Security Directory

Management Action Programs, Inc. (MAP) is a well-established management consulting firm specializing in executive coaching, leadership training, and business growth solutions. With a history dating back to 1960, MAP offers a proven management system and a variety of workshops and coaching services aimed at accelerating business performance. The company targets business leaders and organizations seeking structured leadership development and scalable growth strategies. Their market position is strong, supported by a broad client base including industry leaders and a consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Gravity Forms, and HubSpot integrations for marketing and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting appears to be on a reputable managed WordPress platform, likely WP Engine. From a security perspective, the site uses HTTPS and modern libraries, but lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking and marketing tools. Overall, the website is professional and trustworthy with strong business credibility. However, improvements in privacy compliance and security transparency are recommended to enhance user trust and regulatory adherence.

M

Mconcepts Limited

mvintage.com

60

Mvintage is a Maltese-based e-commerce jewellery brand focused on meaningful, female-empowering designs inspired by Mediterranean culture. The website is professionally designed, leveraging Shopify's platform and multiple modern technologies to deliver a seamless user experience. The brand maintains a strong market position with a clear target audience of women seeking symbolic and personalized jewellery. The technical infrastructure is robust, utilizing Shopify's CDN, Tailwind CSS, and various third-party integrations for marketing, analytics, and security. Security posture is strong with HTTPS enforced, secure payment methods via PayPal, and fraud prevention mechanisms in place. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and operational maturity.

Sunlab GmbH is a well-established performance marketing agency based in Germany, specializing in SEO, SEA, Paid Social, Affiliate Marketing, Data Consulting, and Marketing Technologies. With over a decade of experience since its founding in 2011, Sunlab holds a strong market position supported by certifications from major platforms like Google, Microsoft, Amazon, and Meta. The company targets businesses aiming to scale their online presence and optimize digital marketing strategies. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with a robust CMS backend via Strapi, ensuring fast performance and excellent mobile optimization. Security practices are strong, with HTTPS enforced and appropriate security headers in place, though the absence of a cookie consent mechanism is a notable gap in privacy compliance. Overall, the site reflects a professional, trustworthy, and technically mature digital presence.

Malta Stock Exchange (MSE) is the primary financial market operator in Malta, providing regulated markets for equities, corporate bonds, government stocks, and other securities. The website offers comprehensive market data, latest news, training courses, and official announcements, positioning MSE as a key player in the Maltese financial sector. The platform targets investors, issuers, and financial professionals seeking detailed and timely market information. Technically, the website employs modern technologies such as Alpine.js, Axios, Highcharts, and Tailwind CSS, ensuring a responsive and interactive user experience across devices. Security measures include HTTPS, appropriate security headers, and no visible vulnerabilities, reflecting a strong security posture. However, the absence of an explicit cookie consent mechanism indicates a potential compliance gap with privacy regulations. Overall, the website is professional, content-rich, and trustworthy, supporting MSE's market position and service offerings.

O

OpenPayd Ltd

openpayd.com

48

OpenPayd Ltd operates as a regulated financial services infrastructure provider specializing in Banking-as-a-Service. The company offers a comprehensive API-driven platform enabling businesses to embed payments, accounts, and trading solutions globally. With regulatory authorizations from the UK FCA, Malta Financial Services Authority, and Canadian FIN-TRAC, OpenPayd positions itself as a trusted partner in the digital economy. Their client base includes notable fintech and digital asset companies, underscoring their market relevance and operational scale. Technically, the website is built on WordPress with modern SEO and analytics integrations, providing a professional and responsive user experience. Security practices are robust, including HTTPS, security headers, and CAPTCHA protections, though a dedicated security policy page and incident response contacts are absent. Overall, OpenPayd demonstrates a mature digital presence with strong business credibility and compliance posture.

S

Session Map AB

session.nu

51

Session Map AB operates a professional e-commerce platform specializing in hair and beauty products, primarily targeting salons and industry professionals in Sweden. The website showcases a well-structured product catalog with detailed descriptions, pricing, and promotional campaigns, reflecting a mature market presence. The company emphasizes customer engagement through events, education, and integrated support services.

McKesson Medical-Surgical operates as a leading distributor of medical supplies, durable medical equipment, surgical supplies, and medical lab supplies, targeting healthcare professionals and organizations primarily in the United States. The website reflects a mature enterprise with a comprehensive portfolio of products and services, including inventory management, distribution, lab management, and financial services. The company positions itself as a trusted partner in healthcare supply chain management, emphasizing quality, service, and operational efficiency. Technically, the website is built on WordPress with modern front-end technologies such as Tailwind CSS, Swiper.js, and integrates third-party services like Google Tag Manager and OneTrust for privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS, uses secure login forms with CSRF protection, and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and compliance posture. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure mechanisms to further enhance trust and security transparency.

Best Transport AB is a leading transport company in Sweden and the Nordic region, specializing in flexible, fast, and reliable transport services for businesses. Their offerings include express deliveries, distribution, healthcare logistics compliant with GDP regulations, service logistics, and warehousing solutions. The company emphasizes sustainability with a largely fossil-free vehicle fleet and aims for full electrification. The website reflects a mature digital presence with a modern tech stack including Nuxt.js, Prismic CMS, and Tailwind CSS, ensuring fast performance, mobile optimization, and good SEO. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the site is professional, trustworthy, and well-aligned with the company's business claims.

Werlabs AB operates a well-established Swedish healthcare platform specializing in preventive health through blood tests and health checks. The company targets both private individuals and corporate clients, offering comprehensive health assessments and specialist consultations. The website reflects a mature digital presence with modern technologies such as Next.js, React, and AWS hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant privacy and cookie policies. Trust is reinforced by customer testimonials, accreditations, and a high volume of positive Trustpilot reviews. No blocking or WAF interference was detected, allowing full content accessibility. Overall, Werlabs demonstrates a professional, secure, and user-friendly online service with a clear focus on health and wellness.

F

FOSSi Foundation

fossi-foundation.org

48

The FOSSi Foundation is a small, international non-profit organization dedicated to promoting and protecting the open source silicon chip movement. It serves as a custodian for the Free and Open Source Silicon community, organizing key events such as Latch-Up and ORConf, publishing a monthly newsletter, and fostering collaboration among developers and contributors. The foundation's website reflects a strong community focus with clear navigation, professional design, and mobile optimization. Technically, the site is built using modern frameworks like Nuxt.js and Vue.js, hosted likely on Netlify, and employs efficient performance and accessibility practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies, which are important for compliance and trust. Overall, the website is trustworthy and professional, though it would benefit from enhanced privacy compliance and explicit security documentation.

Wilson Creative is a well-established digital agency based in Sweden with offices in Stockholm and Kalmar. The company offers a comprehensive suite of services including web development, digital marketing, branding, and film production. They serve a diverse client base across Sweden and have received multiple awards and positive client testimonials, positioning them as a reputable player in the digital communications market. Their website reflects a modern, professional design with clear navigation and strong branding consistency. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates with Prismic CMS, and employs Cookiebot for GDPR-compliant cookie management. Security practices are robust with HTTPS enforced and appropriate security headers present. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site demonstrates a high level of digital maturity and compliance, supporting Wilson Creative's market position as a trusted digital partner.

P

Pactumize

pactumize.com

45

Pactumize is a Swedish legal technology company specializing in contract drafting automation and digital negotiation solutions. Their platform targets legal teams and business users who require efficient, remote contract management and negotiation capabilities. The website reflects a niche market position with a SaaS business model offering free trials and demos to attract users. Technically, the site employs modern frontend technologies such as Vue.js and Tailwind CSS, integrates analytics and tracking tools like Google Analytics and FullStory, and implements standard security measures including HTTPS and reCAPTCHA. However, explicit security policies and terms of service are absent, which could be improved to enhance trust and compliance. Overall, the website is professionally designed, mobile-optimized, and provides clear navigation and relevant content, supporting a positive user experience.

I

Invici AB

invici.se

48

Invici AB is a Swedish company specializing in recruitment and interim staffing services within the finance sector. Their website positions them as experts in building future-ready finance teams by providing qualified economists and finance professionals exactly when needed. They serve both private and public sectors with services including recruitment, interim solutions, consulting, and executive search. The company leverages modern digital tools and structured processes to ensure quality matches and client satisfaction. Technically, the website is built on HubSpot CMS with React and Tailwind CSS, integrating multiple analytics and marketing tools while maintaining GDPR compliance and user privacy through consent mechanisms. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website reflects a professional, trustworthy, and well-established business with a clear market position in Sweden's finance recruitment industry.

Q

QlikTech International AB

qlik.com

64

QlikTech International AB, operating under the brand Qlik, is a leading enterprise software provider specializing in data integration, data quality, and AI-powered analytics solutions. The company has a strong market position as evidenced by its leadership in multiple Gartner Magic Quadrants. Qlik offers a comprehensive suite of products including Qlik Talend Cloud, Qlik Cloud Analytics, and various data management and analytics tools, targeting enterprise organizations seeking to leverage data for smarter decision-making. The website reflects a mature digital presence with a focus on user experience and content relevance. Technically, the website employs modern frameworks such as React and Gatsby, combined with Tailwind CSS for styling. It integrates various third-party tools including Vidyard for video content, Marketo for marketing automation, OneTrust for privacy compliance, and Visual Website Optimizer for A/B testing and analytics. The site is hosted on AWS Cloudfront, ensuring reliable performance and scalability. Mobile optimization and accessibility features are well implemented, supporting a broad range of users. From a security perspective, the site uses HTTPS with strong SSL configuration and implements security best practices including content security policies and privacy compliance mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The presence of comprehensive privacy and cookie policies, along with consent mechanisms, indicates a strong commitment to regulatory compliance. Overall, Qlik's website demonstrates a high level of professionalism, technical sophistication, and compliance, supporting its position as a trusted leader in the data integration and analytics market.

N

Nordzucker

nordicsugar.com

53

Nordzucker is a large, international sugar manufacturing company specializing in producing sugar from beet and cane. The website serves as a redirect notice informing visitors that Nordic Sugar websites have been merged into the Nordzucker platform, available in English and German. The company targets a broad audience including customers, partners, and the general public interested in sugar products and corporate information. The business model focuses on manufacturing and distributing sugar and related products with an emphasis on sustainability and corporate compliance. Technically, the website leverages modern AMP technology for fast performance and excellent mobile optimization. It uses WordPress as the CMS and integrates third-party services such as Cookiebot for cookie consent management and eTracker for analytics. The site demonstrates good SEO and accessibility practices, with a clean and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. Security headers are likely present given AMP usage, and no vulnerabilities or exposed sensitive data were detected in the HTML content. However, explicit incident response contacts and vulnerability disclosure policies are not found, which could be improved. Overall, the website presents a high level of professionalism, compliance, and technical maturity. The risk profile is low, but strategic recommendations include publishing incident response information, adding a vulnerability disclosure policy, and enhancing direct contact details to improve trust and security posture.

O

Osstell®

osstell.com

54

Osstell® is a healthcare technology company specializing in dental implant stability measurement solutions. Their website presents a professional, well-structured platform offering products such as Osstell Beacon, OsstellConnect, and SmartPeg, supported by a comprehensive scientific database and educational resources. The company targets clinicians and dental professionals, positioning itself as a trusted leader with global distribution and strong scientific backing. Technically, the website is built on WordPress with modern frameworks like Tailwind CSS and integrates advanced mapping and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and consent mechanisms in place, though explicit security policies and incident response contacts are not found. Overall, the site demonstrates high professionalism, good privacy compliance, and effective user engagement through testimonials and newsletters.

D

Dorite AB

dorite.se

42

Dorite AB is a Swedish technology consulting company specializing in maximizing the value of Microsoft 365 investments by creating modern, efficient, and user-friendly digital workplaces. Positioned as experts in Microsoft 365 and AI-driven collaboration, they offer services including digital workplace solutions, information management, AI innovation, security and compliance, consulting, training, and lifecycle management. Their target audience primarily consists of organizations seeking to enhance productivity and engagement through modern digital tools. The company presents a professional and consistent brand image with clear contact information and active social media presence. Technically, the website is built on modern frameworks such as React and Tailwind CSS, hosted likely behind Cloudflare, and optimized for performance and mobile devices. Analytics are implemented via Google Tag Manager and Cloudflare Insights, with a cookie consent mechanism in place, indicating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. WHOIS data is privacy protected but consistent with a legitimate small business. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility.

U

Utmost International

utmostwealth.com

53

Utmost International operates a professional and comprehensive website focused on wealth and corporate financial solutions. The company is positioned as a leader in the international life assurance market with over £100 billion assets under administration and strong financial ratings. The website demonstrates a mature digital infrastructure using WordPress with modern SEO and accessibility practices. Security posture is good with HTTPS and GDPR-compliant cookie consent, though explicit security policies and headers could be enhanced. Overall, the site reflects a trustworthy and well-established financial services provider with clear business and technical maturity.

G

GABALS DNA

gabals.lv

52

Gabals. lv is a Latvian real estate property evaluation platform launched in 2024, providing detailed property reports by aggregating data from multiple authoritative sources such as the State Land Service, Ministry of Agriculture, and environmental registries.

C

Cargomind

cargomind.com

51

Cargomind is a global logistics specialist focusing on air and ocean freight, operating from 28 offices across 14 countries. The company positions itself as an independent consultant and expert in freight services, offering tailor-made logistics solutions supported by a strong global partner network. Their key services include air freight, ocean freight, road freight, and warehousing, targeting businesses requiring reliable and flexible global logistics solutions. The website reflects a mature digital presence built on the Neos CMS platform with modern frontend technologies and good SEO practices. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and cookie consent mechanisms are absent. Overall, the website demonstrates high professionalism and trustworthiness, supported by industry certifications and memberships.

长沙县聚福市场营销策划有限公司是一家位于中国湖南省长沙市长沙县的综合性企业，业务涵盖市场营销策划、数字化转型、技术咨询、人工智能硬件销售及相关制造和服务领域。公司在本地市场具有一定的知名度和影响力，提供多样化的技术和咨询服务，面向企业客户，致力于推动企业数字化升级和智能化发展。网站内容丰富，涵盖公司介绍、产品展示、服务项目及联系方式，体现了较好的业务覆盖和客户导向。技术基础较为基础，采用nginx服务器和Tailwind CSS框架，网站设计良好且移动优化表现良好，但性能数据不完整，需进一步优化加载速度和资源管理。安全方面，网站未配置有效的SSL证书，未启用HTTPS，缺少关键安全头，存在较大安全隐患，严重影响用户信任和数据安全。隐私合规方面缺乏隐私政策和Cookie政策，未体现GDPR或其他数据保护法规的遵循。整体风险较高，建议优先部署HTTPS，完善安全配置，并补充隐私合规内容以提升整体安全和合规水平。

B

Beontag

beontag.com

40

Beontag is a global manufacturing and technology company specializing in identification and digital transformation solutions, including graphics and label materials as well as RFID and IoT enablers. The company has a strong market presence with over 16 facilities worldwide and operations in more than 60 countries. Their website reflects a professional and comprehensive digital presence targeting businesses requiring advanced labeling and IoT solutions. Technically, the site is built on modern frameworks such as Next.js and hosted on AWS CloudFront, ensuring scalability and performance. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, which significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance and consent mechanisms. The site integrates analytics and marketing tools like Google Analytics and HubSpot, balancing user tracking with privacy considerations. Overall, while the business and technical maturity are strong, immediate attention to SSL/TLS implementation is necessary to enhance security and trust.

Ainsworth Game Technology is a well-established company specializing in gaming technology products, including gaming cabinets and interactive solutions, targeting global markets such as APAC, North America, Latin America, and Europe. The website reflects a professional corporate presence with clear navigation and consistent branding. Technically, the site uses modern frontend technologies like Tailwind CSS, Alpine.js, and integrates Google Analytics and reCAPTCHA for analytics and security. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Security headers are present but insufficient without HTTPS. Privacy compliance is basic, with a privacy policy and terms of use present but no cookie consent mechanism. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security configuration to protect user data and enhance trust.

N

NEOS

neos.eu

34

NEOS is a well-established Austrian political party with a strong digital presence and comprehensive content about its programs, members, and activities. The website is professionally designed, mobile-optimized, and provides clear navigation and rich information for its target audience. Technically, the site uses modern frontend technologies such as Alpine.js and Tailwind CSS, and integrates marketing and analytics tools like Google Tag Manager and Microsoft Clarity. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which poses a significant risk to user data and trust. Privacy compliance is generally good, with a clear privacy policy and GDPR consent mechanisms in the newsletter form, but lacks a visible cookie consent banner. Overall, the site is credible and trustworthy but requires urgent security improvements to protect visitors and maintain compliance.

P

pc-web: it-solutions GmbH

pc-web.at

21

pc-web: it-solutions GmbH is an Austrian IT service provider specializing in IT solutions, software development, cloud computing, telephony, and online solutions. The company targets businesses and organizations seeking tailored and secure IT services. Their market position is that of an established regional provider with a medium-sized operation founded in 2023. The website presents a professional and comprehensive overview of their services, supported by customer testimonials and structured data indicating legitimacy. Technically, the website uses modern JavaScript frameworks and analytics tools but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Strategic improvements in SSL configuration and security headers are recommended to enhance trust and protect users.

S

SIG Combibloc Group Ltd.

sig.biz

62

SIG Combibloc Group Ltd. is a leading enterprise in the manufacturing sector specializing in innovative and sustainable packaging solutions including carton, bag-in-box, and spouted pouch packaging. The company holds a strong market position as an industry leader with a comprehensive portfolio and a global reach. Their website reflects a mature digital presence with professional design, clear navigation, and a focus on sustainability and innovation. Technically, the site uses modern frameworks such as Next.js and React, hosted on Microsoft Azure, with good mobile optimization and SEO practices. However, the security posture is impacted by an invalid or missing SSL certificate, which is a critical issue that should be addressed promptly. Privacy compliance is well managed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional but requires improvements in SSL configuration to enhance security.

dormakaba Holding is a globally recognized leader in smart and secure access solutions, providing a comprehensive range of products and services for secure access to buildings and rooms. The company operates internationally with a strong presence in multiple countries and serves diverse markets including security, technology, and manufacturing sectors. The website reflects a mature, well-established business with a clear focus on innovation, sustainability, and customer engagement. Technically, the site leverages modern frameworks such as Vue.js and Contentful CMS, ensuring a responsive and user-friendly experience across devices. Security measures are robust with multiple security headers and a comprehensive content security policy, although the SSL certificate is currently invalid, which is a critical issue that needs immediate attention. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, dormakaba demonstrates a strong security posture and business credibility, supported by transparent investor relations and active communication channels.

M

Mondial GmbH & Co. KG

mondial-congress.com

37

Mondial GmbH & Co. KG is a medium-sized Austrian company specializing in congress and event management services, including green meetings, virtual events, and travel management. The company holds several industry certifications and maintains a multilingual, content-rich website targeting organizations seeking professional event solutions. Technically, the website is built on WordPress with modern libraries but lacks a valid SSL certificate, resulting in a critical security gap. The absence of HTTPS and security headers exposes users to risks and reduces trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to meet modern standards.

B

Belimed INC.

belimed.com

40

Belimed INC. is a large healthcare-focused company specializing in medical and surgical instrument sterilization, disinfection, and cleaning products and services. The company positions itself as a trusted partner in advancing medical care and protecting patient and staff safety, with a global presence and over 1,000 employees across nine countries. Their business model is primarily B2B, serving sterile processing departments and healthcare providers with a comprehensive portfolio including washer-disinfectors, sterilizers, digitalization solutions, and training services. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Tailwind CSS for styling. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Connect, LinkedIn Pixel, and Calendly. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. However, the SSL certificate is invalid or missing, which significantly impacts the security posture. From a security perspective, the site implements several important HTTP security headers and a restrictive Content-Security-Policy, but the lack of a valid SSL certificate and incomplete HSTS implementation are critical weaknesses. No explicit security or incident response policies are found, and there is no vulnerability disclosure or security.txt file. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is professional and trustworthy from a business and content perspective but requires urgent remediation of SSL issues to improve security and user trust. Strategic improvements in security policy transparency and incident response readiness are also recommended.

O

Ovotherm International Handels GmbH

ovotherm.com

28

Ovotherm International Handels GmbH is a medium-sized Austrian manufacturing company established in 1969, specializing in eco-friendly clear egg packaging made from recycled PET waste. The company positions itself as the global market leader in the egg packaging industry, targeting businesses within the egg supply chain. Their website reflects a professional and consistent brand image, offering detailed product information, environmental benefits, and company insights. Technically, the site uses the ProcessWire CMS with modern frontend libraries such as GSAP and Tailwind CSS, providing a good user experience and mobile optimization. However, the website critically lacks a valid SSL/TLS certificate, resulting in no HTTPS support and weak security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing business credibility. Social media presence on Facebook, Instagram, and LinkedIn supports trust and engagement.

A

A&N GesbR

shelfie.at

40

The website shelfie.at is currently a coming soon placeholder page for the company A&N GesbR, represented by Philipp Asanger and Manuel Nobis, located in Linz, Austria. The site provides minimal business information, primarily a logo and contact address, with no detailed description of services or products. The business appears to be small and in early stages of web presence development. Technically, the site is built on WordPress using the SeedProd coming soon plugin, with Tailwind CSS and FontAwesome for styling, and jQuery for scripting. It is hosted behind Cloudflare with valid SSL, but the SSL certificate dates appear inconsistent, possibly due to data error. The site performance is slow with a high load time, and lacks modern security headers and HSTS enforcement. Mobile optimization and accessibility are basic. From a security perspective, HTTPS is enabled with a valid certificate, but no additional security headers or policies are implemented. There are no forms or data collection points, reducing attack surface but also limiting user engagement. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. DNSSEC and CAA are not enabled, and no vulnerability disclosure or incident response information is provided. Overall, the site is low risk but also low maturity in security and privacy posture. Strategic recommendations include implementing security headers and HSTS, adding privacy and cookie policies to comply with GDPR, improving site performance, and expanding business content to enhance credibility and user trust.

A

AirBerlin PLC & Co. Luftverkehrs KG

airberlin.com

24

The website for airberlin.com currently serves as a minimal placeholder 'Coming Soon' page referencing insolvency information for AirBerlin PLC & Co. Luftverkehrs KG, a former airline company. The site lacks substantive business content, contact information, and user engagement features, reflecting the company's insolvency status and inactive operations. Technically, the site uses Tailwind CSS for styling and is hosted on Hetzner infrastructure, but suffers from poor performance with a high load time and lacks modern web optimizations. Critically, the site does not have a valid SSL certificate and is served over HTTP only, exposing users to security risks. No privacy, cookie, or terms of service policies are present, and no contact or social media links are provided, limiting transparency and user trust. Overall, the website's security posture is weak, with no HTTPS, no security headers, and no advanced DNS security features enabled.

N

Netural Group GmbH

netural-group.com

55

Netural Group GmbH is a well-established digital services holding company based in Austria, operating primarily in the DACH region. Founded in 1998, it encompasses one of the longest-standing digital service providers and a company building entity focused on digital business models. The company emphasizes sustainable digital transformation and product development, with a clear market position as a pioneer in the digital space. The website reflects a professional and consistent brand image, targeting businesses seeking digital innovation and company formation services. Technically, the site leverages modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Amazon CloudFront with nginx, ensuring a moderate performance and good mobile optimization. However, the security posture is weakened by an invalid SSL certificate and lack of advanced security headers, which should be addressed promptly to protect user data and enhance trust. Privacy compliance is adequate with a GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the site is credible and functional but requires improvements in security and privacy transparency to reach higher trust and compliance levels.

G

GOLDBECK RHOMBERG GmbH

goldbeck-rhomberg.com

40

GOLDBECK RHOMBERG GmbH is a well-established construction and real estate services company with over 50 years of experience, primarily operating in Austria and Europe. The company offers comprehensive services including the turnkey construction of logistics and industrial halls, office buildings, parking garages, and residential buildings, positioning itself as an integrated provider in the real estate sector. Their business model focuses on delivering end-to-end solutions from design to operation, including parking services. Technically, the website is built on modern frameworks such as Nuxt.js and Express, hosted on Vercel, and uses TYPO3 CMS for content management. The site is well-optimized for SEO, mobile responsiveness, and accessibility, with a professional design and clear navigation. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of enabled TLS protocols, which is a critical issue that needs immediate remediation. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the website reflects a credible and professional business presence but requires urgent security improvements to protect user data and maintain trust.

F

Frauscher Sensor Technology USA Inc.

frauscher.com

40

Frauscher Sensor Technology USA Inc. is a leading provider of highly reliable train detection and wayside object control solutions, serving rail operators and system integrators globally. The company offers a comprehensive portfolio including hardware components like wheel sensors and axle counters, software solutions, and smart life cycle services. With a strong market position and a global footprint, Frauscher is recognized for its innovation and quality in the transportation sector. Technically, the website is built on modern frameworks such as Nuxt.js and uses Storyblok CMS, hosted on AWS CloudFront. The site is well-optimized for mobile and SEO, with good accessibility features. However, performance is moderate and could be improved. From a security perspective, the site employs several security headers and has a proactive PSIRT program. However, the SSL certificate is currently invalid, which is a critical issue that impacts the overall security posture. Other security best practices are in place, but improvements in SSL configuration and CSP are recommended. Overall, the website presents a professional and trustworthy image, with comprehensive privacy and cookie policies in place. The domain registration is consistent with the business claims, enhancing credibility. Strategic recommendations include fixing SSL issues, enhancing security headers, and maintaining strong privacy compliance to further strengthen trust and security.

U

Usecon gmbh

usecon.com

28

Usecon gmbh is an established technology and consulting company based in Vienna, Austria, founded in 2001. The company specializes in digital transformation, development, and AI solutions with a strong focus on human-centered design. Their market position is solid with over 24 years of experience and more than 1000 projects completed, targeting businesses seeking digital innovation and consulting services. The website content is well-structured and professional, supporting their business credibility. Technically, the website uses modern frontend technologies such as JavaScript and Tailwind CSS, but suffers from slow load times and lacks HTTPS support due to an invalid or missing SSL certificate. This significantly impacts the security posture and user trust. No CMS or backend platform is explicitly detected. Mobile optimization is good, but accessibility and SEO optimizations are basic. From a security perspective, the absence of HTTPS and modern TLS protocols is a critical vulnerability. No security headers or incident response policies are present, and no vulnerability disclosure mechanisms are found. Privacy and cookie policies exist and appear GDPR compliant, supporting privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements, especially implementing a valid SSL certificate and enabling HTTPS. Performance optimization and enhanced security headers would further improve the security posture and user trust.

W

Wenatex Das Schlafsystem GmbH

wenatex.com

37

Wenatex Das Schlafsystem GmbH is a medium-sized Austrian company specializing in ergonomic sleep systems, including mattresses, slatted frames, pillows, and bedding accessories. With over 30 years of experience, the company emphasizes quality, innovation, and personalized customer consultation, positioning itself as a trusted brand in the sleep product retail and manufacturing sector. The website reflects a mature digital presence with modern technologies such as Nuxt.js and AWS hosting, providing a rich user experience with multimedia content and clear navigation. However, the absence of a valid SSL certificate significantly undermines the security posture, exposing users to potential risks. While privacy and cookie policies are present and GDPR compliant, the lack of explicit security policies and incident response information suggests room for improvement in security governance. Overall, the website is professional and trustworthy but requires urgent security enhancements to protect user data and maintain credibility.

V

VTU Top GmbH

vtu.com

34

VTU Top GmbH is a medium-sized Austrian engineering company specializing in the planning and implementation of modern, sustainable process plants primarily serving the Life Sciences, Chemistry, and Process Industry sectors. The company offers a broad range of services including general planning (EPCMv), process engineering, electrical engineering, automation, GMP services, and manufacturing science & technology. The website is built on TYPO3 CMS with modern frontend technologies and provides comprehensive business and contact information, including a contact form and social media presence on LinkedIn. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy and cookie policies are well implemented with a consent mechanism, reflecting good GDPR compliance. Overall, the website presents a professional image but requires urgent security improvements to protect user data and enhance trust.

E

EGGER

egger.com

36

EGGER is a well-established global family-owned manufacturing company specializing in wood-based materials for furniture, interior design, wood construction, and flooring. Founded in 1961 and headquartered in Austria, EGGER holds a strong market position as an internationally leading manufacturer. The website reflects a professional and content-rich digital presence targeting industry professionals and retailers. Technically, the site uses modern JavaScript frameworks and custom CMS templates hosted on AWS infrastructure, but lacks performance metrics and has room for improvement in accessibility and SEO. Security posture is weak due to the absence of a valid SSL certificate, lack of modern TLS protocols, and missing security headers, exposing users to risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and social media presence are well established, enhancing business credibility. Overall, the site is trustworthy but requires urgent security enhancements to protect users and improve compliance.

T

Trek Bicycle Corporation

trekbikes.com

40

Trek Bikes is a well-established global bicycle manufacturer with a strong presence in Finland, offering a wide range of bicycles and cycling accessories. The website targets Finnish consumers with localized content and a comprehensive product catalog. Technically, the site uses modern frontend technologies such as Vue.js and Tailwind CSS, and is hosted behind Cloudflare CDN with integrated marketing and analytics tools like Google Tag Manager and Cookiebot for cookie consent management. However, a critical security weakness is the lack of a valid SSL/TLS certificate and HTTPS support, exposing users to potential risks. The site includes comprehensive privacy and cookie policies, indicating good privacy compliance, but lacks visible security policies or incident response information. Overall, the business credibility is high, supported by a mature domain and consistent branding, but the security posture requires urgent improvement to protect user data and trust.

Confidex is a mature and reputable company specializing in RFID, NFC, and BLE solutions for industries, logistics, and mobility sectors. Recently acquired by Beontag, a global leader in graphic and label materials and RFID technology, Confidex strengthens its global presence and service localization. The website reflects a professional and comprehensive digital presence with strong branding and relevant content targeting industrial and supply chain customers. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS CloudFront, with good SEO and accessibility practices. However, the lack of a valid SSL certificate and HTTPS support is a critical security gap that significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain registration data confirms the legitimacy and maturity of the business. Strategic improvements in SSL/TLS configuration and incident response readiness are recommended to enhance trust and security.

S

Sudos

televis.com

22

The website televis.com serves as a domain marketplace landing page offering the domain name Televis.com for sale. It operates as a brokerage platform facilitating secure transactions between domain sellers and buyers, with options including buy now, lease to own, and make an offer. The site leverages Sudos.com as its marketplace platform and partners with payment processors such as Atom.com and Escrow.com to provide flexible and secure payment options. The target audience is domain investors and buyers seeking premium domain names. Technically, the site uses modern frontend technologies including Alpine.js, Livewire, Tailwind CSS, and jQuery, but lacks HTTPS support due to the absence of a valid SSL certificate, which is a critical security gap. The site includes tracking via Google Tag Manager and Crisp chat but does not provide privacy or cookie policies, nor contact information, which impacts privacy compliance and business credibility.

I

Inbank

inbank.eu

40

Inbank operates as an embedded financing platform focused on accelerating sales for merchants and providing tailored financing solutions to consumers across multiple European markets. The company supports a broad range of sectors including retail, eco-friendly products, and automotive financing, positioning itself as a significant player with over 872,000 active contracts and partnerships with more than 6,000 retailers. The website reflects a professional and consistent brand image with clear business information and a user-friendly design. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and hosted on Amazon AWS infrastructure. While the site performs moderately well and is mobile optimized, it lacks a valid SSL certificate and HTTPS support, which is a critical security flaw. Additionally, no security headers or advanced TLS configurations are present, exposing the site to potential risks. From a security perspective, the absence of HTTPS and security headers significantly lowers the security posture score. Privacy and cookie policies are implemented with consent mechanisms, indicating basic GDPR compliance. Contact information is clearly available, but no explicit security or incident response policies are found. The WHOIS data is consistent with the business claims, supporting domain legitimacy. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Immediate remediation of SSL/TLS issues and implementation of security best practices are recommended to enhance trust and protect users.

N

NuxtLabs

nuxt.studio

62

Nuxt Studio is a specialized SaaS platform offering a Git-based CMS and editing experience tailored for Nuxt Content users. The company, NuxtLabs, founded in 2022 and based in France, targets developers and content editors seeking a streamlined content management solution integrated with GitHub and Google authentication. The platform emphasizes ease of content editing, media management, and publishing workflows, positioning itself as a niche player in the Nuxt ecosystem. Technically, the website leverages modern web technologies including Nuxt.js and Tailwind CSS, with integrations for analytics (Plausible) and user support (Crisp chat). However, the site lacks a valid SSL certificate, which is a significant security concern. Security headers and DNSSEC are also absent, indicating room for improvement in security posture. Privacy compliance is minimal, with no privacy or cookie policies detected, though a Terms of Service page is present. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness. Strategic improvements in security and privacy compliance are recommended to strengthen the platform's credibility and user trust.

L

Level Up DX

levelupdx.com

55

Level Up DX is a specialized developer experience platform focused on enhancing how developers engage with technology products through tailored educational content, certification programs, and interactive tutorials. The platform is created by industry leaders associated with Vue School, Certificates.dev, and Frontend Nation, positioning it as a niche player in developer education. Technically, the website uses modern frameworks such as Nuxt.js and Tailwind CSS, hosted behind Cloudflare DNS, but lacks a valid SSL certificate, which is a critical security concern. The site is moderately performant and mobile-optimized with good design and user experience. Security posture is weak due to missing HTTPS, lack of security headers, and no evident incident response or security policies. Privacy compliance is poor with no privacy or cookie policies found. Overall, the business credibility is moderate with professional content but limited direct contact information. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect users.

N

NuxtLabs

nuxtlabs.com

61

NuxtLabs is a technology company specializing in the development and commercial support of the Nuxt open source framework. Founded in 2021 by the creators of Nuxt, the company offers a suite of products and services including Nuxt DevTools, Nuxt Content, image optimization, deployment platforms, and official support from core team members. Their target audience includes developers, freelancers, agencies, and enterprises seeking to build performant web applications with Nuxt. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Cloudflare, and employs privacy-conscious analytics via Plausible. However, the site lacks a valid SSL certificate and HTTPS configuration, which is a critical security concern. No privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

S

StackJobs

stackjobs.io

59

StackJobs is a specialized job board platform launched in 2024, focusing on frontend developer roles filtered by actual technology stack requirements such as React, Vue.js, Angular, and Svelte. The platform aggregates job listings directly from company career pages, bypassing recruiters, and offers features like job alerts, job saving, and frequent job extraction. The business targets frontend developers seeking precise job matches, positioning itself as a niche alternative to traditional job boards. Technically, the website uses modern frontend frameworks including Vue.js, Svelte, React, and Angular, with hosting and DNS managed via Cloudflare. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, and no TLS protocols are enabled, resulting in insecure HTTP connections. This significantly impacts user trust and security. Additionally, no privacy, cookie, or terms of service policies are found, and no direct contact information is provided, which may affect compliance and user confidence. Analytics are implemented using PostHog, indicating moderate user tracking. Overall, the website demonstrates good design and user experience but requires urgent improvements in security and privacy compliance to enhance trustworthiness and protect users.

Gift Voucher Solutions appears to be a small business that previously operated a gift voucher store, which is now discontinued as indicated by the website content. The site serves primarily as a service update and support contact point for customers holding vouchers, directing them to contact the original purchasing company or email support at giftpro.co.uk. The technical infrastructure is minimal, relying on a single external CSS library (Tailwind CSS) and lacking a valid SSL certificate, resulting in no HTTPS support. Performance is slow despite the low resource count, and no analytics or tracking technologies are present. Security posture is weak with no security headers, no DNSSEC, and no SSL certificate, exposing the site to risks and reducing trustworthiness. The domain registration is confirmed but shows no DNS records, which is unusual and suggests the domain is inactive or misconfigured. Overall, the website is accessible but provides only basic information with limited business credibility and poor security and privacy compliance.

F

Five Nines Digital Ltd

try.be

40

Trybe is a specialized SaaS provider offering next-generation bookings and business management software tailored for the spa and leisure industry. The platform targets spa businesses seeking to streamline their booking processes, inventory management, team scheduling, and payment processing. Positioned as a cloud-based, open-API solution, Trybe emphasizes ease of use, integration capabilities, and operational efficiency. The company is UK-based, operating under Five Nines Digital Ltd, and holds ISO27001 certification, reinforcing its commitment to security standards. Technically, the website is built using modern web technologies including React and Gatsby, with Tailwind CSS for styling. Hosting appears to be on AWS infrastructure. While the site is well-designed, mobile-optimized, and rich in content, performance is hindered by slow load times and a high number of resources. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability impacting user trust and data protection. No major vulnerabilities or exposed sensitive data were detected, and the presence of ISO27001 certification and GDPR-compliant privacy policies indicate a mature security posture. However, improvements in SSL/TLS configuration and security headers are urgently recommended. Overall, Trybe presents a professional and credible business offering with strong market positioning in the hospitality sector. The main risk lies in its current SSL/TLS configuration, which should be addressed promptly to ensure secure communications and maintain customer trust.

N

Norsk helsenett SF

nhn.no

40

Norsk helsenett SF is a Norwegian state-owned enterprise responsible for delivering and maintaining national ICT infrastructure and e-health solutions for the healthcare sector. The organization is well-established with a domain age of 25 years and operates under the Ministry of Health and Care Services. Their services include healthcare registers, videoconferencing, electronic death notifications, and membership in the national health network, targeting healthcare professionals and Norwegian citizens. The website content is rich, professionally designed, and well-structured, providing clear navigation and relevant information about their offerings and events. Technically, the website uses modern frontend technologies such as Tailwind CSS and Matomo for analytics, hosted on Azure and served via Fastly CDN. The site is mobile-optimized and accessible, though performance is moderate with a page load time of approximately 4.8 seconds. SEO and metadata are well implemented, including Open Graph tags for social sharing. From a security perspective, the website currently lacks a valid SSL certificate, resulting in no HTTPS availability, which is a critical issue. Additionally, no security headers or HSTS are implemented, and TLS protocols are disabled, exposing the site to potential risks. The SPF DNS record is properly configured, and no subdomain takeover vulnerabilities were found. Privacy compliance is good, with a comprehensive privacy policy and cookie policy present, though no explicit cookie consent mechanism is implemented. Contact information is available via a contact page, but no direct emails or phone numbers are exposed on the site. Overall, the website is trustworthy and credible, reflecting its government ownership and mature domain registration. However, the lack of HTTPS and proper SSL configuration significantly impacts its security posture and user trust. Strategic improvements in SSL deployment, security headers, and cookie consent mechanisms are recommended to enhance security and compliance.