Security Directory

S

Studiokon Ventures Private Limited

skvindia.com

18

Studiokon Ventures Private Limited (SKV India) is a medium-sized, ISO-certified interior design firm specializing in commercial office interiors and turnkey solutions across India. With over 15 years of experience, SKV offers comprehensive services including design & build, general contracting, financing solutions, and office fit-outs. The company targets businesses seeking modern, functional, and inspiring workspaces, positioning itself as a leading player in the Indian office interior design market. Technically, the website is built on WordPress with a modern tech stack including PHP 7.4, NitroPack for optimization, and various marketing and analytics tools. However, the site lacks HTTPS, which is a critical security gap. The security posture is weak due to absence of SSL, HSTS, and security headers, though no immediate vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

E

EFM Versicherungsmakler AG

efm.at

24

EFM Versicherungsmakler AG is a leading insurance brokerage firm in Austria, serving both private and commercial clients with a wide range of insurance products and services. The company positions itself as the number one insurance broker in Austria with over 75 locations and more than 120,000 customers. Their business model focuses on independent insurance comparison and personalized local broker services. The website is built on TYPO3 CMS with Bootstrap and jQuery, featuring a professional design and good navigation, targeting German-speaking Austrian customers. However, the technical infrastructure shows weaknesses, notably the lack of a valid SSL certificate and the use of an outdated PHP version, which pose significant security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance efforts. The site integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, with moderate user tracking.

G

Gesundheitscampus Wesel

mehrdrinalserwartet.de

29

Gesundheitscampus Wesel is a large healthcare organization based in Germany, providing a broad range of medical, nursing, and therapeutic services through an integrated campus model. The website reflects a professional and consistent brand focused on healthcare professionals and patients, emphasizing family-friendly work culture and digital transformation. Technically, the site is built on TYPO3 CMS with modern front-end frameworks and includes social media and analytics integrations. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and privacy policy. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

K

Kammer für Arbeiter und Angestellte für Wien

akwien.at

40

The website akwien.at represents the Kammer für Arbeiter und Angestellte für Wien, a government-related non-profit organization advocating for workers' rights and social services in Vienna, Austria. The site offers comprehensive information and services including legal advice, consumer protection, educational resources, and digitalization funding. It targets employees and workers in Vienna, providing a rich content experience with clear navigation and strong branding. Technically, the site is built on a Gentics Portal CMS with a modern tech stack including jQuery, Bootstrap, Matomo Analytics, and Usercentrics for consent management. Hosting is provided by Anexia. While the site is mobile optimized and accessible, performance metrics indicate slow loading, and the SSL/TLS configuration is currently invalid, which is a critical security concern. Security posture is moderate with several security headers implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high due to consistent branding, official contact information, and alignment with WHOIS data. Overall, the site is a professional and trustworthy resource for workers in Vienna but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

P

Pan American Energy S.L., sucursal Argentina

pan-energy.com

35

Pan American Energy (PAE) is a leading integrated private energy company operating primarily in Argentina and the Latin American region. The company focuses on upstream oil and gas operations, downstream refining and distribution, and renewable energy projects. It positions itself as a major producer, employer, and investor in the energy sector of Argentina, with presence in neighboring countries. The website reflects a corporate and professional image with clear navigation and multilingual support, targeting investors, suppliers, and job seekers. Technically, the site is built on Microsoft SharePoint and ASP.NET technologies, leveraging modern JavaScript libraries and frameworks for UI and analytics integration. However, the absence of HTTPS and SSL certificates is a critical security flaw, exposing users to potential risks. Security headers are partially implemented, but key protections like HSTS and TLS protocols are missing. Privacy compliance is weak, with no visible cookie consent or GDPR indicators. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

G

Gelateria Romana - La Romana Srl

romanagroup.com

40

Gelateria Romana - La Romana Srl is a well-established Italian gelateria business founded in 1947, specializing in traditional gelato and pastry products with a franchising business model. The company targets entrepreneurs interested in franchising opportunities and consumers seeking quality artisanal gelato. The website reflects a consistent brand with good content quality and clear business information. Technically, the site uses a proprietary CMS (TITANKA!) with older JavaScript libraries and Bootstrap 3.2.0, indicating moderate digital maturity. However, the lack of HTTPS and modern TLS protocols is a critical security gap. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.

Ploier + Hörmann is a medium-sized Austrian construction company specializing in energy and telecommunications infrastructure, with over 50 years of experience. The company operates as part of the larger Unternehmensgruppe LEYRER + GRAF, which strengthens its market position and resource base. Their website is professionally designed using TYPO3 CMS, providing clear navigation and relevant content targeted at clients in the construction and infrastructure sectors. However, the absence of a valid SSL certificate and HTTPS severely impacts their security posture and user trust. While cookie consent and privacy policies are implemented, there is a lack of explicit security policies or incident response information. The company maintains active social media channels and links to sister companies, indicating a well-connected business ecosystem.

Landis+Gyr is a global leader in smart metering and grid edge intelligence technologies, providing advanced energy management solutions to utilities and energy providers. The company offers a broad portfolio including smart meters, analytics, consumer engagement, and managed services, positioning itself as a key enabler of the modern digital energy grid. Their website reflects a mature enterprise with comprehensive content, strong branding, and active communication channels including news, blogs, and social media. Technically, the site is built on WordPress with a robust set of plugins and integrations for analytics, marketing, and multilingual support. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine user trust and data protection. Security headers are partially implemented, and cookie consent mechanisms comply with GDPR standards. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of its SSL/TLS configuration to meet modern security expectations.

W

Windhund GmbH

windhund.com

38

Windhund GmbH is a small Austrian company specializing in providing monthly live-streamed and on-demand health keynote presentations aimed at corporate workplace health management. The company has a professional web presence built on TYPO3 CMS, featuring reputable speakers and a solid client base. Technically, the website uses modern marketing and tracking tools such as Google Tag Manager and Facebook Pixel, and implements a cookie consent mechanism compliant with GDPR. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, exposing users to potential risks. The WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the website is functional and professional but requires urgent security improvements.

B

baningo GmbH

baningo.com

40

baningo GmbH is a technology company specializing in digital networking solutions, primarily through their digital business card platform and NFC business cards. Founded in 2015 and based in Austria, the company serves a broad professional audience seeking modern, sustainable ways to share contact information. Their market position is supported by over 10,000 customers and partnerships with notable companies. Technically, the website leverages Cloudflare for hosting and security, uses Matomo and Google Tag Manager for analytics, and integrates Facebook Pixel for marketing. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the website is professionally designed and trustworthy but requires urgent security improvements.

S

Stratodesk Corp.

stratodesk.com

40

Stratodesk Corp. is a mature technology company founded in 2010, specializing in secure, managed endpoint operating systems designed for virtual desktop infrastructure (VDI), Desktop-as-a-Service (DaaS), SaaS, secure browsing, and industrial IoT applications. The company has established a strong market position as a leading innovator with multiple industry awards and partnerships with major technology vendors such as Microsoft, Citrix, and VMware. Recently, Stratodesk became part of IGEL, further strengthening its market presence. The website reflects a professional and comprehensive digital presence, targeting enterprise customers seeking secure and manageable endpoint solutions. Technically, the site is built on WordPress with modern plugins and integrations, but suffers from a critical security shortfall due to the absence of a valid SSL/TLS certificate and HTTPS support, which significantly impacts its security posture. Privacy policies and terms of service are well documented, and contact information is clearly provided, supporting good privacy compliance and business credibility. Overall, Stratodesk demonstrates a solid business and digital maturity but should urgently address its SSL/TLS configuration to improve security and trust.

T

TEDAI Vienna

tedxvienna.at

33

TEDAI Vienna is a prestigious, application-only TED conference focused on Artificial Intelligence, held in Vienna, Austria. It targets business leaders, innovators, and thinkers across multiple sectors including technology, healthcare, finance, and policy. The event offers a premium experience with curated TED Talks, workshops, networking, and exclusive dinners. The website is professionally designed, rich in content, and well-branded, reflecting a strong market position as Europe's exclusive TED AI event. Technically, the site uses modern web technologies such as Webflow CMS, Swiper.js, GSAP, and is hosted behind Cloudflare, but suffers from critical SSL/TLS misconfigurations that undermine its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of explicit contact emails and phone numbers limits direct communication channels. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent security improvements to protect user data and ensure secure communications.

S

SLB

slb.com

40

SLB is a global energy technology company focused on driving innovation for a balanced planet. Their website showcases a comprehensive portfolio of solutions spanning decarbonization, digital transformation, and traditional oil and gas services. The company targets energy industry professionals, investors, partners, and job seekers, positioning itself as a market leader with extensive service offerings and a strong sustainability commitment. Technically, the website employs modern technologies such as jQuery, Brightcove video, Coveo search, and integrates multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and offers rich content with clear navigation. However, the security posture is weakened by an invalid or missing SSL certificate and lack of HTTPS support, which is a critical issue. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site reflects a mature enterprise with good business credibility but requires urgent security improvements to protect user data and maintain trust.

A

Adria Film

adriafilm.com

26

Adria Film is a small media company based in Austria specializing in film production, distribution, and festival organization. The website serves as a platform to promote their films, provide news updates, and facilitate ticket sales. The company targets European cinema audiences and diaspora communities with a focus on regional film culture. Technically, the website is built on WordPress using a professional theme and several popular plugins, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate is a critical security weakness, exposing users to potential risks. The presence of tracking pixels from Facebook and TikTok suggests moderate user tracking, balanced by a visible cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements and enhanced privacy compliance to reduce risk and build trust.

N

Nederman Holding AB

nederman.com

37

Nederman Holding AB is a well-established global leader in industrial air filtration and environmental technology, with a history dating back to 1944. The company offers a comprehensive range of products and services focused on protecting people, the environment, and production processes from harmful industrial emissions. Their market position is strong, supported by multiple subsidiaries and a broad product portfolio including dust and fume extraction systems and connected IIoT solutions. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Sitecore CMS, hosted via Cloudflare, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Privacy compliance is partially addressed through OneTrust cookie consent, but no explicit GDPR or security policies are found. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

E

ekey biometric systems GmbH

ekey.net

35

ekey biometric systems GmbH is a medium-sized Austrian technology company founded in 2002, specializing in fingerprint-based access control and smart home integration solutions. The company holds a leading market position in Europe for fingerprint access systems, offering a range of products including door-integrated fingerprint readers, wall-mounted units, and retrofit kits. Their business model focuses on manufacturing, sales, and providing support and training services. The website reflects a mature digital presence with multilingual support and comprehensive product information targeting homeowners, businesses, and smart home users. Technically, the site is built on WordPress with modern plugins and analytics tools, but suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Security headers are well configured, and privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

G

GDV Group

gdv.com.mx

40

GDV Group is a well-established market and consumer intelligence consultancy based in Mexico with over 50 years of experience. The company offers research and consulting services aimed at helping clients make informed business decisions. Their digital presence is built on WordPress with the Divi theme, leveraging common plugins and tracking tools such as Google Tag Manager and Facebook Pixel. While the website content is professionally presented and navigation is clear, the absence of a valid SSL certificate is a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are present but basic, with no visible terms of service or incident response policies. Overall, the business appears credible and consistent with its domain registration data, but security improvements are urgently needed.

L

Leviton Manufacturing Co., Inc.

brand-rex.com

40

Leviton Manufacturing Co., Inc. operates a comprehensive and professionally designed website offering a wide range of electrical and lighting control products targeting residential, commercial, and industrial markets. The company positions itself as a leader in home electrical safety with over 115 years of history, providing products such as lighting controls, wiring devices, networking solutions, electric vehicle charging, and submetering. The website demonstrates a mature digital presence with extensive product catalogs, market segmentation, and partner integrations. Technically, the site is built on Adobe Experience Manager with modern marketing and analytics tools integrated, ensuring good user experience and SEO. However, a critical security gap exists due to the absence of a valid SSL certificate and disabled TLS protocols, significantly impacting the security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain credibility.

W

wb-bc Business Consulting und Beteiligungs GmbH

wb-bc.at

37

wb-bc Business Consulting und Beteiligungs GmbH is a small Austrian consulting firm specializing in digital and online business consulting services. Their offerings include business founding, digital transformation, performance improvement, financing, business model innovation, and succession planning. The company emphasizes practical, tailored solutions delivered through digital channels such as phone, Skype, MS Teams, and Zoom, with modular booking and payment options available online. The website is built on WordPress using Elementor and integrates various marketing and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. While the site is content-rich and professionally designed with good navigation and mobile optimization, it lacks a valid SSL certificate, serving content over HTTP only, which is a significant security concern. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Contact information is clearly presented, and the company maintains an active social media presence. Overall, the business appears legitimate and trustworthy, but the lack of HTTPS significantly impacts the security posture.

T

Triple A Aqua Service GmbH

watercooler.at

23

Triple A Aqua Service GmbH operates the website watercooler.at, offering water dispensers and related services primarily in Austria. The company positions itself as a market leader with over 25 years of experience, providing both leased water dispensers and Alpenwasser bottled water delivery. The website is professionally designed using WordPress with the Divi theme and includes comprehensive content, customer testimonials, and social media integration. However, the technical infrastructure shows weaknesses in SSL/TLS configuration, lacking a valid certificate and modern protocols, which poses security risks. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Contact information is clearly provided, enhancing business credibility.

Hueck Folien GmbH is a specialized manufacturing company based in Austria, focusing on high-quality film coating solutions with a strong emphasis on security features for banknotes and other high-security applications. The company has a solid market position as a trusted partner for the world's most secure currencies and offers innovative products such as security threads and self-adhesive labeling surfaces. Their website reflects a professional and consistent brand image, targeting industrial clients and partners in security and design sectors. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. However, the absence of a valid SSL certificate and disabled TLS protocols significantly weaken the site's security posture, exposing users to risks and reducing trust. While security headers are well implemented, critical improvements in SSL/TLS configuration are necessary. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent security enhancements to align with best practices.

NETCONOMY GmbH is a mature technology consulting and digital platform services company founded in 2000 and based in Austria. The company focuses on helping businesses transform digitally by providing services in digital strategy, consulting and innovation, platform building, and operations excellence. Their market position is supported by long-term global customer relationships and partnerships with leading technology providers such as SAP, Google Cloud, and Microsoft Azure. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, GDPR compliance plugins, and marketing tools like HubSpot and Facebook Pixel. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. Security headers are minimal, and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

R

RIWOG Real Estate Management GmbH

riwog.at

36

RIWOG Real Estate Management GmbH operates as a medium-sized real estate group based in Austria, offering comprehensive property brokerage, management, and related services. The website targets property buyers, sellers, and investors primarily in Austria with some international presence in Greece and Spain. The business model focuses on real estate marketing, development, and client services including financing and valuation. The company maintains a professional online presence with clear branding and detailed legal disclosures, supporting its market position as a reputable real estate service provider. Technically, the website is built on SilverStripe CMS with modern JavaScript frameworks and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms implemented. Security best practices are partially implemented but critical improvements are needed in SSL/TLS configuration and security headers. Overall, the website is functional and professional but requires urgent security enhancements to protect user data and improve trust.

H

Haberkorn GmbH

haberkorn.com

38

Haberkorn GmbH operates a multi-country B2B online shop specializing in industrial products and services, primarily serving Central and Eastern European markets. The company maintains a strong regional presence with subsidiaries and partner sites in Germany and neighboring countries. The website is professionally designed with good content relevance and user experience, supporting multiple languages and regional adaptations. However, the technical infrastructure shows critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and trustworthiness of the site. The site uses modern JavaScript libraries and tracking tools, including Google Tag Manager, Facebook Pixel, and Hotjar, with a comprehensive cookie consent mechanism indicating basic privacy compliance. Overall, while the business model and content quality are solid, the lack of HTTPS and security policies present significant risks that should be addressed promptly.

M

MH|Direkt

mhdirekt.com

25

MH|Direkt is a mature and established e-commerce fulfillment service provider based in Austria with over 28 years of experience. The company operates multiple fulfillment centers across Austria, Germany, and the UK, offering comprehensive services including warehousing, packaging, cross-border shipping, personalization, and API integration. Their business model focuses on supporting online shops to efficiently manage logistics and shipping across Europe, including direct market entry into Switzerland. The website reflects a professional and well-branded digital presence with extensive content and customer testimonials, positioning MH|Direkt as a reliable partner in the e-commerce logistics sector. Technically, the website is built on WordPress using popular plugins and frameworks such as Elementor, Gravity Forms, and WP Rocket. It integrates multiple marketing and analytics tools including Google Analytics, Google Ads, Facebook Pixel, and LinkedIn Insight Tag, indicating a mature digital marketing strategy. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility features are basic. From a security perspective, the website lacks a valid SSL certificate, which is a critical issue impacting user trust and data security. Other security best practices such as HSTS, DNSSEC, and domain protection locks are not implemented, reducing the overall security posture. No explicit security or incident response policies are published on the site. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms in place. Overall, MH|Direkt presents a credible and professional business with strong market positioning in e-commerce fulfillment. However, the lack of HTTPS and some security best practices pose risks that should be addressed promptly to enhance trust and compliance. Strategic recommendations include immediate SSL certificate installation, enabling HSTS and DNSSEC, and publishing security policies to improve transparency and security culture.

F

Fercam S.p.A.

fercam.com

40

FERCAM S.p.A. is a well-established logistics and transport company with over 75 years of experience, offering a broad range of services including road, air, and ocean freight, integrated logistics, customs consulting, and specialized transport services. The company operates primarily in Europe with presence in Asia and Africa, targeting businesses requiring comprehensive supply chain solutions. The website demonstrates a good level of digital maturity with multi-language support, structured navigation, and integration of modern analytics and marketing tools. However, the absence of HTTPS and a valid SSL certificate significantly weakens the security posture, exposing users to potential risks. Privacy and cookie policies are present and supported by consent mechanisms, indicating compliance with GDPR standards. Overall, the site is professional and trustworthy but requires urgent security improvements.

K

KISSA Tea

kissatea.com

40

KISSA Tea operates a premium e-commerce platform specializing in organic matcha tea and related accessories, targeting health-conscious and lifestyle consumers primarily in Europe. The website is built on Shopify and leverages multiple marketing and analytics tools to enhance customer engagement and sales. While the site demonstrates excellent content quality, branding consistency, and user experience, a critical security gap exists due to the absence of a valid SSL certificate, undermining HTTPS security. The presence of comprehensive privacy and cookie policies with consent mechanisms reflects good compliance posture. Overall, the business appears legitimate and well-positioned in its niche, but immediate remediation of SSL/TLS issues is essential to protect customer data and maintain trust.

G

Gruppo Codognotto

codognotto.eu

39

Gruppo Codognotto is a well-established logistics and freight transport company based in Italy, offering integrated logistics services including sea, air, and road transport, customs handling, and warehousing. The company operates a large fleet across multiple countries and holds recognized ISO certifications, positioning itself as a reliable third-party logistics provider in the European and international markets. The website reflects a professional business presence with clear service offerings and relevant content for its target audience. Technically, the site runs on Drupal 7 with common web technologies like jQuery and Bootstrap, but suffers from outdated CMS usage and lacks a valid SSL certificate, which significantly impacts its security posture. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols exposes users to risks. Privacy and cookie policies exist but are basic, with limited GDPR compliance indicators. Contact information is available via email and forms, but no phone numbers or physical addresses are explicitly provided. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

T

Tulsa Public Schools

tulsaschools.org

40

Tulsa Public Schools operates a comprehensive public education system serving a large student population in Tulsa, Oklahoma. The website provides extensive resources for students, families, educators, and community members, including enrollment information, academic programs, family support, and career opportunities. The district positions itself as a community-focused organization committed to equity, excellence, and student success. Technically, the site leverages modern analytics and marketing tools, a reputable CMS (Finalsite), and Cloudflare for hosting and security. However, a critical security gap exists due to the absence of a valid SSL certificate, which undermines the secure delivery of content and user trust. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

M

MPG GmbH

michael-pachleitner-group.com

27

MPG GmbH is an established Austrian eyewear company specializing in manufacturing and retail of optical frames and lenses, serving both B2B and B2C markets. The company operates multiple subsidiaries and maintains a professional online presence with multilingual support and structured data. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating marketing tools such as Google Tag Manager and Facebook Pixel. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the business demonstrates credibility and maturity, but security posture requires urgent improvement to align with best practices.

E

Ecker & Partner

eup.at

24

Ecker & Partner is a well-established PR and Public Affairs agency based in Vienna, Austria, offering a broad range of communication services including crisis communication, litigation PR, digital content, and storytelling. The company positions itself as a leading agency in its sector with a strong network and long-standing client relationships. Technically, the website is built on WordPress with common marketing and analytics integrations but suffers from a critical lack of a valid SSL certificate, resulting in insecure HTTP connections. The site is content-rich and professionally designed but experiences slow load times and lacks some security best practices. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy page. Overall, the business credibility is high, but the security posture requires urgent improvement to protect user data and trust.

Bühler Group is a well-established enterprise specializing in manufacturing and technology solutions primarily for the food processing and advanced materials industries. The company offers a broad portfolio of industrial solutions, including extrusion, milling, and process technologies, supported by global services such as maintenance, expert consulting, and training centers. Their website reflects a mature digital presence with consistent branding and comprehensive corporate governance information. Technically, the site is built on Adobe Experience Manager and hosted on AWS infrastructure with CloudFront CDN, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms on forms. Overall, Bühler Group's website demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

M

Mississippi University for Women

muw.edu

33

Mississippi University for Women (The W) is a public co-educational university founded in 1884, offering a broad range of undergraduate and graduate programs with a strong emphasis on academic excellence and leadership development. The university holds a solid market position in the southern United States, recognized for low student debt and transfer student friendliness. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, faculty, staff, and alumni. The content is rich, well-structured, and supported by active social media channels and event management tools.

M

Minimax GmbH

minimax.de

37

Minimax GmbH is a well-established leader in the fire protection industry with over 120 years of experience. The company offers a broad range of fire detection, suppression, and prevention systems tailored for various industries including energy, manufacturing, and transportation. Their market position is strong, supported by a comprehensive portfolio of products and services, including maintenance and training. The website reflects a professional and consistent brand image targeting industrial and commercial clients seeking reliable fire safety solutions. Technically, the site uses modern JavaScript modules, a CDN for content delivery, and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, leaving the site vulnerable to interception and undermining user trust. Security headers are properly configured, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to align with best practices and protect users.

P

Party and Be Married

partyandbemarried.com

37

Party and Be Married is a small, specialized event planning and coordination company focused on weddings, lifestyle, and business events primarily serving California and beyond. The company emphasizes a personalized, artistic approach to creating unique client experiences. The website is hosted on Squarespace and uses standard web technologies including JavaScript, FontAwesome, and Google Fonts. While the site design is professional and content is relevant, the technical infrastructure shows weaknesses such as lack of a valid SSL certificate and disabled HTTPS, which severely impacts security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is limited to an email and contact form, with no phone or physical address listed. Social media presence is active, supporting marketing efforts. Overall, the website is functional but requires significant improvements in security and compliance to meet modern standards.

S

Swissport International AG

swissport.com

40

Swissport International AG operates as a global leader in airport ground services and air cargo handling, serving 286 airports worldwide. The company offers a broad portfolio of services including passenger services, ramp handling, air cargo services, airport hospitality, and executive aviation. Swissport targets airlines, airport operators, and cargo handlers, positioning itself as a market leader with a comprehensive service offering and a strong global network. The website reflects a professional and consistent brand image with extensive content and media releases supporting its market presence. Technically, the site leverages modern technologies such as Cloudflare CDN, Cookiebot for consent management, Google Tag Manager, and social media integrations, hosted on a CMS platform identified as Ibexa DXP. However, the website's SSL certificate is invalid or missing, which is a critical security concern that impacts the overall security posture. Security headers are well configured, but the lack of valid HTTPS and TLS protocols reduces the security score significantly. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by trust indicators such as ISO 27001 certification and official social media presence. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trust.

O

Opus Marketing GmbH

opus-marketing.de

23

Opus Marketing GmbH is a German branding agency specializing in transforming visions and ideas into impactful brands with a focus on strategic branding, digital transformation, and sustainability. The company targets businesses seeking creative and strategic brand development and positions itself as a medium-sized agency with a consistent and professional brand presence. Technically, the website is built on WordPress using WPBakery and integrates modern marketing and analytics tools such as Usercentrics for cookie consent, Google Tag Manager, and Facebook Pixel. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of security headers, which significantly impacts its security posture. Performance is also suboptimal with a slow load time and large page size. Overall, the business credibility and content quality are high, but technical and security improvements are necessary to enhance trust and compliance.

K

KRAL GmbH

kral.at

24

KRAL GmbH is a medium-sized Austrian company specializing in manufacturing screw pumps and flow measurement solutions primarily serving industrial sectors such as marine, power generation, chemical engineering, mechanical engineering, and oil & gas. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, offering detailed product and service information, supported by a global network of sales and service partners. The website integrates multiple marketing and analytics tools managed through Google Tag Manager and employs a comprehensive cookie consent mechanism to comply with GDPR requirements. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture, exposing users to potential risks and reducing trust. Security headers are partially implemented, but critical improvements are needed to align with best practices. Overall, the business demonstrates strong credibility and market positioning but requires urgent technical security enhancements to protect its digital assets and customer data.

U

Università degli Studi Internazionali di Roma - UNINT

unint.eu

37

Università degli Studi Internazionali di Roma - UNINT is a large, established higher education institution based in Italy, offering a wide range of undergraduate and graduate programs with a strong international focus. The website is professionally designed, content-rich, and targets students, faculty, and academic partners. The technical infrastructure is based on WordPress with modern plugins and frameworks, though performance is somewhat slow. Security posture is basic with critical issues such as an invalid SSL certificate and lack of security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy but requires immediate attention to SSL and security configurations to enhance user trust and data protection.

L

Le Domaine Forget de Charlevoix

domaineforget.com

38

Le Domaine Forget de Charlevoix is a well-established international academy and festival specializing in music and dance, located in Quebec, Canada. The organization offers a variety of cultural and educational services including intensive training stages, a renowned summer festival, concerts, and accommodation facilities. Their target audience includes musicians, dancers, cultural tourists, and donors. The website reflects a professional and consistent brand with good content quality and clear navigation, primarily in French with English options. Technically, the site uses ASP.NET MVC framework hosted likely on Microsoft Azure, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. However, the site lacks a valid SSL certificate, which is a critical security flaw, and does not implement advanced security headers or DNS security features. Privacy compliance is basic with cookie consent mechanisms but lacks explicit GDPR compliance indicators or a data protection officer contact. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

L

lucesem® - Ihr Komplettanbieter für EDV!

lucesem.at

28

lucesem® is a well-established IT service provider based in Klagenfurt, Austria, offering a broad range of IT solutions including managed IT services, cloud services, VoIP telephony, repair services, and data recovery for both business and private customers. The company has a strong regional presence and serves local and international clients. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on WordPress with popular plugins and themes, leveraging modern web technologies and SEO best practices. However, the absence of a valid SSL certificate is a critical security shortfall, exposing users to potential risks and undermining trust. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the business demonstrates credibility and professionalism but must urgently address its SSL/TLS configuration to improve security posture and user trust.

S

Sigma Phi Epsilon Fraternity

sigep.org

40

Sigma Phi Epsilon is a well-established national fraternity organization focused on building balanced men through leadership, brotherhood, and educational programs. The website serves a large audience including undergraduate members, alumni, and volunteers, providing resources such as scholarships, leadership development, and community engagement. The organization maintains a consistent brand and professional online presence with clear navigation and relevant content. Technically, the site is built on WordPress with modern plugins and hosted on WP Engine via Google Cloud infrastructure. However, the site currently lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Tracking technologies such as Google Analytics and Facebook Pixel are used extensively, but no cookie consent mechanism is implemented, indicating partial privacy compliance. Contact information and physical address are clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and comply with best practices.

K

ktchng

ktchng.com

39

ktchng is a small Austrian-based technology and e-commerce company offering an augmented reality mobile app that enables users to scan products and environments to receive trend information, community content, and sales offers. The platform integrates a token reward system (KTC) that users can earn and redeem in the ktchng webshop and partner stores. The website is professionally designed with good content quality and consistent branding, targeting consumers interested in AR and digital shopping experiences. Technically, the site uses PHP backend with nginx, Amazon AWS hosting, CloudFront CDN, and integrates monitoring and analytics tools such as New Relic, Google Analytics, and Facebook Pixel. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, with a cookie consent mechanism implemented. Contact information is clearly provided, including emails and phone numbers. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

W

WOLFGANG DENZEL AUTO AG

denzel.at

39

Wolfgang Denzel Auto AG operates a comprehensive automotive retail website offering new and used vehicles, financing, insurance, and service packages primarily targeting car buyers in Austria. The company maintains a strong market position with multiple automotive brands and electric mobility solutions. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party marketing and analytics tools, but lacks a valid SSL certificate, which significantly impacts security posture. Security headers are well configured, but the absence of HTTPS and modern TLS protocols is a critical vulnerability. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and maintain credibility.

M

Montanuniversität Leoben

mu-leoben.at

33

Montanuniversität Leoben is a well-established technical university in Austria specializing in sustainable technologies and circular engineering. The website reflects a strong academic and research focus with comprehensive educational offerings and active international partnerships. Technically, the site uses TYPO3 CMS with modern frontend libraries but lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and incomplete security headers, though privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, the site is professional and trustworthy but requires urgent improvements in security infrastructure to protect user data and enhance trust.

B

bfi Steiermark

bfi-stmk.at

40

bfi Steiermark is a large, well-established adult education institution based in Austria, offering a wide range of courses, seminars, and certifications across multiple professional fields. The website targets adult learners and professionals in the Steiermark region, providing a comprehensive educational service portfolio. Technically, the site is built on the Contao CMS platform and uses common web technologies such as jQuery and Less CSS. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security vulnerability. Security headers are implemented, but the absence of HTTPS severely impacts the overall security posture. The site includes GDPR-compliant privacy and cookie policies with a consent mechanism, and it maintains active social media channels for engagement. Overall, while the business and content quality are good, the technical and security shortcomings require urgent attention to protect user data and improve trust.

N

Namirial GmbH

xyzmo.com

40

Namirial GmbH operates in the digital transaction management and e-signature software sector, providing omni-channel solutions that enable businesses to conduct secure digital transactions anytime and anywhere. The company is recognized as a leader in its market segment, offering qualified trust services compliant with eIDAS regulations, and supports both SaaS and on-premise deployments. Their target audience primarily consists of businesses seeking digital transformation in document signing and workflow management. Technically, the website uses modern web technologies such as jQuery and integrates third-party services for fonts, translation, and marketing analytics. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, despite the presence of several security headers and policies. The domain is mature and consistent with the company's history, but the imminent expiry poses a risk if not renewed promptly. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

I

iService d.o.o.

iservice.hr

20

iService d.o.o. operates the website iservice.hr, providing fast and professional repair services for smartphones, tablets, Mac computers, and Apple devices, alongside retail sales of related accessories. The company targets both individual consumers and businesses, offering services such as quick repairs, free diagnostics, and warranty-backed parts. The business is well-positioned in the Croatian market with a strong reputation supported by certifications like Apple IRP and a 15-year operational history. Technically, the website uses a standard Apache server with modern marketing integrations including Google Analytics and Facebook Pixel, but lacks a valid SSL certificate, which is a significant security concern. The site is mobile-optimized with good SEO and user experience, though performance metrics indicate slow loading times. Security posture is weak due to missing HTTPS, lack of modern TLS protocols, and absence of key security headers. Privacy compliance is addressed with visible policies and cookie consent mechanisms, but no explicit security or incident response policies are found. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

H

HumanWare

humanware.com

40

HumanWare is a globally recognized leader in assistive technology for people who are blind or have low vision, offering a wide range of products including electronic magnifiers, braille devices, and software solutions. The company operates under the parent company EssilorLuxottica and serves a diverse audience including students, workers, veterans, and eye care professionals. Their website is professionally designed with rich content and multilingual support, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the site's security posture. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the business credibility and content quality are high, but urgent improvements in SSL/TLS security are recommended.

Q

Quantum Momentum Services

quantummomentum.net

39

Quantum Momentum Services is a small Australian-based business specializing in personal mentoring, coaching, spiritual healing, and business consulting services. The company offers individual mentoring, virtual assistance, and business consulting, targeting individuals and businesses seeking personal development and holistic support. The website is built on the GoDaddy Website Builder platform and integrates PayPal for payment processing. While the site presents relevant and well-structured content with clear contact information and social media presence, it lacks a valid SSL certificate, which significantly impacts its security posture. Basic privacy and terms of service documents are available, but cookie consent mechanisms and security policies are minimal or absent. Overall, the business appears legitimate and consistent with its domain registration data, but improvements in security and privacy compliance are recommended.