Security Directory

C

Controller Institut s.r.o.

controlling.cz

24

Controller Institut s.r.o. is a well-established Czech education provider specializing in finance and controlling training, offering seminars, certified cycles, online courses, corporate training, and mentoring. The company targets finance professionals and controllers seeking practical and certified education. The website reflects a mature business with 30 years of market presence and a strong focus on quality content and professional services. Technically, the site uses a custom CMS with popular JavaScript libraries and marketing tools but lacks modern security measures such as HTTPS, which is a critical vulnerability. The security posture is weak due to the absence of SSL/TLS and related security headers, exposing users to risks. Privacy compliance is partial, with no active cookie consent mechanism despite tracking scripts in use. Overall, the business credibility is high, supported by consistent WHOIS data and clear contact information. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect users.

K

Kammer für Arbeiter und Angestellte für Wien

akwien.at

40

The website akwien.at represents the Kammer für Arbeiter und Angestellte für Wien, a government-related non-profit organization advocating for workers' rights and social services in Vienna, Austria. The site offers comprehensive information and services including legal advice, consumer protection, educational resources, and digitalization funding. It targets employees and workers in Vienna, providing a rich content experience with clear navigation and strong branding. Technically, the site is built on a Gentics Portal CMS with a modern tech stack including jQuery, Bootstrap, Matomo Analytics, and Usercentrics for consent management. Hosting is provided by Anexia. While the site is mobile optimized and accessible, performance metrics indicate slow loading, and the SSL/TLS configuration is currently invalid, which is a critical security concern. Security posture is moderate with several security headers implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high due to consistent branding, official contact information, and alignment with WHOIS data. Overall, the site is a professional and trustworthy resource for workers in Vienna but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

Lohmann & Rauscher USA Inc. is a prominent international supplier specializing in medical devices and hygiene products, targeting healthcare professionals and patients. The company offers a broad portfolio including compression therapy, wound care, casting materials, and educational items. Their market position is strong, supported by recent acquisitions such as Unisurge International Ltd. and the teledermatology startup OnlineDoctor, indicating active growth and innovation. The website is professionally designed with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, but performance data is lacking and the site is currently not secured with HTTPS, which is a critical security gap. Security posture is weak due to the absence of a valid SSL certificate and lack of advanced security headers or policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is high given the detailed contact information, structured data, and active corporate communications. Overall, the site requires urgent security improvements to protect user data and enhance trust.

S

Softsolution GmbH

softsolution.at

21

Softsolution GmbH, in partnership with LiteSentry LLC, operates as a leading provider of automated quality assurance systems for the glass industry. Their solutions focus on precision inspection technologies that detect defects in glass manufacturing, enhancing production efficiency and product quality. The company maintains a strong global presence with over 3,000 systems installed worldwide and offices in Austria and the USA. Their website reflects a professional and comprehensive digital presence, supporting multiple languages and showcasing extensive product and project information. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Slick Slider, and Borlabs Cookie for privacy management. Hosting is provided via Cloudways with Cloudflare CDN integration. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing the site to potential risks. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Security evaluation reveals critical issues including no HTTPS support, no HSTS, and no OCSP stapling, which are essential for secure communications. Despite these, the site employs some best practices like HttpOnly and Secure cookie flags and uses a reputable CDN. The overall risk is moderate but requires urgent remediation of SSL/TLS issues to protect user data and maintain trust. Strategically, the company should prioritize implementing a valid SSL certificate and modern security protocols, enhance incident response visibility, and continue leveraging their strong market position and trust indicators to maintain competitive advantage.

S

SILVERLINE

silverline24.de

35

Silverline24.de is a German-based manufacturer and retailer specializing in kitchen appliances, particularly kitchen ventilation products such as wall-mounted hoods, island hoods, cooktop extractors, and related accessories. The company holds a recognized market position supported by industry awards like the Plus X Award for Fachhandelsmarke des Jahres 2020 and membership in the Arbeitsgemeinschaft Die Moderne Küche e.V. (AMK). Their website targets kitchen appliance buyers, retailers, and partners primarily in Germany and Europe, offering detailed product information, customer service, and partner portals. Technically, the website is built on WordPress with WooCommerce and uses modern plugins for SEO, cookie consent, and performance optimization. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Other security best practices such as HSTS, DMARC, DNSSEC, and security headers are missing or not configured. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

G

Gelateria Romana - La Romana Srl

romanagroup.com

40

Gelateria Romana - La Romana Srl is a well-established Italian gelateria business founded in 1947, specializing in traditional gelato and pastry products with a franchising business model. The company targets entrepreneurs interested in franchising opportunities and consumers seeking quality artisanal gelato. The website reflects a consistent brand with good content quality and clear business information. Technically, the site uses a proprietary CMS (TITANKA!) with older JavaScript libraries and Bootstrap 3.2.0, indicating moderate digital maturity. However, the lack of HTTPS and modern TLS protocols is a critical security gap. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.

Royal Avebe is a well-established cooperative specializing in the production and supply of potato-based ingredients such as potato starch and protein. With a history dating back to 1919, the company serves diverse markets including food, industrial applications, and animal nutrition. The website reflects a mature business with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and tracking tools but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Privacy compliance is well addressed with detailed policies and a cookie consent mechanism. Contact information and social media presence are clearly provided, enhancing business credibility.

G

GIG Fassaden GmbH

gig.at

32

GIG Fassaden GmbH is a medium-sized Austrian company specializing in premium metal and glass facade solutions for international architecture projects. Their business model focuses on B2B services including design, engineering, prototyping, manufacturing, installation, maintenance, and renovation of building envelopes. The company maintains a strong market position with a consistent brand presence and comprehensive service offerings. Technically, the website is built on WordPress with modern libraries and plugins, optimized for SEO and mobile responsiveness. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing the site to risks and undermining user trust. Privacy policies and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

MS Design GmbH is a medium-sized manufacturing company based in Tirol, Austria, specializing as a system supplier to the automotive industry. Founded in 1983, the company offers comprehensive services from design and prototyping to production start, emphasizing quality, innovation, and customer satisfaction. Their market position is supported by multiple certifications including IATF 16949 and ISO standards, reflecting a strong commitment to quality and environmental management. Technically, the website is built on TYPO3 CMS with a modern but basic technology stack including jQuery and various UI libraries. While the site is well-structured, mobile-optimized, and SEO-friendly, it lacks HTTPS support and a valid SSL certificate, which is a critical security gap. The hosting environment appears to be a Plesk-managed Apache server without advanced security configurations such as HSTS or DNSSEC. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. Although some security headers are present and email obfuscation is implemented, the lack of encryption exposes users to risks. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but incident response and vulnerability disclosure information are missing. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate trust and compliance.

I

IC Resources

ic-resources.com

40

IC Resources is a well-established technology recruitment agency specializing in deep tech sectors such as software, semiconductor, electronics, and manufacturing. Founded in 1999, it operates globally with offices in the UK, Germany, and the USA. The company connects innovative organizations with highly skilled technology professionals, offering services including job search assistance, CV advice, and talent acquisition for clients. The website reflects a professional and comprehensive digital presence with rich content and client testimonials, positioning IC Resources as a trusted partner in the technology recruitment market. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Contact Form 7, supported by a PHP 8.2 backend and hosted via StackCDN. While the site is mobile-optimized and SEO-friendly, performance metrics are not available, and accessibility is basic. The absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks. Security headers are present but insufficient to compensate for the lack of encryption. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the security posture is weak due to missing HTTPS and TLS protocols, which should be addressed urgently. The business credibility is strong, supported by consistent WHOIS data and transparent contact information. Strategic recommendations include immediate SSL/TLS implementation, enhanced security headers, and improved privacy and cookie consent mechanisms to align with GDPR requirements and user trust expectations.

B

BILTON LEDON Technology GmbH

biltongroup.com

40

BILTON LEDON Technology GmbH operates under the brand Better Light, specializing in high-quality LED lighting solutions manufactured in Austria. The company leverages its expertise from established LED brands BILTON and LEDON to offer a broad portfolio including LED strips, profiles, power supplies, and lighting management systems. Their market position is solidified by a mature domain and professional online presence targeting architects, industrial clients, and lighting professionals. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes Google Analytics for user tracking. However, performance is slow and security headers are minimal, indicating room for improvement in technical optimization and security hardening. The SSL certificate is valid but nearing expiration, and no advanced security features like HSTS or OCSP stapling are enabled. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site demonstrates good business credibility and trustworthiness but would benefit from enhanced security practices and performance optimization.

Jumio is a well-established enterprise technology company specializing in AI-powered identity verification, KYC, and AML compliance solutions. The company holds a strong market position with a comprehensive suite of services targeting businesses that require secure and compliant customer onboarding and fraud prevention. Their website reflects a mature digital presence with extensive content, multi-language support, and strong branding. Technically, the site is built on WordPress and leverages modern marketing and analytics tools, but suffers from slow performance and lacks a valid SSL certificate, which critically impacts security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the business credibility is high, supported by client logos, awards, and detailed product information.

W

WunderLand Group

wunderlandgroup.com

37

WunderLand Group is a mature, medium-sized staffing solutions firm specializing in digital, creative, and marketing workforce services. The company offers a broad range of expertise including UX design, content editing, front-end development, and project management. Their market position is supported by strong client and consultant testimonials and industry awards such as the Best of Staffing®. Technically, the website is built on WordPress with Elementor and uses a variety of modern JavaScript libraries and marketing tools, hosted on WP Engine with Cloudflare CDN. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and undermining trust. Privacy compliance is partially addressed with a cookie consent mechanism, but GDPR compliance is not clearly demonstrated. Overall, the business credibility is solid, but the security weaknesses require urgent remediation.

W

Weitzer Parkett Vertriebs GmbH

weitzer-parkett.com

40

Weitzer Parkett Vertriebs GmbH is a well-established Austrian family-owned manufacturer and distributor of parquet flooring and wooden stairs, with a history dating back to 1831. The company holds a leading market position in Austria and is recognized as one of the top parquet manufacturers in Europe. Their product portfolio includes innovative parquet solutions such as Pflegefrei-Parkett, Gesund-Parkett, and Flüster-Parkett, emphasizing sustainability and ecological responsibility. The website reflects a mature digital presence with comprehensive product information, multi-language support, and strong branding consistency. Technically, the website is built on WordPress with WooCommerce, utilizing modern libraries and plugins such as jQuery, Slick Slider, and Borlabs Cookie for cookie management. It is hosted behind Cloudflare, providing CDN and security services. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, impacting user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with explicit consent mechanisms. From a security perspective, while the site benefits from Cloudflare's protection and uses reCAPTCHA on forms, the lack of HTTPS and modern TLS protocols, as well as missing security headers like HSTS, reduce its security posture. No explicit security policy or incident response information is found, which could be improved to enhance transparency and readiness. Overall, the website is professional, content-rich, and business-credible but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include implementing a valid SSL certificate, enabling HTTPS, and enhancing security headers and protocols.

I

In The Headroom

intheheadroom.com

22

In The Headroom is a small Austrian design studio specializing in brand culture advisory and design solutions. The company targets businesses seeking to establish or refine their brand culture through creative design production and implementation. Their website is professionally designed using WordPress with SEO optimization and a cookie consent mechanism to comply with GDPR. However, the site lacks HTTPS support, which is a critical security gap. The technical infrastructure includes common web technologies and plugins but shows moderate performance. Security posture is weak due to missing SSL certificates and security headers, exposing visitors to potential risks. Contact information is clearly provided, enhancing business credibility. Strategic improvements in security and SSL implementation are recommended to elevate trust and compliance.

D

DAXNER GmbH

daxner.at

40

DAXNER GmbH is a medium-sized Austrian manufacturing company specializing in bulk material technology and engineering solutions for various industrial sectors including food, chemical, and non-food industries. The company has a strong market position as an internationally leading provider with a comprehensive portfolio of products and services such as engineering, production, assembly, and control technology. Their website reflects a professional and well-structured digital presence with excellent content quality and SEO optimization. Technically, the site is built on WordPress with modern plugins and scripts, but lacks a valid SSL certificate and proper HTTPS configuration, which is a significant security concern. Security headers are well implemented, but the absence of TLS protocols and session resumption reduces the overall security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information and social media presence enhance business credibility. Overall, the website is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and improve trust.

BEST - Bioenergy and Sustainable Technologies GmbH is a medium-sized Austrian research organization specializing in sustainable bioenergy technologies. The company focuses on developing biomass-based biorefineries, digital methods for energy systems, and sustainable supply and value chains. Their market position is that of a technological leader and research center in Austria and Central Europe, serving research institutions, industry partners, and policymakers. The website provides comprehensive information on projects, publications, and company offices, targeting stakeholders interested in renewable energy and bioeconomy. Technically, the website uses a CakePHP CMS with Bootstrap and common JavaScript libraries but lacks HTTPS, which is a critical security gap. The site is mobile-optimized and has good content quality and navigation but suffers from slow performance and basic SEO and accessibility. Security posture is weak due to missing SSL/TLS and modern security headers, though session cookies are set with secure flags and X-Frame-Options is enabled. Privacy compliance is basic with a cookie consent banner and a privacy policy PDF in German. Contact information is clearly presented with multiple Austrian office locations and verified company emails and phone numbers. Analytics tools include Google Analytics and Matomo, indicating moderate user tracking. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance security headers.

H

Huppenkothen GmbH

huppenkothen.at

35

Huppenkothen GmbH operates a professional website focused on the sale and rental of mini and compact construction machinery, serving primarily the Austrian construction sector. The company maintains a strong market position with 42 locations and a large inventory of machines and spare parts. The website is well-designed, content-rich, and optimized for SEO and accessibility, targeting construction professionals and businesses. Technically, the site is built on WordPress with modern plugins and frameworks, but lacks HTTPS, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a mature digital presence but requires urgent security improvements to protect user data and trust.

Silberball Brand Management GmbH is a specialized consulting and creative agency focused on brand management, strategy, and digital innovation primarily serving companies in the DACH region. Established in 2003, the company offers a comprehensive suite of services including strategic brand development, branding, cultural consulting, business model strategy, digital transformation, and brand experience. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of businesses seeking to enhance their brand value. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, integrating marketing and tracking tools like HubSpot and AutopilotHQ. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. While privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, the lack of security headers and modern TLS protocols presents vulnerabilities. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

R

Roland Spedition GmbH

rolsped.com

37

Roland Spedition GmbH is a well-established Austrian logistics company specializing in combined rail and intermodal transport services. With over 26 years of domain presence, the company positions itself as a leader in hinterland traffic within Austria, offering a comprehensive range of services including operating, trucking, intermodal solutions, and additional services such as customs clearance and hazardous goods transport. The website content is professionally presented in German, targeting businesses requiring efficient and climate-friendly freight transport solutions. Technically, the site is built on WordPress with common industry-standard libraries and plugins, but suffers from a lack of proper SSL/TLS configuration, which significantly impacts its security posture. The company maintains clear contact information and implements cookie consent mechanisms, reflecting basic GDPR compliance. However, no explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found.

S

Schönherr Rechtsanwälte GmbH

schoenherr.eu

24

Schoenherr Attorneys at Law is a prominent full-service law firm operating primarily in Central and Eastern Europe, providing comprehensive legal advisory services to local and international companies. The firm positions itself as a leading legal advisor in the region, offering a wide range of services including publications, newsletters, and comparative legal guides. The website reflects a professional and consistent brand image, targeting corporate clients seeking expert legal counsel. Technically, the website is built on Microsoft IIS with ASP.NET and likely uses the Umbraco CMS, incorporating modern JavaScript libraries such as Slick Slider and Isotope for enhanced user experience. However, the site lacks HTTPS support, which is a critical security deficiency. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates attention to privacy compliance, while analytics are conducted via Matomo with user consent. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

Hagleitner Hygiene International GmbH is a well-established Austrian family-owned company specializing in innovative hygiene solutions, including cleaning and disinfectant products, cosmetics, dispensers, dosing devices, and digital hygiene applications. Founded in 1971 and headquartered in Zell am See, Austria, the company operates internationally with 27 locations across 12 countries and a broad distribution network. Their market position is strong, particularly in dispenser systems and hygiene technology, supported by numerous certifications and a commitment to sustainability. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. Hosting is managed via Cloudflare CDN with Apache on Rocky Linux. However, the website suffers from a critical security flaw: the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Security-wise, while the company demonstrates compliance with multiple ISO standards and environmental certifications, the website's SSL/TLS misconfiguration is a significant vulnerability. Security headers are minimal, and no advanced protections like OCSP stapling or session resumption are implemented. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the business is credible and professionally presented online, but the lack of HTTPS is a critical risk that must be addressed immediately to protect user data and maintain trust. Strategic improvements in SSL configuration and enhanced security headers are recommended to elevate the security posture and align with best practices.

L

LEITNER

leitner-ropeways.com

40

LEITNER is a well-established company specializing in the manufacturing and supply of ropeway systems and components, serving sectors such as winter sports, urban transportation, tourism, and material transport. Founded in 1888 and part of the HTI Group, LEITNER holds a strong market position with a global footprint and a comprehensive portfolio of products and services including after-sales support and training. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Microsoft Clarity. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS support, which is a critical vulnerability. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is comprehensive and includes multiple phone numbers, emails, and forms. Overall, LEITNER's website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

S

Stieglbrauerei zu Salzburg GmbH

stiegl.at

40

Stiegl Privatbrauerei is Austria's leading private brewery with a rich heritage dating back to 1492. The company offers a broad portfolio of beer specialties, operates an online shop, and provides B2B distribution and technical services. The website reflects a mature digital presence with professional design, comprehensive content, and active marketing integrations. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with consent mechanisms, indicating good privacy awareness. Overall, the business is well-established and credible, but urgent improvements in security infrastructure are recommended.

W

Würth Oy

wurth.fi

40

Würth Oy operates a comprehensive B2B e-commerce and service platform focused on tool and accessory logistics for industrial, construction, and maintenance sectors in Finland. The company has a strong market presence with nearly 50 years of history and a wide network of centers. The website supports multiple login methods and offers extensive product and service information tailored for business customers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, managed via the FirstSpirit CMS, and integrates analytics tools like Piwik PRO and Google Tag Manager. Security headers are implemented, but a critical issue exists with an invalid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and contact information is clearly provided. Overall, the site is professional and trustworthy but requires urgent SSL remediation to ensure secure communications.

T

Talentech

reachmee.com

40

Talentech operates a mature and comprehensive recruitment and HR SaaS platform targeting growing companies and public sector organizations primarily in Sweden and the Nordic region. The platform offers integrated recruitment, onboarding, HR management, and AI-driven decision support services, positioning itself as a top-ranked solution with a large user base and extensive customer testimonials. Technically, the website is built on WordPress with common SEO and performance plugins, but suffers from a critical lack of a valid SSL certificate and slow page load times, which negatively impact security and user experience. Privacy policies and GDPR compliance are well addressed, with clear cookie and terms of service pages. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, while the business and content quality are strong, the security posture requires urgent improvement to meet modern standards.

P

Plena inclusión España

plenainclusion.org

35

Plena inclusión España is a well-established non-profit organization dedicated to advocating for the rights and inclusion of people with intellectual and developmental disabilities and their families in Spain. The organization operates a comprehensive digital presence with rich content, including news, projects, training, and support services, targeting individuals, families, and federations across Spain. Their market position is strong as a leading confederation in this sector, supported by multiple certifications and a consistent brand identity. Technically, the website is built on WordPress using Elementor and several modern plugins, providing a good user experience and mobile optimization. However, performance is slow, and there is room for improvement in speed and technical optimization. The site integrates analytics and marketing tools such as Google Analytics, Pardot, and Complianz for GDPR compliance. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. Other security headers and best practices are partially implemented, but the absence of HTTPS significantly lowers the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling modern TLS protocols, and enhancing security headers. The domain registration data aligns well with the organization's identity, reinforcing legitimacy.

M

Moventis S.A.

moventis.es

40

Moventis S.A. is a well-established transportation company specializing in collective passenger transport by road, operating primarily in Spain with regional and European services. The company offers a broad range of services including urban and interurban transport, coach rental, and ITS solutions. The website reflects a mature digital presence with comprehensive content, consistent branding, and clear business information targeting travelers and clients seeking transport services. Technically, the site is built on Drupal 7 with a variety of modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. However, the site suffers from slow load times and lacks some advanced security headers and mechanisms such as HSTS, DNSSEC, and OCSP stapling. Privacy policies are present and GDPR compliance is indicated, though no active cookie consent mechanism is implemented. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but could benefit from performance and security enhancements.

D

Dauphin Telecom

dauphintelecom.com

40

Dauphin Telecom is a regional telecommunications provider serving the French Antilles, Saint Martin, and Saint Barthélemy. The company offers a variety of services including mobile plans, fiber internet, TV packages, and bundled offers, targeting both residential and business customers. With a local presence supported by multiple agencies and a customer service center based in Guadeloupe, Dauphin Telecom positions itself as a trusted and accessible operator in its market. Technically, the website is built on WordPress using the Elementor page builder and several Jet plugins, indicating a modern and flexible digital infrastructure. However, the site suffers from slow performance and lacks a valid SSL certificate, which impacts both user experience and security. The site is mobile-optimized and includes basic accessibility features, but there is room for improvement in performance and security hardening. From a security perspective, the absence of HTTPS and modern TLS protocols is a critical vulnerability. While the site implements cookie consent mechanisms and appears GDPR compliant, it lacks explicit security policies and incident response information. The use of SPF records for email authentication is a positive indicator, but the overall security posture is weak and requires urgent attention. Overall, Dauphin Telecom's website reflects a legitimate and established business with good content quality and business credibility. However, significant security improvements are necessary to protect user data and enhance trust. Addressing these issues will strengthen the company's digital presence and compliance standing.

E

Emaar Properties PJSC

emaar.com

57

Emaar Properties PJSC is a leading real estate developer based in Dubai, UAE, with a strong international presence. The company specializes in premium property development, community management, hospitality, and entertainment services. Their website reflects a mature digital presence with comprehensive property listings, community information, and customer engagement tools. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager and Amplitude. However, the website suffers from a critical security flaw due to an invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts its security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism and business credibility but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

S

Semplify Srl

semplify.net

54

Semplify Srl is an IT services company based in San Marino, specializing in enterprise-level IT consulting, cloud infrastructure, and outsourcing services. The company operates a datacenter in Milan and offers a range of services including cloud servers, virtual desktop infrastructure, business email, and network management. Their market position is that of a regional IT service provider with a focus on innovation and performance for business clients. Technically, the website is built on an older but functional technology stack including Apache, Bootstrap, and jQuery, managed via the TITANKA! CMS. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall. Privacy and cookie policies are present with consent mechanisms, and contact information is comprehensive and clearly presented. The security posture is weak due to lack of TLS and modern security features, which poses risks to user data and trust. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

D

Dauphin Telecom

dauphintelecom.fr

26

Dauphin Telecom is a regional telecommunications provider serving the French Antilles, including Saint Martin and Saint Barthélemy. The company offers a comprehensive range of services including mobile plans (unlimited, blocked, prepaid), fiber internet, TV packages, and bundled offers. With over 26 years of market presence and multiple local agencies, Dauphin Telecom holds a strong position in its regional market. The website reflects a professional and well-branded digital presence, targeting both residential and business customers in the region. Technically, the website is built on WordPress with Elementor and various Jet plugins, indicating a modern CMS-based infrastructure. However, performance metrics suggest slow loading times, and there is no SSL/TLS certificate installed, which is a significant security concern. The site is mobile-optimized and includes SEO best practices, but accessibility features are basic. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the security posture, exposing users to potential risks. Some security headers are present, but critical improvements are needed. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is clearly provided, enhancing business credibility. Overall, while the business and content quality are strong, the lack of HTTPS is a critical issue that must be addressed immediately to protect users and improve trust. Strategic recommendations include implementing SSL, enhancing security configurations, and maintaining compliance documentation.

T

Tecnoplay S.r.l.

tecnoplay.com

39

Tecnoplay S.r.l. is a mature and established company specializing in the distribution and sale of entertainment machines for gaming halls and public venues, with a strong presence in Italy and San Marino. The company positions itself as a leader with over 28 years of experience, offering products from internationally recognized brands such as Sega. Their business model focuses on providing high-quality amusement equipment and technical support services to family and gaming enthusiasts. The website reflects this positioning with clear branding, product categories, and contact information, targeting local businesses and consumers interested in amusement technology. From a technical perspective, the website is built on an older but functional technology stack including Apache server, jQuery, Bootstrap, and a proprietary CMS (TITANKA!). While the site is content-rich and well-structured with multilingual support, it suffers from performance issues and lacks modern optimization features. Mobile optimization and accessibility are basic but present. SEO practices are adequately implemented with proper meta tags and structured data. Security posture is a significant concern as the site does not implement HTTPS, exposing users to potential data interception risks. Security headers are partially implemented but insufficient without SSL/TLS. No advanced security policies or incident response information is publicly available. The absence of vulnerability disclosure or security.txt files further limits transparency. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present, but GDPR compliance details are minimal. Overall, the website and business demonstrate moderate trustworthiness and professionalism but require urgent security improvements, especially the implementation of HTTPS. Strategic recommendations include upgrading security infrastructure, modernizing the technology stack, enhancing privacy compliance, and publishing clear security policies to improve user trust and regulatory adherence.

L

Logixboard, Inc.

logixboard.com

61

Logixboard, Inc. operates a B2B SaaS platform focused on providing a unified customer experience portal for logistics providers, freight forwarders, and customs brokers. The platform integrates multiple logistics services including ocean, air, trucking, customs, and warehousing data to offer comprehensive supply chain visibility. The company positions itself as a differentiated player in the logistics technology market by emphasizing customer experience and seamless integration. Technically, the website is built on WordPress with Elementor and hosted on WP Engine, leveraging modern web technologies and marketing tools such as HubSpot Analytics and Google Tag Manager. However, the site lacks a valid SSL certificate, which critically undermines its security posture. While security headers are properly configured, the absence of HTTPS and modern TLS protocols is a significant vulnerability. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR compliance indicators. Contact information is limited but includes a phone number and subscription form. Overall, the site is professional and content-rich but requires urgent security and privacy improvements to meet industry standards.

I

iLabXP

ilabxp.com

42

iLabXP is an educational platform specializing in teaching computer networks and distributed systems through lab courses and virtual labs. It targets university students and educators, providing a free and open source eLearning system to enhance learning outcomes. The platform has a niche market position with a small but focused user base. Technically, the website is built on WordPress and hosted on Contabo servers, using common web technologies such as jQuery and MediaElement.js. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers and DNS security features are also missing, exposing the site to potential risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is limited to subscription forms without explicit emails or phone numbers. Overall, the website is functional and content-rich but requires urgent improvements in security and privacy to enhance trust and compliance.

J

JDM Technology Group

jdmtechnologygroup.com

33

JDM Technology Group is a well-established company providing integrated software solutions for the construction industry and built environment. With over 41 years in business, 34 subsidiary companies, and a global customer base exceeding 18,000, they offer a broad portfolio of construction management, maintenance, estimating, and operational software. Their business model focuses on strategic acquisitions to expand market share and deliver comprehensive solutions. Technically, the website is built on WordPress with modern frontend technologies like Bootstrap and jQuery, optimized by NitroPack, but suffers from slow load times and lacks a valid SSL certificate, impacting security and user trust. Security posture is weak due to missing HTTPS and TLS protocols, though DNS records show good email security practices with SPF and DMARC. Privacy compliance is poor with no visible privacy or cookie policies, and no contact information is provided on the homepage. Overall, the site is professional and content-rich but requires significant improvements in security and privacy to enhance trust and compliance.

R

Retis

retis-innovation.fr

40

Retis Innovation is a French national network dedicated to supporting and promoting territorial innovation ecosystems. The organization focuses on assisting innovation actors, public institutions, and private experts to foster the creation and growth of innovative companies across French territories. The website reflects a mature digital presence built on WordPress with modern technologies and SEO best practices. Security posture is solid with HTTPS, SPF, and DMARC configured, though improvements in HTTP security headers and DNS security could enhance protection. Privacy compliance is strong, featuring comprehensive GDPR-aligned policies and cookie consent mechanisms. Contact information is transparent and multi-channel, supporting business credibility. Overall, Retis Innovation demonstrates a professional and trustworthy online presence suitable for its sector and audience.

E

ETH Zürich Foundation

ethz-foundation.ch

40

ETH Zürich Foundation is a reputable non-profit organization dedicated to supporting education, research, and innovation at ETH Zürich through donations and strategic projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting donors, alumni, and organizations interested in philanthropy. The technical infrastructure is based on WordPress with modern JavaScript libraries and SEO optimizations, hosted likely within ETH Zürich's infrastructure. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy compliance is well addressed with detailed cookie consent mechanisms and a comprehensive privacy policy. Contact information and social media presence further enhance business credibility.

A

Arvato Systems

arvato-systems.com

68

Arvato Systems is a large, internationally active IT specialist and multi-cloud service provider headquartered in Germany, focused on enabling digital transformation for enterprises across various industries including healthcare, energy, retail, manufacturing, and government. The company offers a broad portfolio of services such as cloud transformation, application modernization, managed services, security services, and SAP solutions. Their market position is reinforced by multiple industry awards and certifications, including ISO 27001. Technically, the website is built on CoreMedia CMS with modern web technologies and provides a good user experience with mobile optimization and clear navigation. However, the security posture is weakened by an invalid or missing SSL certificate and lack of modern TLS protocol support, which are critical issues that should be addressed promptly. Privacy compliance is strong with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website demonstrates professionalism and trustworthiness but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

U

Universitätsklinikum Hamburg-Eppendorf

uke.de

40

The Universitätsklinikum Hamburg-Eppendorf (UKE) is a leading European university hospital specializing in healthcare, research, and education. The website reflects a comprehensive digital presence with extensive information about clinics, institutes, research programs, patient services, and educational offerings. The site targets patients, medical professionals, researchers, and students, positioning UKE as a major healthcare and research institution in Germany. Technically, the site uses established libraries like jQuery and Modernizr, and employs Matomo for privacy-conscious analytics. However, the absence of a valid SSL certificate and modern TLS protocols significantly impacts the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The site demonstrates high professionalism and trustworthiness but requires urgent improvements in security infrastructure to protect user data and enhance trust.

V

vitrado

vitrado.de

40

vitrado.de operates as an inhouse affiliate marketing network primarily serving the freenet Group's portfolio of digital lifestyle and telecommunications products. The platform targets affiliate marketers and partners seeking to promote these products through various partner programs and marketing tools. The website presents a professional and consistent brand image aligned with its parent company, freenet Group, and offers a range of partner programs including waipu.tv, klarmobil, and freenet Mobile among others. Technically, the site leverages JavaScript, CSS, and SVG technologies with Cloudflare DNS and hosting, but suffers from slow load times and lacks modern security configurations such as a valid SSL certificate and HTTPS support. Security posture is weak due to missing HTTPS, absent security headers, and disabled DNSSEC, exposing the site to potential risks. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site is functional and content-rich but requires urgent security and privacy improvements to enhance trust and compliance.

R

Roca Sanitario S.A.U.

roca.com

64

Roca Sanitario S.A.U. is a global leader in bathroom products with a presence in over 170 countries. The company offers a wide range of innovative, sustainable bathroom solutions targeting both consumers and professionals. Their website reflects a mature digital presence built on Liferay DXP, featuring rich content including product collections, professional resources, and corporate information. The site is well-branded and professionally designed, with good navigation and mobile optimization. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which poses risks to user trust and data security. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is primarily via forms and social media, with no direct emails or phone numbers exposed. Overall, the website is functional and credible but requires urgent security improvements to protect users and enhance trust.

P

PIER PLUS

pier-plus.de

40

PIER PLUS is a collaborative platform fostering cooperation among universities and research institutes in the Hamburg metropolitan region. It supports six research profiles and provides news, events, and a members area to facilitate networking and joint research efforts. The website is professionally designed with clear navigation and targets academic and research stakeholders in Hamburg. Technically, the site uses JavaScript libraries such as jQuery and sliders like Swiper and Slick, hosted by the University of Hamburg's computing center. However, the site suffers from a critical security deficiency: it lacks a valid SSL/TLS certificate, resulting in unencrypted HTTP access and no HTTPS enforcement. Additionally, no security headers or cookie consent mechanisms are present, which weakens its security and privacy posture. Analytics are implemented via Piwik (Matomo) and Etracker, indicating moderate user tracking. Overall, while the content and business presentation are excellent, the technical and security implementations require urgent improvements to protect user data and enhance trust.

W

Westin Store

westinstore.com

60

Westin Store is an e-commerce retailer specializing in luxury bedding, linens, and bath products inspired by the Westin Hotels brand, a subsidiary of Marriott International. The website targets consumers seeking premium hotel-quality sleep and bath products, offering a broad catalog of branded merchandise. The business model is direct-to-consumer online retail with integrated customer support and marketing channels. Technically, the site is built on Magento with extensive use of Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. However, the site suffers from a critical security issue: the absence of a valid SSL certificate and disabled TLS protocols, which severely impacts the security posture and user trust. The site implements strong privacy and cookie consent mechanisms, including GDPR-compliant policies and DMARC email protection. Overall, the website is professionally designed with good content quality and marketing integration but requires urgent remediation of its SSL/TLS configuration and subdomain takeover vulnerability to improve security and trustworthiness.

R

Ritz-Carlton Leadership Center

ritzcarltonleadershipcenter.com

68

The Ritz-Carlton Leadership Center website presents a specialized consulting and training business focused on leadership and customer experience transformation, leveraging the prestigious Ritz-Carlton brand. The company operates primarily in the hospitality and education sectors, targeting business leaders seeking to enhance organizational culture and service excellence. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. While the site offers comprehensive content and good SEO, performance is somewhat slow due to large page size and resource count. Security posture is adequate with valid SSL and email authentication records, but could be improved by enabling HSTS and additional security headers. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy linked to the parent company Marriott. Contact information is available via phone and contact forms, and social media presence is established on major platforms. Overall, the site reflects a professional and trustworthy business with room for technical and security enhancements.

D

Deutsche Gesellschaft für Zerstörungsfreie Prüfung e.V.

dgzfp.de

40

The Deutsche Gesellschaft für Zerstörungsfreie Prüfung e.V. (DGZfP) is a German professional association specializing in non-destructive testing (ZfP). The organization provides extensive training, certification, networking opportunities, and research support to professionals and industries such as automotive, construction, railway, and aviation. The website reflects a mature digital presence with rich content, event listings, and comprehensive privacy and cookie policies compliant with GDPR. Technically, the site is built on WordPress with modern plugins for SEO and cookie management, but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. The site is well-branded, professionally designed, and targets industry professionals and organizations in Germany.

F

Firstlead GmbH

adcell.de

40

ADCELL, operated by Firstlead GmbH, is a well-established affiliate marketing network founded in 2003, targeting the German-speaking markets of Germany, Austria, and Switzerland. The platform connects publishers, advertisers, and agencies, offering a performance-based affiliate marketing model with no setup fees or monthly charges. The company enjoys a strong market position with over 64,000 active publishers and 2,426 partner programs, supported by multiple industry awards and certifications. The website content is rich, professionally designed, and targets a broad audience including publishers, advertisers, and agencies. Technically, the site uses common web technologies such as jQuery, Bootstrap, and slick sliders, hosted behind Cloudflare DNS services. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. Privacy compliance is addressed with a consent management platform and clear privacy and cookie policies. Overall, the site demonstrates good business credibility but requires urgent security improvements.

G

Geomatex Integrated Solutions

geomatex.com

57

Geomatex Integrated Solutions is a specialized geo-intelligence system integrator based in Egypt, focusing on reality modelling applications that serve CAD, GIS, BIM, and Digital Twin technologies. The company positions itself as a regional leader with a highly experienced team offering key services such as As-Built Documentation, Ground Penetrating Radar, Drone Services, and 3D laser scanning. Their target audience includes clients across various sectors requiring advanced geo-intelligence solutions. Technically, the website employs common web technologies like jQuery and Bootstrap but suffers from slow performance and lacks modern security configurations. The SSL certificate is invalid, and no advanced security headers or DNS protections are in place, exposing the site to potential risks. Privacy compliance is minimal, with no cookie consent mechanisms detected and only a basic privacy policy present. Overall, the business demonstrates moderate digital maturity but requires significant improvements in security and privacy to enhance trust and compliance.

H

Hubert Burda Media

burda.com

67

Hubert Burda Media is a large, established media and technology company based in Germany, focusing on media publishing, brand management, and equity investments. The company maintains a strong market position with a diverse portfolio and international presence. Their website reflects a mature digital infrastructure with modern JavaScript libraries, consent management, and structured data for SEO and business transparency. Security posture is solid with valid SSL, SPF, and DMARC configurations, though improvements such as enabling HSTS and additional security headers are recommended. The company demonstrates compliance awareness with GDPR-aligned privacy and cookie policies and a whistleblowing system. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

K

Koelnmesse GmbH

koelnmesse.com

63

Koelnmesse GmbH is a leading trade fair and event organizer based in Cologne, Germany, with a century-long history since its founding in 1924. The company operates over 80 trade fairs and exhibitions both locally and in key global markets, serving a diverse audience including exhibitors, visitors, and trade fair organizers. Koelnmesse has a strong market position, recognized for its sustainability efforts and industry leadership, including recent awards such as 'Company of the Year' 2025 and 'Pioneer in Sustainability 2024'. Technically, the website employs a modern tech stack including jQuery, OneTrust for privacy management, Google Tag Manager, and various third-party integrations for social media and advertising. Hosting is provided via Amazon AWS infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are good, supporting the company's digital presence. From a security perspective, while email security is well managed with valid SPF and DMARC records, the absence of a valid SSL certificate and lack of modern TLS protocols represent significant vulnerabilities. The site lacks HSTS, OCSP stapling, and other advanced security headers, lowering its overall security posture. No vulnerability disclosure or security.txt files were found, indicating limited transparency in security incident handling. Overall, Koelnmesse presents a professional and trustworthy online presence with strong business credentials but requires urgent improvements in its SSL/TLS configuration and security best practices to protect user data and maintain compliance with modern security standards.