Security Directory

E

EmbeddedArt Group AB

embeddedart.se

31

EmbeddedArt Group AB is a Swedish technology company specializing in embedded systems, underwater technology, and defense-related products and services. Their offerings include underwater sensors, maritime surveillance systems, IoT solutions, and system development services. The company targets defense and marine technology sectors, positioning itself as a niche provider with expertise in embedded and underwater systems. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on their core competencies. Technically, the website uses a custom CMS with older but functional JavaScript libraries such as jQuery 2.1.1, integrated with Google Analytics and Google Tag Manager for tracking. The site is mobile optimized and includes a cookie consent mechanism compliant with GDPR requirements. However, there is no visible evidence of modern security headers or advanced security frameworks implemented. From a security perspective, the site does not show signs of blocking or WAF interference, and no sensitive data is exposed in the HTML. The cookie consent mechanism is robust, but the absence of explicit security policies, incident response contacts, or vulnerability disclosure pages indicates room for improvement in security transparency and readiness. Overall, EmbeddedArt's website demonstrates a moderate to good level of digital maturity with solid business credibility and privacy compliance. Strategic enhancements in security policies, modernizing technical stack, and adding vulnerability disclosure mechanisms would strengthen their security posture and trustworthiness.

K

KPA Pension

kpa.se

53

KPA Pension is a well-established Swedish pension company specializing in occupational pensions for employees within the municipal and regional sectors. The website reflects a strong market position with clear focus on providing secure, ethical, and low-fee pension services. The content is comprehensive and professionally presented, targeting Swedish public sector employees. Technically, the site uses modern web technologies including EPiServer CMS, Adobe Dynamic Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and anti-CSRF tokens in forms, though additional security headers could enhance protection. Privacy compliance is robust with clear GDPR-aligned policies and consent mechanisms. Overall, the site is trustworthy and professionally managed, with clear contact information and no signs of blocking or malicious activity.

V

VillaGaiety

villagaiety.com

55

VillaGaiety is a government-operated entertainment venue management organization based on the Isle of Man, managing premier cultural sites such as the Villa Marina and Gaiety Theatre. The website serves as a comprehensive portal for event information, ticketing, venue hire, and visitor information, targeting local residents and visitors interested in arts and entertainment. The business model revolves around event hosting, ticket sales, and venue services, positioning VillaGaiety as a leading cultural institution on the island. Technically, the website employs a mature technology stack including jQuery, Google Tag Manager, Facebook Pixel, and integrates with the Ticketsolve platform for ticketing. The site is moderately performant, mobile-optimized, and includes accessibility features, though some improvements could be made. SEO practices are good with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators are present. Overall, the website is professional, trustworthy, and well-aligned with its government affiliation. Recommendations include enhancing security headers, documenting security policies, and improving accessibility compliance to further strengthen the security posture and user experience.

The Isle of Man Post Office website serves as the official digital presence for the government postal service of the Isle of Man. It offers a comprehensive range of services including online postage, mail receiving and sending, foreign currency exchange, business mailing solutions, and retail products such as stamps and coins. The site targets both individual residents and businesses within the Isle of Man and surrounding regions, positioning itself as the primary postal and related services provider in the territory. The business model is government-operated, focusing on providing essential postal and financial services with a strong emphasis on customer convenience and digital accessibility. Technically, the website employs a modern technology stack including jQuery, the Foundation CSS framework, Google reCAPTCHA v3 for bot protection, and integrates Google Fonts and jQuery UI for enhanced user experience. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS (implied by external Google reCAPTCHA and Google Fonts usage over HTTPS), includes CSRF tokens in forms, and implements a cookie consent mechanism compliant with GDPR. However, explicit HTTP security headers are not detected in the provided data, and no published security policy or incident response contacts are found. There are no visible vulnerabilities or exposed sensitive data. The site integrates tracking and marketing tools such as Google Analytics and Facebook Pixel, with moderate user tracking levels and good privacy compliance. Overall, the website is professionally designed, trustworthy, and well-aligned with the official government postal service branding. The domain registration data matches the website content and business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and user trust.

S

SIA ZZ Dats

epakalpojumi.lv

59

The website epakalpojumi. lv serves as a comprehensive e-government portal for Latvia, providing integrated electronic services that aggregate data from municipalities, state institutions, and commercial entities.

PDW Logistik GmbH operates as a logistics and delivery service provider specializing in the distribution of print media within Austria. As part of the Mediaprintkonzern, it manages the home delivery of approximately 475,000 daily print media items and supports self-service sales through dedicated devices. The website targets print media distributors, delivery partners, and customers, emphasizing recruitment of delivery partners and service information. The business model focuses on logistics services within the media sector, positioning PDW as a key player in Austrian print media distribution. Technically, the website employs a traditional Apache server with a frontend built on Bootstrap 4.5.2, jQuery, and FontAwesome Pro. While the site is mobile optimized and uses modern libraries, it lacks HTTPS support, which is a significant security and trust concern. Performance metrics are unavailable or incomplete, but the site structure and navigation are clear and professional. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented via Didomi. From a security perspective, the absence of a valid SSL certificate and HTTPS support critically undermines the site's security posture. No advanced security headers or vulnerability disclosure policies are present. Cookies are set with HttpOnly flags, but the lack of encryption exposes users to potential risks. The domain registration data is consistent with the business identity, indicating legitimacy, but the security gaps pose risks to user trust and data protection. Overall, PDW Logistik GmbH's website is professionally designed and content-rich but requires urgent security improvements, particularly the implementation of HTTPS and enhanced security headers. Strengthening these areas will improve user trust, compliance, and overall digital maturity.

Bharat Fritz Werner Ltd. (BFW) is a well-established Indian manufacturer specializing in Vertical Machining Centers (VMCs) and CNC machine tools, boasting over 60,000 global installations. The company targets industrial manufacturing sectors and offers an online platform for machine enquiries and purchases. The website reflects a professional and consistent brand presence with clear contact details and social media integration. Technically, the site uses a modern JavaScript and CSS stack including jQuery, Bootstrap, and FontAwesome, hosted on GoDaddy infrastructure. However, the absence of a valid SSL certificate and HTTPS significantly undermines the security posture. While forms implement CSRF tokens and OTP verification, the lack of HTTPS and security headers exposes users to risks. Privacy compliance is minimal, with no cookie consent mechanism despite cookie usage. Overall, the site is functional and business-focused but requires urgent security improvements to protect user data and enhance trust.

Nice Software B.V. operates the paranice.nl website, providing specialized software solutions for paramedical care, medical specialist rehabilitation, and geriatric rehabilitation in the Netherlands. Their offerings include electronic patient dossiers (EPD), planning, declaration management, and mobile applications tailored to healthcare providers. The company targets healthcare institutions such as hospitals, rehabilitation centers, and care organizations, positioning itself as an established player with a mature domain and active partnerships. The website content is professional, well-structured, and provides clear contact channels, supporting a positive business image. Technically, the website uses a traditional web stack with jQuery, Bootstrap, and several JavaScript libraries. Hosting and domain registration are managed by Claranet Benelux B.V., a reputable provider. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security and trust concern. The site implements Google Analytics and Google reCAPTCHA v3 for analytics and bot protection, and it includes GDPR-compliant privacy and cookie policies with consent mechanisms. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the security posture. Minimal security headers and lack of DNSSEC or domain protection locks further reduce security confidence. While forms use reCAPTCHA and secure cookies, the overall security configuration is basic and requires urgent improvement to protect user data and maintain trust. Overall, the website is functional and business-appropriate but suffers from critical security shortcomings. Addressing SSL/TLS issues and enhancing security headers would significantly improve the security posture and user trust. The business appears legitimate and established, but the security gaps present risks that should be prioritized.

M

Montessori Campus Wien Hütteldorf

montessoricampus.at

30

Montessori Campus Wien Hütteldorf is an established educational institution in Vienna, Austria, providing Montessori-based education from early childhood through secondary levels, including the International Baccalaureate Diploma Programme. Founded in 1995, it targets parents seeking comprehensive Montessori education for children aged 0 to 18 years. The website offers detailed pedagogical content, program descriptions, and contact information, reflecting a strong educational focus and community engagement. Technically, the site uses standard web technologies including jQuery and CSS, but lacks modern CMS or advanced frameworks. Security posture is moderate with no visible HTTPS confirmation or security headers, and the use of an outdated jQuery version presents potential vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but would benefit from improved security and privacy practices.

F

fortunasports

helpsole.com

38

Fortunasports is an Indonesian online sports betting platform offering live sports schedules, competitive odds, and live betting with streaming features. The website serves as a front-facing portal but heavily links to an external domain fortunasports.xyz, which likely hosts the main service. The site uses common frontend technologies such as Bootstrap and jQuery but lacks modern SEO, accessibility, and security best practices. No privacy or cookie policies are present, and no company contact information is provided, which reduces user trust and compliance with data protection regulations. Security posture is weak due to absence of HTTPS and security headers. Overall, the site appears functional but lacks professionalism and transparency, posing risks to users and limiting business credibility.

S

SIPRIN, s.r.o.

siprin.sk

46

SIPRIN, s.r.o. is a well-established Slovak subsidiary of Siemens, specializing in industrial automation, maintenance outsourcing, and technical training. Founded in 1999, the company leverages Siemens technologies to provide engineering, maintenance, and educational services primarily to industrial clients. The website reflects a mature digital presence with comprehensive service and training descriptions, clear contact channels, and strong compliance messaging. Technically, the site uses a modern tech stack including Bootstrap and jQuery, with good mobile responsiveness and user experience. Security posture is solid with HTTPS and a detailed compliance program, though some security headers could be improved. No blocking or WAF interference was detected, allowing full content access. Overall, the site projects professionalism, trustworthiness, and alignment with Siemens corporate standards.

GÜNTHER Heisskanaltechnik GmbH is a medium-sized German manufacturer specializing in hot runner and cold runner systems for injection molding applications, serving plastics and silicone processing industries globally. The company positions itself as a technology leader with over 40 years of expertise, offering innovative, energy-efficient, and reliable solutions. Their website reflects a professional and comprehensive digital presence, featuring detailed product information, technical services, and customer support including augmented reality assistance and seminars. The technical infrastructure is based on the Contao CMS with modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. Business credibility is high, supported by certifications such as ISO 9001 and ISO 14001, and consistent domain registration data. Overall, the website is trustworthy, well-maintained, and aligned with the company's business objectives.

D

Diakon

diakon.org

35

Diakon is a well-established non-profit organization founded in 1868, providing a broad range of social services including adoption, foster care, behavioral health, affordable housing, and senior services. The organization targets children, youth, families, and older adults, serving nearly 70,000 individuals annually. Their market position is strong within the non-profit social services sector, supported by a consistent brand presence and multiple service offerings. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, indicating moderate digital maturity. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS usage and CSRF protections, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, with room for improvement in security and privacy transparency.

G

Global Voices

globalvoices.org

31

Global Voices is a reputable international non-profit media organization founded in 2005, focusing on multilingual journalism, digital rights, and human rights advocacy. The website serves a global audience with rich, regularly updated content and a strong contributor network. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager, Plausible Analytics, and Mailchimp. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security gap. Privacy compliance is moderate, with a comprehensive privacy policy but no cookie consent mechanism detected. Overall, the website demonstrates excellent content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

S

s-team IT solutions GmbH

s-team.at

38

s-team IT solutions GmbH is a small Austrian IT services company based in Vienna, specializing in IT infrastructure, server maintenance, virtualization, and custom web development. Established in 2002, it serves a diverse clientele including small and large companies as well as public organizations. The website reflects a professional and consistent brand presence with clear contact information and client testimonials, indicating a trustworthy business. Technically, the site runs on Contao CMS with common JavaScript libraries but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS exposes visitors to potential data interception risks. Security headers are well configured, but the lack of modern TLS protocols and HSTS reduces the overall security posture. Privacy compliance is partially met with a GDPR-compliant privacy policy but no cookie consent mechanism. Overall, the website is functional and professional but requires urgent security improvements to protect users and enhance trust.

D

daten-strom.Medical-IT-Services GmbH

datenstrom.net

19

daten-strom.Medical-IT-Services GmbH is a specialized small business focused on providing secure digital transformation services in the healthcare sector, including IT security, telematics, and data protection for medical and care facilities in Germany and Austria. Their website presents a professional image with comprehensive content targeting healthcare providers such as doctors, therapists, and care institutions. Technically, the site is built on the Contao CMS platform using common web technologies like jQuery and Revolution Slider, with good mobile optimization and user experience. However, the absence of HTTPS and valid SSL certificates represents a critical security vulnerability, exposing users to potential data interception risks. The website includes privacy and cookie policies with consent mechanisms, reflecting GDPR compliance efforts, but lacks explicit terms of service and security policy documentation. DNS records for the domain are missing, raising concerns about domain configuration and legitimacy. Overall, while the business content and presentation are solid, significant improvements in security infrastructure are urgently needed to protect sensitive healthcare data and enhance trust.

L

Logwin AG

logwin-logistics.com

40

Logwin AG operates an international logistics and transportation services website offering a broad range of services including sea freight, air freight, warehousing, and transport management. The company targets businesses requiring reliable logistics solutions and positions itself as a professional and dedicated provider with a worldwide network. The website is built on TYPO3 CMS and uses modern frontend technologies such as jQuery and Fancybox, providing a good user experience with clear navigation and professional design. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Security headers are partially implemented, and privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

G

GLATZ Gruppe

glatz.at

24

GLATZ Gruppe is a medium-sized family-owned manufacturing and service business based in Austria, specializing in stamps, printing plates, and packaging management solutions. The company operates multiple subsidiaries and maintains a professional online presence with detailed contact information and active social media channels. Technically, the website is built on Contao CMS and uses modern JavaScript libraries, but suffers from critical security shortcomings such as lack of HTTPS and valid SSL certificates. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. The absence of a valid SSL certificate and missing DNS records reduce the overall trust and security posture, posing risks to user data confidentiality and site integrity. Strategic improvements in SSL deployment and DNS configuration are essential to enhance security and trust.

C

Controller Institut s.r.o.

controlling.cz

24

Controller Institut s.r.o. is a well-established Czech education provider specializing in finance and controlling training, offering seminars, certified cycles, online courses, corporate training, and mentoring. The company targets finance professionals and controllers seeking practical and certified education. The website reflects a mature business with 30 years of market presence and a strong focus on quality content and professional services. Technically, the site uses a custom CMS with popular JavaScript libraries and marketing tools but lacks modern security measures such as HTTPS, which is a critical vulnerability. The security posture is weak due to the absence of SSL/TLS and related security headers, exposing users to risks. Privacy compliance is partial, with no active cookie consent mechanism despite tracking scripts in use. Overall, the business credibility is high, supported by consistent WHOIS data and clear contact information. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect users.

KAICIID is an intergovernmental organization dedicated to promoting intercultural and interreligious dialogue to foster peace globally. The website reflects a mature organization with a clear mission, targeting religious leaders, educators, and policymakers. It offers capacity building, dialogue platforms, and regional initiatives. Technically, the site is built on Drupal 10 with modern frontend libraries and hosted on Pantheon, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly reduces the security posture. Privacy compliance is basic, with no cookie consent mechanisms despite tracking scripts. Contact information and social media presence are well established, supporting business credibility. Overall, the site is professional and content-rich but requires urgent security improvements.

Q

QuoVadis

quovadisglobal.com

34

QuoVadis, now a part of DigiCert, is a well-established international Certification Service Provider specializing in digital certificates, SSL/TLS, managed PKI, digital signature solutions, and root signing. The company holds strong accreditations such as WebTrust and ETSI and serves a broad clientele including top banks, e-commerce sites, and Fortune 500 companies primarily in Europe and Bermuda. Their business model focuses on providing high-assurance digital identity and security services with local compliance and disaster recovery capabilities. The website reflects a professional and consistent brand presence with comprehensive service offerings and multiple country offices.

H

Hotel Das Innsbruck GmbH & CO. KG

hotelinnsbruck.com

38

Hotel Das Innsbruck GmbH & CO. KG operates a 4-star hotel located in the historic center of Innsbruck, Austria. The business offers a range of hospitality services including accommodation, wellness and spa facilities, conference and seminar hosting, and dining options. The website is professionally designed with excellent content quality and clear navigation, targeting tourists and business travelers seeking premium lodging and event services in Innsbruck. The company has a strong market position supported by recognized certifications such as the TripAdvisor Certificate of Excellence and Gault Millau recommendations. Technically, the website uses a modern CMS (Condeon) and popular JavaScript libraries, but suffers from slow performance and lacks HTTPS, which is a critical security gap. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policy. Business credibility is high with transparent contact information and structured data markup.

K

Kammer für Arbeiter und Angestellte für Wien

akwien.at

40

The website akwien.at represents the Kammer für Arbeiter und Angestellte für Wien, a government-related non-profit organization advocating for workers' rights and social services in Vienna, Austria. The site offers comprehensive information and services including legal advice, consumer protection, educational resources, and digitalization funding. It targets employees and workers in Vienna, providing a rich content experience with clear navigation and strong branding. Technically, the site is built on a Gentics Portal CMS with a modern tech stack including jQuery, Bootstrap, Matomo Analytics, and Usercentrics for consent management. Hosting is provided by Anexia. While the site is mobile optimized and accessible, performance metrics indicate slow loading, and the SSL/TLS configuration is currently invalid, which is a critical security concern. Security posture is moderate with several security headers implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high due to consistent branding, official contact information, and alignment with WHOIS data. Overall, the site is a professional and trustworthy resource for workers in Vienna but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

T

TAL Aviation Group

talaviation.com

40

TAL Aviation Group is a well-established airline representation and travel services company with a global presence and a history dating back to 1987. The company offers a broad range of services including passenger and cargo GSA, airline distribution, destination marketing, tourism services, and digital marketing solutions. Their website reflects a professional and consistent brand image targeting airlines, tourism boards, and travel technology companies worldwide. Technically, the website uses a custom CMS with legacy jQuery libraries and integrates common marketing and analytics tools such as Google Analytics and Outbrain. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are implemented but cannot compensate for the lack of encryption. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, indicating awareness of GDPR requirements. Overall, the website is functional and credible but requires urgent security improvements to meet modern standards.

B

Brick & Patel LLP

brickpatel.com

40

Brick & Patel LLP is a small legal services firm specializing in trust and estate planning and administration, serving clients primarily in several US states including New York and Florida. The website provides basic information about the firm's services and geographic focus but lacks detailed contact information and modern web features. Technically, the site is built on an Apache server using older JavaScript libraries and Cloudfront CDN for some assets. However, the site lacks a valid SSL certificate, resulting in no HTTPS support despite security headers indicating HSTS, which undermines user trust and security. Privacy compliance is minimal with no cookie consent mechanism and only a basic privacy policy present. Business credibility is supported by a mature domain and consistent WHOIS data, but the overall digital maturity is low. Security posture is weak due to missing SSL and outdated libraries, posing risks to visitors and the firm's reputation. Strategic improvements should focus on securing the site with valid SSL, updating technology stack, and enhancing privacy and security policies to meet modern standards.

S

Sport England

sportengland.org

37

Sport England is a UK government-related non-profit organization dedicated to promoting sport and physical activity across England. The website serves as a comprehensive resource hub offering funding opportunities, research data, guidance, and campaigns to support various stakeholders including volunteers, grassroots organizers, schools, and national governing bodies. The organization is primarily funded by the National Lottery, which is prominently acknowledged on the site. The website is professionally designed with clear navigation and strong branding consistency, targeting a broad audience involved in sport and physical activity.

G

GIG Fassaden GmbH

gig.at

32

GIG Fassaden GmbH is a medium-sized Austrian company specializing in premium metal and glass facade solutions for international architecture projects. Their business model focuses on B2B services including design, engineering, prototyping, manufacturing, installation, maintenance, and renovation of building envelopes. The company maintains a strong market position with a consistent brand presence and comprehensive service offerings. Technically, the website is built on WordPress with modern libraries and plugins, optimized for SEO and mobile responsiveness. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing the site to risks and undermining user trust. Privacy policies and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

M

Mobile & Wireless Forum

mwfai.org

25

The Mobile & Wireless Forum is an international association focused on mobile and wireless communications, including emerging technologies such as 5G and the Internet of Things. It operates as a membership organization providing resources, publications, events, and advocacy on key industry issues like accessibility, electromagnetic field health, SAR compliance, counterfeit devices, and e-labelling. The website serves as a hub linking to multiple related sites and social media channels, targeting companies and professionals in the telecommunications sector. Technically, the website is built on a Microsoft IIS 10.0 server using ASP.NET and ColdFusion technology. It employs common JavaScript libraries such as jQuery and jQuery UI and uses a responsive navigation plugin (SlickNav). Hosting is provided by Hostek. However, the site lacks HTTPS support and modern TLS protocols, which is a critical security shortfall. Performance metrics are not available, but the site shows basic mobile optimization and accessibility features. From a security perspective, the absence of a valid SSL certificate and HTTPS is the most significant vulnerability, severely impacting the site's security posture. Other security best practices such as HSTS, OCSP stapling, and modern cipher suites are missing. The site does implement HttpOnly and Secure flags on cookies and has a visible cookie consent mechanism aligned with GDPR compliance. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are published. Overall, the site is functional and provides relevant content with good navigation and professional design. However, the lack of HTTPS and modern security configurations poses a risk to user data and trust. Strategic improvements in security infrastructure and transparency would enhance the site's credibility and compliance standing.

Electro Terminal GmbH & Co KG is a medium-sized Austrian manufacturer specializing in connection technology for lighting, household appliances, and electrical installations. With over 60 years of experience and recognized innovation awards, the company serves OEMs and manufacturers with development, manufacturing, and distribution of connectors and related components. The website is built on TYPO3 CMS with modern frontend libraries and includes clear business and contact information, social media presence, and compliance-related pages such as privacy and cookie policies. However, the absence of HTTPS/SSL is a critical security vulnerability that significantly impacts the site's security posture. While cookie consent mechanisms and privacy policies are in place, no explicit security policy or incident response information is found. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements.

MS Design GmbH is a medium-sized manufacturing company based in Tirol, Austria, specializing as a system supplier to the automotive industry. Founded in 1983, the company offers comprehensive services from design and prototyping to production start, emphasizing quality, innovation, and customer satisfaction. Their market position is supported by multiple certifications including IATF 16949 and ISO standards, reflecting a strong commitment to quality and environmental management. Technically, the website is built on TYPO3 CMS with a modern but basic technology stack including jQuery and various UI libraries. While the site is well-structured, mobile-optimized, and SEO-friendly, it lacks HTTPS support and a valid SSL certificate, which is a critical security gap. The hosting environment appears to be a Plesk-managed Apache server without advanced security configurations such as HSTS or DNSSEC. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. Although some security headers are present and email obfuscation is implemented, the lack of encryption exposes users to risks. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but incident response and vulnerability disclosure information are missing. Overall, the website demonstrates good business credibility and content quality but suffers from critical security shortcomings. Strategic improvements in SSL implementation and enhanced security headers are recommended to elevate trust and compliance.

I

IKG Group AB

ikg.se

19

IKG Group AB is a mature Swedish technical consulting company specializing in engineering services for product development firms. With over 28 years of domain age and a presence in ten Swedish cities, the company offers a broad range of engineering disciplines including software development, mechanics, IT systems, electrical construction, and project management. The website reflects a professional business with consistent branding and a clear focus on technical consulting services. Technically, the site uses an older jQuery-based stack combined with modern analytics tools like Google Analytics and Tag Manager. However, the website suffers from significant security shortcomings, notably the absence of HTTPS and a valid SSL certificate, which exposes visitors to risks and reduces trust. Privacy compliance is basic, with a cookie consent banner present but no visible privacy policy or terms of service. The business information is clear and consistent with WHOIS data, supporting legitimacy. Overall, the site is functional but requires urgent security improvements to protect users and enhance credibility.

M

MCR

morse.com

40

MCR is a well-established and large hotel management and ownership company, recognized as the third largest hotel owner-operator in the United States. The company operates a diverse portfolio of hotels across multiple states and brands, with a strong reputation supported by numerous industry awards and recognitions. The website reflects a mature business with a professional online presence, targeting investors, partners, and hospitality professionals. Technically, the website is built on WordPress with a modern tech stack including jQuery and Google Maps integration, but suffers from a lack of HTTPS due to an invalid or missing SSL certificate, which significantly impacts its security posture. Security headers are well implemented, but the absence of SSL and modern TLS protocols is a critical vulnerability. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but the lack of a cookie consent mechanism is a gap. Overall, the website is content-rich and professionally designed but requires urgent security improvements to protect user data and enhance trust.

E

Eti

etietieti.com

39

Eti is a well-established Turkish food manufacturing company with a strong market presence and a diverse product portfolio including biscuits, chocolates, and health-oriented food products. The website serves as a comprehensive corporate portal providing product information, recipes, corporate governance details, career opportunities, and social responsibility initiatives. The site targets consumers interested in quality food products and healthy nutrition, leveraging a consistent brand identity and multiple language options for international reach. Technically, the website is built on ASP.NET WebForms and uses modern JavaScript libraries for UI enhancements. However, performance metrics are lacking and the site suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which significantly impacts user trust and security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR requirements. Social media integration and partner links enhance the brand's digital ecosystem. Overall, Eti's website is professional and content-rich but requires urgent security improvements to meet modern standards.

B

BORBET GmbH

borbet-austria.at

30

BORBET GmbH is a large, internationally oriented family-owned manufacturer specializing in aluminum alloy wheels for the automotive industry and specialist trade. The company offers a comprehensive product range including a 3D wheel configurator and operates both B2B and B2C sales channels. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting automotive customers and partners. Technically, the site uses a custom CMS with common JavaScript libraries but lacks modern SSL/TLS security, which is a critical vulnerability. Privacy compliance is well addressed with a cookie consent mechanism and clear privacy policy. Contact information and social media presence enhance business credibility. However, the absence of a valid SSL certificate and TLS protocols significantly undermines the security posture, exposing users to risks. Strategic improvements in SSL deployment and security best practices are urgently recommended.

A

AMES - Aerospace and Mechanical Engineering Services

ames.aero

19

AMES - Aerospace and Mechanical Engineering Services is a mature Austrian company specializing in aerospace engineering, certification, production, maintenance, CAMO, consulting, and training services. With a domain age of 17 years and multiple aerospace certifications, AMES positions itself as a reliable service provider in the aerospace transportation sector. The website reflects a professional business model targeting aerospace industry professionals and companies requiring specialized engineering and certification services. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs a variety of established JavaScript libraries and frameworks such as jQuery, Bootstrap, and Owl Carousel, indicating a moderate level of digital maturity. However, the site lacks HTTPS encryption and modern security configurations, which significantly impacts its security posture. Performance is rated slow due to missing SSL and potential optimization gaps, though mobile responsiveness and navigation clarity are good. Security evaluation reveals critical vulnerabilities including the absence of SSL/TLS, no HSTS, no DNSSEC, and missing security headers. These gaps expose the site to potential interception and downgrade attacks. The domain's imminent expiry in 11 days adds operational risk. Privacy compliance is minimal, with basic privacy and terms documents available but no cookie consent or incident response contacts. Overall, AMES demonstrates solid business credibility and content quality but requires urgent security improvements to protect its digital assets and customer trust. Strategic recommendations include immediate SSL implementation, enhanced domain protection, and adoption of security best practices to elevate the security score and compliance posture.

E

Eurofins Scientific

eurofins.com

40

Eurofins Scientific operates a comprehensive global network of laboratory testing services specializing in food, environment, pharmaceutical product testing, and agroscience CRO services. With approximately 63,000 employees and over 950 laboratories across 60 countries, Eurofins is a world leader in its sector, offering more than 200,000 analytical methods. The website reflects this extensive business scope with detailed service offerings and a strong global presence. Technically, the site uses modern JavaScript libraries and analytics tools, but suffers from critical SSL/TLS configuration issues that undermine its security posture. Security headers are implemented, but the lack of a valid SSL certificate and disabled TLS protocols represent significant vulnerabilities. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies in place. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL/TLS issues to ensure secure user interactions.

B

Baumit.com

baumit.com

36

Baumit.com is an established international company specializing in building materials, facade insulation, and innovative construction technologies such as 3D concrete printing. The company emphasizes sustainability and healthy living environments, supported by research initiatives like the VIVA Research Park. The website presents a professional and consistent brand image with good content quality and navigation. Technically, the site uses a variety of modern JavaScript libraries and custom CMS solutions, but the main domain lacks HTTPS, which is a significant security concern. The subdomain int.baumit.com uses HTTPS properly. Security posture is weak due to missing SSL on the main domain and lack of security headers. Privacy compliance is well addressed with clear cookie consent and privacy policies. Business credibility is supported by consistent WHOIS data and structured organization information. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance trust.

J

Job-TransFair gemeinnützige GmbH

jobtransfair.at

27

Job-TransFair gemeinnützige GmbH is a Vienna-based non-profit organization dedicated to supporting disadvantaged individuals in the labor market by facilitating permanent employment opportunities. The organization collaborates with a large network of partner companies and receives financial support from the AMS Wien and the City of Vienna. Their website provides comprehensive information about their services, success stories, and job offers, targeting both job seekers and employers. The content is well-structured, professionally presented, and primarily in German. Technically, the site is built on the Contao CMS platform with modern frontend technologies like Bootstrap and jQuery, but suffers from a critical lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. Privacy compliance is strong, with Cookiebot implemented for consent management and clear privacy and cookie policies. The site also integrates Google Tag Manager for analytics and marketing purposes. Overall, the business is credible and transparent, with clear contact information and trust indicators such as certifications and partnerships.

wengermayer business consulting is a small Austrian consulting firm specializing in human-centric organizational development, communication culture, conflict management, and personnel development. Their services focus on supporting businesses where human interaction and development are central. The website is built on Contao CMS and hosted on an Apache server with Ubuntu, using various JavaScript libraries for UI enhancements. However, the site lacks HTTPS, which is a critical security vulnerability. Cookie consent is implemented via Cookiebot, indicating awareness of privacy compliance. Social media presence on XING, LinkedIn, Facebook, and Twitter supports business credibility. Overall, the technical infrastructure is basic with room for modernization and security improvements.

Weatherford's PetroVisor website presents a mature and comprehensive SaaS platform focused on unifying data and analytics for the energy sector, specifically oil and gas production optimization. The platform integrates AI/ML capabilities and offers multiple modules addressing production, artificial lift, completion optimization, ESG, and enhanced oil recovery. The website is professionally designed, content-rich, and targets enterprise-level energy industry professionals. Technically, the site uses a modern tech stack including Kentico CMS, jQuery, and various analytics and marketing tools. However, a critical security gap exists as the site lacks a valid SSL certificate and does not serve content over HTTPS, exposing users to potential risks. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security incident response or vulnerability disclosure information is found. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic security improvements are necessary to enhance trust and protect user data.

D

Dorotheum GmbH & Co KG

dorotheum.com

40

Dorotheum GmbH & Co KG operates the largest auction house in Central Europe, specializing in art, antiques, jewelry, and collectibles with over 300 years of experience. The company holds numerous auctions annually, both online and in physical salerooms, and offers additional services such as private sales and expert consultations. The website is professionally designed, content-rich, and targets collectors, buyers, and sellers in the art and luxury goods market primarily in Austria and surrounding regions. Technically, the site is built on TYPO3 CMS with modern frontend libraries and integrates analytics and marketing tools like Google Tag Manager and Facebook Pixel. However, the absence of a valid SSL certificate and lack of security headers represent significant security weaknesses. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent improvements in security posture to protect user data and enhance trust.

Q

Quality Austria

qualityaustria.com

32

Quality Austria is a leading Austrian institution specializing in integrated management systems, quality certification, and training services. The company offers a broad range of certifications including ISO standards, Austria Gütezeichen, and EOQ certificates, positioning itself as a trusted partner for organizations seeking quality assurance and compliance. The website reflects a mature digital presence with comprehensive content, multi-language support, and a professional design tailored to its target audience of businesses and public organizations. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by performance optimizations such as WP Rocket and advanced search via FacetWP. The use of Borlabs Cookie ensures compliance with privacy regulations through effective consent management. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. Security measures include several HTTP security headers and a content security policy restricting frame ancestors, but the invalid SSL certificate and lack of explicit security or incident response policies indicate areas for improvement. Overall, the site demonstrates strong business credibility and privacy compliance but requires urgent attention to its SSL configuration to ensure secure user interactions.

B

Barmherzige Brüder Wien

bbwien.at

38

Barmherzige Brüder Wien operates as a large, well-established non-profit hospital in Austria, providing a broad range of medical services and patient care. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media engagement. Technically, the site uses a modern CMS (siteswift) and popular JavaScript libraries to enhance user experience. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in all traffic being served over HTTP, which exposes users to potential interception risks. The site implements GDPR-compliant privacy and cookie consent mechanisms, indicating awareness of privacy regulations. WHOIS data confirms domain legitimacy and consistency with the hospital's identity. Overall, the site is professional and trustworthy but urgently requires HTTPS implementation to secure user data and improve security posture.

C

Cloudera

cloudera.com

40

Cloudera is a leading enterprise technology company specializing in hybrid data platforms that enable secure data management and cloud-native analytics. The company targets large enterprises across multiple sectors including technology, healthcare, finance, manufacturing, and government. Their platform supports data engineering, AI, streaming, and operational databases, positioning them strongly in the hybrid multi-cloud data market. The website reflects a mature digital presence with comprehensive content, strong branding, and extensive customer references. Technically, the site is built on Adobe Experience Manager with integrations of Adobe Analytics, Segment, Coveo search, and Brightcove video services. The site is mobile optimized and well structured for SEO and accessibility. However, the SSL configuration is currently invalid with no TLS protocols enabled, which is a critical security concern. Security headers are partially implemented but HSTS is not fully enabled. Privacy and compliance policies are comprehensive and prominently linked, indicating good GDPR and data protection awareness. Contact information is clearly provided with phone numbers and support portals. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Cloudera's website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL and TLS configurations to improve security posture and user trust.

Desmet is a well-established global engineering company specializing in custom plants and equipment for the food, feed, and biofuel industries. With a large workforce and multiple brands, it holds a strong market position supported by extensive experience and a professional digital presence. The website is content-rich, well-structured, and uses modern technologies, but critically lacks HTTPS/SSL, which severely impacts its security posture. While security headers are implemented, the absence of valid SSL/TLS and related configurations exposes the site to risks. Privacy compliance is partially addressed with visible privacy and cookie policies, but no explicit consent mechanism is detected. Business credibility is high due to clear branding, contact information, and WHOIS consistency. Strategic improvements in security infrastructure and incident response readiness are recommended.

H

Huppenkothen GmbH

huppenkothen.at

35

Huppenkothen GmbH operates a professional website focused on the sale and rental of mini and compact construction machinery, serving primarily the Austrian construction sector. The company maintains a strong market position with 42 locations and a large inventory of machines and spare parts. The website is well-designed, content-rich, and optimized for SEO and accessibility, targeting construction professionals and businesses. Technically, the site is built on WordPress with modern plugins and frameworks, but lacks HTTPS, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a mature digital presence but requires urgent security improvements to protect user data and trust.

PTM EDV-Systeme GmbH operates the website mscrm-addons.com, providing specialized add-ons and solutions for Microsoft Dynamics 365 and Power Platform users. The company offers a mature product portfolio addressing document creation, capacity management, and activity handling, targeting businesses using Microsoft technologies. The website demonstrates a professional presence with clear business information, customer testimonials, and partner programs, positioning itself as a trusted provider in the technology sector. Technically, the site is built on ASP.NET with the DNN CMS platform and integrates modern JavaScript libraries and Google services for analytics and user interaction. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support and exposing users to potential risks. Privacy compliance is addressed with cookie consent and a privacy policy, and contact channels are well established. Overall, while the business and content quality are strong, the lack of HTTPS significantly impacts the security posture and user trust.

Flughafen Wien AG operates Vienna International Airport, providing a wide range of passenger services including flight information, parking, lounges, VIP services, and retail. The website targets passengers, business partners, and visitors, positioning itself as a leading airport in Austria with comprehensive service offerings. The digital infrastructure uses modern frameworks like Bootstrap and integrates privacy-conscious analytics via Matomo. However, the absence of a valid SSL certificate and HTTPS significantly undermines the security posture. Security headers are partially implemented, but critical improvements are needed to secure user data and communications. The domain is mature and legitimately registered, consistent with the airport's long-standing presence. Overall, the website is professional and content-rich but requires urgent security enhancements.

S

Standortagentur Tirol GmbH

standort-tirol.at

21

Standortagentur Tirol GmbH is a regional economic development agency based in Tirol, Austria, focused on fostering innovation, technology, and sustainable growth for businesses, research institutions, and municipalities. The company operates as part of the Lebensraum Tirol Holding and offers a broad range of services including support for digitalization, funding, cluster networking, and internationalization. Their website reflects a professional and well-structured digital presence targeting multiple stakeholder groups with relevant content and resources. Technically, the site runs on Microsoft IIS with ASP.NET and uses common JavaScript libraries and marketing tools such as Google Tag Manager and Cookiebot for consent management. However, a critical security weakness is the absence of HTTPS and a valid SSL certificate, exposing users to potential risks. Privacy compliance is addressed with visible policies and consent mechanisms, but incident response and security policies are not evident. Overall, the site is credible and functional but requires urgent security improvements to protect user data and enhance trust.

O

Oper Graz

oper-graz.com

37

Oper Graz is a well-established cultural institution based in Austria, specializing in opera, ballet, concerts, and related performing arts. The website serves as a portal for event information, ticket sales, and community engagement, targeting a broad audience including families, youth, and cultural enthusiasts. The business model revolves around live event performances and ticketing services, supported by partnerships with regional theater organizations. Technically, the site is built on WordPress with a multilingual setup and uses common plugins for SEO, forms, and interactive content. However, the absence of a valid SSL certificate and HTTPS severely impacts the site's security posture. While the site demonstrates good content quality, accessibility, and SEO practices, the lack of modern security protocols and headers exposes it to risks. Privacy compliance is addressed with clear policies and cookie consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.