Security Directory

C

Continental Exchange Solutions, Inc.

riafinancial.com

40

Ria Financial Services operates a global money transfer platform, providing services to individuals and businesses for sending and receiving money internationally. The company maintains a strong market presence with localized country-specific websites and a corporate section, supported by a parent company, Euronet Worldwide, Inc. The website is built on the Liferay CMS platform, leveraging modern web technologies such as jQuery and Bootstrap, and includes multi-language support and a cookie consent mechanism to comply with privacy regulations. However, a critical security deficiency is the absence of a valid SSL certificate and TLS support, which severely impacts the security posture and user trust. While privacy and cookie policies are comprehensive and GDPR compliant, the lack of HTTPS undermines data protection efforts. The site includes social media integration and a contact form with CAPTCHA to mitigate spam. Overall, the website demonstrates good business credibility and content quality but requires urgent security improvements to meet industry standards.

C

CyberLink Corp

cyberlink.com

40

CyberLink Corp is a mature technology company specializing in video editing, photo editing, and multimedia software solutions. Established in 1997, it has a strong market presence with award-winning products and a global customer base. The company offers a range of consumer and business software products, including PowerDirector, PhotoDirector, and FaceMe SDK, targeting both individual users and enterprise clients. The website reflects a professional and consistent brand image with comprehensive product information and active social media engagement. Technically, the website employs modern JavaScript libraries, Google Analytics 4, and AWS CloudFront for hosting and content delivery, but suffers from critical SSL/TLS configuration issues that undermine security and user trust. Security headers are partially implemented, but the absence of a valid SSL certificate and TLS protocols is a major vulnerability. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, though no explicit cookie consent mechanism is present. Overall, the website is functional and professional but requires urgent security improvements to protect user data and maintain trust.

P

POS Service Group

pos-sg.com

40

POS Service Group is a well-established service provider specializing in on-site repair and cleaning of upholstery, furniture, and related household items. With over 35 years of experience, the company holds a strong market position as a European leader in full-service on-site upholstery and furniture care, serving both private and business customers primarily in Germany and neighboring countries. Their key services include repair, cleaning, 3D laser measurement, and burglary protection, supported by a network of service technicians across multiple countries. Technically, the website uses modern front-end technologies and is mobile-optimized, but suffers from a critical lack of valid SSL/TLS certification, which severely impacts security posture. Security headers are present but cannot compensate for the absence of HTTPS. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by certifications and professional content. Overall, the website is functional and professional but urgently needs to address SSL/TLS issues to improve security and trust.

A

Avantor, Inc.

vwr.com

40

VWR.com is the online presence of Avantor, Inc., a large enterprise specializing in providing life science products and service solutions. The website targets life science professionals and organizations globally, offering a broad range of scientific supplies and services. The business model is primarily B2B, with a strong market position as an established global supplier in the healthcare sector. The site uses localized subdomains to serve different countries, indicating a mature international presence. Technically, the website employs a variety of modern JavaScript libraries and tracking tools, including Google Analytics, Hotjar, and Cloudflare for CDN and security. However, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which is a significant security concern. The content is professionally presented with good navigation and branding consistency, but mobile optimization and accessibility are basic. From a security perspective, while the site implements a comprehensive Content Security Policy and some security headers, the absence of HTTPS and modern TLS support severely impacts the security posture. No incident response or vulnerability disclosure information is provided, and no explicit contact details are available on the landing page, limiting transparency. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS implementation and privacy compliance mechanisms to enhance trust and security. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, implementing cookie consent mechanisms, and providing clear contact and security policy information.

MS Design GmbH is a medium-sized manufacturing company based in Tirol, Austria, specializing as a system supplier to the automotive industry. Founded in 1983, the company offers comprehensive services from design and prototyping to production start, emphasizing quality, innovation, and customer satisfaction. Their market position is supported by multiple certifications including IATF 16949 and ISO standards, reflecting a strong commitment to quality and environmental management. Technically, the website is built on TYPO3 CMS with a modern but basic technology stack including jQuery and various UI libraries. While the site is well-structured, mobile-optimized, and SEO-friendly, it lacks HTTPS support and a valid SSL certificate, which is a critical security gap. The hosting environment appears to be a Plesk-managed Apache server without advanced security configurations such as HSTS or DNSSEC. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. Although some security headers are present and email obfuscation is implemented, the lack of encryption exposes users to risks. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but incident response and vulnerability disclosure information are missing. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate trust and compliance.

G

Glacier Financial Solutions (PTY) LTD

glacier.co.za

40

Glacier by Sanlam is a South African licensed financial services provider specializing in wealth management and investment solutions, including unit trusts, retirement products, and financial planning. The website serves as a comprehensive portal for personal and business clients, offering detailed product information and access to intermediary and client login portals. The business is positioned as a significant player within the Sanlam group, leveraging its brand and resources to serve a broad market segment. Technically, the website is built on Microsoft SharePoint with integration of common web technologies such as jQuery and Google Tag Manager, indicating a mature but somewhat traditional digital infrastructure. However, the absence of a valid SSL certificate and HTTPS severely undermines the site's security posture, exposing users to risks and impacting trust. Security headers are partially implemented, but critical modern security practices like HSTS and TLS are missing. Privacy and terms of service policies are linked to the parent Sanlam domain, suggesting centralized compliance management, though explicit cookie consent mechanisms are lacking. Overall, the site is professionally designed with good content quality and navigation but requires urgent security improvements to protect user data and maintain regulatory compliance.

Summit Printing LLC operates as an established online commercial printing company founded in 2010, offering a wide range of printing services including banners, brochures, business cards, mailing services, and graphic design. The company targets businesses and graphic designers across the United States and Canada, leveraging multiple plant locations to provide fast production and free shipping. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses PHP 7.0.33, jQuery, Modernizr, and is hosted behind Cloudflare with LiteSpeed server technology. However, the absence of a valid SSL certificate and HTTPS implementation is a significant security shortfall. Security headers such as HSTS, X-Frame-Options, and X-Content-Type-Options are present, but the lack of TLS protocols and certificate transparency compliance reduces the overall security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site scores moderately on content quality and business credibility but is penalized heavily for security deficiencies.

R

Rohde & Schwarz GmbH & Co. KG

rohde-schwarz.com

40

Rohde & Schwarz GmbH & Co. KG is a well-established global technology company specializing in test and measurement, technology systems, networks, and cybersecurity solutions. With a history spanning over 90 years and a strong family ownership model, the company serves industries, governments, and public authorities worldwide. Their product and service portfolio includes advanced measurement equipment, cybersecurity services, and technology systems designed to ensure security and connectivity. The website reflects a mature, professional enterprise with consistent branding and comprehensive content targeting technology professionals and institutional clients. Technically, the website employs modern JavaScript libraries such as RequireJS, Adobe Launch for tag management, and accessibility tools like UserWay. The site is well-structured with good SEO and accessibility practices, and it is mobile-optimized. However, a critical security gap is the absence of a valid SSL/TLS certificate and HTTPS support, which severely impacts the security posture and user trust. Security-wise, while the site implements several security headers and cookie protections, the lack of HTTPS and TLS protocols is a major vulnerability. No incident response or vulnerability disclosure information is publicly available, which could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the website is professional and trustworthy from a business perspective but requires urgent security improvements to enable HTTPS and strengthen its security posture. Strategic recommendations include immediate SSL certificate deployment, enabling modern TLS protocols, and enhancing security header configurations to protect users and data integrity.

W

WestRock

westrock.com

39

WestRock is a global leader in sustainable packaging manufacturing, operating across multiple countries with extensive packaging converting operations and paper mills. The company targets businesses requiring innovative and sustainable packaging solutions across diverse markets such as beverage, healthcare, foodservice, and retail. Their business model focuses on manufacturing and supplying a broad range of packaging products and services, supported by a strong digital presence and comprehensive content. Technically, the website leverages modern web technologies including Sitecore CMS, Coveo search, and Brightcove video players, indicating a mature digital infrastructure. However, the absence of a valid SSL/TLS certificate and HTTPS severely undermines the security posture, exposing users to risks and reducing trust. Privacy policies and cookie consent mechanisms are well implemented, reflecting good compliance practices. Overall, the site is professionally designed with clear navigation and strong branding, but critical security improvements are necessary to protect user data and enhance trust.

1

101domain GRS Limited

psolutions.at

37

The website psolutions.at is currently a parked domain page managed by 101domain GRS Limited, a domain registration and related services provider. The site offers no original business content but promotes domain registration, Google Workspace, web hosting, and corporate brand services through 101domain. The target audience is individuals or businesses interested in acquiring this domain or other domains. The site is minimalistic with basic design and navigation, primarily serving as a placeholder and sales funnel for domain services. Technically, the site is hosted on an AWS IP with nginx server and uses modern frontend technologies such as jQuery and Modernizr. However, it lacks SSL/TLS encryption, serving content over HTTP only, which is a significant security shortfall. Performance metrics are not available, but the site appears lightweight. Mobile optimization is good due to responsive CSS, but accessibility and SEO are basic. Security posture is weak due to the absence of HTTPS, no HSTS, no DMARC, no DNSSEC, and no valid SSL certificate. Some security headers like Content-Security-Policy and X-Frame-Options are present, but overall security best practices are not fully implemented. There are no signs of vulnerabilities like Heartbleed or POODLE, but the lack of encryption is critical. Overall, the site poses low risk as it is a parked domain with no user data collection or business operations. However, the lack of HTTPS and privacy policies reduces trustworthiness and compliance. Strategic recommendations include implementing SSL/TLS, adding privacy and cookie policies, and improving security headers to enhance trust and security posture.

H

Hilfswerk Österreich

hilfswerk.at

36

Hilfswerk Österreich is a large, well-established non-profit organization providing extensive health, social, and family services across Austria. The website reflects a professional and comprehensive digital presence, targeting a broad audience including elderly people, children, families, and caregivers. The organization maintains a strong market position as one of Austria's leading providers in its sector, supported by government funding and a wide range of services. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes accessibility and SEO best practices. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly undermines the site's security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high professionalism and trustworthiness but urgently requires SSL implementation to mitigate security risks.

M

Melitta

melitta.com

40

Melitta is a well-established company specializing in coffee products and related services, operating a professional website that serves both consumers and B2B partners. The site provides comprehensive information about the company, its sustainability initiatives, and customer service options, supported by a consistent brand presence and active social media engagement. The technical infrastructure leverages modern JavaScript libraries, Google Analytics, and Cloudflare CDN services, with good mobile optimization and accessibility features implemented via a third-party widget. However, the website's security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is functional and professional but requires urgent remediation of SSL and TLS issues to improve security and trustworthiness.

L

Laakirchen Papier AG

heinzelpaper.com

26

Heinzelpaper, operated by Laakirchen Papier AG, is a well-established paper manufacturing company with a history dating back to the late 19th century. As a subsidiary of the Heinzel Group, it focuses on sustainable paper production, renewable energy integration, and wood processing. The company targets business customers in the packaging and paper sectors, emphasizing sustainability and circular economy principles. The website reflects a professional business presence with clear navigation and relevant content, though it lacks advanced SEO and accessibility features. Technically, the website uses common web technologies such as nginx, jQuery, Bootstrap, and FontAwesome. However, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. The site lacks modern TLS protocols, HSTS, and other security headers, exposing it to potential risks. Performance is rated slow, and while mobile optimization is good, accessibility and SEO are basic. From a security perspective, the lack of HTTPS is a critical vulnerability that undermines user trust and data protection. No incident response or security policy information is provided, and no vulnerability disclosure or security.txt files are found. Cookie consent and privacy policies are implemented, indicating some compliance with GDPR requirements. Overall, the website presents a moderate risk profile due to its security deficiencies, despite good business credibility and content quality. Strategic improvements in SSL deployment, security headers, and incident response transparency are recommended to enhance trust and compliance.

Schwarzach Packaging GmbH is a well-established Austrian manufacturer specializing in fine cardboard packaging solutions. The company serves a diverse range of industries including food, cosmetics, luxury goods, and non-food sectors, emphasizing sustainability and quality. Their website presents comprehensive product and corporate information, targeting industrial partners and international trade clients. Technically, the website uses modern frontend technologies and Google Tag Manager for analytics but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. The absence of cookie consent mechanisms despite tracking tools also indicates partial privacy compliance. Business credibility is strong with clear contact details and certifications such as the BGF-Gütesiegel. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

S

Sensorbis GmbH

sensorbis.com

18

Sensorbis GmbH operates a cloud-based telemetry data management platform focused on Internet of Things (IoT) devices and sensors. The company provides subscription services enabling users to acquire, store, visualize, and export telemetry data with real-time charts, maps, and alert notifications. Their target audience includes IoT device operators, industrial machinery managers, and fleet tracking services. The business model centers on SaaS subscriptions with API and web interface management capabilities. The website content is professionally presented with consistent branding and relevant business descriptions, positioning Sensorbis as a niche player in the IoT telemetry cloud market. Technically, the website is built on ASP.NET WebForms with jQuery and Bootstrap, indicating a mature but somewhat dated technology stack. Performance is moderate to slow with a page load time exceeding 5 seconds and a large page size. Mobile optimization and accessibility are basic but functional. The site includes cookie consent mechanisms and privacy policy documentation, though GDPR compliance is not explicitly confirmed. Analytics tracking is present but disabled. From a security perspective, the site suffers from critical issues including the absence of a valid SSL certificate, missing DNS records, and lack of security headers. HTTPS is enforced in the application logic but without a valid certificate, exposing users to risks. No advanced security policies or incident response contacts are published. These vulnerabilities significantly reduce the security posture and trustworthiness of the site. Overall, Sensorbis GmbH presents a credible small technology company with a focused IoT telemetry service offering. However, critical security improvements are necessary to protect user data and enhance trust. Addressing SSL and DNS issues should be prioritized to improve the security score and user confidence.

U

University of Leeds

leeds.ac.uk

40

The University of Leeds is a large, well-established higher education institution in the United Kingdom, recognized as part of the prestigious Russell Group and ranked among the world's top 100 universities. The website serves a broad audience including prospective and current students, staff, researchers, and alumni, offering comprehensive information on undergraduate, masters, and research degree programs, as well as scholarships and events. The content is professionally presented with consistent branding and clear navigation, reflecting a high level of digital maturity. Technically, the website is built on the Jadu CMS platform, utilizing modern web technologies such as Typekit fonts and Modernizr for enhanced user experience and accessibility. Hosting appears to be on cloud infrastructure, likely AWS, with content delivered via a dedicated CDN. The site demonstrates good mobile optimization and accessibility features, alongside solid SEO practices. From a security perspective, the site implements several important HTTP security headers and uses secure cookie flags. However, a critical vulnerability is the absence of a valid SSL/TLS certificate and the lack of HTTPS protocol support, which severely impacts the security posture. No explicit security or incident response policies are publicly available, and advanced TLS features like OCSP stapling and session resumption are not implemented. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, while the University of Leeds website excels in content quality, user experience, and privacy compliance, it faces significant security risks due to missing SSL/TLS configuration. Addressing these security gaps is essential to protect user data and maintain trust. Strategic improvements in security infrastructure and transparency around incident response would enhance the site's resilience and credibility.

E

EKE-Yhtiöt

eke.fi

35

EKE-Yhtiöt is a Finnish company specializing in real estate development and leasing, as well as advanced train information systems technology. The company holds a strong market position as a world-leading supplier in the transportation technology sector and a reputable real estate developer in Finland. Their website reflects a medium-sized enterprise with a clear business model focused on residential and commercial property development alongside technology innovation. The site supports multiple languages, indicating an international target audience. Technically, the website is built on WordPress with modern SEO tools and consent management but suffers from slow performance and lacks HTTPS security, which is a critical concern. Security posture is weak due to the absence of a valid SSL certificate, no security headers, and no advanced TLS protocols, exposing users to potential risks. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. Overall, the website is professional but requires urgent security improvements to protect user data and enhance trust.

E

ETM professional control GmbH

etm.at

40

ETM professional control GmbH is a medium-sized Austrian company specializing in the development of the SIMATIC WinCC Open Architecture SCADA system, serving critical industrial sectors such as energy, transportation, and building automation. As a wholly owned subsidiary of Siemens AG, ETM benefits from strong corporate backing and a global partner network, positioning it as a reputable player in industrial automation software. The website reflects a professional and consistent brand presence with detailed company history and management information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as Adobe DTM and Google Analytics. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture, exposing users to risks and reducing trust. Security headers are present but insufficient without proper TLS implementation. Privacy and cookie policies are linked to Siemens global pages, indicating good compliance with GDPR and related regulations. Overall, the site is content-rich and credible but requires urgent security improvements to protect users and enhance trust.

I

International Jet Management GmbH

ijm.at

37

International Jet Management GmbH is a specialized aviation management company based in Austria, providing aircraft management, charter services, and fleet operations primarily targeting business aviation clients. The company holds recognized certifications such as IS-BAO and has approvals from aviation authorities, positioning it as a credible player in the transportation sector. The website reflects a professional business presence with clear service offerings and contact information. Technically, the website is built on WordPress with common libraries like jQuery and Modernizr, and uses Yoast SEO for optimization. However, the site lacks HTTPS, which is a significant security concern. The absence of SSL/TLS encryption exposes users to potential data interception risks. Security headers are minimal, and no advanced security policies or incident response contacts are published. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security posture to protect user data and enhance trust.

The website represents the Landeskrankenhaus Feldkirch, a leading healthcare institution in Vorarlberg, Austria, serving as a regional specialty hospital and academic teaching hospital. It provides comprehensive medical services, education, research, and social care, targeting patients, visitors, and healthcare professionals. The organization is well-established with a history dating back to 1972 and operates under the Vorarlberger Krankenhaus-Betriebsgesellschaft.m.b.H. umbrella. Technically, the website uses a modern stack including nginx, Google Analytics, Matomo, and CookieHub for privacy compliance. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, performance is slow, and no CMS or advanced frameworks were detected. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS support, exposing users to risks. While some security headers like HSTS are present, critical improvements are needed to secure communications and protect user data. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security enhancements to protect visitors and maintain compliance. Strategic recommendations include implementing HTTPS, enhancing security headers, and continuous security audits.

Advance International Media Limited operates as a media planning and advertising agency focused on placing brands across influential media titles internationally. The company offers services including digital planning and advertising, programmatic advertising, content marketing, and print advertising. Their market position is that of a small, specialized media agency with a presence primarily in the UK and partnerships across Europe. The website content is professionally presented with good navigation and relevant business information targeting brands and advertisers seeking international media exposure. Technically, the website is built on WordPress using common libraries such as jQuery and Slick Carousel, hosted on 1&1 IONOS DNS infrastructure. However, the site lacks HTTPS, which is a critical security shortfall. Security headers are minimal and no advanced security policies or incident response contacts are disclosed. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website demonstrates moderate business credibility but requires significant improvements in security and privacy compliance to meet modern standards.

S

Standortagentur Tirol GmbH

standort-tirol.at

21

Standortagentur Tirol GmbH is a regional economic development agency based in Tirol, Austria, focused on fostering innovation, technology, and sustainable growth for businesses, research institutions, and municipalities. The company operates as part of the Lebensraum Tirol Holding and offers a broad range of services including support for digitalization, funding, cluster networking, and internationalization. Their website reflects a professional and well-structured digital presence targeting multiple stakeholder groups with relevant content and resources. Technically, the site runs on Microsoft IIS with ASP.NET and uses common JavaScript libraries and marketing tools such as Google Tag Manager and Cookiebot for consent management. However, a critical security weakness is the absence of HTTPS and a valid SSL certificate, exposing users to potential risks. Privacy compliance is addressed with visible policies and consent mechanisms, but incident response and security policies are not evident. Overall, the site is credible and functional but requires urgent security improvements to protect user data and enhance trust.

H

Hochschule Neubrandenburg

hs-nb.de

39

Hochschule Neubrandenburg is a German public university of applied sciences offering a range of academic programs, research initiatives, and continuing education services primarily focused on agriculture, health, social work, and landscape sciences. The website serves students, prospective students, researchers, and regional partners with comprehensive information and resources. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. However, the absence of HTTPS/SSL is a critical security gap that undermines user trust and data protection. Security headers are well configured but cannot compensate for the lack of encryption. The site lacks cookie consent mechanisms and explicit security or incident response policies. Overall, the website is professional and content-rich but requires urgent security improvements to meet modern standards.

B

Borealis GmbH

borealisgroup.com

34

Borealis GmbH is a leading global provider of advanced and sustainable polyolefin and base chemical solutions, with a strong focus on innovation and circular economy principles. Operating in over 120 countries and headquartered in Vienna, Austria, the company employs approximately 6,000 people and reported a net profit of EUR 2.1 billion in 2022. Their business model centers on manufacturing and supplying high-quality polymer products and base chemicals to diverse industries including energy, consumer products, mobility, healthcare, and infrastructure. Technically, the website employs modern JavaScript libraries such as jQuery, Algolia Search, and Visual Website Optimizer, and is hosted on Amazon CloudFront CDN, indicating a mature digital infrastructure. The site is well-structured with comprehensive metadata and SEO optimizations, providing a good user experience and mobile responsiveness. However, performance metrics are not available. From a security perspective, the site has several security headers implemented, but critically lacks a valid SSL certificate and proper HTTPS configuration, exposing it to significant risks. TLS protocols are disabled, and advanced security features like OCSP stapling and session resumption are missing. Privacy and compliance policies are well documented, including GDPR-compliant privacy and cookie policies, terms of service, and a responsible disclosure policy. Overall, while the business credibility and content quality are high, the lack of HTTPS and SSL is a critical vulnerability that severely impacts the security posture and overall risk profile. Strategic remediation of SSL/TLS issues is urgently recommended to protect user data and maintain trust.

L

LOOP New Media GmbH

agentur-loop.com

40

LOOP New Media GmbH is a global digital agency specializing in digital brand building, technology, and content production for leading consumer brands. With over 400 talents across 7 offices worldwide, the company serves a diverse portfolio of high-profile clients such as Puma, Red Bull, Audi, and Breitling. The website reflects a professional and consistent brand image targeting enterprises seeking comprehensive digital marketing and content services. Technically, the site is built on Craft CMS, uses Cloudflare for hosting and CDN, and integrates Google Tag Manager for analytics. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap. Security headers are partially implemented, but modern TLS protocols and HSTS are missing, reducing the overall security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Contact information is primarily via email with multiple office locations listed, but no phone numbers are explicitly provided. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

C

Chemetall GmbH

chemetall.com

34

Chemetall GmbH is a well-established global leader in surface treatment chemical solutions, operating as a subsidiary of BASF. The company serves industrial clients across multiple sectors including aerospace, automotive, and manufacturing, providing advanced chemical technologies and laboratory services. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B industrial customers. Technically, the site uses legacy JavaScript libraries and lacks modern performance optimizations, with slow loading times and basic mobile responsiveness. Security posture is weak due to the absence of HTTPS and minimal security headers, exposing users to potential risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data confirms a mature and legitimate domain with consistent registration details. Overall, the site demonstrates solid business credibility but requires urgent improvements in security and privacy to meet modern standards.

T

TEST-FUCHS GmbH

test-fuchs.com

40

TEST-FUCHS GmbH is a well-established manufacturing company specializing in test systems and aerospace systems, with a history dating back to 1946. The company has grown into a medium-sized enterprise with a global presence and over 600 employees. Their website reflects a professional corporate identity with clear navigation and relevant business content targeting industrial B2B clients. Technically, the website is built on Drupal CMS with modern JavaScript libraries, but lacks HTTPS security, which is a significant risk. The absence of a valid SSL certificate and modern TLS protocols exposes visitors to potential data interception and undermines trust. Privacy compliance is addressed with a cookie consent mechanism and a basic GDPR-compliant privacy policy. However, no explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are present. Overall, the website is functional and professional but requires urgent security improvements to protect users and enhance credibility.

L

Latvijas Reklāmas asociācija

lra.lv

40

Latvijas Reklāmas asociācija (LRA) is a Latvian non-profit organization representing advertisers, media, and agencies. The website serves as an informational portal providing member services, industry statistics, educational seminars, and ethical guidelines. The target audience includes advertising professionals and media stakeholders in Latvia. The organization maintains an active online presence with social media integration and contact channels. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Google Analytics but suffers from slow performance and lacks modern security implementations. Critically, the site does not have a valid SSL certificate, exposing visitors to security risks and undermining trust. The absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Overall, the website is functional and professional in content but requires significant improvements in security and privacy compliance to meet modern standards.

D

Danmarks Statistik

dst.dk

40

Danmarks Statistik is the central authority responsible for collecting, processing, and publishing official statistics about Danish society. As a government entity, it holds a strong market position as the authoritative source of statistical data in Denmark, serving researchers, government agencies, businesses, and the general public. The website provides comprehensive statistical data, thematic articles, and support services for data reporters and customers. Technically, the site employs modern JavaScript libraries such as jQuery and uses Monsido for accessibility and analytics. However, the website suffers from a critical security weakness due to the absence of a valid SSL certificate and lack of HTTPS, which significantly impacts its security posture. Other security features like HSTS, DNSSEC, and security headers are also missing, indicating room for improvement in securing the digital infrastructure. Privacy compliance is well addressed with comprehensive privacy and cookie policies, and the site demonstrates good mobile optimization and accessibility. Overall, while the business credibility and content quality are high, the technical and security shortcomings reduce the overall risk profile and user trust. Strategic improvements in SSL/TLS implementation and security best practices are recommended to enhance the site's security and user confidence.

N

Norsk institutt for bioøkonomi

nibio.no

60

NIBIO (Norsk institutt for bioøkonomi) is a large Norwegian government research institute specializing in bioeconomy, agriculture, environment, and resource management. With approximately 750 employees, it holds a strong market position as a key knowledge provider in sustainable food production, plant health, forestry, and agricultural economics. The website reflects a mature and professional organization with comprehensive content targeting researchers, policymakers, and agricultural stakeholders. Technically, the site employs modern analytics (Matomo), consent management (Cookiebot), and uses frameworks like Bootstrap and Handlebars, hosted likely on Uninett infrastructure. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS, which is a critical vulnerability. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained but urgently needs to address its SSL/TLS configuration to improve security and user trust.

A

ASDASD srl

popwifi.it

38

PopWiFi is a small Italian telecommunications company specializing in wireless internet connectivity and fiber optic services targeted at residential and business customers in select provinces of Italy. The company offers various internet plans with promotional pricing and includes VoIP telephone services as an experimental feature. The website demonstrates a consistent brand presence with customer testimonials and active social media links. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, but suffers from slow load times and lacks a valid SSL certificate, exposing users to security risks. Privacy and cookie policies are present and appear GDPR compliant, though no explicit consent mechanism is implemented. Overall, the business appears legitimate and regionally focused, but the lack of HTTPS and security headers significantly impacts its security posture.

A

ASDASD srl

asdasd.it

22

ASDASD srl is a small Italian telecommunications wholesale provider specializing in IP transit, co-location, DSL, and Layer-2 services. The company targets business and carrier customers in Italy and Europe, offering a range of connectivity and hosting solutions including POPWIFI and FiberSurf. The website presents a professional image with relevant content and clear service descriptions, supported by social media presence and physical contact information. Technically, the website runs on outdated Apache and PHP versions without HTTPS, which significantly impacts security posture. The absence of a valid SSL certificate and modern security headers exposes the site to risks and reduces trustworthiness. Privacy compliance is minimal, with a privacy policy and cookie policy present but lacking active consent mechanisms. Overall, the site is functional but requires urgent security upgrades to meet modern standards and improve user trust.

A

AS Kredītinformācijas Birojs

kib.lv

40

AS Kredītinformācijas Birojs is a Latvian credit information bureau providing credit data and reporting services to individuals and businesses. The company is positioned as a trusted entity in the Latvian financial sector, supported by ISO 27001 certification and memberships in recognized organizations such as Creditinfo and the Latvian Chamber of Commerce (LTRK). Their services focus on promoting responsible lending and credit transparency. Technically, the website is built on WordPress with common libraries like jQuery and uses Cookiebot for GDPR-compliant cookie consent. The site is moderately performant and mobile-optimized, though page load times could be improved. Security posture is adequate with HTTPS and SPF/DMARC email protections, but lacks advanced SSL features like HSTS and OCSP stapling. Privacy policies and terms of service are clearly presented and GDPR compliant. Overall, the website reflects a professional and credible business with room for technical and security enhancements.

C

Confederazione Boccistica Internazionale

cbi-prv.org

40

The Confederazione Boccistica Internazionale (CBI) is an international sports federation dedicated to the bocce sport. The organization provides comprehensive information about bocce events, news, rules, and membership. The website serves as a hub for bocce enthusiasts, players, and affiliated organizations worldwide, positioning itself as a key international governing body in this niche sport. The business model is non-profit, focusing on sport promotion and community engagement. Technically, the website is built on the 3WTURK CMS platform and uses legacy technologies such as jQuery and FlexSlider. While the site offers rich content and a consistent brand experience, it suffers from slow load times and basic mobile optimization. The absence of modern frameworks and performance optimizations indicates room for technical modernization. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability. Although SPF and DMARC records are configured for email security, the lack of HTTPS and security headers exposes users to risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Overall, the site is functional and content-rich but requires urgent improvements in security and privacy compliance to protect users and enhance trust. Performance optimizations and modernization of the technology stack would further improve user experience and operational resilience.

I

Interferenza s.r.l.

newcart.it

30

Newcart.it is a professional Italian e-commerce platform operated by Interferenza s.r.l., offering turnkey online store solutions including domain, hosting, payment integration, and marketing support. The platform targets small to medium businesses seeking easy and rapid e-commerce deployment with additional features like dropshipping and marketplace synchronization. Technically, the site uses a custom PHP-based platform with Apache server, Bootstrap, jQuery, and FontAwesome, but suffers from outdated libraries and lacks a valid SSL certificate, which critically impacts security. Privacy and cookie policies are well implemented and GDPR compliant, with active user consent mechanisms. The site demonstrates good content quality, clear navigation, and mobile optimization, supported by customer testimonials and a visible company address enhancing trust. However, the absence of HTTPS and modern security headers significantly lowers the security posture, requiring urgent remediation. Overall, the site is functional and credible but needs critical security improvements to ensure safe user interactions and compliance with best practices.

H

Hiteco

hiteco.net

59

Hiteco is a specialized manufacturer focused on high technology electromechanical components for machine tool manufacturers, including electrospindles, birotary heads, boring units, and aggregates. The company targets industrial clients requiring precision components and offers a comprehensive product catalog and customer service. The website is built on a Pimcore CMS platform with a modern tech stack including Apache, PHP, jQuery, and Bootstrap, but suffers from critical security shortcomings due to lack of a valid SSL certificate and disabled TLS protocols. Privacy compliance is well addressed through iubenda policies and cookie consent mechanisms. Overall, the site presents a professional business image but requires urgent security improvements to protect users and enhance trust.

S

SCM Group

cms.it

58

SCM Group operates the website cms.it, representing CMS S.p.A., a leading manufacturer of advanced machining centers, thermoforming machines, and cutting systems. Founded in 1969 and headquartered in Italy, the company serves diverse industrial sectors including aerospace, automotive, marine, and construction. The website reflects a mature business with comprehensive content, clear branding, and a global market presence. Technically, the site uses a Pimcore CMS on an Apache server with PHP 7.1 and integrates modern JavaScript libraries and consent management tools. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap, significantly reducing the site's security posture. Security headers are well configured but cannot compensate for the lack of encryption. Privacy compliance is strong, with detailed policies managed via Iubenda and GDPR adherence evident. Contact information is clearly presented, supporting business credibility. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.

O

One Srl

oneinfo.it

29

One Srl is an Italian credit management and debt recovery agency based in Treviso, operating nationally with over 35 years of experience. The company offers a range of services including contractual consultancy, courtesy calls, out-of-court and judicial debt recovery, and credit assignment solutions. The business is positioned as a trusted and certified player in the finance sector, leveraging IT solutions for client transparency and efficiency. Technically, the website uses a traditional LAMP stack with Apache and PHP 5.6, complemented by modern front-end libraries and Google marketing tools. However, the absence of HTTPS and use of outdated PHP versions represent significant security weaknesses. The company maintains comprehensive legal and privacy documentation, demonstrating good privacy compliance and business credibility. Overall, the website is professional and content-rich but requires urgent security upgrades to meet modern standards.

BHW Bausparkasse AG is a well-established financial institution specializing in mortgage and loan services primarily for the Italian market. The company operates with a mature domain registered since 1999 and offers a range of services including credit management and administrative support, some of which are outsourced to reputable partners like Cerved Credit Management Group. The website provides clear contact information and legal references, supporting its credibility in the finance sector. Technically, the website employs legacy technologies such as jQuery and Modernizr and demonstrates moderate performance with good mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. The lack of security headers and cookie consent mechanisms further highlights compliance and security gaps. From a security perspective, while SPF and DMARC records are properly configured, the missing HTTPS and security headers expose users to potential risks. The domain's WHOIS data is consistent with the business claims, showing a low expiry risk and no privacy protection, which supports legitimacy. Overall, the site requires urgent security improvements to protect user data and comply with privacy regulations. Strategic recommendations include implementing HTTPS with a valid SSL certificate, enabling security headers and HSTS, introducing cookie consent mechanisms to comply with GDPR, and enhancing domain protection. These measures will improve trust, security, and compliance, aligning the website with industry best practices.

A

ASA Group

gruppoasa.com

30

ASA Group is a well-established manufacturer specializing in metal packaging for the food and chemical sectors, holding a strong market position as the largest independent group in Italy and the fourth largest in Europe. The company operates multiple production plants and subsidiaries across Italy, Switzerland, and the UK, with headquarters in San Marino. Their website reflects a professional business presence with clear branding and relevant content targeting industrial clients requiring metal packaging solutions. Technically, the website is built on Pimcore CMS with modern frontend technologies and integrates privacy management tools like Iubenda and Google Tag Manager for analytics and compliance. However, the absence of HTTPS and a valid SSL certificate represents a critical security gap, exposing users and business operations to potential risks. Security headers are minimal, and no advanced security policies are implemented, indicating room for significant improvement in security posture. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, the website demonstrates good business credibility and content quality but requires urgent security enhancements to protect data and build user trust.

I

Independent Agent Giving

agentgiving.com

58

Independent Agent Giving is a community-focused platform supporting independent insurance agents affiliated with Liberty Mutual and Safeco Insurance. The website promotes charitable giving, volunteerism, and awards programs to recognize agents' community contributions. It serves a niche market of insurance agents seeking to deepen their social impact and community engagement. The site is moderately sized and professionally branded with consistent messaging and trust signals linked to its parent companies. Technically, the site is built on WordPress and hosted on Pantheon, utilizing modern analytics and monitoring tools such as Google Tag Manager and New Relic. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. Security headers are present but incomplete, and no cookie consent mechanism is detected, indicating partial privacy compliance. Overall, the website offers good content quality and user experience but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

V

Vysoké učení technické v Brně

zvut.cz

40

Vysoké učení technické v Brně (Brno University of Technology) operates the website zvut.cz as a news portal focused on university-related news, research, and events. The site targets students, faculty, researchers, and the general public interested in academic and technological developments. The university is a large, well-established educational institution in the Czech Republic with a strong market position in technical education. Technically, the website uses a custom CMS with technologies such as nginx, jQuery, Bootstrap, and Google Tag Manager. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are present but insufficient to compensate for the lack of proper TLS encryption. Privacy and cookie policies are not found, indicating potential compliance gaps. Contact information is limited to an email and physical address in the footer, with no phone numbers or dedicated contact forms. Overall, the site is professionally designed with good content relevance and navigation but requires urgent improvements in security and privacy compliance.

E

ESCP Business School

escpeurope.eu

40

ESCP Business School is a prestigious, top-ranked European business school established in 1819, offering a wide range of degree programs including bachelor, master, MBA, executive education, and doctoral programs across six European campuses. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting students and professionals seeking business education. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager and Consent Manager. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which significantly impacts the overall security score. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS implementation to secure user data and improve trust.

E

Excelia Group

excelia-group.com

64

Excelia Group is a reputable French higher education institution offering a wide range of undergraduate and postgraduate programs in business, tourism, communication, and related fields. Founded in 1988 and co-founded by regional chambers and councils, it holds prestigious triple accreditation and ranks well internationally. The website reflects a mature digital presence with a comprehensive program overview, multilingual support, and strong branding. Technically, the site is built on Drupal with modern libraries and hosted behind Cloudflare, though performance could be improved. Security posture is solid with HTTPS and SPF/DMARC email protections, but lacks HSTS and DNSSEC. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, Excelia demonstrates strong business credibility and digital maturity.

E

Excelia Group

excelia-group.fr

40

Excelia Group is a well-established French higher education institution founded in 1988, offering a broad portfolio of programs across business, tourism, communication, real estate, health, and languages. It holds prestigious triple accreditation (EQUIS, AACSB, AMBA) and is recognized in global rankings, positioning it as a reputable player in the education sector. The website reflects a professional and content-rich digital presence, targeting students, parents, professors, and corporate partners with comprehensive program details and support services. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates marketing and analytics tools such as Matomo and Crisp chat. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS enforcement, which undermines user trust and data security. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site demonstrates strong business credibility and user engagement but requires urgent security improvements to protect users and enhance trust.

U

Universitätsklinikum Hamburg-Eppendorf

uke.de

40

The Universitätsklinikum Hamburg-Eppendorf (UKE) is a leading European university hospital specializing in healthcare, research, and education. The website reflects a comprehensive digital presence with extensive information about clinics, institutes, research programs, patient services, and educational offerings. The site targets patients, medical professionals, researchers, and students, positioning UKE as a major healthcare and research institution in Germany. Technically, the site uses established libraries like jQuery and Modernizr, and employs Matomo for privacy-conscious analytics. However, the absence of a valid SSL certificate and modern TLS protocols significantly impacts the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The site demonstrates high professionalism and trustworthiness but requires urgent improvements in security infrastructure to protect user data and enhance trust.

N

NoStress Commerce s.r.o.

nostresscommerce.cz

40

Koongo, operated by NoStress Commerce s.r.o., is a mature SaaS platform specializing in product feed management and marketplace integrations for e-commerce sellers. The company offers extensive integrations with over 500 sales channels and supports numerous e-commerce platforms, positioning itself as a comprehensive solution for online sellers seeking to expand their marketplace presence. The website content is professionally designed, rich in detail, and targets online sellers and businesses requiring automated order and inventory synchronization. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Intercom, hosted on Forpsi infrastructure. However, the absence of a valid SSL certificate and lack of TLS protocol support represent critical security weaknesses. While security headers and content security policies are partially implemented, the site’s security posture is significantly impacted by the missing HTTPS, which is a fundamental requirement for secure web operations. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR alignment. Overall, the site demonstrates strong business credibility and user experience but requires urgent security improvements to protect user data and maintain trust.

K

Koongo

koongo.dk

40

Koongo is a Danish-based SaaS company specializing in product feed management and multi-channel marketplace integration for online sellers. The platform supports over 500 sales channels including Amazon, eBay, and Google Shopping, enabling sellers to synchronize product data and orders automatically. Koongo positions itself as a cost-effective and user-friendly solution with extensive e-commerce platform integrations and a strong customer support reputation. The website is professionally designed, multilingual, and includes comprehensive business and contact information. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, but suffers from a critical lack of valid SSL/TLS configuration, exposing it to security risks. Security headers are partially implemented, and privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy. Overall, Koongo demonstrates a mature digital presence but must urgently address SSL issues to improve security posture and trust.

K

Koongo

koongo.gr

40

Koongo is a medium-sized e-commerce SaaS provider specializing in product feed management and marketplace integration, enabling online sellers to automate synchronization of product data and orders across multiple sales channels. The company is positioned as a trusted provider with a comprehensive service offering, including integrations with major marketplaces like Amazon and eBay, and supports over 500 sales channels. Technically, the website is built on WordPress with modern analytics and marketing tools, but lacks a valid SSL certificate, which impacts security posture significantly. Security headers and cookie consent mechanisms are properly implemented, reflecting good privacy compliance. However, the absence of HTTPS and modern TLS protocols is a critical vulnerability that must be addressed to improve trust and security. Overall, the site is content-rich, professionally designed, and provides clear business and contact information, supporting a positive user experience and business credibility.

K

Koongo

koongo.es

40

Koongo is a SaaS platform specializing in product feed management and multi-channel marketplace integration for online sellers. The company offers extensive integrations with over 500 sales channels including Amazon, eBay, and Google Shopping, enabling sellers to synchronize inventory, automate order processing, and optimize product data. Positioned as a reliable and scalable solution, Koongo targets e-commerce businesses seeking to expand their online presence efficiently. The website is professionally designed with clear navigation and multilingual support, primarily in Spanish, and includes trust signals such as customer testimonials and third-party review badges. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security shortfall that undermines user trust and data protection. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy. Overall, Koongo demonstrates a solid business and technical foundation but requires urgent improvements in security infrastructure to meet industry standards.