall, the business presents a professional image but must urgently address security gaps to protect user data and improve trust.

F

Freiform Werkzeugbau GmbH

freiform.eu

23

Freiform Werkzeugbau GmbH is a small manufacturing company specializing in tooling, plastic, aluminum, and graphite electrode products, serving clients primarily in Austria, Switzerland, and Germany. The website is built on WordPress with a modern tech stack including PHP 8, Yoast SEO, and GDPR-compliant cookie management. However, the site lacks a valid SSL certificate, exposing it to security risks and reducing trustworthiness. Legal and privacy documentation is comprehensive and GDPR compliant, with a cookie consent mechanism in place. The site uses Matomo for analytics, indicating a moderate level of user tracking with privacy considerations. Overall, the business presents a professional image but must urgently address its lack of HTTPS to improve security and user trust.

A

Ascent

parkside-interactive.com

30

Ascent is a UK-based design-led technology company specializing in data, AI, software, and cloud solutions. With a large team of over 530 professionals, they serve a broad client base across multiple industries including insurance, healthcare, retail, and technology. Their service offerings include data strategy, software engineering, cloud migration, and AI-driven innovation. The website reflects a mature and professional digital presence with comprehensive content, client case studies, and certifications, positioning Ascent as a credible player in the technology consulting market. Technically, the website uses modern frameworks such as Vue.js and Bootstrap and is hosted on Microsoft Azure, but suffers from a critical lack of HTTPS and valid SSL certificates, which significantly impacts security posture. Security headers are partially implemented, but the absence of TLS protocols and SSL undermines trust and user safety. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Overall, the site is content-rich and professionally designed but requires urgent security improvements to meet modern standards.

B

Borouge

borouge.com

40

Borouge is a prominent petrochemical company specializing in the production and supply of innovative polyethylene and polypropylene solutions across multiple sectors including energy, infrastructure, healthcare, and agriculture. The company leverages advanced Borealis Borstar® technology to deliver tailored polymer products that meet specific customer needs, emphasizing sustainability and innovation. The website reflects a well-structured digital presence with comprehensive investor relations, media updates, and e-services, targeting industrial clients and stakeholders in the petrochemical industry. Technically, the site is built on Microsoft SharePoint, incorporating modern web technologies and basic mobile optimization. However, a critical security concern is the invalid or missing SSL certificate, which undermines the security posture despite the presence of multiple security headers and policies. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website demonstrates a solid business and digital foundation but requires urgent remediation of SSL issues to improve security and trust.

KABEG is a major healthcare provider managing five hospitals in the Kärnten region of Austria, employing approximately 8,000 staff. The organization focuses on delivering professional healthcare services with an emphasis on patient well-being and humaneness. The website serves multiple audiences including patients, healthcare professionals, job seekers, and suppliers. Technically, the site is built on TYPO3 CMS with common web technologies such as jQuery and Bootstrap, hosted likely by A1.net. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, exposing visitors to potential risks. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Business credibility is strong with clear contact information, certifications, and consistent branding.

The United Nations Office for Outer Space Affairs (UNOOSA) operates as a key UN entity facilitating international cooperation in peaceful space activities, space law, and capacity building. It serves a global audience including member states, space agencies, academia, and industry. The website reflects a mature and consistent brand aligned with UN standards, offering comprehensive information on space policy, events, and programs. Technically, the site uses a legacy tech stack with Apache, jQuery, and Bootstrap, but suffers from slow performance and basic mobile optimization. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, exposing users to risks. Privacy compliance is minimal, lacking cookie consent mechanisms and GDPR indicators. Contact information and social media presence are well established, enhancing business credibility. Overall, the site is authoritative but requires urgent security and privacy improvements.

C

Capgemini

capgemini-consulting.com

40

Capgemini Invent is a prominent management consultancy brand under the Capgemini group, specializing in innovative consulting services that combine strategy, technology, data science, and design to help businesses transform and grow. The website reflects a mature, enterprise-level digital presence with comprehensive content, strong branding, and a wide range of services targeting C-level executives and large enterprises. Technically, the site is built on WordPress with modern frameworks like React and Bootstrap, indicating a contemporary and scalable infrastructure. However, a critical security issue is the lack of a valid SSL certificate, which undermines the site's security posture despite the presence of several security headers. Privacy and cookie policies are well implemented, showing good compliance with GDPR and related regulations. Overall, the site is professional and trustworthy but requires immediate attention to SSL configuration to enhance security and user trust.

W

Wombats Hostels

wombats-hostels.com

21

Wombat's Hostels is a medium-sized hospitality business operating city hostels in multiple European cities including Vienna, London, Munich, Budapest, and Leipzig. The company targets travelers seeking affordable accommodation with social and event experiences. The website is built on TYPO3 CMS and hosted on Apache servers, with a modern but basic technical infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. The site includes privacy and cookie policies with a consent mechanism, but lacks explicit contact information and advanced security policies. Matomo analytics is used with cookie-less tracking, indicating some privacy awareness. Overall, the website is functional and professionally designed but requires urgent security improvements to protect user data and enhance trust.

S

Swimsol GmbH

swimsol.com

28

Swimsol GmbH is a specialized energy company focused on providing floating and rooftop solar photovoltaic (PV) systems primarily for island environments such as the Maldives. The company positions itself as a leader in solar-at-sea technology with over 35 islands operating their systems and a significant installed capacity. Their business model includes system design, installation, operation, maintenance, and financing options, targeting luxury resorts and small businesses in tropical regions. Technically, the website is built on WordPress with a modern tech stack including Fusion Builder and WP Rocket, but lacks a valid SSL certificate, which impacts security and user trust. The site is well-designed, mobile-optimized, and SEO-friendly, with comprehensive content and strong branding. However, the absence of HTTPS and security headers represents a critical security gap. Privacy compliance is addressed with visible policies and consent mechanisms. Overall, Swimsol demonstrates a strong market presence and professional online representation but should prioritize securing their website with HTTPS and enhanced security practices.

H

HTL Braunau

htl-braunau.at

28

HTL Braunau is a well-established higher technical vocational school located in Braunau am Inn, Austria, offering specialized education in electronics, electrical engineering, mechatronics, and information technology. The institution serves approximately 1000 students and emphasizes project-based learning with national and international recognition. The website reflects a professional educational institution with clear communication channels and a focus on student engagement through events and partnerships. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and integrates Google Analytics and Tag Manager for visitor insights. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks and reducing trust. Privacy and cookie policies are present and GDPR compliant, indicating awareness of data protection requirements. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

N

Northern Virginia Community College

nvcc.edu

36

Northern Virginia Community College (NOVA) is a large public educational institution serving Northern Virginia with multiple campuses and a broad range of academic and workforce programs. The website reflects a professional and comprehensive digital presence targeting students, faculty, and community stakeholders. The technical infrastructure includes modern marketing and analytics tools but lacks a valid SSL certificate, resulting in insecure HTTP access. Security headers are minimal, and no advanced security mechanisms like HSTS or OCSP stapling are implemented. Privacy and terms policies are present and comprehensive, though cookie consent mechanisms are not evident. Overall, the site is trustworthy and well-branded but requires urgent improvements in SSL/TLS deployment to enhance security and user trust.

B

Byte Media GmbH

vbwienbaden.at

34

Byte Media GmbH operates a WordPress-based website providing SEO, domain trading, and digital marketing services, with a focus on banking and insurance information for Baden bei Wien. The site targets private and business customers seeking financial services in the region. The technical infrastructure relies on nginx, WordPress, jQuery, and Bootstrap, hosted on a Plesk Linux environment. While the content is well-structured and SEO-optimized, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Additionally, no cookie consent mechanism or explicit privacy compliance features are implemented, despite the use of Google Analytics and Tag Manager for tracking. Contact information is clearly presented, and social media presence is strong, enhancing business credibility. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect users and comply with privacy regulations.

E

Extreme Networks

enterasys.com

39

Extreme Networks is a leading enterprise technology company specializing in AI-powered cloud networking solutions that simplify and secure IT infrastructure. The company holds a strong market position as a Gartner Magic Quadrant Leader for wired and wireless LAN infrastructure. Their key services include the Extreme Platform ONE™, network fabric, cloud-based network management, and comprehensive security solutions. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and rich content tailored for enterprise IT professionals and partners. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that must be addressed to ensure secure communications and trust. Privacy compliance is well managed with comprehensive policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and well-structured but requires immediate improvements in SSL/TLS configuration to enhance security.

W

WIFI Wien

wifiwien.at

35

WIFI Wien is a prominent educational institution based in Austria, offering a comprehensive range of adult education courses and training programs across multiple sectors including business, health, IT, management, and languages. The website demonstrates a strong market position with extensive course offerings, a user-friendly interface, and integration of modern web technologies. However, the absence of a valid SSL/TLS certificate and lack of HTTPS significantly undermines the site's security posture, exposing users to potential risks. While privacy and cookie policies are well implemented with consent mechanisms, the technical security measures require urgent enhancement to meet modern standards. Overall, WIFI Wien presents a professional and trustworthy educational platform but must prioritize securing its web infrastructure to protect user data and maintain compliance.

G

Graz-Köflacher Bahn und Busbetrieb GmbH

gkb.at

23

Graz-Köflacher Bahn und Busbetrieb GmbH (GKB) is a regional transportation company based in Austria, providing rail and bus services primarily in the West Styria region. The company has a long history dating back to 1935 and focuses on sustainable mobility solutions including electrification of rail lines and regional bus services. Their website serves as an information portal for passengers, offering schedules, fare information, and service updates. The company maintains an active social media presence and provides comprehensive privacy and cookie policies in compliance with GDPR. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS and modern TLS protocols exposes users to potential risks. Despite this, the site is well-structured, mobile-optimized, and provides clear contact information. Overall, the business is credible and well-established, but the website's security posture requires urgent improvement to protect user data and maintain trust.

M

MAN Truck & Bus Vertrieb Österreich GmbH

mantruckandbus.at

36

MAN Truck & Bus Vertrieb Österreich GmbH operates a comprehensive commercial vehicle website targeting the Austrian market, offering trucks, buses, transporters, and related services. The website demonstrates a strong market position with extensive product information, digital services, and customer engagement tools such as configurators and contact forms. The technical infrastructure leverages modern web technologies including AWS CloudFront CDN, Bootstrap, and jQuery, ensuring a responsive and user-friendly experience. However, the absence of HTTPS and a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

C

Continental Trading GmbH

wetrade4you.at

20

Continental Trading GmbH operates as a specialized retailer of used printing and finishing machines, rooted in Salzburg, Austria, with an international customer base. The website presents basic information about the business and its offerings but lacks comprehensive contact details and legal policies. The technical infrastructure relies on Apache web server with Plesk hosting, AngularJS framework, jQuery, and Bootstrap for frontend, and uses Google Analytics for visitor tracking with IP anonymization enabled. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. No privacy or terms of service policies are present, indicating compliance gaps with GDPR and other regulations. Overall, the website is functional but exhibits outdated technology and security weaknesses that require urgent remediation.

S

softwareXperts GmbH

sw-xperts.com

40

softwareXperts GmbH is a medium-sized IT recruitment company operating primarily in Austria and Germany, with over 20 years of experience connecting IT professionals with companies. Their website targets both IT candidates and companies seeking talent, offering job and project placement services. The company positions itself as a trusted partner with local expertise and a strong market presence in the technology recruitment sector. Technically, the website is built on TYPO3 CMS with modern frontend libraries like Bootstrap and GSAP, providing a good user experience and mobile optimization. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security flaw. Security headers are well implemented but undermined by the absence of HTTPS. Privacy and cookie policies are present and GDPR compliant, with HubSpot used for marketing and analytics. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

L

Laakirchen Papier AG

heinzelpaper.com

26

Heinzelpaper, operated by Laakirchen Papier AG, is a well-established paper manufacturing company with a history dating back to the late 19th century. As a subsidiary of the Heinzel Group, it focuses on sustainable paper production, renewable energy integration, and wood processing. The company targets business customers in the packaging and paper sectors, emphasizing sustainability and circular economy principles. The website reflects a professional business presence with clear navigation and relevant content, though it lacks advanced SEO and accessibility features. Technically, the website uses common web technologies such as nginx, jQuery, Bootstrap, and FontAwesome. However, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. The site lacks modern TLS protocols, HSTS, and other security headers, exposing it to potential risks. Performance is rated slow, and while mobile optimization is good, accessibility and SEO are basic. From a security perspective, the lack of HTTPS is a critical vulnerability that undermines user trust and data protection. No incident response or security policy information is provided, and no vulnerability disclosure or security.txt files are found. Cookie consent and privacy policies are implemented, indicating some compliance with GDPR requirements. Overall, the website presents a moderate risk profile due to its security deficiencies, despite good business credibility and content quality. Strategic improvements in SSL deployment, security headers, and incident response transparency are recommended to enhance trust and compliance.