Security Directory

E

Edition Hotels

theeditionbroadsheet.com

61

The Edition Broadsheet website serves as a digital editorial platform supporting the Edition Hotels luxury hospitality brand, a subsidiary of Marriott International. It offers curated content focused on culture, travel, and lifestyle, targeting discerning travelers interested in unique and premium experiences. The site is built on WordPress and hosted on Amazon AWS infrastructure, leveraging modern web technologies such as jQuery, Google Tag Manager, and Owl Carousel to deliver a visually appealing and content-rich experience. While the website demonstrates good design quality, clear navigation, and mobile responsiveness, its performance is moderate with room for optimization. Security posture is adequate with HTTPS enforced and SPF/DMARC email protections in place; however, it lacks advanced security headers like HSTS and OCSP stapling, and does not comply with Certificate Transparency standards. Privacy compliance is partially met through links to Marriott's comprehensive privacy center, but the absence of a cookie consent mechanism and direct company contact details limits full compliance. Overall, the site is professional and trustworthy but could benefit from enhanced security and privacy features to strengthen user trust and regulatory adherence.

S

Shop EDITION

shopedition.com

62

Shop EDITION is a luxury e-commerce platform offering home and lifestyle products inspired by EDITION Hotels, a brand under Marriott International. The website targets affluent consumers seeking premium bedding, bath, fragrance, and home décor items. The business leverages strong brand association with Marriott and provides a comprehensive online shopping experience with rich multimedia content and clear navigation. Technically, the site is built on Magento with extensive use of marketing and analytics tools including Adobe Launch, Google Tag Manager, and multiple tracking pixels. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and lack of modern TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with a detailed privacy policy, cookie consent managed by OneTrust, and GDPR-aligned practices. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

L

LSEG

refinitiv.com

52

LSEG Data & Analytics, part of the London Stock Exchange Group, is a leading global provider of financial market data, analytics, and workflow solutions serving a broad range of financial institutions worldwide. The company leverages strategic partnerships, such as with Microsoft, and exclusive access to Reuters News to deliver comprehensive and actionable financial insights. Their offerings span data feeds, analytics platforms, and specialized workflow tools designed for asset managers, investment bankers, traders, and wealth managers. Technically, the website is built on Adobe Experience Manager and integrates multiple modern technologies including Adobe Launch, Google Analytics, and OneTrust for privacy compliance. However, the site suffers from critical SSL/TLS misconfigurations, lacking a valid certificate and secure protocols, which severely impacts its security posture. Performance is moderate to slow, with a large page size and load time. Security-wise, while the site implements DMARC with a strict reject policy and uses cookie consent mechanisms, the absence of proper HTTPS and presence of a subdomain takeover vulnerability on ftp.refinitiv.com present significant risks. The site uses extensive analytics and marketing tools, indicating a mature digital marketing strategy but also raising privacy considerations. Overall, the website is professionally designed with excellent content quality and strong business credibility but requires urgent remediation of its SSL/TLS and subdomain security issues to improve trust and security compliance.

Security assessment completed with an overall score of 50/100 (unknown risk). Total of 11 security findings identified across all modules.

W

Weiterbildungsportal Saarland

weiterbildungsdatenbank-saar.de

40

Weiterbildungsportal Saarland is a regional educational information platform focused on providing comprehensive resources about continuing education for individuals, companies, and educational providers within the Saarland region of Germany. The platform is supported by governmental and institutional partners, offering detailed course databases, funding information, and thematic content tailored to various user groups. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, ensuring good accessibility and user experience. Security-wise, the site employs HTTPS with modern TLS protocols and a valid SPF record, though it lacks some advanced HTTP security headers such as HSTS and DMARC, which are recommended for enhanced protection. The use of Matomo analytics reflects a moderate user tracking approach with privacy compliance in mind. Overall, the site demonstrates a solid balance of content quality, technical implementation, and security posture, positioning it as a trustworthy and professional resource in its domain.

H

Handwerkskammer des Saarlandes

hwk-saarland.de

40

Handwerkskammer des Saarlandes is a regional government institution dedicated to supporting the craft and trade sector in Saarland, Germany. The organization provides comprehensive services including vocational training, further education, business start-up consulting, and operational support to handcraft businesses and individuals. The website reflects a well-established entity with a strong regional presence and a focus on quality and accessibility. Technically, the site is built on WordPress with modern JavaScript frameworks like Vue.js, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, HSTS, and SPF are properly implemented, though there is room for improvement in OCSP stapling and certificate transparency. Privacy compliance is robust with a clear privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital infrastructure aligned with its public service mission.

I

IHK Saarland

ihksaarland.de

40

IHK Saarland operates as a regional chamber of commerce and industry serving the Saarland region in Germany. The organization provides a broad range of services including business consulting, education and training, legal and regulatory guidance, and digital services to support local enterprises, founders, and various business stakeholders. The website reflects a well-structured and professional digital presence with comprehensive content tailored to its target audience of businesses and professionals in the region. Technically, the site uses a traditional JavaScript and CSS stack with jQuery libraries and is hosted via epag.net DNS infrastructure. While the site supports modern TLS protocols ensuring secure HTTPS connections, it lacks advanced security headers and DNS security features, indicating room for improvement in its security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and accessible privacy policies. The website is not blocked by any WAF or security challenge, allowing full content access. Overall, the site scores well in business credibility and privacy compliance but could enhance technical and security aspects to improve performance and resilience.

V

Verband Deutscher Hidden Champions

vdhc-ev.de

40

VDHC e.V. is a German-based association representing medium-sized enterprises known as Hidden Champions. The organization focuses on networking, knowledge exchange, and advocacy for SMEs that are market leaders in niche sectors. Their business model centers on exclusive membership, offering events, webinars, and international business trips to foster collaboration and visibility. Technically, the website is built on WordPress with modern plugins and supports HTTPS with strong TLS protocols, though it lacks some advanced security headers and DMARC. The security posture is solid with no detected vulnerabilities, and privacy compliance is well implemented with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates a professional and trustworthy presence with good content quality and technical implementation.

D

Deutsche Gesellschaft für Zerstörungsfreie Prüfung e.V.

dgzfp.de

40

The Deutsche Gesellschaft für Zerstörungsfreie Prüfung e.V. (DGZfP) is a German professional association specializing in non-destructive testing (ZfP). The organization provides extensive training, certification, networking opportunities, and research support to professionals and industries such as automotive, construction, railway, and aviation. The website reflects a mature digital presence with rich content, event listings, and comprehensive privacy and cookie policies compliant with GDPR. Technically, the site is built on WordPress with modern plugins for SEO and cookie management, but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. The site is well-branded, professionally designed, and targets industry professionals and organizations in Germany.

W

Wuppertaler Kreis e.V.

wuppertaler-kreis.de

40

Wuppertaler Kreis e.V. is a well-established German association representing leading providers of corporate continuing education. Founded in 1955, it serves as a key voice for the industry, promoting workforce qualification, innovation, and competitiveness through quality assurance and advocacy. The website reflects a mature organization with a clear focus on education and professional development, targeting companies and training providers in Germany. Technically, the site is built on TYPO3 CMS, hosted via Deutsche Telekom infrastructure, and delivers moderate performance with good mobile optimization. Security posture is basic with a valid SSL certificate but lacks advanced security headers and email protection mechanisms like DMARC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and business credibility are well presented, supported by testimonials and partner logos. Overall, the site is professional and trustworthy but could improve in security and privacy practices.

Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.

Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 13 security findings identified across all modules.

M

Mídia de Impacto | Agência Digital Multimídia

midiadeimpacto.com.br

51

Mídia de Impacto is a Brazilian digital multimedia agency specializing in e-commerce structuring, traffic management, website development, radio and TV services, streaming audio, inbound marketing, and visual identity. The company positions itself as an experienced player in the media sector with a focus on digital transformation and multimedia solutions. Their website is built on WordPress with WooCommerce and uses modern JavaScript libraries and plugins to deliver content. However, the site lacks a valid SSL certificate, which impacts security and trust. The presence of reCAPTCHA on forms and SPF DNS records indicates some security awareness, but the absence of HTTPS and malformed DNS CAA records are significant vulnerabilities. Privacy and cookie policies are not found, which may affect compliance with GDPR and other regulations. Overall, the website is professionally designed and content-rich but requires urgent security improvements to enhance trust and compliance.

F

Fraunhofer-Verbund Mikroelektronik in Kooperation mit den Leibniz-Instituten FBH und IHP

forschungsfabrik-mikroelektronik.de

40

The Fraunhofer-Verbund Mikroelektronik (FMD) is a leading German research consortium specializing in micro- and nanoelectronics, collaborating closely with Leibniz institutes FBH and IHP. The website serves as a comprehensive portal offering information on technology platforms, funding programs, cooperation opportunities, and current projects, targeting industry players, startups, SMEs, and academic institutions. The business model focuses on providing a one-stop-shop for microelectronics R&D, supported by strong institutional backing and federal funding. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS and strong cipher suites, though improvements like HSTS, DNSSEC, and TLS 1.3 support are recommended. Privacy compliance is good with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

V

Videmi GmbH & Co. KG

videmi.de

40

Videmi GmbH & Co. KG is a small, established media company based in Germany specializing in integrated communication, film production, design, and photography services. With over 10 years of experience, the company serves a diverse clientele seeking enhanced visibility and communication strategies. Their website reflects a professional and consistent brand presence with clear service offerings and active social media engagement. Technically, the site is built on WordPress using the Enfold theme and incorporates modern technologies such as TLS 1.3 and Yoast SEO for optimization. However, some security enhancements like HSTS, DNSSEC, and advanced security headers are absent, which could improve their security posture. The site includes a GDPR-compliant privacy policy and cookie consent mechanism, demonstrating good privacy compliance. Overall, the website is well-designed, user-friendly, and trustworthy, though there is room for technical and security improvements.

I

IOTA | Built to Make a Difference

iota.org

73

Security assessment completed with an overall score of 50/100 (unknown risk). 6 high-priority issues should be addressed promptly. Total of 23 security findings identified across all modules.

D

DIN

din.one

40

DIN.ONE is a German-based community platform powered by Atlassian Confluence, designed to facilitate expert collaboration on standardization and norming projects. The platform hosts thematic communities, events, and news, targeting professionals engaged in these sectors. Technically, the site leverages Confluence 8.5.21 with a Refined theme, hosted likely on Google Cloud infrastructure. While the site uses HTTPS with modern TLS protocols, it lacks advanced security headers and mechanisms such as HSTS and OCSP stapling, which could enhance its security posture. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website provides good content quality and business credibility but suffers from slow performance and basic technical implementation.

D

DIN Solutions GmbH

dinsolutions.de

40

DIN Solutions GmbH is a medium-sized technology company operating within the DIN group, specializing in the development and operation of software, platforms, and databases for norming and standardization. The company serves DIN, DIN Media, and their customers and partners by delivering tailored technical solutions and engaging in innovative research and development, including artificial intelligence applications. Their market position is strong within the German norming ecosystem, supported by ISO 9001 certification and partnerships with recognized entities such as TÜV Rheinland. Technically, the website employs modern technologies including MarkLogic NoSQL database, X-Swift framework, and Swift programming language for transformation processes. The site is well-designed, mobile-optimized, and uses etracker for analytics. Performance is moderate with a page load time of about 3 seconds. However, the SSL certificate is nearing expiration, and security headers are minimal, indicating room for improvement in security hardening. Security posture is adequate with HTTPS, SPF, and DMARC configured, but lacks HSTS, DNSSEC, and advanced security headers. No vulnerabilities or malware were detected, but urgent SSL renewal is needed to maintain trust and secure communications. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism was found. Overall, the website is professional and trustworthy with strong business credibility. Strategic recommendations include immediate SSL renewal, enhancing security headers, implementing DNSSEC and CAA, and adding cookie consent mechanisms to improve privacy compliance and security posture.

D

Diondo GmbH

diondo.com

51

Diondo GmbH is a German-based manufacturer and service provider specializing in industrial computed tomography (CT) and X-ray inspection systems. The company offers a comprehensive portfolio of products including compact CT systems for battery module inspection, flexible CT systems with advanced manipulation capabilities, and user-friendly CT software solutions. Diondo positions itself as a market leader in industrial CT solutions, targeting industrial clients in research, development, production, and quality assurance sectors. The website content is professionally presented, with clear navigation and detailed product descriptions, supported by certifications such as ISO 9001 and ISO 14001. Technically, the site is built on Joomla CMS with modern frameworks and includes user consent mechanisms for privacy compliance. However, the absence of a valid SSL certificate and HTTPS significantly weakens the security posture, exposing users to potential risks. The site uses Google Analytics for tracking and integrates social media channels for broader engagement. Overall, Diondo demonstrates a solid business presence with room for improvement in security infrastructure to enhance trust and compliance.

V

VCxray Inspection Services GmbH - X-ray inspection, testing services

xray-testing.com

30

The website xray-testing.com is currently inaccessible due to an HTTP 500 server error, which prevents normal content delivery. The site appears to host an offline dinosaur game script but lacks any meaningful business or contact information. The technical infrastructure supports modern TLS protocols but lacks important security features such as HSTS, OCSP stapling, and DNSSEC. No privacy, cookie, or terms of service policies are present, indicating poor compliance posture. Overall, the site is minimal, with poor content quality and limited technical maturity, resulting in a low trust and security rating.

V

VCbattery a division of VisiConsult X-ray Systems & Solutions GmbH

vcbattery.com

62

VCbattery is a specialized division of VisiConsult X-ray Systems & Solutions GmbH, focusing on advanced X-ray and CT inspection solutions for electric vehicle (EV) batteries. Their offerings cover the entire battery lifecycle from research and development to inline production and recycling, targeting battery manufacturers, OEMs, and labs. The company leverages high-resolution 3D X-ray imaging combined with high-speed automation and AI-driven data analysis to ensure quality control and defect detection in battery cells, modules, and systems. Positioned as a customer-centric leader in a growing market, VCbattery benefits from the global expertise of its parent company in industrial X-ray technology.

V

VisiConsult X-ray Systems & Solutions GmbH

vc-xray.com

64

VCxray, a business unit of VisiConsult, is a globally recognized leader in industrial X-ray inspection systems and non-destructive testing (NDT) solutions. The company serves diverse sectors including automotive, aerospace, defense, energy, and manufacturing, offering tailored X-ray and computed tomography (CT) systems alongside inspection services and technical support. Their market position is strengthened by over 25 years of expertise, ISO certifications, and a comprehensive product portfolio. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates advanced consent management via Cookiebot, Google Analytics, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and modern TLS protocols, though improvements are recommended in email authentication (DMARC), HSTS enforcement, and DNS security (DNSSEC). Overall, the site demonstrates excellent content quality, user experience, and business credibility, with moderate performance and good privacy compliance. Strategic recommendations include enhancing email security, enabling HSTS, and improving SSL certificate transparency compliance to further strengthen security and trust.

4

404 Not Found

sigmacutt.link

40

The website sigmacutt.link currently serves only a 404 Not Found error page, indicating that the requested resource or site content is unavailable. There is no accessible business or marketing content, no metadata, no forms, and no contact information. The site is hosted behind Cloudflare with valid SSL, but the SSL certificate dates appear unusual and security headers are absent. Performance is slow with minimal resources loaded. Overall, the site lacks any visible business presence or user engagement features, making it impossible to assess business operations or market positioning. Security posture is minimal with no advanced protections enabled. Privacy and compliance policies are not present, indicating a lack of GDPR or similar regulatory adherence. The site is not blocked by a WAF or security challenge but is effectively inaccessible due to the missing content.

E

Expert Systems AG

provenexpert.net

61

ProvenExpert is a technology company based in Germany, operating a SaaS platform that enables businesses to collect, aggregate, and showcase customer reviews and ratings from multiple sources. The platform targets a broad audience including freelancers, SMEs, and large enterprises, offering tools such as customer surveys, rating seals, and Google star rating integration to enhance online reputation and drive revenue growth. The company has a solid market presence with over 1.2 million expert profiles and millions of reviews aggregated. Technically, the website is hosted on Google Cloud with DNS managed by Cloudflare, utilizing modern web technologies including jQuery, Bootstrap, and Cookiebot for cookie consent management. While the site is mobile optimized and SEO friendly, performance metrics indicate slow loading times, and accessibility features are basic. Security posture is weak due to the absence of a valid SSL certificate and lack of TLS protocol support, despite some security headers being present. The security evaluation highlights critical vulnerabilities such as missing HTTPS, no TLS support, and lack of HSTS enforcement, which significantly reduce the security score. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Business credibility is strong with clear company information, testimonials, and trust seals. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain compliance. Strategically, the company should prioritize SSL/TLS certificate installation and configuration, enhance security headers, and optimize site performance to improve user experience and security posture. Continued focus on privacy compliance and transparent communication will support sustained trust and growth.

F

Firstlead GmbH

adcell.de

40

ADCELL, operated by Firstlead GmbH, is a well-established affiliate marketing network founded in 2003, targeting the German-speaking markets of Germany, Austria, and Switzerland. The platform connects publishers, advertisers, and agencies, offering a performance-based affiliate marketing model with no setup fees or monthly charges. The company enjoys a strong market position with over 64,000 active publishers and 2,426 partner programs, supported by multiple industry awards and certifications. The website content is rich, professionally designed, and targets a broad audience including publishers, advertisers, and agencies. Technically, the site uses common web technologies such as jQuery, Bootstrap, and slick sliders, hosted behind Cloudflare DNS services. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. Privacy compliance is addressed with a consent management platform and clear privacy and cookie policies. Overall, the site demonstrates good business credibility but requires urgent security improvements.

Security assessment completed with an overall score of 50/100 (unknown risk). 1 high-priority issues should be addressed promptly. Total of 13 security findings identified across all modules.

N

news aktuell

zimpel.de

40

Zimpel.de is a German PR software and media database platform operated as a product of news aktuell, a subsidiary of the German Press Agency (dpa). The website targets PR professionals and media relations specialists by providing tools for managing journalist contacts and media distribution lists. The business model is SaaS-oriented, focusing on the media and public relations sector within Germany. The site content is minimal and primarily driven by JavaScript, with no visible contact or policy pages on the main HTML content. Technically, the site uses nginx as the web server and employs modern TLS protocols (TLS 1.2 and 1.3) with a valid SSL certificate. DNS hosting is managed by Colt, and email services are routed through news aktuell mail servers. Security headers are present but some are misconfigured or only in report-only mode, such as the Content Security Policy and X-XSS-Protection header. No DMARC record is configured, which is a gap in email security. No privacy or cookie policies are found, indicating low privacy compliance. Overall, the site demonstrates a moderate security posture but lacks transparency and completeness in privacy and contact information.

G

Grupa Pracuj

pracujwgp.pl

40

Grupa Pracuj operates as a leading HR technology platform in Europe, connecting job seekers with employers through a suite of recruitment and HR management products. The company maintains a strong market position with multiple subsidiary brands including Pracuj.pl, eRecruiter, and Softgarden. The website reflects a professional and comprehensive approach to employer branding and recruitment, targeting candidates and HR professionals primarily in Poland. Technically, the site is built on the Softgarden platform, leveraging modern JavaScript libraries and hosted via Cloudflare and Azure infrastructure. While the SSL certificate is valid and security policies such as DMARC are strictly enforced, there is room for improvement in HTTPS security by enabling HSTS and DNSSEC. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with good content quality, though performance optimization could be enhanced.

H

HashiCorp

hashicorp.com

74

HashiCorp is a leading enterprise software company specializing in cloud infrastructure automation and security lifecycle management. As an IBM company, it offers a comprehensive suite of products and cloud platform services designed to help organizations automate hybrid cloud environments efficiently and securely. The company targets enterprises and developers seeking unified infrastructure and security lifecycle management solutions. HashiCorp's market position is strong, supported by a broad partner ecosystem, extensive certifications, and a large developer community. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates multiple analytics and marketing tools. While the site exhibits excellent design, content quality, and mobile optimization, its performance is somewhat slow, indicating potential optimization opportunities. The site employs robust security measures including TLS 1.3, strong cipher suites, SPF and DMARC DNS records, but lacks some advanced HTTP security headers and DNSSEC. From a security perspective, HashiCorp demonstrates a mature posture with no detected vulnerabilities in SSL/TLS configuration and active incident response channels. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The company maintains a high level of business credibility through transparent contact options, certifications, and trust signals. Overall, HashiCorp's digital presence reflects a professional, secure, and trustworthy enterprise-grade platform with minor areas for technical and security enhancements to further strengthen its posture and user experience.

I

IBM

envizi.com

58

IBM Envizi is a comprehensive SaaS platform focused on sustainability data management, greenhouse gas emissions accounting, and ESG reporting. Positioned as a leader in the sustainability software market, it offers modular solutions that leverage AI to automate complex emissions calculations and support decarbonization efforts. The platform targets enterprise customers aiming to meet regulatory compliance and improve sustainability performance. Technically, the website is built on Adobe Experience Manager with modern JavaScript frameworks and integrates IBM Cloud services. While the site demonstrates excellent content quality, branding, and user experience, it suffers from critical security issues related to an invalid SSL certificate and lack of TLS protocol support, which significantly impact its security posture. Privacy and compliance policies are well documented and accessible, reflecting IBM's commitment to GDPR and other standards. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL configuration to ensure secure user interactions.

A

Apptio, Inc.

apptio.com

67

Apptio, Inc., an IBM company, is a leading provider of SaaS solutions focused on IT Financial Management, Cloud Financial Management, and Enterprise Agile Planning. The company empowers IT and Finance leaders to make data-driven decisions that connect technology investments to business outcomes. Apptio holds a strong market position as a founding member of the Technology Business Management (TBM) Council and is recognized by industry analysts such as Gartner and Forrester. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design tailored for enterprise customers. However, the current lack of a valid SSL certificate and absence of modern TLS protocols represent critical security weaknesses that must be addressed promptly to ensure secure communications and maintain trust. The site employs advanced marketing and analytics tools including Google Tag Manager, Visual Website Optimizer, and Marketo, supporting extensive user tracking and data collection with appropriate privacy compliance mechanisms in place, such as OneTrust cookie consent and a comprehensive privacy policy. Overall, Apptio's website demonstrates strong business credibility and digital maturity but requires immediate security improvements to align with best practices.

I

IBM

trusteer.com

65

IBM Trusteer is a comprehensive suite of cloud services and endpoint software designed to enhance fraud detection, risk assessment, and user authentication across digital channels. Positioned as a key component of IBM's security portfolio, Trusteer leverages AI, machine learning, and a global intelligence network to provide real-time risk insights and fraud prevention capabilities. The website reflects IBM's enterprise-grade approach with detailed product offerings, case studies, and strong branding consistency. Technically, the site is built on Adobe Experience Manager and hosted on AWS infrastructure, integrating advanced marketing and analytics tools such as Adobe Analytics and Adobe Target. While the security posture is solid with TLS 1.2 and strong cipher suites, there are opportunities to improve HTTPS security by enabling HSTS, OCSP stapling, and DNS security features. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with high professionalism and trustworthiness, suitable for enterprise customers in finance, healthcare, and technology sectors.

U

Ubigreen

ubigreen.com

54

Ubigreen is a French company specializing in software and sensor solutions for optimizing energy performance and workspace management in buildings. Positioned as an essential player in the energy sector, it serves large enterprises, public organizations, and educational institutions with a comprehensive suite of services including energy management systems, telemetering, regulatory compliance consulting, and simplified building technical management (GTB Light). The company is part of the Planon group, enhancing its market credibility and reach. Technically, the website is built on WordPress with the Divi theme and several advanced plugins, offering good content quality and user experience. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy and legal compliance are addressed with clear privacy and terms pages, though a cookie consent mechanism is missing. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

G

GX Software

gxcloud.net

64

GX Software is a technology company specializing in digital communication software and services, offering proprietary products such as XperienCentral and Engatta, alongside partnerships with leading Customer Data Platforms like BlueConic and mParticle. The company positions itself as a Platinum BlueConic Partner in EMEA, focusing on privacy-conscious, data-driven customer engagement solutions. Their website reflects a professional and consistent brand image targeting businesses seeking integrated digital communication and customer data management solutions. Technically, the site is built on HubSpot CMS with modern JavaScript libraries and integrates multiple marketing and analytics tools, providing a good user experience with moderate performance. However, the security posture is weak due to the absence of a valid SSL certificate, lack of HTTPS, missing DMARC, and no security headers, which significantly lowers the overall security score. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is comprehensive and easily accessible. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

N

Navitas

navitas.com

64

Navitas is a large, established global education provider headquartered in Australia, offering a wide range of international higher education services including university pathways, direct-degree entry, and employability training. The company maintains a strong global presence with 39 university partners and operations in 16 countries, supported by numerous subsidiary colleges and campuses. Technically, the website is built on a modern WordPress platform with robust SEO and accessibility features, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and lack of HTTPS enforcement. Privacy compliance is well addressed with comprehensive policies and active cookie consent mechanisms. Overall, while the business demonstrates strong market positioning and professionalism, the security posture requires urgent improvement to protect user data and maintain trust.

T

The Ritz-Carlton Hotel Company, L.L.C.

ritzcarlton.com

74

The Ritz-Carlton website represents a leading luxury hospitality brand under Marriott International, offering a comprehensive portfolio of hotels, resorts, residences, and unique experiences such as yachts and curated journeys. The site is designed with a strong focus on user experience, featuring rich content, multi-language support, and detailed navigation to assist luxury travelers in planning their stays. Technically, the site leverages Adobe Experience Manager as its CMS, integrates Brightcove for video content, and uses Akamai for hosting and service worker management. While the site exhibits a slow load time due to its large resource count and page size, it maintains good mobile optimization and accessibility standards. Security-wise, the website enforces HTTPS with modern TLS protocols, implements SPF and DMARC for email security, and uses OneTrust for cookie consent management, reflecting a mature security posture. However, there is room for improvement in enabling HSTS and certificate transparency. Overall, the site is highly professional, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

E

EDITION Hotels

editionhotels.com

62

EDITION Hotels is a luxury boutique hotel brand operated under Marriott International, offering unique, localized hotel experiences across major global cities and emerging markets. The website reflects a strong brand presence with comprehensive information about hotel locations, services, and offerings. Technically, the site is built on WordPress with a rich set of modern JavaScript libraries and frameworks, ensuring good user experience and mobile optimization, though performance could be improved due to high resource count and page size. Security posture is solid with HTTPS, valid SPF and DMARC records, and no critical vulnerabilities detected, but improvements in security headers and SSL configurations are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and OneTrust cookie consent mechanism. Overall, the site demonstrates a mature digital presence suitable for a large hospitality brand.

T

The Luxury Collection Store

luxurycollectionstore.com

55

The Luxury Collection Store is a premium e-commerce platform offering luxury bedding, linens, bath and spa products, and travel accessories associated with Marriott International's luxury hotel brands. The website targets affluent consumers seeking high-end hospitality products and operates primarily in the European market with multilingual support. Technically, the site is built on Magento with integrations for Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. While the site demonstrates excellent content quality, branding consistency, and user experience, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of HTTPS enforcement, which poses significant risks to user data and trust. Privacy compliance is strong with comprehensive cookie consent mechanisms and GDPR adherence. Overall, the site is professional and trustworthy but requires urgent security improvements to protect customer data and maintain brand reputation.

S

Sheltr

sheltr.eu

40

Sheltr is a technology company specializing in compliance solutions for privacy-focused businesses, offering leading whistleblower and data discovery platforms. Their services target HR, compliance, and GDPR teams, helping organizations comply with regulations such as GDPR and the EU Whistleblower Directive. The company positions itself as a trusted provider with a user-friendly SaaS model, including free and paid offerings. Technically, Sheltr employs a modern web stack based on the Astro framework, integrates Piwik Pro for analytics, and uses Cookie Information for consent management. The site is hosted on Azure DNS with valid TLS certificates, supporting modern protocols like TLS 1.3. Security posture is solid with SPF and DMARC records, but could be improved by enabling HSTS, DNSSEC, and additional security headers. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is professional, well-branded, and trustworthy, with good content quality and user experience. No critical security issues or blocking mechanisms were detected.

A

adesso SE

dws-webshop.com

65

The website dws-webshop.com currently serves a 404 error page indicating the requested content is not found. The page is branded with contact information for adesso SE, a technology company based in Dortmund, Germany, suggesting a possible relationship or misconfiguration. The business appears to be a B2B technology services provider, but no direct business content or services are presented on this page. Technically, the site supports HTTPS with modern TLS protocols but lacks important security headers and HSTS enforcement. DNS records show a strict SPF and DMARC policy, enhancing email security, though CAA records are invalid. The absence of privacy, cookie, or terms policies and lack of analytics or advertising scripts indicate minimal digital maturity or an incomplete deployment. Overall, the site is not currently functional for end users and requires remediation to restore content and improve security and compliance.

D

DWS International GmbH

dbxus.com

73

DWS International GmbH operates a comprehensive and professional website focused on asset management and investment solutions, targeting financial professionals, individual, and institutional investors. The company is positioned as a leading global asset manager with a strong European presence, offering active, passive, and alternative investment products with a focus on ESG and sustainability. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and PrimeVue, along with Brightcove for video content delivery, ensuring a rich user experience. Security posture is strong with HTTPS, SPF, DMARC, and CAA records properly configured, though improvements in HSTS and OCSP stapling are recommended. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

D

DWS

deutscheliquidity.com

55

The website deutscheliquidity.com appears to be related to financial services, specifically liquidity management and money market funds, as indicated by references to DWS and liquidity management product literature URLs. However, the site content is minimal with no visible privacy policies, contact information, or detailed business descriptions. The technical infrastructure is based on modern JavaScript frameworks such as Nuxt.js, but suffers from poor performance and lack of HTTPS security. The absence of a valid SSL certificate and lack of security headers represent critical vulnerabilities that significantly reduce the site's trustworthiness and security posture. Overall, the site demonstrates low digital maturity and poor privacy compliance, which could negatively impact user trust and regulatory adherence.

I

Infront

infrontfinance.com

55

Infront is a well-established provider of market data and trading software solutions, serving wealth management and trading professionals globally. The company positions itself as an industry leader with over 35 years of experience, trusted by thousands of businesses and professional users. Their offerings include WealthTech solutions, APIs, data feeds, risk management, and analytics, supported by a strong client base and recognized certifications such as the Swiss EAM Award and EcoVadis ESG rating. Technically, the website is built on Adobe Experience Manager and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and lack of modern TLS protocols, which significantly impacts its security posture. Privacy compliance is well managed with Cookiebot consent mechanisms and a comprehensive privacy policy. Overall, while the business and content quality are excellent, the security weaknesses and slow performance present risks that should be addressed promptly.

I

ION Analytics

ionanalytics.com

70

ION Analytics is a leading enterprise-level platform that integrates human insight with machine intelligence to transform global capital markets. The company offers a comprehensive suite of services including Mergermarket, Debtwire, Dealogic, and others, targeting advisors, banks, corporates, investors, and lawyers. Positioned as a pioneer in predictive intelligence for capital markets, ION Analytics operates under the parent company ION Group and maintains a strong market presence with multiple partner services integrated into its platform. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress and leverages modern technologies such as Bootstrap, jQuery, and various analytics and marketing tools including Google Tag Manager, Optimizely, and 6sense. Hosting is inferred to be on Microsoft Azure, with DNS and mail services managed via Azure and Microsoft Outlook protection. While the site is functionally rich, performance is somewhat slow due to a large page size and numerous resources. Mobile optimization is good, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS with a valid SSL certificate, has SPF and DMARC records configured for email protection, and uses OCSP stapling. However, it lacks HTTP Strict Transport Security (HSTS) and DNSSEC, which are recommended for enhanced security. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, featuring a comprehensive privacy policy, GDPR-compliant cookie consent mechanisms, and detailed user consent options. Overall, ION Analytics demonstrates a mature digital presence with strong business credibility and security posture. The main areas for improvement include enhancing DNS security, enabling HSTS, and optimizing site performance to improve user experience further.

I

ION Group

iongroup.com

77

ION Group is a global enterprise technology company specializing in automation software for financial markets, commodities, core banking, treasury, and credit information sectors. Their website presents a comprehensive portfolio of products and services aimed at financial institutions, central banks, and corporations, emphasizing automation to improve decision-making and operational efficiency. The company maintains a strong market position with a diverse set of industry solutions and a professional online presence. Technically, the website is built on WordPress with a modern tech stack including analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Eloqua. While the site is secure with HTTPS, TLS 1.2/1.3, and OCSP stapling, there is room for improvement in security headers and DNS security. The site features a robust cookie consent mechanism compliant with GDPR, reflecting good privacy practices. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, though performance is somewhat slow due to large page size and resource count.

W

WSD

solvians.com

60

WSD is a technology company specializing in full automation solutions for structured products, serving a global clientele primarily in the financial sector. The company positions itself as a critical infrastructure provider in the structured products value chain, offering cloud-based, scalable, and resilient technology solutions. Their website reflects a professional and consistent brand with strong industry partnerships and certifications such as ISO and EcoVadis. Technically, the site is built on WordPress with Elementor and uses various modern JavaScript libraries and plugins, but suffers from slow load times and lacks HTTPS encryption, which is a significant security concern. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. However, the absence of SSL and security headers lowers the overall security posture. The company provides multiple contact channels including email, phone, and a detailed contact form, supporting good business credibility. Strategic recommendations include immediate implementation of HTTPS, enhancement of security headers, and performance optimization to improve user experience and security.

Security assessment completed with an overall score of 50/100 (unknown risk). Total of 9 security findings identified across all modules.

D

Diese Domain ist bereits registriert.

ihk-saarland.de

40

The website ihk-saarland.de currently serves as a placeholder domain with minimal content, simply stating that the domain is already registered. There is no active business content, no contact information, and no policies related to privacy, cookies, or terms of service. The site does not utilize any advanced web technologies or frameworks and lacks SEO and accessibility features. Technically, the site is served over HTTPS with support for modern TLS protocols, but lacks important security enhancements such as HSTS, OCSP stapling, DNSSEC, and DMARC records. The absence of security headers and policies indicates a low security posture. Overall, the site appears to be inactive or parked, providing no business or user engagement value. The risk level is low from a security threat perspective but the lack of content and policies means it offers no trust or credibility to visitors.

V

VisiConsult

visiconsult.de

40

VisiConsult is a family-owned German company recognized as a global market leader in customized and standardized X-ray inspection solutions for non-destructive testing (NDT), quality assurance, and process optimization. The company operates multiple business divisions and subsidiaries, including VCxray, VCbattery, VCcount, and VC Inspection Services, as well as diondo X-ray Systems and Services. Their solutions serve diverse industries such as aerospace, automotive, defense, energy, and manufacturing. Technically, the website is built on WordPress with the Avada theme and uses modern web technologies including TLS 1.3 for secure communications. The site is well-optimized for SEO and mobile devices, with good accessibility features. Security posture is solid with no critical vulnerabilities detected, although improvements like enabling HSTS and OCSP stapling are recommended. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website reflects a professional, trustworthy, and technically mature organization.

R

Rohmann GmbH

rohmann.de

40

Rohmann GmbH is a leading German manufacturer specializing in eddy current testing devices and systems for non-destructive testing (NDT). The company serves key industrial sectors including automotive, aerospace, energy, and steel manufacturing, offering a broad product portfolio ranging from handheld devices to inline systems and software solutions. Their market position is reinforced by strong partnerships and customer testimonials from globally recognized companies such as Siemens and Lufthansa Technik. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern JavaScript libraries and frameworks. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts its security posture. Privacy compliance is well addressed with comprehensive policies and a consent mechanism. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.