Security Directory

The website ad-m.com is currently inaccessible, presenting a 503 Service Temporarily Unavailable error page with minimal content. The only contact information available is an abuse email address linked to kasserver.com, suggesting hosting or administrative support but no direct business contact details. Due to the lack of accessible content, metadata, or structured data, it is not possible to determine the company's business model, services, or market position. The technical infrastructure cannot be assessed beyond the inference that the site is hosted or managed by kasserver.com. Security posture is poor with no HTTPS or security headers detected, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the site appears down or blocked, severely limiting any meaningful analysis.

I

International Baccalaureate Organization

ibo.org

57

The International Baccalaureate Organization (IBO) is a globally recognized non-profit entity providing high-quality international education programs to over 1.9 million students across more than 5,800 schools worldwide. The website reflects a strong market position with comprehensive educational offerings, professional development services, and a robust global community. The content is well-structured, professionally designed, and highly relevant to its target audience of students, educators, and educational institutions. Technically, the website employs modern web technologies including JavaScript, jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The use of Chakra UI framework enhances the user interface and accessibility. Hosting appears to be via Cloudflare, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses a comprehensive cookie consent mechanism with granular controls. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website demonstrates a mature digital presence with strong privacy and compliance practices, extensive analytics and marketing integrations, and a high level of professionalism. The risk profile is low, but strategic enhancements in security transparency and vulnerability disclosure could further strengthen trust and compliance.

G

Groupe SEB WMF Retail GmbH

wmf.com

63

WMF Onlineshop is the official e-commerce platform of Groupe SEB WMF Retail GmbH, a historic German company with over 170 years of tradition in premium kitchenware and coffee machines. The website offers a comprehensive product catalog, including cutlery, pots, pans, coffee machines, and kitchen accessories, targeting consumers seeking high-quality kitchen products. The platform integrates modern technologies such as Magento 2 with Hyvä Theme, Alpine.js, and various marketing and analytics tools, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and employs monitoring tools like New Relic. It also implements robust privacy and cookie consent mechanisms via OneTrust, ensuring GDPR compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for improvement. No critical vulnerabilities or WAF blocking were detected, indicating a secure and accessible platform. Overall, WMF Onlineshop demonstrates a high level of professionalism, technical sophistication, and compliance with privacy regulations. It effectively balances user experience, security, and business needs, positioning itself as a trustworthy and reputable online retailer in the premium kitchenware market.

R

Rechtsanwalt MMag. Florian Horn

fhorn.at

47

Rechtsanwalt MMag. Florian Horn is a Vienna-based legal professional specializing in complex civil litigation, corporate law, constitutional law, contract drafting, mediation, and economic legal cases. The website reflects a small but specialized legal practice with strong academic and civil society engagement, targeting individuals and businesses in Austria. The digital infrastructure is built on WordPress with a modern theme and plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are absent, indicating room for improvement in compliance and security best practices. Overall, the website is professional and trustworthy, with clear contact information and social media presence supporting business credibility.

I

iPoint-systems gmbh

kerp.at

50

iPoint-systems gmbh operates a sophisticated software platform focused on Impact Intelligence, product compliance, and sustainability performance management. The company targets a broad audience including C-suite executives, product designers, and compliance experts, positioning itself as a recognized specialist in supply chain sustainability software. Their offerings include compliance software, sustainability tools, consulting services, and training, supported by certifications such as ISO 9001:2015 and ISO/IEC 27001:2022. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries like Swiper.js and integrates Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and some best practices, but lacks visible security headers and explicit incident response contacts. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism despite tracking scripts. Overall, the domain registration aligns well with the business identity, supporting high legitimacy and trustworthiness.

The website at embl.de is currently inaccessible, returning a 404 Not Found error page with minimal HTML content and no meaningful data. There is no visible metadata, structured data, or business information available for analysis. The lack of accessible content prevents assessment of the company's business model, services, or market position. Technically, the site does not provide any detectable technologies, scripts, or frameworks, and no security headers or SSL configuration details are available. The security posture cannot be evaluated due to the absence of content and technical data. Overall, the site is non-functional for analysis and requires remediation to restore accessibility and provide essential business and compliance information.

M

ManpowerGroup

experis.com

63

Experis, a brand under ManpowerGroup, is a global leader specializing in IT staffing and project services. The company connects skilled IT professionals with organizations worldwide, offering flexible solutions that adapt to evolving technology demands. Their market position is strong, supported by a comprehensive portfolio of services including IT staffing, project services, business transformation, and cybersecurity expertise. The website reflects a mature digital presence with modern technologies and integrations such as HubSpot, Google Analytics, and Microsoft Azure B2C authentication, indicating a high level of digital maturity and customer engagement capabilities. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. Overall, the website and business demonstrate high professionalism, trustworthiness, and alignment with industry standards.

N

Nimbus Structure

orage4u.com

51

Nimbus Structure is a small technology company specializing in cloud transformation services, including Microsoft Azure, Kubernetes, OpenShift, and DevOps methodologies. Their website presents a professional image focused on helping businesses transition to resilient multi-cloud environments with high availability and performance. The company emphasizes certifications and continuous improvement in cloud technologies. Technically, the website uses a modern JavaScript stack with jQuery and third-party libraries, and it employs a cookie consent mechanism with EU-hosted Matomo analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is moderate with session management and cookie consent but lacks visible security headers and explicit privacy or security policies. Overall, the website is accessible, well-structured, and professionally designed but could improve transparency and security practices. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and providing explicit contact information to improve trust and compliance.

A

Aircargo.nl

aircargo.nl

41

Aircargo.nl is a Netherlands-based logistics company specializing in air freight and comprehensive transport solutions including time-critical shipments, routine shipments, road transport, storage, customs clearance, and live tracking. The company positions itself as a reliable and customer-focused provider emphasizing personal care and precision. The website reflects a professional and modern digital presence built on Next.js with React, leveraging Google reCAPTCHA for form security and Umami Analytics for privacy-conscious tracking. Hosting is provided via DigitalOcean infrastructure with CDN support. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a cookie consent mechanism and explicit security policies are noted compliance gaps. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, supporting a positive user experience and trustworthiness.

C

Consys.it Srl

consys.it

52

Consys.it Srl is an Italian cybersecurity company specializing in managed security services, compliance solutions, and advanced cybersecurity technologies. The company positions itself as a trusted partner for businesses seeking to protect their digital assets and comply with stringent regulatory requirements. Their website presents a professional and consistent brand image, targeting B2B clients with a comprehensive portfolio of cybersecurity services including Security Operation Center, Security Automation, and Compliance Guard solutions. The technical infrastructure is based on WordPress CMS with modern plugins and integrations such as WPBakery Page Builder, Contact Form 7, Google Tag Manager, and Google reCAPTCHA, indicating a mature digital presence. The site is mobile optimized and includes privacy compliance mechanisms via Iubenda, reflecting attention to GDPR requirements. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and cookie consent management. However, explicit security headers and incident response contact details are not evident, suggesting areas for improvement. The WHOIS data aligns well with the website's business claims, supporting legitimacy and trustworthiness. Overall, Consys.it demonstrates a solid cybersecurity business presence with good technical and privacy compliance, though enhancements in security transparency and incident response communication would strengthen their posture further.

U

Unior d.d.

unior.com

49

Unior d.d. is a well-established Slovenian manufacturing company specializing in metal processing, particularly forging and hand tools. Founded in 1919, it holds a strong market position as a global leader in its industry segments, serving automotive and other industrial clients worldwide. The website reflects a professional and consistent brand image, with clear navigation and multilingual support, targeting global buyers and industry partners. Technically, the site uses modern tracking tools such as Google Tag Manager and Google Analytics, with a custom CMS and responsive design ensuring good user experience across devices. Security posture is moderate, with HTTPS implied and cookie consent mechanisms implemented, but lacking explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy likely embedded in legal notices but no explicit GDPR statements or data protection officer contact. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and privacy compliance are recommended.

The website serves as a sign-in and registration portal for Volue Identity, a service likely related to user authentication and access management within the Volue ecosystem. The site supports authentication via Microsoft, Google, and an email-based B2C scheme, indicating integration with OAuth2/OpenID Connect protocols. The content is minimal and focused solely on login functionality without broader business or policy information. Technically, the site uses Bootstrap 4 and jQuery for UI and interaction, with responsive design elements for mobile users. Security practices include the use of modern authentication flows, but no explicit security headers or privacy policies are present in the HTML content. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional but lacks comprehensive compliance and security disclosures.

M

METRO AG

metro-cc.com

63

METRO AG operates as a leading international wholesaler specializing in food service and wholesale for professional customers such as HoReCa and Traders. The company maintains a strong market position with over 30 countries of operation, 623 wholesale stores, 94 delivery depots, and an online marketplace. Their business model focuses on multichannel marketing and tailored services, supported by a portfolio of own brands and subsidiaries. Technically, the website is built on a modern stack including Sitecore CMS, Bootstrap, and integrates analytics tools like Google Analytics and Siteimprove, with good mobile optimization and accessibility. Security posture is solid with cookie consent mechanisms, CSRF protection, and no visible vulnerabilities, though security headers and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for an enterprise-level retail business.