Security Directory

V

VOQUZ Group

voquz.com

38

VOQUZ Group is a well-established international IT service provider headquartered in Germany, with over 40 years of experience and more than 300 employees. The company serves both private and public sectors, offering a broad range of IT services including software development, SAP consulting, infrastructure planning, project management, and software testing. It operates through specialized subsidiaries such as VOQUZ Public and VOQUZ IT Solutions, targeting public administration and private enterprises respectively. The website reflects a professional and consistent brand presence with good content quality and clear navigation.

A

Amadeus International School Vienna

amadeus-vienna.com

28

Amadeus International School Vienna is a well-established private international school offering IB education and boarding services with a unique integrated Music and Arts Academy. The school targets international students and families seeking high-quality education in Vienna. The website is professionally designed with rich content and multimedia, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, but suffers from a critical lack of HTTPS due to an invalid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Contact information is clearly presented, enhancing business credibility. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

H

HOLZWURM Werkzeuge

holzwurm-werkzeuge.de

40

HOLZWURM Werkzeuge is a small Austrian e-commerce business specializing in selling creative tools for hobbyists and crafters, primarily via online marketplaces such as Amazon and Etsy, as well as their own WooCommerce-based shop. Founded in 2017, the company emphasizes quality and customer satisfaction, targeting a broad audience of creative individuals. The website is built on WordPress with WooCommerce and uses modern web technologies and marketing tools including Cookiebot for consent management and Facebook Pixel for tracking. However, the site lacks a valid SSL certificate, exposing visitors to security risks and undermining trust. Privacy policies and terms of service are present and GDPR compliance is partially addressed through cookie consent mechanisms. Contact information is complete and transparent, supporting business credibility.

T

twinformatics GmbH

twinformatics.at

39

twinformatics GmbH is a medium-sized Austrian IT service provider specializing in software development and operation for major insurance companies such as Wiener Städtische Versicherung AG and Vienna Insurance Group. The company positions itself as a strong IT partner with end-to-end responsibility for innovative software solutions trusted by thousands of users. The website is professionally designed, primarily in German, targeting IT professionals and potential employees. Technically, the site runs on WordPress with modern PHP and uses several plugins for enhanced functionality. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, despite the presence of HSTS headers. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. The security posture is basic and requires immediate improvements in SSL/TLS configuration and vulnerability disclosure practices. Overall, the website reflects a credible and professional business but needs technical security enhancements to align with best practices.

A

Amiblu Group

amiblu.com

25

Amiblu Group operates as the world's largest producer and technology partner for GRP (glass-fiber reinforced plastics) pipe systems, focusing on sustainable water infrastructure solutions. The company targets urban and rural communities, industries, and infrastructure planners, offering a broad portfolio of pipe products, technical documentation, and reference databases. Their market position is strong, supported by certifications such as EcoVadis and partnerships like the UNESCO World Engineering Day 2025. The website reflects a mature, well-established business with a professional and consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including caching and multilingual support. However, performance is moderate and accessibility is basic. The site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. Security headers are minimal, and no advanced security policies are implemented. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing users to potential risks. No incident response or security policy information is publicly available. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

W

Werner Mertz Professional

wmprof.com

31

Werner Mertz Professional is a medium-sized manufacturing company specializing in high-performance hygiene solutions for professional cleaning markets. With over 50 years of history and a strong commitment to sustainability, the company operates under well-known brands such as Green Care Professional and Tana Professional. The website reflects a mature digital presence with comprehensive content, professional design, and strong SEO practices. However, the lack of a valid SSL certificate and proper HTTPS configuration represents a significant security risk that undermines user trust and data protection. The company has implemented cookie consent mechanisms and privacy policies compliant with GDPR, indicating awareness of privacy regulations. Overall, the business is credible and well-positioned in its sector but must urgently address its security posture to meet modern standards.

B

BBMRI-ERIC

bbmri-eric.eu

26

BBMRI-ERIC is a European research infrastructure focused on biobanking and biomolecular resources, supporting researchers in health and life sciences to find new treatments. Established in 2013 and headquartered in Graz, Austria, it provides a range of services including a directory of biobank metadata, federated platforms for privacy-preserving data queries, and quality management. The website reflects a mature organization with consistent branding and professional content aimed at the scientific community. Technically, the site is built on WordPress with a variety of plugins supporting SEO, newsletter management, and social media integration. However, the site lacks HTTPS and a valid SSL certificate, which is a critical security vulnerability. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy but requires urgent security improvements to protect user data and maintain credibility.

M

Mississippi University for Women

muw.edu

33

Mississippi University for Women (The W) is a public co-educational university founded in 1884, offering a broad range of undergraduate and graduate programs with a strong emphasis on academic excellence and leadership development. The university holds a solid market position in the southern United States, recognized for low student debt and transfer student friendliness. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, faculty, staff, and alumni. The content is rich, well-structured, and supported by active social media channels and event management tools.

A

AdWords Agentur GmbH

adwordsagentur.at

38

AdWords Agentur GmbH is a specialized Google AdWords agency based in Vienna, Austria, focusing on delivering measurable and cost-efficient search engine advertising services. The company offers comprehensive campaign analysis, management, and optimization services, emphasizing conversion tracking and ROI maximization. Their market position is supported by over 100 partners and detailed case studies showcasing significant client success. Technically, the website is built on WordPress with modern plugins and technologies, though it suffers from critical SSL/TLS misconfiguration, impacting security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business demonstrates professionalism and trustworthiness but must urgently address its HTTPS implementation to improve security and user trust.

G

Gantner Instruments

gantner-instruments.com

40

Gantner Instruments is a medium-sized technology company specializing in modular and scalable data acquisition solutions for industrial testing and monitoring applications across sectors such as energy, aerospace, and mobility. The company offers a comprehensive portfolio of hardware, software, and technical support services, positioning itself as a market leader with a global presence. Technically, the website is built on a modern WordPress CMS with Elementor and optimized for performance and SEO, though it lacks a valid SSL certificate, which is a significant security concern. Security headers are well implemented, but the absence of HTTPS and TLS protocols reduces the overall security posture. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is strong, supported by clear contact information, partner logos, and customer testimonials. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS implementation to enhance security and user trust.

A

AASupplies e.U

aa-supplies.eu

27

AASupplies e.U is a Vienna-based company specializing in the sale and logistics of premium used warehousing equipment, forklifts, generators, and material handling machinery. The company targets businesses primarily in Europe and the Middle East, offering access to a large inventory and comprehensive transport services. Their multilingual team and European supplier network position them as a reliable B2B provider in the transportation sector. Technically, the website is built on WordPress with modern plugins such as WooCommerce, Elementor, and Gravity Forms, but lacks a valid SSL certificate, which is a critical security gap. The site includes GDPR-compliant cookie consent and privacy policies, reflecting good privacy practices. However, the absence of HTTPS and some security headers reduces the overall security posture. The business information is transparent and consistent with WHOIS data, enhancing credibility. Strategic improvements in SSL deployment and security policy publication are recommended to strengthen trust and compliance.

D

Dialogschmiede

dialogschmiede.com

35

Dialogschmiede is an Austrian marketing agency specializing in marketing automation, data-driven campaigning, and dialog marketing services. The website positions the company as a leading dialog agency in Austria, targeting businesses seeking advanced marketing automation solutions. The technical infrastructure is based on WordPress with Elementor and several plugins, hosted on Microsoft Online infrastructure. However, the website suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Additionally, the site lacks essential privacy and cookie policies, as well as contact information, which affects compliance and user trust. Performance is poor with a very slow load time and a large page size, indicating potential optimization needs.

W

Workheld GmbH

tabletsolutions.at

20

Workheld GmbH operates a professional website presenting a software platform focused on connected workforce management for industrial and manufacturing sectors. The company offers digital workflows, mobile apps, remote support, and IIoT integration, positioning itself as a leading Field Service Management solution aligned with Industry 4.0 principles. The website is well-structured, content-rich, and targets industrial clients seeking digital transformation solutions. Technically, the site is built on WordPress with modern plugins and integrates with Microsoft Azure and SAP HANA platforms. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to risks and reducing trust. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms despite using tracking services like HubSpot. Business credibility is strong with clear branding, client logos, and legal pages, but contact details such as emails and phone numbers are not explicitly provided on the site. Overall, the site demonstrates good digital maturity but requires urgent security improvements to protect user data and enhance trust.

W

Westcam - The Know-WOW Company

westcam.at

35

Westcam - The Know-WOW Company is a well-established Austrian technology and manufacturing solutions provider founded in 1990. The company offers a comprehensive portfolio of services and products including CAD design, CAM programming, 3D printing, 3D metrology, PDM/MES systems, mechatronics, robotics, and industrial image processing. Their market position is strong in the regional industrial sector, supported by their Autodesk Gold Partner status and ISO 9001:2015 certification. The website demonstrates a high level of digital maturity with a modern WordPress-based infrastructure, multilingual support, and integrated marketing and analytics tools. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, which significantly impacts their security posture. Privacy compliance is well addressed with explicit cookie consent mechanisms and a comprehensive privacy policy. Overall, the business presents itself professionally with clear contact information and strong trust indicators.

I

iMedia Web Solutions

imediasolutions.biz

22

iMedia Web Solutions is a small technology company based in India specializing in web design, WordPress development, eCommerce solutions, and responsive websites. With over 9 years of operation and more than 500 satisfied clients, the company positions itself as a reliable service provider offering white label and outsourcing solutions. The website is built on WordPress with a modern tech stack including PHP 7.4, LiteSpeed server, and popular plugins such as WPBakery and Slider Revolution. However, the site lacks a valid SSL certificate, which critically impacts its security posture. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Contact information is clearly provided, including phone, email, physical address, and a detailed contact form. Overall, the site demonstrates good content quality and business credibility but suffers from significant security and privacy shortcomings.

K

Kreisel Electric GmbH

kreiselelectric.com

21

Kreisel Electric GmbH is a medium-sized Austrian company specializing in advanced battery technology and high-voltage battery systems for electrification projects across commercial, marine, off-highway, and motorsport sectors. The company leverages patented immersion cooling technology to deliver high safety, performance, and longevity in their products. Their market position is strengthened by strategic partnerships with industry leaders such as BASF and Allego, reflecting a commitment to sustainability and innovation. The website is professionally designed, content-rich, and targets B2B customers seeking electrification solutions. Technically, the site is built on WordPress with modern SEO and marketing tools like Google Tag Manager and OneTrust for cookie consent. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy compliance is addressed through comprehensive policies linked to Deere & Company, indicating a strong privacy posture. Contact information is clearly provided, enhancing business credibility. Overall, while the business and technical maturity are solid, urgent improvements in security infrastructure are recommended.

I

Ingenieurbüro Arnold

arnostatik.de

20

Ingenieurbüro Arnold is a small, regionally focused engineering firm specializing in construction planning, structural statics, energy demand calculations, sound insulation, and fire protection services in the Potsdam area of Germany. The company emphasizes quality, reliability, and cost optimization, serving private and commercial clients with over 30 years of experience. Their business model is project-based engineering consultancy with a strong local market presence. Technically, the website is built on WordPress with common plugins and a responsive design, but suffers from slow performance and lacks modern security features such as HTTPS. Security posture is weak due to the absence of SSL/TLS encryption, missing security headers, and no published security or incident response policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism but no GDPR-specific indicators. Overall, the website is professional and credible but requires urgent security improvements to protect user data and enhance trust.

R

Retronic Vertriebs GmbH

retronic.de

35

Retronic Vertriebs GmbH is an established German distributor specializing in electronic components, serving various industries including technology and transportation. With over 25 years of experience and TÜV ISO 9001:2015 certification, the company emphasizes long-term partnerships with manufacturers and offers tailored solutions for its clients. The website reflects a professional business model focused on reliability and technical orientation. Technically, the website is built on a modern WordPress platform using PHP 8.4.8 and Elementor for design. It incorporates SEO best practices via Yoast SEO and employs performance optimization tools like WP Rocket. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security shortfall. Mobile optimization and accessibility are adequate, and cookie consent mechanisms comply with GDPR requirements. From a security perspective, the absence of HTTPS and TLS protocols severely undermines the site's security posture, exposing users to potential data interception risks. While cookie consent and privacy policies are well implemented, the site should urgently address SSL/TLS configuration to protect user data and improve trustworthiness. No incident response or vulnerability disclosure policies are evident. Overall, the site is functional and professional but requires critical security improvements. Strategic recommendations include immediate SSL certificate deployment, enabling modern TLS protocols, and enhancing security headers. These steps will elevate the site's security, compliance, and user trust, aligning with its reputable business standing.

C

Campus Tivoli

politische-akademie.at

24

Campus Tivoli, formerly known as Politische Akademie, is a politically affiliated educational institution serving as a think tank and training center for the Austrian People's Party. It offers political education, seminars, e-learning, podcasts, and publications aimed at fostering liberal-conservative and Christian-democratic political thought in Austria. The website is well-structured, content-rich, and targets politically engaged individuals and learners. Technically, it is built on WordPress with Elementor, WooCommerce, and Tutor LMS plugins, indicating a mature digital infrastructure for content delivery and e-commerce. However, a critical security gap exists due to the absence of a valid SSL certificate, exposing users to potential risks. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Contact information and social media presence are clearly provided, enhancing business credibility.

B

Baschnegger Ammann Partner

bap.cc

25

Baschnegger Ammann Partner is a well-established creative agency based in Dornbirn, Austria, specializing in branding, design, communication, and digital marketing services. With over 40 years of experience, the agency targets small to large companies primarily in the Bodensee region and surrounding economic areas. Their market position is strong within western Austria, supported by a professional website showcasing client references and a consistent brand image. Technically, the website is built on WordPress with a modern tech stack including PHP 8.4.8 and various JavaScript libraries, optimized for mobile and SEO. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. The site implements GDPR-compliant cookie consent mechanisms and uses reputable analytics and marketing tools such as Google Analytics and HubSpot. Overall, the business demonstrates high professionalism and trustworthiness but must address its SSL deficiency to improve security posture and user trust.

C

Capgemini

capgemini-consulting.com

40

Capgemini Invent is a prominent management consultancy brand under the Capgemini group, specializing in innovative consulting services that combine strategy, technology, data science, and design to help businesses transform and grow. The website reflects a mature, enterprise-level digital presence with comprehensive content, strong branding, and a wide range of services targeting C-level executives and large enterprises. Technically, the site is built on WordPress with modern frameworks like React and Bootstrap, indicating a contemporary and scalable infrastructure. However, a critical security issue is the lack of a valid SSL certificate, which undermines the site's security posture despite the presence of several security headers. Privacy and cookie policies are well implemented, showing good compliance with GDPR and related regulations. Overall, the site is professional and trustworthy but requires immediate attention to SSL configuration to enhance security and user trust.

J

JAWA Management Software GmbH

jawa.at

23

JAWA Management Software GmbH is an established Austrian technology company specializing in customized software solutions for process optimization and information management. Their flagship product, the inforum management platform, supports supplier management, quality control, production planning, and AI-enhanced business solutions. With over 25 years of market presence and a medium-sized operation, JAWA serves a broad international clientele with a focus on efficiency and productivity improvements. Technically, the website is built on a modern WordPress CMS infrastructure using popular plugins and frameworks such as WPBakery, WPML, and Woodmart theme. The site is well-structured, mobile-optimized, and SEO-friendly, demonstrating a mature digital presence. However, the hosting environment lacks a valid SSL certificate and proper TLS configuration, which significantly undermines the security posture. Security-wise, the absence of HTTPS and modern TLS protocols is a critical vulnerability, exposing users to potential data interception and trust issues. While no active vulnerabilities or malware are detected, the site misses essential security headers and DNS security configurations. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a professional and credible business front but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL deployment, enabling modern security protocols, and implementing advanced security headers and DNS protections.

H

Huppenkothen GmbH

huppenkothen.at

35

Huppenkothen GmbH operates a professional website focused on the sale and rental of mini and compact construction machinery, serving primarily the Austrian construction sector. The company maintains a strong market position with 42 locations and a large inventory of machines and spare parts. The website is well-designed, content-rich, and optimized for SEO and accessibility, targeting construction professionals and businesses. Technically, the site is built on WordPress with modern plugins and frameworks, but lacks HTTPS, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a mature digital presence but requires urgent security improvements to protect user data and trust.

I

ivii GmbH

ivii.eu

40

ivii GmbH is a small Austrian technology company specializing in AI-powered visual intelligence systems designed to optimize quality assurance and logistics processes in industrial manufacturing environments. Their flagship product, ivii iriis, combines artificial intelligence, machine learning, and camera technology to enable error-free production and logistics workflows. The company positions itself as an innovative provider with a strong focus on practical, plug-and-play solutions that empower employees and improve operational efficiency. The website content is professionally crafted, targeting industrial and logistics sectors, and supported by customer testimonials and ISO 27001 certification, enhancing trust and credibility. Technically, the website is built on WordPress with modern SEO and performance plugins such as Yoast SEO Premium and WP Rocket. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Performance is also suboptimal with a high page load time. Privacy compliance is well addressed with comprehensive GDPR-compliant privacy and cookie policies, including a consent mechanism. The company maintains active social media profiles and provides clear contact information. Security-wise, the lack of HTTPS and modern TLS protocols, absence of security headers, and missing DNSSEC and CAA records expose the site to potential risks. While no active vulnerabilities or WAF blocks are detected, these gaps should be addressed promptly to protect user data and maintain trust. Overall, ivii GmbH demonstrates a strong business and content presence but must urgently improve its security infrastructure to align with best practices and industry standards. Strategic recommendations include implementing SSL/TLS, enabling security headers, and optimizing performance to enhance user experience and trust.

M

MedTriX Group

medizin-medien.at

40

MedTriX Group is a specialized medical communication service provider with a strong presence in Austria, Germany, and Switzerland. The company offers unique healthcare professional (HCP) data intelligence and a broad portfolio of services including data targeting, CRM data quality enhancement, telephone communication, medical media publishing, digital newsletters, and educational events. Their market position is reinforced by a strong regional footprint and partnerships with sister companies MTX Schweiz and MTX Deutschland. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS and SEO-friendly infrastructure. However, performance metrics are lacking, and the SSL/TLS configuration is critically flawed with no valid certificate and no TLS protocols enabled, which severely impacts security and trust. Security posture is weak due to the invalid SSL certificate and incomplete TLS support, despite the presence of several security headers. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is comprehensive and professionally presented, enhancing business credibility. Overall, the site is functional and professional but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in security configuration and performance optimization are recommended.

H

Herba Chemosan

herba-chemosan.at

38

Herba Chemosan is a large Austrian pharmaceutical wholesaler established in 1916, operating seven logistics centers and serving the entire Austrian pharmacy market. The company offers comprehensive pharmaceutical distribution, logistics, marketing, and IT solutions to pharmacies and pharmaceutical manufacturers. The website is built on WordPress with Elementor and Yoast SEO, presenting professional and rich content targeted at healthcare professionals and partners. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Privacy and cookie policies are well implemented, indicating good GDPR compliance. The absence of explicit security and incident response policies suggests room for improvement in security governance. Overall, the business is credible and well-positioned in the Austrian healthcare sector, but the technical security posture requires urgent enhancement.

V

VCC USA

vccusa.com

20

VCC USA is a well-established general contractor and construction management company operating nationally in the United States. With a mature domain and over 38 years of industry experience, VCC offers a broad range of construction services across multiple sectors including hospitality, healthcare, retail, multifamily, and institutional projects. The website reflects a professional and comprehensive business presence with strong branding and clear service offerings. Technically, the site is built on WordPress with common plugins and libraries, but suffers from a critical lack of HTTPS/SSL, which severely impacts its security posture. The absence of modern TLS protocols and security headers further weakens its defense against common web threats. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though terms of service and incident response policies are not evident. Social media integration and an ethics hotline demonstrate a commitment to transparency and ethical business practices. Overall, while the business credibility and content quality are high, the security deficiencies present a significant risk that should be remediated promptly.

D

DBConcepts

dbconcepts.at

29

DBConcepts GmbH is a well-established Austrian IT company specializing in database technologies such as Oracle, PostgreSQL, and MSSQL, offering managed services, middleware infrastructure, and custom software development. The company positions itself as a trusted partner with over 25 years of experience and recognized certifications, including Oracle Specialized Partner status. Their website reflects a professional and comprehensive digital presence targeting businesses requiring high-availability database solutions and IT asset management. Technically, the site is built on WordPress with modern plugins and SEO tools, providing good user experience and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the business credibility and content quality are high, but urgent improvements in security infrastructure are recommended.

B

Business Angel Institute

businessangelinstitute.org

39

Business Angel Institute is a Vienna-based organization specializing in education and certification for early-stage investors, notably offering the world's first ISO-certified Business Angel Program. The website is professionally designed, targeting individual and group angel investors primarily in Europe, with a strong emphasis on bridging research and practical investment experience. Technically, the site runs on WordPress with a modern theme and integrates various third-party services for course delivery and analytics. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, exposing visitors to potential risks. Privacy compliance is basic with policies present but limited GDPR indicators. Overall, the business is credible and well-positioned in its niche, but the website requires urgent security improvements to protect users and enhance trust.

W

weXelerate GmbH

wexelerate.com

28

weXelerate GmbH operates Austria's leading innovation ecosystem, founded in 2017 by Austrian corporates to foster innovation through a combination of physical hub space, ecosystem collaboration, and accelerator programs. The company targets innovative startups and corporates seeking to accelerate their innovation capabilities. The website is professionally designed using WordPress and Elementor, with strong SEO practices including structured data and Open Graph metadata. However, the site lacks HTTPS, which is a critical security vulnerability. Contact information and social media presence are clearly provided, supporting business credibility. The absence of a cookie consent mechanism and security headers indicates gaps in privacy compliance and security posture. Overall, the business is legitimate and well-positioned in its market, but technical and security improvements are needed to enhance trust and compliance.

S

Steyr Motors AG

steyr-motors.com

20

Steyr Motors AG is a mature Austrian company specializing in the development and production of high-performance diesel engines for heavy-duty vehicles and marine applications. The company offers a range of products including marine engines, vehicle engines, generator sets, and integrated software solutions, supporting customers throughout the product lifecycle. The website reflects a professional and well-structured digital presence with multilingual support and investor relations content. Technically, the site is built on WordPress with modern plugins for SEO and cookie management, but critically lacks a valid SSL certificate, exposing users to security risks. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Business credibility is strong with clear contact information, certifications, and legal documents available. Overall, the site is functional and professional but requires urgent security improvements to enable HTTPS and enhance trust.

B

BHDT GmbH

bhdt.at

22

BHDT GmbH is a specialist company focused on high pressure equipment and components for the chemical and petrochemical industries, operating primarily in Austria. The company is part of the Dr. Aichhorn Group and offers engineering, design, and production services. The website reflects a medium-sized B2B manufacturing business with a professional online presence and clear business segmentation. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and marketing analytics. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. Privacy policies are present but lack a cookie consent mechanism, which may affect GDPR compliance. Overall, the site is functional and professional but requires urgent security improvements.

Schwarz & Schmidhofer Industrieanlagenbau GmbH is a medium-sized German company specializing in industrial plant construction, including piping, steel construction, and industrial assembly, with over 35 years of experience. The company serves leading clients in the chemical, petrochemical, energy, and environmental technology sectors, positioning itself as a reliable and professional partner offering precise and modern technical solutions. The website is built on WordPress with the Divi theme and supports multilingual content via Weglot, indicating a moderate level of digital maturity. However, the absence of HTTPS and a valid SSL certificate represents a significant security vulnerability, exposing users to potential data interception and undermining trust. The site lacks cookie consent mechanisms and explicit contact details, which impacts privacy compliance and user accessibility. Overall, while the business content and presentation are professional and relevant, the technical and security posture requires urgent improvement to meet modern standards and regulatory requirements.

M

MM Group

mm-packaging.com

40

MM Packaging, a division of MM Group, is a leading global manufacturer of consumer packaging solutions specializing in pharmaceuticals, food, beauty, and consumer goods sectors. The company operates a network of 56 packaging sites worldwide, emphasizing innovation and sustainability in its product offerings. The website reflects a mature digital presence with comprehensive content, multilingual support, and strong branding consistent with an enterprise-level organization. Technically, the site is built on WordPress with modern marketing and analytics integrations, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility and content quality are high, but the security deficiencies pose a risk to user trust and data protection.

M

MARTIN NEUHAUS

martinneuhaus.de

34

The website martinneuhaus.de serves as a personal portfolio and professional presentation platform for Martin Neuhaus, an actor based in Schwerin, Germany. The site primarily targets German-speaking audiences interested in theater and acting, offering access to showreels and professional contact via email and social media. The business model is focused on personal branding and professional networking within the media industry. The website is small scale and individual in nature, with consistent branding and basic content quality. Technically, the site is built on WordPress 6.8.1 using the Mesmerize Pro theme and several common plugins such as Contact Form 7 and CoBlocks. It is hosted likely on GoDaddy infrastructure, inferred from DNS and mail server data. The site suffers from slow performance with a load time exceeding 20 seconds, but it is mobile optimized and has good SEO metadata implemented. Accessibility is basic but present. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. No security headers or advanced TLS protocols are enabled, and no incident response or vulnerability disclosure policies are found. Privacy compliance is minimal with no privacy or cookie policies detected. The domain registration is consistent and legitimate, with no privacy protection or suspicious red flags, but domain protection locks are not enabled. Overall, the site presents moderate business credibility but poor security and privacy posture. Strategic improvements should focus on enabling HTTPS, implementing security headers, adding privacy and cookie policies, and improving site performance to enhance trust and compliance.

AUSTRIACARD HOLDINGS AG is a well-established technology company specializing in secure data solutions, including payment services, eGovernment authentication, document lifecycle management, and AI-driven data intelligence. With over 130 years of experience and a global footprint spanning Europe, the USA, and the Middle East, the company serves diverse sectors such as banking, government, energy, retail, healthcare, and transportation. It is publicly traded on the Athens and Vienna Stock Exchanges, reflecting a mature market position and transparent corporate governance. The website provides comprehensive business and investor information, demonstrating a strong commitment to sustainability and innovation. Technically, the site is built on WordPress with modern tools like Elementor and Astra theme, ensuring good design quality and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines trust and exposes users to risks. Security headers are well configured but cannot compensate for the lack of encryption. Privacy policies and cookie consent mechanisms are present and GDPR compliant, supporting responsible data handling. Overall, the company presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to meet modern security standards and protect its users.

R

Rydges Wholesale Foods

rydgeswholesale.com.au

24

Rydges Wholesale Foods is a Queensland-based wholesale food supplier specializing in fresh, high-quality bulk food supplies for a variety of food service businesses including restaurants, cafés, supermarkets, and catering companies. The company positions itself as a reliable partner offering competitive pricing, extensive product ranges, and tailored delivery solutions. Their website reflects a professional and consistent brand presence with clear contact information and customer testimonials, supported by certifications such as HACCP and Safe Food Queensland. Technically, the site is built on WordPress with WooCommerce, leveraging LiteSpeed server technology and caching for performance. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. The site uses Google Analytics and Tag Manager for tracking but lacks a cookie consent mechanism, which may impact privacy compliance. Overall, the business appears legitimate and well-established locally, but urgent security improvements are needed to protect customer data and enhance trust.

Grammatix is a small-scale cultural and artistic photography website based in Germany, focusing on exhibitions, projects, and published books related to regions such as Nepal, Tibet, and Kashmir. The site is built on WordPress and uses common plugins like Yoast SEO and Flash Album Gallery to manage content and galleries. While the website offers good content quality and navigation, it lacks modern security measures such as HTTPS, exposing visitors to potential risks. Privacy compliance is minimal, with no visible privacy or cookie policies, and contact information is limited to a contact form without explicit emails or phone numbers. The domain registration is consistent and transparent, but the absence of domain protection locks is a minor security concern. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

S

Spoon

spoon.se

36

Spoon is a well-established Swedish communications agency specializing in strategic and creative marketing services including storytelling, video production, and social media management. The company has a mature market presence with over 26 years of operation and is part of a larger agency network, People People People, enhancing its regional reach. The website reflects a professional and modern digital presence built on WordPress, with good SEO and user experience design. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Cookie consent is managed effectively via Cookiebot, but no privacy policy or terms of service pages were found, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

H

Hotel Pfefferkorn

pfefferkorns.net

25

Hotel Pfefferkorn is a luxury hospitality provider located in Lech am Arlberg, Austria, offering premium accommodations, wellness, and dining experiences. The business is well positioned in the alpine tourism market with recognized culinary certifications such as Michelin, Falstaff, and Gault Millau. The website is professionally designed using WordPress with multilingual support and SEO optimization. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. Cookie consent mechanisms and a comprehensive privacy policy demonstrate good privacy compliance. Contact information is clearly presented, supporting business credibility. Overall, the site reflects a mature hospitality business with room for improvement in security infrastructure.

A

Agentur XY GmbH

xy.de

21

Agentur XY GmbH is a creative agency and production house based in Berlin, Germany, founded in 2018. The company specializes in delivering bold advertising campaigns and production services for global brands, including notable clients such as Netflix, Stepstone, and Playmobil. The website reflects a professional and consistent brand image with rich multimedia content and active social media presence. Technically, the site is built on WordPress with modern libraries and SEO optimizations, but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are partially implemented, but the absence of TLS protocols and domain security features like DNSSEC and DMARC reduce the overall security posture. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

E

Ethical Workforce

ethicalworkforce.co.uk

33

Ethical Workforce is a specialist hospitality recruitment agency based in London, offering permanent and temporary staffing solutions with an international reach. The company targets both employers seeking hospitality staff and jobseekers looking for roles in the hospitality sector. Their website presents a professional image with clear service offerings and client testimonials from notable hospitality figures, positioning them as a trusted niche player in the recruitment market. Technically, the website is built on WordPress using PHP 7.4 and Apache, with common plugins such as Yoast SEO and WPBakery Page Builder. Google Tag Manager is used for analytics and marketing tracking. The site is mobile optimized and SEO friendly, but lacks performance metrics data. The hosting provider is not explicitly identified but uses hdodns.com nameservers. From a security perspective, the site has critical weaknesses: it does not have an SSL/TLS certificate installed, serving content over HTTP only, which severely impacts user trust and data security. No modern TLS protocols or security headers are present. Cookie consent is implemented, but no privacy policy or terms of service pages were found, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements, especially implementing HTTPS and enhancing privacy compliance. Strategic recommendations include obtaining a valid SSL certificate, adding comprehensive privacy and terms pages, and improving security headers to protect users and build trust.

W

WIG Wietersdorfer Holding GmbH

wietersdorfer.com

39

WIG Wietersdorfer Holding GmbH is a large, family-owned industrial enterprise based in Austria with a 125-year history. The company operates internationally with subsidiaries in multiple countries, focusing on sectors such as cement, lime, GFK and PP pipe systems, and industrial minerals. Their business model is centered on manufacturing and global distribution, targeting industrial and construction markets. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with the Avada theme and uses common plugins for forms, multilingual content, and cookie management. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which is a critical issue that needs immediate remediation. Privacy compliance is well addressed with comprehensive policies and a robust cookie consent mechanism. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect user data and maintain trust.

C

Consileon Business Consultancy GmbH

consileon.de

23

Consileon Business Consultancy GmbH is a well-established management and IT consulting firm based in Karlsruhe, Germany, founded in 2001. The company serves a broad range of industries including banking, automotive, healthcare, insurance, and the public sector. It is recognized as a leading consultancy in Germany, evidenced by multiple prestigious awards such as 'Beste Berater' and 'Beste IT-Dienstleister'. Their service portfolio includes business transformation, AI consulting, sustainability, IT transformation, software development, and cybersecurity assessments. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. However, the technical infrastructure shows critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility is high, but the lack of HTTPS is a significant risk that should be urgently addressed.

A

American Superconductor

amsc.com

40

American Superconductor (AMSC) is a medium-sized US-based technology company specializing in advanced power electronics and superconductor systems that support smarter, cleaner energy solutions globally. The company serves energy utilities, renewable energy developers, and marine power sectors, positioning itself as a key player in the energy technology market with NASDAQ listing and a global footprint. The website reflects a professional digital presence with clear business descriptions, investor relations, and product offerings focused on grid and renewable energy solutions. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, hosted on Pantheon, and optimized for mobile users. However, performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, exposing the site to risks and reducing trust. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site is credible but requires urgent security improvements to protect users and enhance trust.

F

FWT Composites & Rolls GmbH

fwt.at

20

FWT Composites & Rolls GmbH is a medium-sized Austrian manufacturing company specializing in composite rollers, tubes, drive shafts, and related services primarily for industrial sectors such as paper, film, and non-woven industries. Founded in 1996, the company has established itself as a leading manufacturer with a strong focus on product quality, customer service, and technical expertise. Their website reflects a professional business presence with detailed product and service descriptions, multilingual support, and active social media engagement via Facebook. Technically, the website is built on WordPress with common plugins and includes structured data for SEO benefits. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Privacy compliance is addressed through a cookie consent mechanism and a comprehensive privacy policy. Overall, the company demonstrates a solid market position but should urgently address its security posture to protect user data and improve trust.

T

TheAngryTeddy Communications

theangryteddy.com

22

TheAngryTeddy Communications is a specialized marketing and podcast production company based in Linz, Austria, serving self-employed professionals and SMEs. The company offers strategic content marketing, podcast production, social selling systems, and coaching services, positioning itself as a trusted partner with over a decade of experience. The website is professionally designed, content-rich, and well-structured, targeting German-speaking audiences with a focus on authentic and mindful marketing approaches. Technically, the site runs on WordPress with the Divi theme and employs multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight. However, the absence of a valid SSL certificate and HTTPS significantly impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with comprehensive policies and consent mechanisms via iubenda. Overall, the business demonstrates strong credibility and market positioning but must urgently address security gaps to protect users and improve trust.

Ö

ÖSTU-STETTIN Hoch- und Tiefbau GmbH

oestu-stettin.at

39

ÖSTU-STETTIN Hoch- und Tiefbau GmbH is a large Austrian construction company specializing in underground and high-rise construction projects worldwide. As part of the HABAU GROUP, it offers a comprehensive range of services including mining, garage construction, general contracting, industrial construction, and tunnel building. The website is professionally designed, multilingual (German and English), and provides detailed service information targeting clients in the construction and infrastructure sectors globally. Technically, the site is built on WordPress with a mature plugin ecosystem and hosted on Azure DNS infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with a GDPR-compliant cookie consent mechanism and a comprehensive privacy policy. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are visible, though social media channels and contact forms are available. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect visitors and enhance trust.

Z

ZENTITY a.s.

zentity.com

28

ZENTITY a.s. is a medium-sized technology company specializing in digital transformation platforms, primarily serving the finance, telecommunications, and energy sectors. Their flagship offering, the Digital Accelerator Platform, enables enterprises to unify and personalize customer journeys across multiple digital channels. The company is recognized globally, including frequent mentions in Gartner's Market Guide, and holds ISO 9001 and ISO 27001 certifications, underscoring their commitment to quality and security. Their client portfolio includes notable brands such as Nedbank, KBC, and Vodafone. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. Hosting is provided by DreamHost. While the site demonstrates good design, navigation, and mobile optimization, performance metrics are lacking, and no valid SSL certificate is configured, resulting in a critical security gap. Forms are protected by Google reCAPTCHA, and contact mechanisms are comprehensive. Security posture is weak due to the absence of HTTPS and modern TLS protocols, lack of security headers, and missing vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is strong, supported by clear contact information, certifications, and client references. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling security headers, and establishing a vulnerability disclosure policy.

B

BG8 Piaristengymnasium

bg8.at

35

BG8 Piaristengymnasium is an educational institution in Austria offering a traditional gymnasium education with a focus on individual student support, social competencies, and language skills. The website serves as an information portal for students, parents, and staff, providing news, school profiles, and contact options. Technically, the site is built on WordPress with a modern theme and plugins, but suffers from an invalid SSL certificate and lack of HTTPS, which significantly impacts its security posture. The site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Overall, the website is functional and professionally designed but requires urgent security improvements to protect user data and enhance trust.