Security Directory

Lonza Group AG is a globally recognized contract development and manufacturing organization (CDMO) serving the healthcare industry, with a rich history dating back to 1897 in Switzerland. The company is a pioneer and world leader in the CDMO sector, offering integrated services across biologics, small molecules, specialized modalities, and health ingredients. Their target audience includes pharmaceutical, biotech, and nutrition companies seeking end-to-end manufacturing solutions. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, jQuery, Brightcove video integration, and robust cookie consent mechanisms, indicating a strong commitment to user experience and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be enhanced. Overall, the site demonstrates high professionalism, clear navigation, and comprehensive content relevant to their business model.

S

Synergy Credit Union Ltd

fermoycreditunion.ie

56

Synergy Credit Union Ltd is a well-established financial cooperative serving members primarily in Fermoy, Watergrasshill, and Cork City, Ireland. The organization offers a range of financial products including loans, savings accounts, current accounts, and financial planning services. Positioned as a trusted local credit union regulated by the Central Bank of Ireland, it targets community members seeking affordable and flexible financial solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site employs modern web technologies such as jQuery, Bootstrap, Leaflet.js for mapping, and integrates analytics and marketing tools like Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The CMS identified is Umbraco, indicating a robust content management infrastructure. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a clear privacy policy. Overall, the website demonstrates a mature digital presence with good performance and user experience, supporting the credit union's business objectives effectively.

P

Parallels International GmbH

parallels.com

54

Parallels International GmbH operates a professional and comprehensive website offering virtualization and remote application solutions primarily for Mac users. The company is positioned as a market leader with over 7 million users worldwide, providing a range of products including Parallels Desktop, Parallels RAS, and cloud-based services. The website demonstrates strong digital maturity with modern technologies, responsive design, and extensive content tailored to various audiences including enterprises, developers, and educational sectors. Security posture is robust with HTTPS enforcement, secure forms, and privacy compliance evidenced by detailed policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online presence. Strategic recommendations include publishing explicit security policies and incident response contacts to further enhance trust and compliance.

E

Evolution AB (publ)

evolutiongaming.com

53

Evolution AB (publ) is a leading B2B technology provider specializing in online casino solutions, including live casino, live game shows, and slots. The company holds a strong market position with a comprehensive portfolio of brands and subsidiaries such as NetEnt, Red Tiger, and Ezugi, targeting casino operators globally. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and user experience optimizations. The technical infrastructure includes modern libraries and frameworks, ensuring good performance and mobile responsiveness. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and authoritative source in the online gaming technology sector.

E

EIFFEL

eiffel.nl

49

EIFFEL is a well-established consultancy and interim capacity provider specializing in legal, finance, data analytics, and project management services primarily for public and profit sectors in the Netherlands. The company positions itself as an expert in flexible staffing and sustainable solutions, supported by a strong brand presence and a broad client base. Their digital infrastructure leverages modern web technologies including Nuxt.js and Vue.js, with integrated analytics and cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with HTTPS and consent management, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is professional, content-rich, and trustworthy, supporting EIFFEL's market position as a leading consultancy in its sectors.

S

Screen Malta

maltafilmcommission.com.mt

50

Screen Malta serves as the central hub for Malta's film industry, offering information on productions, incentives, and Malta's cinematic heritage. The website positions itself as a key promotional platform targeting film professionals and stakeholders interested in filming in Malta. The business model focuses on industry support and promotion rather than direct commercial transactions. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and plugin configurations are recommended. Overall, the site is professional and trustworthy with moderate risk exposure.

N

Nacionālais Kino centrs

filmas.lv

49

Filmas.lv is a Latvian national film database and viewing platform operated by the Nacionālais Kino centrs. It offers the most comprehensive catalog of Latvian films, including over 2500 titles dating back to 1920. The platform targets film enthusiasts, educational institutions, and libraries, providing curated film collections and integration with schools. Technically, the site is built on WordPress with modern JavaScript libraries and uses Matomo for privacy-focused analytics. The website is well-branded, mobile-optimized, and provides clear navigation and content relevant to its audience. Security posture is good with HTTPS and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is legitimate, professionally maintained, and compliant with GDPR requirements.

E

Elektronički oglasnik javne nabave Republike Hrvatske

eojn.hr

47

Elektronički oglasnik javne nabave Republike Hrvatske (EOJN RH) is the official Croatian government platform for managing and publishing public procurement procedures. It serves contracting authorities and economic operators by providing a centralized, transparent, and legally compliant environment for procurement activities. The platform is developed under the National Recovery and Resilience Plan, reflecting a strategic government initiative to modernize public procurement processes. The website offers comprehensive services including procurement plans, notices, decisions, contract registers, and access to public data, targeting primarily government entities and suppliers in Croatia.

Ambita AS operates the website efullmakt.no, providing electronic power of attorney and secure document signing services primarily targeted at Norwegian businesses and individuals. The company leverages BankID for secure authentication and offers integration with Norway's central registration authority for document submission. The website is professionally designed with a clear focus on security and user experience, featuring responsive design and straightforward navigation. The technical infrastructure includes modern frameworks such as Bootstrap and jQuery, with analytics and consent management handled by Piwik PRO and Cookiebot respectively. Security posture is strong with HTTPS enforced and secure login mechanisms, though additional HTTP security headers could enhance protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms in place. Overall, the website demonstrates a mature digital presence with high trustworthiness and business credibility.

T

Tengai AB

tengai.io

64

Tengai AB operates a specialized AI-driven recruitment platform focused on automating candidate screening through structured interviews with an engaging AI avatar. The company targets recruiters and HR professionals across various sectors including government, retail, and logistics, positioning itself as an innovative solution provider for unbiased and efficient hiring. The website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools such as Google Tag Manager and Intercom, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, GDPR compliance, and adherence to ethical AI principles, although explicit incident response and vulnerability disclosure policies are not publicly available. Overall, the website demonstrates a professional, trustworthy presence with good content quality and user experience.

The website represents Mikael Flodell, an award-winning filmmaker and producer based in Sweden, specializing in feature films, TV series, branded content, and commercials. The site serves as a professional portfolio and business presence targeting media industry clients and collaborators. The business model focuses on high-quality storytelling and production services with a niche market positioning as an independent filmmaker. Technically, the site is built on WordPress using the Semplice theme and Yoast SEO plugin, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied but lacks advanced security headers and incident response information. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

E

Easy-Laser AB

easylaser.com

56

Easy-Laser AB is a Sweden-based manufacturer and supplier specializing in laser-based measurement and alignment systems for industrial applications. The company holds a leading market position with a focus on delivering precise and user-friendly products for various industries including manufacturing and energy. Their website reflects a mature digital presence with comprehensive product information, support resources, and multilingual capabilities. Technically, the site employs modern JavaScript libraries and analytics tools, managed via a Dynamicweb CMS platform, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA implementations, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is strong, featuring clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website demonstrates high professionalism and trustworthiness, supporting the company's established market reputation.

C

Cyient

citec.com

63

Cyient is a well-established global engineering services and digital transformation company with over three decades of experience. The company focuses on intelligent engineering solutions across multiple industries including aerospace, transportation, energy, and healthcare. Their offerings leverage advanced technologies such as AI, cloud computing, and 5G to drive innovation and operational excellence. The website reflects a mature digital presence built on HubSpot CMS, incorporating modern technologies and comprehensive privacy and cookie compliance mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Cyient presents a credible and professional business front with strong branding, customer testimonials, and industry recognition.

Crown CRO Oy is a Finnish clinical research organization specializing in a broad range of medical research services including operations, medical affairs, regulatory affairs, and pharmacovigilance. The company positions itself as a trusted partner for pharmaceutical companies and clinical trial sponsors, emphasizing personalized service and long-term collaboration. Recently acquired by Optimapharm d.o.o., Crown CRO benefits from an expanded Pan-European footprint, enhancing its market reach and service capabilities. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting healthcare industry stakeholders. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, GSAP, and ScrollMagic, hosted by Seravo. While the site is mobile-optimized and SEO-friendly with Yoast SEO integration, some technical improvements are recommended such as proper configuration of analytics and enhanced accessibility features. Security posture is moderate with HTTPS enforced but lacks visible security headers and explicit security policies. Privacy compliance is partial due to absence of cookie consent mechanisms and GDPR indicators. Overall, the website demonstrates a solid business credibility and technical foundation but requires enhancements in privacy compliance and security transparency to fully align with best practices. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and configuring analytics properly to improve compliance and trustworthiness.

Volvo Car Retail Solutions AB is a medium-sized Swedish company specializing in developing simple and intuitive digital solutions to streamline the Volvo automotive retail ecosystem. Established in 1991 and operating within the Volvo Cars group, the company targets Volvo dealers, service technicians, sales staff, and car customers by providing integrated online services such as service booking and retail software. The website reflects a professional and consistent brand presence with clear contact information and multilingual support. Technically, the site uses modern JavaScript libraries like jQuery and Cookiebot for cookie consent management, hosted on a CMS platform called Igloo. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not published. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

K

Konkret

concreteit.se

43

Konkret is a Swedish consulting company specializing in AI, modern technology, and leadership solutions to help businesses transform and grow sustainably. Founded in 2001, it operates as a medium-sized firm with 28 employees, serving clients across various sectors with tailored consulting services. The website reflects a professional and modern digital presence, leveraging WordPress CMS with integrations such as Google Tag Manager and reCAPTCHA for analytics and security. The company demonstrates good GDPR compliance through a comprehensive cookie consent mechanism but lacks explicit privacy policy and terms of service on the homepage. Security posture is solid with HTTPS and secure forms, though additional security headers and incident response information could enhance trust. Overall, Konkret presents a credible and trustworthy business with strong branding and clear contact information.

T

Trafikförsäkringsföreningen

tff.se

40

Trafikförsäkringsföreningen (TFF) is a Swedish organization dedicated to ensuring traffic safety and managing compulsory traffic insurance for vehicles in Sweden and Swedish road users abroad. The website provides comprehensive information about insurance requirements, claims handling, and traffic safety, targeting vehicle owners and insurance companies. The organization holds a key position in the Swedish transportation insurance sector, offering essential services and information to its audience. Technically, the website is built on a modern stack including jQuery, Material-UI, and Microsoft Azure hosting, with integrated analytics from Piwik Pro and Microsoft Application Insights. The site demonstrates good digital maturity with responsive design, accessibility features, and a robust cookie consent mechanism compliant with GDPR. From a security perspective, the site uses HTTPS and includes consent management for cookies, but lacks explicit HTTP security headers and a public security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

S

Sergel Group

sergel.com

44

Sergel Group is a well-established credit management service provider operating across the Nordic region with a focus on transaction-intensive industries such as communication, utilities, banking, and finance. Founded in 1988, the company maintains a medium-sized workforce and serves a broad customer base. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their business sectors. The presence of country-specific sites indicates a regionalized business model. Technically, the website is built on WordPress with modern JavaScript libraries and integrates privacy-conscious analytics and cookie consent management tools. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though explicit security headers and policies could be improved. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements, supporting trustworthiness and business credibility.

Tungsten Automation, formerly known as Kofax, is a leading enterprise software company specializing in AI-powered workflow automation solutions. The company offers a comprehensive portfolio of products including intelligent document processing, robotic process automation, invoice capture, print management, and PDF/eSignature solutions. Positioned as a market leader, Tungsten Automation serves a global audience with a focus on enhancing operational efficiency and compliance across various industries such as finance, healthcare, and supply chain. The website reflects a mature digital presence with consistent branding and extensive content tailored to enterprise customers. Technically, the website leverages modern web technologies including Sitecore CMS, jQuery, Google Tag Manager, and advanced analytics tools like Visual Website Optimizer and OneTrust for cookie consent management. The site demonstrates good performance, mobile optimization, and accessibility features, supporting a positive user experience. The integration of multiple third-party services is managed carefully to maintain compliance and performance. From a security perspective, the site enforces HTTPS and employs privacy compliance mechanisms including GDPR-aligned cookie consent. However, explicit security headers and dedicated security or incident response pages are not evident, suggesting areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Tungsten Automation's website presents a professional, secure, and compliant digital front that aligns with its enterprise market positioning. Strategic enhancements in security transparency and direct contact information could further strengthen trust and compliance posture.

Sensavis AB operates a specialized educational technology platform focused on visual learning tools that simplify complex subjects through interactive and personalized video content. The company targets educational institutions including schools and districts, offering license-based software solutions for Apple iOS and Windows platforms. Their market position is that of a niche edtech provider with a clear focus on enhancing student engagement and learning outcomes through innovative digital tools. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and a consent management platform ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though some security headers are not explicitly confirmed. Security posture is solid with HTTPS enforced, reCAPTCHA integration, and consent-based tracking, but could be improved by publishing explicit security policies and implementing additional HTTP security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

B

Buddy

proffskommunikation.se

39

Buddy is a Swedish telecommunications partner offering a range of services including telephony procurement, connectivity solutions, and operational support. With over 20 years of experience, they position themselves as a reliable and knowledgeable partner for businesses seeking telecommunication solutions. Their website is professionally designed, mobile-optimized, and includes clear navigation and contact options. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security is well-managed with HTTPS, security headers, and a comprehensive cookie consent mechanism via Cookiebot. However, explicit security policies and incident response contacts are not present, representing an area for improvement. Overall, the site demonstrates a strong business credibility and compliance posture, suitable for its market segment.

Decurro Consulting AB is a specialized consulting firm based in Sweden, focusing on SAP NetWeaver products, SAP Business Intelligence, and project management services. The company targets businesses requiring expert consulting in these technology areas. The website is built on WordPress using Themify Builder and includes basic content describing their services and partnership philosophy. The technical infrastructure is standard for small business websites, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security maturity. No contact emails or phone numbers are explicitly provided, which may impact user trust and engagement. Overall, the website presents a modest but professional online presence consistent with a small consulting firm.

T

Teledyne FLIR LLC

flir.com

44

Teledyne FLIR LLC operates a comprehensive and professionally designed website focused on thermal imaging, night vision, and infrared camera systems. The company is positioned as a world leader in these technologies, serving diverse sectors including government, defense, industrial, automotive, and public safety. Their business model includes direct product sales, OEM components, and integrated solutions, supported by training and customer service. The website reflects a mature digital infrastructure with modern analytics, marketing tools, and cookie consent mechanisms, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and a strong market presence.

P

Profoto AB

profoto.com

42

Profoto AB operates a professional e-commerce platform specializing in high-end lighting equipment for photographers and videographers. The website showcases a broad range of products including monolights, on-camera flashes, LED panels, and various light shaping tools. The company targets professional creatives demanding premium lighting solutions, positioning itself as a market leader in this niche. The site features comprehensive product information, multimedia content, and a well-structured navigation system, enhancing user engagement and conversion potential. Technically, the website employs modern web technologies such as React, jQuery, and Slick Carousel, with integrations for Vimeo video content and multiple third-party analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The presence of Cookiebot ensures robust cookie consent management, aligning with GDPR requirements. The site is hosted securely with HTTPS and includes anti-forgery tokens in forms, indicating a mature digital infrastructure. From a security perspective, the website demonstrates strong practices including encrypted connections, consent mechanisms, and no visible exposure of sensitive data. While explicit security headers are not fully enumerated, the overall posture is solid with no detected vulnerabilities or WAF interference. The domain registration details are consistent with the business identity, reinforcing trustworthiness. Overall, Profoto.com presents a secure, professional, and user-friendly platform that effectively supports its business objectives. Strategic recommendations include enhancing explicit security header implementations, continuous monitoring of third-party scripts, and maintaining transparency in privacy and data protection practices to sustain compliance and user trust.

Linnéuniversitetet is a modern and internationally oriented university located in Kalmar and Växjö, Sweden. It offers a wide range of educational programs, research initiatives, and collaborative projects aimed at societal development. The university holds a strong market position in the Swedish higher education sector, supported by accreditations such as AACSB and a comprehensive digital presence. The website reflects a mature digital infrastructure with modern technologies including jQuery, FontAwesome, and cloud hosting via Microsoft Azure. Privacy and cookie consent mechanisms are robust and GDPR-compliant, providing users with granular control over data collection. Security practices are good, with HTTPS enforced and bot management in place, though some security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.

adesso Sweden AB is a large, established IT service provider specializing in cloud solutions, software engineering, AI, and compliance services. With over 10,300 employees and a presence in 60 locations globally, they offer a comprehensive portfolio of IT consulting and development services targeting enterprises and public sector clients. The website demonstrates a mature technical infrastructure leveraging modern web technologies and cloud platforms, with strong digital maturity evident in their use of advanced analytics and consent management. Security posture is robust with no visible vulnerabilities, proper use of HTTPS, and adherence to privacy regulations including GDPR. Overall, the site reflects a professional, trustworthy, and well-managed business with clear market positioning and comprehensive service offerings.

C

Callin Wild

callinwild.com

45

Callin Wild is a professional law firm based in the Isle of Man, offering a broad range of legal services including litigation, commercial law, wills and probate, mediation, property and conveyancing, and corporate services through its subsidiary CW Corporate Services Limited. The firm targets both local and international clients, positioning itself as a leading legal service provider in its region. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the SilverStripe CMS platform and utilizes common JavaScript libraries such as jQuery and bxSlider for UI elements. Google Analytics is implemented for visitor tracking, although no cookie consent mechanism is present. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers in the provided data, which are critical for protecting user data and ensuring trust. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The absence of a vulnerability disclosure policy or security.txt file further limits transparency in security practices. However, no obvious vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and professional but requires significant improvements in privacy compliance and security posture to meet modern standards. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies with consent mechanisms, deploying security headers, and establishing a vulnerability disclosure process to enhance trust and regulatory compliance.

I

ILS World

ils-world.com

57

ILS World is a well-established global fiduciary services provider headquartered in the Isle of Man, offering a broad range of corporate, private client, and digital services. The company targets professional advisers, international corporate groups, and private clients, positioning itself as a trusted partner with over 30 years of industry experience. Their leadership team is experienced and regulatory approvals from multiple jurisdictions enhance their credibility. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website employs modern web technologies including Bootstrap, Swiper, GSAP, and jQuery, with assets hosted on Amazon S3 and CDNs to optimize performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Analytics and marketing tools such as Google Analytics and Campaign Monitor are used for user tracking and engagement. From a security perspective, the site uses HTTPS and secure iframe forms for contact, but lacks explicit security headers and dedicated security or incident response policies. Privacy and cookie policies are present, though a cookie consent mechanism is missing, which may affect GDPR compliance. No critical vulnerabilities or suspicious content were detected, and domain WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website demonstrates a strong business credibility and technical foundation with room for improvement in security best practices and privacy compliance mechanisms.

The Personal Finance Society (PFS) is a UK-based professional body dedicated to supporting financial planning professionals through membership, qualifications, learning resources, and events. It operates under the Chartered Insurance Institute group, positioning itself as a leading authority in the financial planning sector. The website clearly targets financial professionals seeking career development and industry recognition. The business model centers on membership fees, educational content, and professional events, reinforcing its role as a trusted industry body. Technically, the website employs a modern technology stack including AngularJS, jQuery, and various analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The CMS is Umbraco, a professional-grade content management system. The site is mobile-optimized with good navigation and accessibility features, though some accessibility improvements could be made. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes some security headers, but could enhance its security posture by adding additional headers and publishing a formal security policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Contact information is complete and professional, enhancing trust. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Personal Finance Society. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance to further strengthen trust and compliance.

B

Boxcar

boxcar.com

39

Boxcar is a regional transportation company specializing in commuter bus services and complementary local services such as grill cleaning, knife sharpening, and auto detailing. The company targets commuters in the New Jersey and New York City metropolitan area, offering reserved seating, Wi-Fi, and other amenities to enhance the commuting experience. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, positioning Boxcar as a trusted local transportation provider. Technically, the website is built on the Webflow platform, leveraging modern frontend technologies including jQuery and Google Fonts, and is hosted behind Cloudflare. While the site is mobile-optimized and well-structured, performance data is missing, and the SSL/TLS configuration is critically deficient, lacking a valid certificate and modern protocol support. This represents a significant security risk. From a security perspective, the absence of HTTPS and TLS protocols severely undermines the site's security posture, exposing users to potential data interception and undermining trust. Although privacy and terms of service policies are present and comprehensive, the lack of a cookie consent mechanism despite active tracking scripts indicates partial privacy compliance. Contact information is clearly provided, supporting business credibility. Overall, Boxcar's website demonstrates good content quality and business credibility but suffers from critical security shortcomings that must be addressed urgently to protect user data and maintain trust. Strategic improvements in SSL/TLS deployment and privacy compliance will significantly enhance the site's security and compliance posture.

Nissan Motor Corporation operates a comprehensive global website that serves as a central hub for corporate information, sustainability initiatives, investor relations, innovation, and career opportunities. The company is a major player in the transportation industry with a strong global brand and a focus on sustainable mobility and advanced automotive technologies. The website targets a broad audience including consumers, investors, partners, and potential employees. Technically, the site employs a modern technology stack including jQuery, Swiper.js, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and well-structured for user experience and SEO. Security posture is strong with HTTPS enforced and use of standard security best practices, although explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a high level of professionalism and trustworthiness consistent with a large multinational corporation.

P

Permapack AG

permapack.ch

26

Permapack AG is a Swiss family-owned manufacturing and trading company specializing in high-quality products such as labels, adhesive tapes, films, sealants, and garden articles. The company serves various sectors including food, cosmetics, industry, construction, and retail, offering both standard products and customized solutions. Their business model combines B2B sales with an online shop and extensive production services. The website reflects a medium-sized enterprise with a consistent brand presence and strong trust indicators such as awards and social media engagement. Technically, the site uses a custom e-commerce platform with modern JavaScript libraries and tracking tools, hosted by IP-Plus AG. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to risks and limiting secure communications. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is professional and trustworthy but requires urgent security improvements.

M

Music Direct

musicdirect.com

40

Music Direct operates as a specialized e-commerce retailer focusing on high-end audio equipment and audiophile music products, including vinyl records and turntables. The company positions itself as a leading online destination for audiophiles and music enthusiasts, offering a broad catalog of equipment and music media. Their business model centers on direct online sales, supported by customer service, trade-in programs, and financing options. The website reflects a mature digital presence with comprehensive product offerings and clear navigation tailored to their target audience. Technically, the website is built on the BigCommerce platform using the Stencil framework, leveraging modern web technologies such as jQuery, Bootstrap, and OwlCarousel. The site integrates multiple marketing and analytics tools including Google Analytics 4, Klaviyo, Lucky Orange, and Yotpo, indicating a sophisticated approach to customer engagement and data-driven marketing. Hosting is provided via Cloudflare, enhancing performance and availability. From a security perspective, the site exhibits significant weaknesses. Despite Cloudflare hosting, the SSL certificate is invalid or missing, and no TLS protocols are enabled, resulting in unencrypted HTTP traffic. Security headers such as X-Frame-Options and X-Content-Type-Options are present, but critical HTTPS enforcement and HSTS configurations are lacking. These deficiencies expose the site and its users to potential interception and downgrade attacks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting compliance with GDPR and related regulations. Overall, while the business and technical infrastructure are solid and professional, the lack of proper SSL/TLS configuration is a critical security gap that undermines user trust and data protection. Addressing this issue should be a top priority to ensure secure transactions and compliance with industry standards.

T

Transsystem Spółka Akcyjna

transsystem.pl

32

Transsystem Spółka Akcyjna is a Polish manufacturing company specializing in the production and general contracting of technological transport systems, primarily serving the tire industry, intralogistics, and e-commerce sectors. With over 31 years of market presence and a portfolio of international projects, the company maintains a solid market position supported by partnerships with major industry players such as Michelin, Goodyear, and Bridgestone. The website reflects a professional business model focused on manufacturing and technological transport solutions. Technically, the site is built on WordPress with common plugins like Yoast SEO and Contact Form 7, and it integrates Google Tag Manager and reCAPTCHA for analytics and security. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, exposing users to potential risks. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to align with best practices.

Laserer alpin OG is a specialized alpine travel and training company founded in 1989 in Graz, Austria, now headquartered in Gosau. The company offers a wide range of mountain-related services including ski tours, climbing courses, trekking, and expeditions worldwide, supported by certified mountain guides. It holds the Gütesiegel der Alpinschulen Österreichs, reflecting high quality standards. The website is professionally designed with comprehensive content targeting outdoor enthusiasts and adventure travelers. Technically, the site runs on WordPress with WooCommerce and integrates marketing tools like Rapidmail and Google Analytics. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, lowering the overall security posture significantly. Privacy and cookie policies are well implemented and GDPR compliant, enhancing user trust. Business information is transparent and consistent with domain registration data, supporting legitimacy. Strategic improvements in security infrastructure are recommended to enhance trust and compliance.

L

LIMAK Austrian Business School GmbH

limak.at

35

LIMAK Austrian Business School is a well-established educational institution in Austria specializing in executive education and leadership development. With over 30 years of experience, LIMAK offers a broad portfolio of academic programs including various MBA tracks, university courses, inhouse corporate training, and digital learning solutions. The institution targets professionals and companies seeking advanced management and leadership skills. The website reflects a mature digital presence with rich content, testimonials, and strong branding aligned with its market position. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and CDN services, but suffers from critical SSL/TLS misconfigurations that undermine security. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, LIMAK presents a credible and professional business front but must urgently address its HTTPS and SSL issues to protect users and maintain trust.

I

iSimulate

isimulate.com

40

iSimulate is a specialized company providing clinical education technology solutions focused on simulation products for healthcare training. Their product family includes modular simulation ecosystems, fetal heart rate monitor simulators, point of care device simulators, and training manikins. The website presents a professional and consistent brand image targeting healthcare educators and simulation trainers globally. Technically, the site uses modern JavaScript libraries and is hosted on AWS infrastructure, but critically lacks HTTPS support, exposing users to security risks. Privacy compliance is basic with a cookie consent banner and a linked privacy policy, but no terms of service or security policies are evident. The security posture is weak due to missing SSL/TLS and security headers, which should be addressed urgently to protect user data and trust. Overall, the site is functional and informative but requires significant security improvements to meet modern standards.

U

Unitedprint SE

unitedprint.com

38

Unitedprint SE operates as a major European web-to-print service provider, offering a range of print-related services including web-to-print shops, print material supply, and production partnerships. The company maintains multiple brands and portals targeting print industry professionals and businesses seeking print solutions. The website is built on WordPress with a modern theme and multilingual support, reflecting a mature digital presence. However, the technical infrastructure lacks a valid SSL certificate, which impacts security and user trust. Security posture is basic with no advanced headers or HTTPS enforcement, and privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires improvements in security and privacy to meet modern standards.

insideAx GmbH is a small Austrian technology company specializing in digital transformation services, focusing on simplifying business processes primarily through Microsoft Dynamics 365 ERP and CRM solutions. Their target market includes retail and manufacturing sectors, offering consulting, project implementation, support, and productivity tools. The website is professionally designed with good content quality and clear navigation, supporting German language users. Technically, the site uses modern frontend libraries such as Bootstrap 5, jQuery, and Swiper.js, hosted on Cloudpit infrastructure with a custom CMS. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS support, exposing the site to risks and reducing trust. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but no explicit security or incident response policies are found. Overall, the site is functional and credible but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

A

Austrian Institute of Economics and Social Philosophy

austrian-institute.org

25

The Austrian Institute of Economics and Social Philosophy is a small non-profit organization focused on promoting classical liberal social philosophy and Austrian economics primarily to a German-speaking audience. The website serves as an educational platform offering blogs, videos, podcasts, and events such as the Austrian Academy. The organization is funded by donations and maintains a professional online presence with consistent branding and active social media channels. Technically, the website is built on WordPress with modern plugins and page builders, but lacks a valid SSL certificate, which is a critical security flaw. The absence of HTTPS significantly undermines the site's security posture despite good privacy compliance and cookie consent mechanisms. No explicit security or incident response policies are published, and no phone contact is provided, only an official email address. Overall, the site is content-rich and professionally designed but requires urgent security improvements to protect user data and enhance trust.

E

Eti

etietieti.com

39

Eti is a well-established Turkish food manufacturing company with a strong market presence and a diverse product portfolio including biscuits, chocolates, and health-oriented food products. The website serves as a comprehensive corporate portal providing product information, recipes, corporate governance details, career opportunities, and social responsibility initiatives. The site targets consumers interested in quality food products and healthy nutrition, leveraging a consistent brand identity and multiple language options for international reach. Technically, the website is built on ASP.NET WebForms and uses modern JavaScript libraries for UI enhancements. However, performance metrics are lacking and the site suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which significantly impacts user trust and security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR requirements. Social media integration and partner links enhance the brand's digital ecosystem. Overall, Eti's website is professional and content-rich but requires urgent security improvements to meet modern standards.

R

Rail Cargo Group

railcargo.com

40

Rail Cargo Group is a well-established rail logistics provider operating primarily in Europe and Asia, offering a broad range of freight and logistics services including wagon loads, intermodal and multimodal logistics, and railway operations. The company targets businesses requiring efficient rail freight solutions and maintains a strong market position supported by its parent company ÖBB. Technically, the website employs modern JavaScript libraries and custom corporate scripts, with a focus on accessibility and SEO, though performance data is unavailable. Security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, despite good security header implementation. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, with Matomo analytics used for privacy-conscious tracking. Overall, the site is professional and trustworthy but requires urgent SSL/TLS remediation to improve security and user trust.

S

SVD Büromanagement GmbH

svdgmbh.at

40

SVD Büromanagement GmbH is a medium-sized Austrian company specializing in providing comprehensive management and support services across multiple sectors including construction, procurement, IT, facility management, printing, information security, payroll, and legal services. The company primarily serves government and social insurance institutions, positioning itself as a key regional player with a strong focus on public sector needs. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience of government agencies, suppliers, and job seekers. Technically, the site employs modern JavaScript libraries such as jQuery 3.6.0 and Jakarta Faces framework, hosted on Apache servers with a CMS likely based on Gentics. However, performance is slow and SSL/TLS security is critically lacking due to an invalid or missing certificate and disabled TLS protocols. Security headers are present but insufficient to compensate for the lack of HTTPS, resulting in a low security posture score. Privacy compliance is strong with comprehensive privacy and cookie policies and an active consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and build trust.

IMAS International is a mature Polish market research company established in 1998, specializing in quantitative and qualitative research services including internet-based CAWI studies, CATI telephone surveys, and ethnographic research. The company targets businesses and organizations seeking data-driven insights to support decision-making. Their website reflects a professional presence with consistent branding and good content quality, offering reports, publications, and a panel internetowy service. Technically, the site is built on WordPress with common plugins for forms, slideshows, and marketing integrations such as Mailmunch and Jetpack. However, the site lacks HTTPS support, which is a significant security concern. No privacy or cookie policies are found, and contact information is limited to forms without explicit emails or phone numbers. Security posture is weak due to missing SSL/TLS and security headers, though no active vulnerabilities or malware are detected. Overall, the website is functional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

R

rieg marketing

rieg-marketing.de

22

rieg marketing is a small German marketing consultancy specializing in creative marketing, communication, and promotional services primarily for the sporting goods, marine, and fashion industries. The company offers tailored marketing strategies, project management, public relations, promotions, and visual merchandising services. The website is built on WordPress and uses common plugins such as Contact Form 7 and Cookie Law Info for user interaction and compliance. While the website content is professional and well-structured, the technical infrastructure lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Cookie consent mechanisms and a privacy policy compliant with GDPR are present, indicating attention to privacy compliance. However, no incident response or security policy information is provided, and no terms of service page is found.

S

Scigility Switzerland AG

scigility.com

23

Scigility Switzerland AG is a specialized technology company focused on delivering advanced data solutions including AI, machine learning, data strategy, and governance primarily to enterprise clients in finance, healthcare, manufacturing, and utilities sectors. The company has a mature market presence with a domain age of 12 years and a strong client portfolio including major Swiss corporations. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics tools such as Matomo and Google Analytics. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business credibility and website professionalism are high, but the security posture requires urgent improvement.

B

Bullhorn

invenias.com

40

Bullhorn is a well-established enterprise SaaS provider specializing in cloud-based staffing and recruitment software solutions, including the Invenias executive search platform. The company serves a global customer base with a comprehensive suite of products designed to streamline recruitment processes, enhance compliance, and improve business development efforts. The website reflects a mature digital presence with strong branding, professional content, and targeted messaging for staffing firms and executive search professionals. Technically, the site leverages WordPress CMS, integrates marketing automation tools like Marketo, and employs standard web technologies such as jQuery and Slick Carousel. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which is a critical vulnerability that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent via OneTrust, and GDPR adherence. Overall, the site is professional and credible but requires urgent remediation of SSL issues to ensure secure user interactions.

1

101domain GRS Limited

psolutions.at

37

The website psolutions.at is currently a parked domain page managed by 101domain GRS Limited, a domain registration and related services provider. The site offers no original business content but promotes domain registration, Google Workspace, web hosting, and corporate brand services through 101domain. The target audience is individuals or businesses interested in acquiring this domain or other domains. The site is minimalistic with basic design and navigation, primarily serving as a placeholder and sales funnel for domain services. Technically, the site is hosted on an AWS IP with nginx server and uses modern frontend technologies such as jQuery and Modernizr. However, it lacks SSL/TLS encryption, serving content over HTTP only, which is a significant security shortfall. Performance metrics are not available, but the site appears lightweight. Mobile optimization is good due to responsive CSS, but accessibility and SEO are basic. Security posture is weak due to the absence of HTTPS, no HSTS, no DMARC, no DNSSEC, and no valid SSL certificate. Some security headers like Content-Security-Policy and X-Frame-Options are present, but overall security best practices are not fully implemented. There are no signs of vulnerabilities like Heartbleed or POODLE, but the lack of encryption is critical. Overall, the site poses low risk as it is a parked domain with no user data collection or business operations. However, the lack of HTTPS and privacy policies reduces trustworthiness and compliance. Strategic recommendations include implementing SSL/TLS, adding privacy and cookie policies, and improving security headers to enhance trust and security posture.

V

Vela Labs

vela-labs.at

28

Vela Labs GmbH is a GLP and GMP certified contract laboratory specializing in analytical services for pharmaceutical and biotechnology companies. The company supports all phases of drug development with services including physico-chemical analysis, ligand binding assays, cell based assays, microbiological analysis, clinical sample analytics, and GMP storage. As part of the Tentamus Group, Vela Labs positions itself as a trusted partner with strong compliance credentials and a focus on quality and regulatory adherence. The website demonstrates a professional digital presence built on WordPress with SEO and analytics integrations, targeting pharma and biotech professionals. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Privacy policies and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Overall, the company shows a solid market position but should urgently address its SSL/TLS configuration to improve security posture and user confidence.

M

Mondial GmbH & Co. KG

mondial-congress.com

37

Mondial GmbH & Co. KG is a medium-sized Austrian company specializing in congress and event management services, including green meetings, virtual events, and travel management. The company holds several industry certifications and maintains a multilingual, content-rich website targeting organizations seeking professional event solutions. Technically, the website is built on WordPress with modern libraries but lacks a valid SSL certificate, resulting in a critical security gap. The absence of HTTPS and security headers exposes users to risks and reduces trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to meet modern standards.