Security Directory

L

Luminor Bank AS

luminor.ee

40

Luminor Bank AS operates as a leading financial institution in the Baltic region, offering a comprehensive suite of banking services including payments, loans, savings, investments, and private banking. The website targets both retail and business customers and positions itself as the third largest financial services provider in the Baltics. The digital presence is built on modern web technologies such as React and integrates tools like Google Tag Manager and LiveChat for enhanced user engagement. However, the website suffers from a critical security flaw due to the absence of a valid SSL certificate, exposing users to potential data interception risks. Privacy and cookie policies are well implemented and GDPR compliant, reflecting a strong commitment to user data protection. Overall, while the business credibility and content quality are high, the security posture requires urgent improvement to meet industry standards and protect customer data effectively.

D

DISNEY ADVERTISING SALES, LLC

disneycampaignmanager.com

53

Disney Campaign Manager is a self-service digital advertising platform focused on streaming TV ad buying across Disney's premium streaming properties such as Disney+, Hulu, and ESPN+. The platform targets advertisers and agencies seeking efficient campaign setup, audience targeting, and real-time optimization. The website is professionally designed using WordPress and integrates multiple modern JavaScript libraries and marketing tools including Pardot and Tealium. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy compliance is well addressed with OneTrust cookie consent and clear privacy and terms pages. Social media presence and testimonials add to business credibility.

W

Whirlpool Corporation

whirlpoolcorp.com

38

Whirlpool Corporation is a leading global manufacturer of home appliances with a rich history spanning over 110 years. The company operates multiple well-known brands and focuses on innovation, sustainability, and social responsibility to improve life at home. Their website reflects a mature enterprise with comprehensive corporate information, investor relations, and brand portfolios targeting consumers, investors, and trade partners worldwide. Technically, the website is built on Adobe Experience Manager and delivered via Akamai CDN, using modern JavaScript libraries and cookie consent mechanisms. However, a critical security gap exists as the site lacks HTTPS support, exposing users to potential risks. Security headers are partially implemented, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with cookie consent and privacy policies, and business credibility is high given the consistent branding and WHOIS data. Overall, the site is professional and trustworthy but urgently requires SSL implementation to meet modern security standards.

A

Alpiq Holding Ltd.

alpiq.com

40

Alpiq Holding Ltd. is a leading Swiss electricity producer and energy service provider operating across Europe. The company focuses on electricity generation, energy trading, and renewable energy management, positioning itself as a key player in the energy sector with a large operational footprint and multiple subsidiaries in European countries. The website reflects a mature and professional business with comprehensive content and clear branding. Technically, the site is built on TYPO3 CMS and hosted on AWS infrastructure, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, lack of security headers, and no modern TLS protocols enabled. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism implemented via OneTrust. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

N

NatWest Group

rbs.com

40

NatWest Group is a mature, UK-focused banking institution serving over 19 million customers across retail, commercial, and private banking sectors. The website reflects a strong commitment to sustainability, governance, and investor transparency, positioning the group as a trusted financial partner. The digital infrastructure is built on Adobe Experience Manager with integrations for cookie consent and Adobe Launch for analytics, indicating a modern and enterprise-grade platform. However, the website's security posture is significantly weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses a critical risk to user data and trust. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site is professional and content-rich but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

T

Title Forward

titleforward.com

52

Title Forward is a specialized title and settlement services company operating primarily in the United States, founded in 2012. The company leverages technology combined with traditional expertise to provide title insurance and settlement services across multiple states. Their market position is that of a customer-focused, technology-enabled service provider offering competitive pricing and personal service. The website reflects a professional and consistent brand with clear navigation and relevant content targeted at homebuyers and homeowners. Technically, the site uses modern frameworks such as React and is hosted on AWS infrastructure with CDN support, ensuring moderate performance and good mobile optimization. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business credibility is strong, supported by partner logos and social media presence, but the security weaknesses require urgent remediation.

O

Obvion N.V.

obvion.nl

40

Obvion N.V. is a well-established Dutch mortgage provider offering a range of mortgage products and advisory services primarily targeting Dutch consumers seeking home financing solutions. The website presents comprehensive content including mortgage advice, calculation tools, sustainability financing options, and a network of independent advisors. The company maintains a strong market position in the Netherlands with a mature domain and consistent branding. Technically, the website uses a professional CMS (GX WebManager) and modern JavaScript libraries, but suffers from slow load times and lacks a valid SSL certificate, which significantly impacts security posture. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, no explicit security or incident response policies are found on the site. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

Y

Yelp

yelp.fi

70

Yelp.fi is the Finnish localized version of Yelp, a leading online platform providing user-generated reviews and business listings primarily for the Helsinki area. The website offers extensive content including business categories, user reviews, and search capabilities for local services. It targets consumers seeking trusted local business information and provides business owners with advertising and management tools. The platform is built on modern web technologies including React and is hosted on Amazon AWS infrastructure with CDN support. While the site demonstrates strong content quality, branding consistency, and good privacy compliance with GDPR, it suffers from an invalid SSL certificate and lacks support for modern TLS protocols, which impacts its security posture. Security headers and content security policies are implemented, but some CSP directives allow unsafe inline scripts, which could be improved. Overall, the site is professional and trustworthy but should address SSL and TLS issues to enhance security and user trust.

G

Goodwin Procter

goodwinlaw.com

58

Goodwin Procter LLP is a well-established global law firm specializing in litigation, regulatory compliance, advisory services, and complex transactions across key industries such as life sciences, private equity, real estate, technology, and financial services. The firm maintains a strong market position with a broad geographic footprint and a mature online presence. Technically, the website leverages modern frameworks like Next.js and Sitecore CMS, integrating advanced analytics and consent management tools, though performance is somewhat slow. Security posture is weakened by the absence of a valid SSL certificate, which is critical for protecting client data and maintaining trust. Privacy compliance is robust, with clear policies and consent mechanisms in place. Overall, the firm demonstrates high business credibility and professionalism but should urgently address SSL issues to enhance security and user trust.

D

Draugiem Group

ideabits.com

55

Draugiem Group is an established technology company based in Latvia, operating since 2006 with a portfolio of successful brands and investments. The company positions itself as a tech group where ideas are transformed into reality, targeting technology professionals, investors, and potential employees. The website reflects a professional and consistent brand image with clear navigation and relevant content about the company’s story, brands, career opportunities, and news. Technically, the site uses modern web technologies including React, Google Fonts, and tracking tools such as Facebook Pixel and Google Tag Manager. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via OneTrust. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

K

Kespro

kespro.com

47

Kespro is a large Finnish foodservice wholesaler owned by Kesko Oyj, serving a broad range of customers including restaurants, hotels, cafes, public institutions, and retail chains. The company positions itself as the largest foodservice wholesaler in Finland, offering extensive product selections and digital services to enhance customer experience. The website reflects a professional and well-branded digital presence with comprehensive content and clear navigation, targeting hospitality and retail sectors in Finland. Technically, the site uses modern JavaScript frameworks such as React and integrates marketing and consent management tools like Google Tag Manager and OneTrust. However, the site suffers from a critical security issue: the SSL certificate is invalid or missing, and HTTPS is not enabled, exposing users to potential risks. Security headers are absent, and performance is slow with a high page load time. Privacy compliance is strong with clear policies and consent mechanisms. Contact information is complete and prominently displayed, including phone, email, and physical address. Social media presence is active across major platforms. Overall, the site is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

B

Brookfield Real Estate Income Trust

brookfieldreit.com

64

Brookfield Real Estate Income Trust (Brookfield REIT) is a large-scale real estate investment trust providing individual investors access to private real estate opportunities focused on income generation and capital appreciation. The company leverages a global network of experts and a partnership with Brookfield Oaktree Wealth Solutions to deliver diversified real estate investment products. The website is professionally designed, content-rich, and targets both individual investors and financial advisors with clear calls to action and comprehensive disclosures. Technically, the site is built on Drupal 10, hosted on Pantheon infrastructure, and employs modern web technologies including Google Tag Manager and OneTrust for cookie consent. The site is mobile optimized, accessible, and SEO friendly with structured data enhancing search visibility. Performance is fast with no blocking or WAF detected. Security posture is solid with HTTPS enforced and key security headers present, though improvements are recommended in HSTS configuration and DNS security (DNSSEC, CAA). No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators. Strategic recommendations include enhancing DNS security, strengthening HSTS policies, and publishing explicit security and incident response policies to further improve trust and compliance.

B

Brookfield

brookfield.com

61

Brookfield is a globally recognized investment firm specializing in managing and investing in high-quality assets across sectors such as renewable energy, infrastructure, private equity, real estate, and credit. The company targets institutional investors, financial advisors, and shareholders, offering a diversified portfolio and long-term value creation. The website reflects a mature digital presence with a professional design, comprehensive content, and multi-language support. Technically, the site is built on Drupal 10, hosted on Pantheon, and integrates modern tools like Google Tag Manager and OneTrust for privacy compliance. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses a significant risk. Privacy and cookie policies are well implemented with consent mechanisms, and business credibility is high due to clear branding and detailed investor information. Overall, the site is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trust.

B

Brookfield Oaktree Wealth Solutions

brookfieldoaktree.com

60

Brookfield Oaktree Wealth Solutions is a prominent investment management firm specializing in alternative investments including real estate, infrastructure, private equity, renewables, credit, and equities. The company leverages the expertise of its parent and partner companies, Brookfield Corporation and Oaktree Capital Management, to provide institutional-caliber solutions to financial advisors and private wealth investors. The website is professionally designed with comprehensive content and clear navigation, targeting a sophisticated financial audience. Technically, the site is built on Drupal 10 and hosted on Pantheon, employing modern web technologies and analytics tools such as Google Tag Manager and LinkedIn Insight Tag. Security posture is moderate; while security headers are implemented, the SSL certificate is invalid, which poses a significant risk. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the site demonstrates high business credibility and professionalism but requires urgent SSL certificate remediation to improve security and trust.

A

Applied Systems, Inc.

useindio.com

58

Indio, a platform operated by Applied Systems, Inc., offers a SaaS solution focused on digitizing and simplifying the insurance application and renewal process for agencies and brokers. The website presents a professional and user-friendly experience targeting insurance professionals seeking to modernize workflows. Technically, the site integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, LinkedIn Insight, Marketo, and OneTrust for cookie consent, hosted behind Cloudflare. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS enforcement, which is a critical issue for trust and compliance. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Overall, the site is well-branded and content-rich but requires urgent security improvements to meet modern standards.

M

Military Advantage, Inc.

military.com

55

Military.com, operated by Military Advantage, Inc., is a leading online platform providing military-connected Americans with comprehensive access to military and veteran benefits, news, job opportunities, and discounts. The website serves a large audience including active duty members, veterans, and their families, offering a wide range of content and services tailored to their needs. The platform is well-established in the media sector with a strong brand presence and extensive content offerings, including news articles, videos, and interactive resources.

I

Intelsat

intelsat.com

70

Intelsat is a leading global satellite communications provider, combining the world's largest satellite backbone with terrestrial networks to deliver secure, reliable connectivity across land, sea, and air. Their extensive service portfolio targets governments, telecommunications companies, media, and various industries, positioning them as a key player in the telecommunications sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site is built on WordPress with modern plugins and frameworks, supported by Cloudflare for DNS and CDN services. Performance is moderate, with room for optimization. Security posture is solid with valid SSL, SPF, and DMARC records, though improvements like enabling HSTS and DNSSEC are recommended. Privacy compliance is robust, featuring detailed policies and OneTrust consent mechanisms. Overall, Intelsat's website demonstrates professionalism, trustworthiness, and a commitment to compliance, supporting their enterprise-level market position.

T

Transdev United States

transdevna.com

64

Transdev United States operates as the largest private sector operator of multiple modes of transit in North America, providing services including bus, paratransit, rail, health solutions, microtransit, shuttle, autonomous mobility, fleet services, and ferry operations. The company targets public transportation clients and transit authorities, positioning itself as a leading integrator and operator in the transportation sector. The website reflects a large, well-established enterprise with a focus on safety, innovation, and sustainability. Technically, the site is built on WordPress with a modern tech stack including WPBakery Page Builder, jQuery, and Google services, hosted on WP Engine with Cloudflare CDN. Performance is fast, mobile optimization is good, and accessibility features are implemented via third-party tools. Security posture is strong with HTTPS, modern TLS protocols, CSP, and secure cookie settings, though improvements such as enabling HSTS and DNSSEC are recommended. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position and business model effectively.

M

Maddyjobs

maddyjobs.com

62

Maddyjobs is a French job board platform specializing in digital and startup sector employment, offering a free service for innovative companies and candidates. The site is positioned as a niche player targeting startups and digital professionals, supported by a network of related brands such as Maddyness and Maddyplay. Technically, the site is built on WordPress using the Divi theme, with integrations including Bridget for resume uploads and OneTrust for cookie consent. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact its security posture. While cookie consent and privacy policies are present, the lack of advanced security measures and incident response information indicates room for improvement. Overall, the site provides a professional user experience and good content quality but must address its SSL/TLS issues to enhance trust and compliance.

I

iwoca Ltd

iwoca.co.uk

75

iwoca Ltd is a UK-based fintech company specializing in providing flexible business loans ranging from £1,000 to £1,000,000 to small and medium-sized enterprises. Established in 2012, iwoca has grown to serve over 150,000 companies and is recognized as one of the fastest-growing business lenders in Europe. The company offers fast loan approvals, flexible repayment options, and no early repayment fees, positioning itself as a customer-centric alternative to traditional banks. The website reflects a professional, user-friendly design with clear navigation and strong trust signals including customer testimonials and regulatory certifications. Technically, the site is built on Webflow, hosted on AWS, and integrates modern technologies such as Google Tag Manager, VWO, and HubSpot for marketing and analytics. Security posture is solid with HTTPS enforced, SPF and DMARC email protections, and no detected SSL vulnerabilities, though improvements like enabling HSTS and OCSP stapling are recommended. Privacy compliance is robust with comprehensive privacy and cookie policies and a consent mechanism implemented via OneTrust. Overall, iwoca demonstrates a mature digital presence with strong business credibility and a good security baseline.

N

Newfold Digital Inc.

endurance.com

65

Newfold Digital Inc. is a prominent enterprise-level technology company specializing in web presence solutions for small-to-medium businesses worldwide. Through a diverse portfolio of well-known brands such as Bluehost, HostGator, Network Solutions, and Web.com, the company offers comprehensive services including domain registration, hosting, website building, security, online marketing, and professional website design. Their market position is strong, supported by extensive product offerings and personalized customer support. Technically, the website is built on Adobe Experience Manager CMS and leverages modern technologies including Adobe Launch for analytics, OneTrust for cookie consent management, and AudioEye for accessibility compliance. Hosting and DNS services are protected by Cloudflare, ensuring resilience and performance. However, the site exhibits slow load times and lacks some advanced security configurations such as HSTS and DNSSEC. From a security perspective, the site maintains a valid SSL certificate, properly configured SPF and DMARC records, and no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies, GDPR indicators, and a consent mechanism. Incident response readiness is indicated by an ethical hacking report link. Accessibility is enhanced through AudioEye integration, reflecting a commitment to inclusive design. Overall, Newfold Digital's website demonstrates a high level of professionalism, security, and compliance, though performance optimizations and enhanced security headers could further strengthen its posture. The company maintains a trustworthy online presence with clear business information and active social media engagement.

W

Warmly

warmly.ai

68

Warmly is a technology company specializing in AI-driven marketing automation for B2B clients. Their platform leverages person-level intent signals to identify and engage ideal customers with personalized messaging across multiple channels. The company positions itself as a high-growth player in the AI marketing space, supported by strong customer testimonials and strategic partnerships. Technically, the website is built on modern platforms such as Webflow and Cloudflare, integrating numerous analytics and marketing tools including HubSpot, Segment, and PostHog. While the SSL certificate is valid and email authentication protocols like SPF and DMARC are properly configured, there is room for improvement in security headers and DNS security. The website demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. Performance is somewhat slow due to large page size and resource count, suggesting optimization opportunities. Overall, Warmly presents a professional, trustworthy, and technically mature online presence with a solid security posture but could enhance security best practices further.

A

A1 Telekom Austria Group

telekom.at

40

A1 Telekom Austria Group is a leading telecommunications provider in Austria, offering a comprehensive range of services including mobile telephony, fixed internet, TV streaming, and digital security products. The website reflects a mature digital presence with a strong focus on residential customers, youth, and families, supported by loyalty programs and customer apps. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries and frameworks, and integrates cookie consent management via OneTrust and analytics through Google Tag Manager. Security posture is robust with HTTPS enforced, strong TLS configurations, and appropriate security headers, although improvements such as enabling HSTS and OCSP stapling could enhance security further. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, the website demonstrates high professionalism, excellent user experience, and trustworthy business practices.

V

Vienna Tourist Board

wien.info

64

The website wien.info serves as the official online travel guide for the City of Vienna, operated by the Vienna Tourist Board. It provides comprehensive information on attractions, events, accommodations, and visitor services, targeting tourists and visitors globally with multilingual support. The site positions itself as the authoritative source for Vienna tourism, offering key services such as event search, city card sales, and a dedicated travel guide app. Technically, the site employs modern JavaScript libraries, integrates with multiple marketing and analytics platforms, and uses a custom or proprietary CMS hosted on xaas.systems DNS infrastructure. However, the site lacks a valid SSL certificate and does not support modern TLS protocols, which significantly impacts its security posture. Despite this, it implements several security headers and a strict content security policy. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Business contact information is clearly presented, enhancing credibility.

M

Medical Harbour

medicalharbour.com

60

Medical Harbour is a Brazilian technology company specializing in medical imaging solutions, including software for radiology, teleradiology, and medical education. Their product portfolio includes advanced DICOM viewers, cloud PACS solutions, and educational tools such as virtual cadaver and anatomical atlases. The company targets hospitals, clinics, radiologists, and medical educators, positioning itself as a niche specialist in healthcare technology. The website is professionally designed, multilingual, and integrates modern marketing and analytics tools, although it suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Despite strong email security policies like SPF and DMARC, the absence of HTTPS and modern TLS protocols significantly weakens the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Medical Harbour demonstrates a solid business presence with room for improvement in technical and security infrastructure.

H

Hammerite Nederland

hammerite.nl

40

Hammerite Nederland is a medium-sized manufacturing and retail company specializing in metal protection coatings and paints, operating primarily in the Netherlands. The website serves as a product showcase and e-commerce platform, supported by WooCommerce and WordPress, with a focus on consumer and professional markets seeking metal protection solutions. The site is branded under the parent company AkzoNobel, indicating a strong market position in the coatings industry. Technically, the website employs common web technologies including jQuery, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent, but suffers from slow load times and lacks a valid SSL certificate, impacting security and user trust. Security posture is weak due to missing HTTPS and security headers, although privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in security infrastructure to protect user data and enhance credibility.

V

Vienna Tourist Board

vienna.info

58

The website vienna.info is the official online travel guide for the City of Vienna, operated by the Vienna Tourist Board. It provides comprehensive information and services for tourists including attractions, events, accommodations, city cards, and accessibility resources. The site targets visitors planning trips to Vienna and serves as an authoritative source for travel-related content. Technically, the site uses modern JavaScript libraries, structured data (JSON-LD), and integrates privacy-conscious analytics (Matomo) alongside cookie consent via OneTrust. However, a critical security gap is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Security headers are present and well-configured, but without HTTPS, the site is vulnerable to interception and man-in-the-middle attacks. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional, content-rich, and user-friendly but urgently requires HTTPS implementation to meet modern security standards.

A

Afya Participações S.A

afya.com.br

72

Afya Participações S.A operates as the largest hub for medical education and digital solutions in Brazil, targeting medical students, professionals, and healthcare providers. The company offers a broad portfolio including undergraduate medical courses, postgraduate education, continuing medical education, and digital health solutions. It holds a strong market position with over 20,000 medical students and multiple subsidiaries and partners enhancing its ecosystem. Technically, the website is built on Webflow, hosted via Cloudflare, and integrates modern analytics and marketing tools, demonstrating a mature digital infrastructure with fast performance and good mobile optimization. Security posture is solid with HTTPS, strong security headers, and cookie consent mechanisms, although improvements in HSTS and vulnerability disclosure could be made. Privacy compliance is well addressed with comprehensive policies and consent management. Overall, the website reflects a professional, trustworthy, and well-managed digital presence aligned with its enterprise scale and sector focus.

A

A1 Digital

a1.digital

57

A1 Digital is a prominent European technology service provider specializing in IoT, Cloud, Network, and Cybersecurity solutions. The company targets businesses across Europe aiming for digital transformation, offering managed connectivity, cloud services, and security solutions. Their market position is strong with a large customer base and presence in multiple countries, supported by a parent company, Telekom Austria AG, and several subsidiaries. Technically, the website is built on Craft CMS with modern marketing and consent tools, providing a good user experience and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. The site implements several security headers but lacks modern TLS protocols and secure cipher suites. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent SSL/TLS improvements to enhance security and user trust.

A

AkzoNobel

duluxheritage.co.uk

69

Heritage by Dulux is a premium paint brand under the AkzoNobel umbrella, offering a curated collection of luxury and designer paints targeting homeowners and professional decorators in the UK market. The website provides rich content including product information, inspiration, and professional tools, supporting a strong market position in the retail paint sector. Technically, the site uses modern web technologies such as React and Next.js, hosted on AWS infrastructure with CDN support, but suffers from slow load times and could benefit from performance optimizations. Security posture is adequate with HTTPS and no major vulnerabilities detected, though improvements in SSL configuration and security headers are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-branded, supporting the business's premium market positioning.

D

Dulux Select Decorators

duluxselectdecorators.co.uk

58

Dulux Select Decorators operates as a professional decorator network in the United Kingdom, backed by the parent company AkzoNobel. The business focuses on providing vetted, high-quality decorating professionals to UK homeowners, emphasizing workmanship guarantees and customer service. The website reflects a well-structured service offering with clear business information, customer testimonials, and a strong social media presence. Technically, the site uses common JavaScript libraries and marketing tools such as Google Tag Manager and Crazy Egg, alongside a cookie consent mechanism via OneTrust. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are absent, and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and enhance trust.

A

AkzoNobel Paints

polycell.co.uk

58

Polycell.co.uk is a UK-focused retail website offering a range of wood fillers, Polyfilla, and adhesives under the AkzoNobel Paints brand. The site targets DIY consumers seeking home improvement products and advice. The business operates as a large entity with a strong corporate parent, AkzoNobel, and provides product information, tutorials, and store locator services. Technically, the site is built on Adobe Experience Manager and uses modern JavaScript libraries and marketing tools such as Google Tag Manager and OneTrust for cookie consent. However, the site suffers from a lack of a valid SSL certificate, resulting in insecure HTTP delivery, which significantly impacts its security posture. Performance is slow with a large page size and long load times. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is primarily via a contact form, with no direct emails or phone numbers found on the homepage. Overall, the site is professional and consistent in branding but requires urgent security improvements to protect user data and enhance trust.

A

AkzoNobel Paints

hammerite.co.uk

62

Hammerite.co.uk is the official website for Hammerite, a brand specializing in metal protection paints and coatings, operating under the large multinational AkzoNobel Paints. The site offers detailed product information, advice, and store locator services targeting DIY enthusiasts and professional painters in the UK market. Technically, the website is built on Adobe Experience Manager CMS, hosted on AWS infrastructure, and uses modern web technologies including jQuery and Adobe Launch for tag management. The site is mobile optimized and SEO friendly with structured data implemented. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, which critically impacts HTTPS enforcement and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Business credibility is moderate due to the lack of direct contact details and explicit security policies. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

A

Akzo Nobel N.V.

duluxtradepaintexpert.co.uk

52

Dulux Trade Paint Expert, operated under the parent company Akzo Nobel N.V., is a professional painting and decorating resource targeting trade professionals in the UK. The website offers a comprehensive range of products, colour matching tools, training courses, and professional advice, positioning itself as a leading brand in the retail and manufacturing sector for paints and coatings. The site is well-branded and consistent with corporate identity, providing a good user experience and clear navigation tailored for its professional audience. Technically, the site is built on Adobe Experience Manager and leverages modern marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of security headers, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

I

International

international-yachtpaint.com

60

International Yachtpaint is a specialized brand under the AkzoNobel corporate umbrella, focusing on providing yacht painting products and professional advice primarily for the Finnish market and other international regions. The website offers comprehensive product information, expert painting guidance, and support resources targeting both amateur and professional yacht painters. The brand leverages Adobe Experience Manager CMS and React for its digital platform, integrating modern marketing and consent management tools such as Google Tag Manager and OneTrust. However, the site lacks HTTPS encryption, which is a critical security shortfall. The absence of security headers and slow page performance further impact the overall security posture and user experience. Despite these issues, the site maintains good content quality, clear navigation, and strong brand consistency with AkzoNobel, supported by active social media channels.

A

Akzo Nobel N.V.

international-marine.com

61

International Marine, a division of Akzo Nobel N.V., operates a comprehensive website focused on marine coatings and performance solutions for vessels worldwide. The company positions itself as a global leader in marine coatings, offering specialized products and digital compliance solutions tailored to various vessel types and shipyard operations. The website reflects a B2B business model targeting marine industry professionals and ship operators, supported by strong corporate branding and a consistent user experience. Technically, the site is built on Adobe Experience Manager with React components and integrates modern marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent management. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of TLS protocol support, which severely impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates good content quality and business credibility but requires urgent improvements in security infrastructure to protect user data and maintain trust.

R

Roca Sanitario S.A.U.

roca.com

64

Roca Sanitario S.A.U. is a global leader in bathroom products with a presence in over 170 countries. The company offers a wide range of innovative, sustainable bathroom solutions targeting both consumers and professionals. Their website reflects a mature digital presence built on Liferay DXP, featuring rich content including product collections, professional resources, and corporate information. The site is well-branded and professionally designed, with good navigation and mobile optimization. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which poses risks to user trust and data security. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is primarily via forms and social media, with no direct emails or phone numbers exposed. Overall, the website is functional and credible but requires urgent security improvements to protect users and enhance trust.

A

A1

a1partnering.com

51

A1 Partnering is a strategic business unit of A1, Austria's leading telecommunications provider with over 7.1 million customers. The website promotes business partnerships and investment opportunities for B2C companies aiming to enter the Austrian and Central European markets. The company leverages its strong market position, customer base, and marketing expertise to facilitate market entry and growth for partners. Technically, the website uses modern frontend technologies such as Tailwind CSS and Alpine.js, and integrates OneTrust for cookie consent management. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site presents professional content and branding but requires urgent security improvements.

A

AkzoNobel Powder Coatings

interpon.com

54

AkzoNobel Powder Coatings, represented by the Interpon brand, is a global leader in manufacturing powder coatings tailored for diverse industries such as architectural, automotive, industrial, and agricultural equipment. The company emphasizes innovation, sustainability, and a broad color palette to meet varied customer needs. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting B2B customers in manufacturing sectors. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates privacy management tools like OneTrust and Google Tag Manager for analytics and consent management. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. The site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is content-rich and professionally presented but requires urgent security enhancements to meet modern standards.

A

AkzoNobel Paints

dulux.co.uk

56

Dulux.co.uk is the official UK website for Dulux, a leading paint brand owned by AkzoNobel. The site offers a comprehensive range of paint products, decorating advice, and interactive tools such as a colour visualiser app. It targets both consumers and professional decorators, providing e-commerce capabilities and extensive content to support decorating projects. The website is well-branded, professionally designed, and integrates multiple marketing and social media channels to engage users. Technically, the site is built on Adobe Experience Manager and uses modern web technologies and third-party services for analytics, consent management, and social media integration. However, a critical security gap exists due to the absence of a valid SSL certificate and disabled TLS protocols, which severely impacts the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms in place. No explicit security or incident response policies are published on the site. Overall, the site demonstrates strong business credibility and user experience but requires urgent security improvements to protect user data and maintain trust.

A

A1 Telekom Austria Group

a1blog.net

64

A1 Telekom Austria Group operates the website a1blog.net as a content platform focused on internet, smartphones, digital life, and related telecommunications services primarily targeting Austrian consumers. The site serves as a marketing and informational blog, showcasing product news, tips, and corporate social responsibility initiatives. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript frameworks including React and Alloy UI, and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. Despite rich content and professional design, the site suffers from a critical security shortfall due to an invalid SSL certificate and lack of HTTPS enforcement, which significantly impacts its security posture. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies in German, aligned with GDPR requirements. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

A

A1 Telekom Austria AG

a1click.at

40

A1click.at is an online marketplace operated under the A1 Telekom Austria AG brand, offering a curated selection of digital, entertainment, energy, finance, and insurance products. The platform leverages trusted partnerships and the A1 Trusted Brands certification to provide exclusive deals and services to Austrian consumers. The website features a modern frontend technology stack including Alpine.js and Tailwind CSS, integrated with multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. Despite a professional design and good content quality, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and missing security headers, which significantly impact its security posture. Privacy compliance is well addressed with a comprehensive cookie consent mechanism powered by OneTrust and a clear privacy policy in German. Contact information is limited to an email address and a newsletter subscription form, with no phone numbers or physical addresses disclosed. Overall, the website presents a solid business presence with room for improvement in technical security and performance optimization.

A

AKZONOBEL LTDA.

coralmatiz.com.br

46

Coral Matiz is a Brazilian loyalty and professional engagement platform operated by AKZONOBEL LTDA., targeting architects, interior designers, and landscapers. The platform offers curated content, professional tools, and a points-based rewards program to enhance user engagement and brand loyalty. The website is well-branded and content-rich, with clear navigation and a focus on professional users and students in the design sector. Technically, the site uses a modern front-end stack including Bootstrap, jQuery, and integrates Google Analytics and Tag Manager for tracking. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to risks when submitting sensitive personal data. Privacy and cookie policies are comprehensive and GDPR/LGPD compliant, with consent mechanisms implemented. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and comply with best practices.

A

Akzo Nobel N.V.

akzonobel.com

72

Akzo Nobel N.V. is a global leader in the manufacturing and distribution of paints and coatings, with a rich history dating back to 1792. The company operates in over 150 countries and manages a portfolio of well-known brands such as Dulux, International, Sikkens, and Interpon. Their business model focuses on providing innovative and sustainable surface solutions to a wide range of industries including manufacturing, energy, and transportation. The website reflects a mature digital presence with comprehensive content aimed at customers, investors, and partners worldwide. Technically, the website is built on Adobe Experience Manager (AEM) and leverages modern web technologies including HTML5, CSS3, JavaScript, and various marketing and analytics tools such as Google Tag Manager and Adobe DTM. Hosting is provided via Amazon AWS infrastructure. While the site is mobile-optimized and accessible, performance is somewhat slow with a load time exceeding 8 seconds, indicating room for optimization. From a security perspective, the site employs HTTPS with a valid SSL certificate, SPF and DMARC email authentication records, and no detected vulnerabilities or subdomain takeover risks. However, security headers like HSTS and OCSP stapling are not enabled, and TLS 1.3 is not supported, suggesting moderate security posture. Privacy compliance is strong with clear privacy and cookie policies and an active consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The main risks relate to technical performance and some security hardening opportunities. Strategic recommendations include enhancing SSL configurations, enabling advanced security headers, improving page load times, and maintaining rigorous privacy compliance to sustain trust and regulatory adherence.

I

Incepa

banheirosincepa.com.br

38

Incepa is a Brazilian manufacturing company specializing in bathroom and kitchen sanitary products, including ceramic sanitary ware, accessories, and complementary items. The company has recently integrated with the Roca brand, enhancing its market position. The website serves as a product catalog and brand promotion platform targeting residential customers, hotels, construction companies, and public environments. Technically, the site uses an Apache server with PHP 7.3.33 and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and OneTrust for cookie consent. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. The website content is well-structured and professionally designed, but privacy and security policies are missing or not clearly presented. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance.

B

Baloise Gruppe

baloise.com

55

Baloise Gruppe is a leading European insurance and financial services provider with a strong presence in Switzerland, Germany, Luxembourg, Belgium, and Liechtenstein. The company offers a wide range of insurance products, financial solutions, and career opportunities, targeting both private and institutional customers. Their website reflects a professional and comprehensive digital presence with extensive content, multi-language support, and clear navigation. Technically, the site employs modern web components and integrates various marketing and analytics tools, though it suffers from an invalid SSL certificate which impacts its security posture. The security configuration lacks essential headers and proper SSL, reducing the overall security score. Privacy compliance is well addressed with comprehensive policies and a robust cookie consent mechanism. Overall, the website is professional and trustworthy but requires urgent attention to its SSL configuration to enhance security and user trust.

M

Marriott International, Inc.

collectrenaissance.com

74

CollectRenaissance.com is an official e-commerce platform offering luxury bedding, pillows, linens, robes, and home decor inspired by Renaissance Hotels, a Marriott International brand. The website targets consumers seeking premium hotel-quality home products and operates as part of a large hospitality and retail ecosystem. The site demonstrates a mature digital presence with multiple marketing and analytics integrations, including Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. The technical infrastructure is hosted on AWS with modern TLS protocols and a valid SSL certificate, though performance is impacted by a large page size and resource count. Security posture is strong with strict DMARC policies and no major SSL vulnerabilities, but a subdomain takeover risk exists on the staging subdomain. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve performance and address the subdomain vulnerability.

M

Marriott International, Inc.

shoplemeridien.com

74

Shop Le Méridien is an enterprise-level e-commerce platform operated under Marriott International, Inc., offering luxury hotel-branded lifestyle products such as bedding, bath items, fragrances, and home décor. The website targets consumers seeking sophisticated, mid-century modern inspired products associated with the Le Méridien hotel brand. The platform supports multiple international versions and currencies, enhancing global accessibility. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates advanced marketing and analytics tools (Google Tag Manager, Adobe DTM), and uses OneTrust for privacy compliance. Hosting is on AWS infrastructure, ensuring scalability. Security posture is solid with HTTPS, SPF, DMARC, and cookie consent mechanisms, though improvements like HSTS and OCSP stapling are recommended. No critical vulnerabilities or malware were detected. Overall, the site demonstrates good content quality, professional design, and strong privacy compliance, positioning it well in the luxury retail hospitality market.

W

Westin Store

westinstore.com

60

Westin Store is an e-commerce retailer specializing in luxury bedding, linens, and bath products inspired by the Westin Hotels brand, a subsidiary of Marriott International. The website targets consumers seeking premium hotel-quality sleep and bath products, offering a broad catalog of branded merchandise. The business model is direct-to-consumer online retail with integrated customer support and marketing channels. Technically, the site is built on Magento with extensive use of Adobe Launch, Google Tag Manager, and OneTrust for privacy compliance. However, the site suffers from a critical security issue: the absence of a valid SSL certificate and disabled TLS protocols, which severely impacts the security posture and user trust. The site implements strong privacy and cookie consent mechanisms, including GDPR-compliant policies and DMARC email protection. Overall, the website is professionally designed with good content quality and marketing integration but requires urgent remediation of its SSL/TLS configuration and subdomain takeover vulnerability to improve security and trustworthiness.