Security Directory

INNOS GmbH is a regional innovation and development company based in Osttirol, Austria, operating as a Public Private Partnership. The company focuses on strengthening local businesses and supporting startups through services such as consulting, networking, location services, and coworking spaces. Their market position is that of a key regional innovation facilitator with a strong network and community presence. Technically, the website is built on WordPress using the Avada theme and several plugins, including LayerSlider and Borlabs Cookie for cookie consent management. While the site has good SEO, content quality, and user experience, it lacks a valid SSL/TLS certificate, which severely impacts its security posture. The absence of HTTPS exposes users to risks and reduces trust. Privacy compliance is addressed with a comprehensive cookie policy and GDPR-aligned consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements.

F

Frankenberg-Metallrecycling GmbH

fmr.ag

39

Frankenberg-Metallrecycling GmbH is a well-established family-owned metal recycling company based in Germany, specializing in the recycling and trading of zinc, tin, lead, and other metals. With over 65 years of experience and a certified waste disposal status, the company serves industrial and commercial clients across Europe, offering sustainable recycling solutions and related services. The website reflects a medium-sized business with a clear focus on metal recycling and environmental compliance. Technically, the website runs on an Apache server with legacy JavaScript libraries such as jQuery 1.10.2 and includes Google Analytics for tracking. However, the absence of HTTPS and modern security headers significantly weakens the site's security posture. The site is basic in mobile optimization and accessibility, with no CMS or advanced frameworks detected. Performance metrics are unavailable, indicating potential monitoring gaps. From a security perspective, the lack of SSL/TLS encryption is a critical vulnerability, exposing users to data interception risks. No advanced security policies or incident response contacts are published, and cookie consent mechanisms are missing despite cookie usage. The domain registration data is consistent with the business claims, supporting legitimacy. Privacy policies exist but are basic, and GDPR compliance is implied but not explicitly detailed. Overall, the website is functional and professional but requires urgent security improvements, especially HTTPS implementation and enhanced privacy compliance. Strategic recommendations include upgrading security infrastructure, implementing cookie consent, modernizing the tech stack, and publishing clear security and incident response policies to build trust and compliance.

A

accilium GmbH

accilium.com

24

accilium GmbH is a medium-sized management and strategy consultancy specializing in digital transformation within the mobility, energy, and public sectors. With over 130 consultants across multiple European offices, it holds a strong market position among the top consultancies in the German-speaking region. The company offers services including strategy and innovation, business transformation, data intelligence, and organizational consulting. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, accilium demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS security to protect its users and enhance trust.

S

Studiokon Ventures Private Limited

skvindia.com

18

Studiokon Ventures Private Limited (SKV India) is a medium-sized, ISO-certified interior design firm specializing in commercial office interiors and turnkey solutions across India. With over 15 years of experience, SKV offers comprehensive services including design & build, general contracting, financing solutions, and office fit-outs. The company targets businesses seeking modern, functional, and inspiring workspaces, positioning itself as a leading player in the Indian office interior design market. Technically, the website is built on WordPress with a modern tech stack including PHP 7.4, NitroPack for optimization, and various marketing and analytics tools. However, the site lacks HTTPS, which is a critical security gap. The security posture is weak due to absence of SSL, HSTS, and security headers, though no immediate vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

Roll4You, s.r.o. is a Czech Republic-based manufacturer and distributor specializing in cigarette papers, filters, and tubes. As a member of the delfort group, a global leader in special and functional papers, Roll4You offers customized paper solutions and brand partnership services. The company targets rolling paper brands and distributors, operating primarily in the manufacturing sector with a B2B business model. The website reflects a professional presence with good content quality and consistent branding, supporting their market position and business operations. Technically, the site is built on WordPress with Bootstrap and jQuery, incorporating GDPR-compliant cookie consent and age verification mechanisms. However, the absence of HTTPS/SSL is a critical security gap that undermines user trust and data protection. Security headers and advanced security policies are also lacking, exposing the site to potential risks. Privacy policies are comprehensive and GDPR compliant, but incident response and security policy disclosures are missing. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to align with best practices and protect its users. Strategic recommendations include implementing SSL/TLS, enhancing security headers, and maintaining up-to-date software and plugins to mitigate vulnerabilities.

KAICIID is an intergovernmental organization dedicated to promoting intercultural and interreligious dialogue to foster peace globally. The website reflects a mature organization with a clear mission, targeting religious leaders, educators, and policymakers. It offers capacity building, dialogue platforms, and regional initiatives. Technically, the site is built on Drupal 10 with modern frontend libraries and hosted on Pantheon, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly reduces the security posture. Privacy compliance is basic, with no cookie consent mechanisms despite tracking scripts. Contact information and social media presence are well established, supporting business credibility. Overall, the site is professional and content-rich but requires urgent security improvements.

E

EFM Versicherungsmakler AG

efm.at

24

EFM Versicherungsmakler AG is a leading insurance brokerage firm in Austria, serving both private and commercial clients with a wide range of insurance products and services. The company positions itself as the number one insurance broker in Austria with over 75 locations and more than 120,000 customers. Their business model focuses on independent insurance comparison and personalized local broker services. The website is built on TYPO3 CMS with Bootstrap and jQuery, featuring a professional design and good navigation, targeting German-speaking Austrian customers. However, the technical infrastructure shows weaknesses, notably the lack of a valid SSL certificate and the use of an outdated PHP version, which pose significant security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance efforts. The site integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, with moderate user tracking.

F

Friendly Fire Communications GmbH

friendlyfire.at

36

Friendly Fire Communications GmbH is a Vienna-based technology company specializing in advanced 3D visualizations, virtual production, and interactive digital experiences. With approximately 20 years of experience and a client portfolio of over 100 brands, they offer a broad range of services including product visualization, real-time 3D configurators, digital brand storytelling, and virtual production solutions. Their business model focuses on delivering customized digital transformation packages tailored to client needs, targeting businesses seeking innovative digital marketing and product engagement tools. Technically, the website is built on WordPress with modern plugins such as Elementor Pro, Yoast SEO, and WPML for multilingual support. The site integrates multiple analytics platforms including Google Analytics and Matomo, and employs performance optimizations via WP Rocket. Hosting is provided by World4You. The site is well-structured, mobile-optimized, and rich in multimedia content, reflecting a mature digital presence. From a security perspective, the site lacks HTTPS, which is a critical vulnerability exposing users to data interception risks. Other security best practices such as HSTS, DNSSEC, and security headers are not implemented. The site does have a comprehensive privacy policy and cookie consent mechanism, indicating good privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, while the business and website demonstrate professionalism and strong market positioning, the absence of HTTPS significantly undermines security posture and user trust. Immediate implementation of SSL/TLS is strongly recommended to mitigate this critical risk.

M

Media Magic Video Production Services

mediamagic.tv

40

Media Magic Video Production Services is a small, established business based in Southern California specializing in video production services for businesses and nonprofits since 1984. Their offerings include website videos, fundraising presentations, trade show videos, commercials, PSAs, and training programs. The website is built on Squarespace, leveraging standard web technologies and Google Analytics for tracking. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. Contact information is clearly provided, and social media presence is active across multiple platforms. Despite good content quality and professional presentation, the absence of HTTPS and privacy policies introduces compliance and trust concerns.

A

Akras Flavours GmbH

akras.at

37

Akras Flavours GmbH is an established Austrian manufacturer specializing in flavors and ingredients for the food and beverage industry. Founded in 1938, the company has evolved into an international leader offering a broad portfolio of aroma and beverage base products. Their website reflects a mature digital presence with comprehensive content, multilingual support, and active engagement through news and trend analytics. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though performance is moderate and accessibility is basic. Security posture is a concern due to the absence of a valid SSL certificate and lack of HTTPS, which exposes the site to risks and undermines user trust. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the business demonstrates strong credibility and trust signals but must urgently address its SSL/TLS configuration to improve security and user confidence.

2

2beFOUND Performance Marketing GmbH

2befound.at

38

2beFOUND Performance Marketing GmbH is a specialized digital marketing agency based in Austria, focusing on search engine marketing and optimization services. The company holds a Google Partner certification for 2025, indicating recognized expertise in Google Ads and related services. Their website is built on the Jimdo CMS platform and targets German-speaking business clients seeking to improve their online visibility and search engine rankings. The site content is professionally presented with clear navigation and relevant marketing messaging. Technically, the website uses standard web technologies and integrates Google Analytics for visitor tracking. However, the lack of a valid SSL certificate and HTTPS support is a significant security shortfall that undermines user trust and data protection. The company provides clear contact information including a physical address and phone number, but lacks a Terms of Service page and explicit incident response or security policies. Overall, the business appears credible and established, but the website's security posture requires urgent improvement to meet modern standards.

T

Tiki Surf

twoseasons.co.uk

37

Tiki Surf operates an e-commerce platform specializing in skate, surf, and snow sports products, including clothing, accessories, and equipment. The website is built on the Shopify platform, leveraging multiple third-party marketing and analytics tools such as Google Analytics, Klaviyo, and Trustpilot to enhance customer engagement and trust. The business targets enthusiasts in the UK market, offering a broad product range with a professional and consistent brand presentation. Technically, the site uses modern web technologies and is hosted via Cloudflare and Google Cloud Platform, ensuring scalability and reliability. However, the absence of a valid SSL certificate is a significant security concern that undermines user trust and data protection. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Overall, the site demonstrates a solid e-commerce presence but requires urgent remediation of its SSL configuration to improve security posture.

H

Hill Woltron Management Partner GmbH

hill-woltron.com

25

Hill Woltron Management Partner GmbH is a well-established HR consulting and personnel placement firm operating primarily in Austria and Germany. With over 50 years of experience as an owner-managed family business, it offers a broad range of HR services including recruiting, personnel development, management audits, and employee surveys. The company targets both corporate clients and job candidates, leveraging a strong network and professional expertise to connect people with career opportunities. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress using Elementor as the page builder, supported by LiteSpeed Cache for performance optimization. It integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. However, the website lacks HTTPS, which is a critical security shortfall. The site is mobile-optimized and SEO-friendly but suffers from slow performance due to missing SSL and possibly other optimizations. From a security perspective, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. While no other major vulnerabilities or exposed sensitive data were detected, the lack of HTTPS exposes users to risks such as data interception. The site includes a GDPR-compliant privacy and cookie policy with a consent mechanism, but no explicit security policy or incident response information is available. Overall, Hill Woltron presents a credible and professional business with strong market positioning in HR services. The primary risk is the missing HTTPS, which should be addressed urgently to protect user data and improve trust. Strategic recommendations include implementing SSL/TLS, enhancing security headers, and publishing security and incident response policies to strengthen compliance and user confidence.

Ainsworth Game Technology is a well-established company specializing in gaming technology products, including gaming cabinets and interactive solutions, targeting global markets such as APAC, North America, Latin America, and Europe. The website reflects a professional corporate presence with clear navigation and consistent branding. Technically, the site uses modern frontend technologies like Tailwind CSS, Alpine.js, and integrates Google Analytics and reCAPTCHA for analytics and security. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Security headers are present but insufficient without HTTPS. Privacy compliance is basic, with a privacy policy and terms of use present but no cookie consent mechanism. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security configuration to protect user data and enhance trust.

A

Art Build

artbuild.eu

40

Art Build is a medium-sized architecture studio operating primarily in Belgium, France, and Luxembourg, with a focus on innovative and collective intelligence-driven architectural solutions. The company maintains a professional and content-rich website that effectively communicates its services, projects, and thought leadership through sections like Work, Lab, and Talk. The technical infrastructure leverages modern web technologies including Craft CMS, JavaScript frameworks, and integrates third-party services such as Google Analytics and Stripe for analytics and payments. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are well configured, but the lack of TLS protocols and HSTS reduces the overall security posture. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms in place. Contact information is transparent and consistent with the business location. Strategic recommendations include immediate SSL implementation, enabling modern TLS protocols, and enhancing security practices to align with industry standards.

BBI International operates as a specialized media and events company serving the biofuels, biomass, biodiesel, ethanol, carbon capture, sustainable fuels, and unmanned aircraft systems industries. The company publishes multiple niche magazines and organizes several well-established conferences and expos, positioning itself as a key information and networking hub within these sectors. The website content reflects a focused business model targeting industry professionals and companies seeking news, education, and event participation. Technically, the website runs on a Microsoft IIS server using ASP.NET with legacy jQuery scripts and integrates Google Analytics and Tag Manager for tracking. However, the site lacks HTTPS, exposing visitors to security risks and undermining trust. Security posture is weak with no SSL certificate, no advanced security headers, and no cookie consent mechanisms, indicating compliance gaps especially regarding GDPR. The WHOIS data aligns well with the business profile, confirming legitimacy and consistent registration details. Overall, the site provides relevant content but requires significant security and privacy improvements to meet modern standards.

S

Simone Buratto

simoneburatto.it

37

Simone Buratto is a small Italian company specializing in outdoor solar shading solutions and related products such as pergolas, outdoor furniture, and complements. The business operates primarily in Piemonte, Italy, targeting private customers, commercial hospitality businesses, architects, and construction firms. The website is built on WordPress with Elementor and Yoast SEO, showing a moderate level of digital maturity. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via iubenda. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and build trust.

Q

QimiQ Handels GmbH

qimiq.com

39

QimiQ Handels GmbH operates a well-established retail website focused on food products and cooking ingredients, targeting both consumers and professional chefs. The company offers a range of products such as QimiQ Classic, Sahne-Basis, Whip, Vegan, and Tiramisu, complemented by recipe content, professional workshops, and a newsletter. The website is multilingual and professionally designed, reflecting a consistent brand presence and active engagement through social media and marketing tools. Technically, the site is built on WordPress with modern plugins and frameworks, leveraging Cloudflare for CDN and caching. However, a critical security gap exists due to the absence of HTTPS/SSL, exposing users to potential risks. Privacy compliance is strong, with comprehensive policies and consent mechanisms in place. Overall, the site demonstrates good business credibility and user experience but requires urgent security improvements.

S

Strolz GmbH

strolz.at

40

Strolz GmbH is a well-established Austrian retail and rental company specializing in alpine sports equipment and fashion, with a history dating back to 1921. The company operates a multi-floor flagship store in Lech am Arlberg and offers a wide range of services including ski and snowboard rental, fitting, and bike rental. Their market position is that of a premium, exclusive provider catering to winter sports enthusiasts and fashion-conscious customers. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates with Google Analytics and Tag Manager, and uses a Magnolia CMS. However, a critical security gap exists due to the absence of a valid SSL certificate, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the business demonstrates strong credibility and professionalism but must address its SSL/TLS configuration urgently to improve security posture and user trust.

D

DTM Qatar

dtm.qa

23

DTM Qatar is a specialized media production company established in 2003, offering a range of video production services including corporate videos, aerial drone filming, and time lapse photography. Positioned as a premium local provider in Qatar and supported by the United Group of Companies, DTM targets businesses seeking high-quality multimedia content with a flexible and client-centric approach. The website reflects this with professional design and rich multimedia content. Technically, the site runs on an outdated PHP version and lacks HTTPS, which significantly impacts its security posture. The absence of SSL/TLS encryption exposes visitors to potential data interception risks. Additionally, no privacy or cookie policies are present, indicating compliance gaps with data protection regulations. The site uses Google Analytics for tracking but does not provide user consent mechanisms. Overall, while the business and content quality are good, the technical and security aspects require urgent improvements to protect user data and enhance trust.

O

Otago Online Consulting GmbH

contentcook.at

26

Otago Online Consulting GmbH is a well-established Austrian online marketing agency specializing in SEO, SEA, social media marketing, display and video advertising, and data analytics. The company has a strong market position with a clear growth strategy including acquisitions such as Content Cook. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with no advanced headers or incident response information published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but urgently needs to implement HTTPS to improve security and trust.

A

Austrian Baseball Softball Federation

baseballaustria.com

28

The Austrian Baseball Softball Federation operates as the national governing body for baseball and softball in Austria, providing comprehensive information on events, rankings, and federation activities primarily targeting players, clubs, and fans within Austria and Europe. The website serves as a central hub for news, schedules, and official communications, leveraging affiliations with the World Baseball Softball Confederation (WBSC) and related organizations to maintain authoritative content. Technically, the site employs a modern tech stack including nginx, Bootstrap, jQuery, and DataTables, hosted on Amazon CloudFront CDN, but suffers from a critical lack of a valid SSL certificate, resulting in no HTTPS support and outdated TLS configurations. This significantly impacts the security posture and user trust. Security headers are present but insufficient to compensate for the missing HTTPS. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism, though terms of service and incident response policies are absent. Overall, the site is professionally designed with good content relevance and navigation, but the lack of HTTPS is a major risk that should be remediated promptly.

S

SK STURM SALES & COMMUNICATION GMBH

sksturm.at

35

SK Sturm Graz is a well-established Austrian football club with a strong digital presence through its official website. The site offers comprehensive information about the club, including news, match schedules, team rosters, membership options, and an online shop. The business model revolves around sports entertainment, fan engagement, and commercial activities such as merchandise sales and sponsorships. The website demonstrates a high level of content quality and professional design, targeting football fans and stakeholders. Technically, the site uses modern frameworks like Vue.js and is built on Craft CMS, but lacks HTTPS, which is a critical security flaw. The absence of SSL/TLS significantly impacts the security posture, despite the presence of privacy and cookie policies that comply with GDPR. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

T

TENTE International GmbH

tente.com

34

TENTE International GmbH is a well-established manufacturer of high-quality castors and wheels, with a history spanning over 100 years. The company serves a broad range of industries including automotive, healthcare, logistics, and retail, offering both standard and custom mobility solutions. Their global presence is supported by localized websites and a comprehensive product catalog. Technically, the website is built on Shopware 6, leveraging modern web technologies and third-party services such as Usercentrics for consent management and Google Analytics for tracking. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Despite this, the site implements several security headers and privacy policies that align with GDPR requirements. Overall, the business credibility and website quality are high, but immediate remediation of the SSL issue is essential to protect user data and maintain trust.

HappyTezos is a small EU-based technology company specializing in Tezos blockchain baking and delegation services. The company provides a secure and transparent platform for Tezos token holders to delegate their tokens and track rewards in real time via a dashboard. Despite a solid niche market position and transparent business model, the service is scheduled to close by the end of 2023. Technically, the website uses modern frontend technologies such as ASP.NET Core, Bootstrap, and jQuery, hosted behind Cloudflare CDN, but lacks a valid SSL certificate, resulting in no HTTPS support which is a critical security flaw. The site includes cookie consent mechanisms and basic privacy policies, but lacks formal security policies or incident response information. Overall, the website is functional and professional but has significant security shortcomings that reduce trust and compliance.

U

Unique Computing Solutions

ucs-inc.net

30

Unique Computing Solutions is a well-established IT managed services provider specializing in tailored IT support and advanced IT solutions for small and medium-sized businesses. With over 25 years of experience, the company emphasizes customer service and long-term client relationships, serving diverse industries with a comprehensive portfolio of IT and security services. The website reflects a professional digital presence with strong branding, client testimonials, and integrated social proof. However, the technical infrastructure shows gaps, notably the absence of a valid SSL certificate and HTTPS, which significantly impacts security posture. While privacy policies and GDPR compliance mechanisms are in place, the lack of modern security protocols and performance optimization presents risks. Strategic improvements in SSL/TLS implementation and security headers are critical to enhance trust and protect client data.

D

Doppler LLC

fromdoppler.com

40

Doppler LLC operates a comprehensive marketing automation platform primarily targeting Spanish-speaking businesses in Latin America and Spain. Their website offers a wide range of services including email marketing, push notifications, SMS marketing, WhatsApp marketing, chatbots, landing pages, and data intelligence. The company positions itself as a leading SaaS provider in the marketing technology sector with a strong brand presence and extensive client testimonials. Technically, the website is built on WordPress and leverages modern marketing and analytics tools such as Google Tag Manager, OneTrust for cookie consent, and Zendesk for customer support. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that undermines user trust and data protection. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance is evident. Overall, the site is professional, content-rich, and user-friendly but requires urgent security improvements to meet modern standards.

M

MEGA International

mega.com

40

MEGA International is an established enterprise SaaS solutions provider specializing in enterprise architecture, business process management, governance, risk and compliance, and data governance. The company holds a strong market position as a leader in enterprise architecture tools, recognized by Gartner for 16 consecutive years. Their HOPEX platform offers collaborative, AI-driven capabilities to accelerate digital transformation for large enterprises. Technically, the website is built on Drupal 10 with modern front-end frameworks and integrates multiple marketing and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate, undermining HTTPS security. While security headers are well configured, the lack of TLS support poses a significant risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

T

TOPPAN Digital Language GmbH

meinrad.cc

40

TOPPAN Digital Language GmbH is a medium-sized, ISO-certified translation and localization service provider based in Austria, serving leading companies primarily in the DACH region. The company offers a comprehensive suite of services including documentation translation, marketing translations, software and website localization, and outsourcing solutions, supported by consulting and workflow optimization. The website reflects a professional and well-branded digital presence, leveraging WordPress with Elementor and integrating multiple marketing and analytics tools such as HubSpot and Google Analytics. Despite strong content quality and privacy compliance, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. The domain registration and DNS configurations are consistent and trustworthy, with no signs of privacy protection or suspicious patterns. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

A

Avnet Embedded

msc-technologies.eu

40

Avnet Embedded is a division of Avnet, Inc., specializing in embedded computing, display, and software solutions for OEMs and businesses aiming to accelerate product time-to-market. The company positions itself as a world leader in embedded technology, offering a broad range of services including design, manufacturing, assembly, and software consultancy. Their business model leverages a strong partner ecosystem and in-house capabilities to deliver comprehensive embedded solutions. The website content is rich, professionally designed, and targets a global audience in the technology and manufacturing sectors. Technically, the website is built on WordPress with WooCommerce and several modern plugins such as Smart Slider 3 and Ultimate Member. The site uses Google Analytics and Google Tag Manager for tracking and marketing purposes. While the design and content quality are excellent, performance is slow, and there is a notable lack of valid SSL/TLS configuration, which impacts security and user trust. From a security perspective, the site implements several important HTTP security headers and cookie flags, but the absence of a valid SSL certificate and disabled TLS protocols represent critical vulnerabilities. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place, indicating good GDPR adherence. However, no explicit incident response or vulnerability disclosure policies were found. Overall, the site demonstrates a mature business presence with strong content and privacy practices but suffers from critical security configuration issues that should be addressed promptly to improve trust and protect users.

Ploier + Hörmann is a medium-sized Austrian construction company specializing in energy and telecommunications infrastructure, with over 50 years of experience. The company operates as part of the larger Unternehmensgruppe LEYRER + GRAF, which strengthens its market position and resource base. Their website is professionally designed using TYPO3 CMS, providing clear navigation and relevant content targeted at clients in the construction and infrastructure sectors. However, the absence of a valid SSL certificate and HTTPS severely impacts their security posture and user trust. While cookie consent and privacy policies are implemented, there is a lack of explicit security policies or incident response information. The company maintains active social media channels and links to sister companies, indicating a well-connected business ecosystem.

T

TAL Aviation Group

talaviation.com

40

TAL Aviation Group is a well-established airline representation and travel services company with a global presence and a history dating back to 1987. The company offers a broad range of services including passenger and cargo GSA, airline distribution, destination marketing, tourism services, and digital marketing solutions. Their website reflects a professional and consistent brand image targeting airlines, tourism boards, and travel technology companies worldwide. Technically, the website uses a custom CMS with legacy jQuery libraries and integrates common marketing and analytics tools such as Google Analytics and Outbrain. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are implemented but cannot compensate for the lack of encryption. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, indicating awareness of GDPR requirements. Overall, the website is functional and credible but requires urgent security improvements to meet modern standards.

A

ATMOSA Petrochemie GmbH

atmosa.at

40

ATMOSA Petrochemie GmbH is a medium-sized Austrian company specializing in the production and supply of Phthalic Anhydride, a key petrochemical product. Established in 1995, it has positioned itself as a major European producer with a focus on reliability and long-term supply to chemical producers globally. The website reflects a professional business presence with clear company information, product details, and contact options targeting industrial clients and partners. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and analytics tools, hosted on infrastructure linked to hostprofis.com. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to risks and undermining trust. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

A

Allea Group

alleagroup.com

40

Allea Group is a medium-sized real estate investment and development holding company based in Cyprus, specializing in exclusive European residential and commercial property projects. The website presents a professional and well-structured digital presence targeting investors and clients interested in high-end real estate opportunities. The technical infrastructure is built on WordPress with popular plugins and is hosted behind Cloudflare CDN, but critically lacks a valid SSL certificate, resulting in no HTTPS availability which severely impacts security posture. Privacy and cookie policies are comprehensive and GDPR compliant, indicating good privacy awareness. However, the absence of terms of service, security policy, and vulnerability disclosure reduces transparency. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Softwerk AB is a medium-sized software development company based in Växjö, Sweden, founded in 2008. The company specializes in advanced software solutions including mobile app development, web development, system development, integration, AI & machine learning, and big data. Their market position is that of a regional technology provider with strong ties to academic research and commercial innovation. The website presents a professional image with clear service offerings and client references. Technically, the site uses PHP and nginx, with Google Fonts and Google Analytics integrated. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security deficiency. Security headers are partially implemented but the absence of TLS protocols and OCSP stapling reduces the security posture. Privacy and cookie policies exist but are basic, with no explicit GDPR compliance statements or incident response policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

V

VESCON GmbH (now SCIO Automation GmbH)

vescon.com

38

VESCON GmbH, now operating as SCIO Automation GmbH, is a medium-sized engineering and automation service provider founded in 1993 and based in Germany. The company specializes in delivering tailored Industry 4.0 solutions across sectors including manufacturing, energy, and water treatment. As part of the international SCIO Automation group, VESCON leverages extensive expertise and partnerships to support smart factory initiatives. The website is professionally designed, content-rich, and well-structured, targeting industrial clients and OEMs. Technically, the site uses TYPO3 CMS and includes modern web technologies but lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. Security posture is strengthened by TISAX certification, reflecting a commitment to information security, although the absence of HTTPS and modern TLS protocols significantly lowers the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional but urgently needs to address SSL/TLS issues to improve security and user trust.

Fait Internet Software GmbH is an Austrian FinTech company with over 20 years of experience specializing in digital solutions for wealth management and securities advisory. Their offerings include a modern securities advisory tool (PIA), a comprehensive suite of APIs for financial institutions, and digitalization projects tailored for asset management and private banking. The company targets banks, FinTechs, and insurance firms, positioning itself as a trusted niche player in the German-speaking financial technology market. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as Bootstrap and jQuery, and integrates Google services like Maps and Analytics. While the site is well-structured, mobile-optimized, and SEO-friendly, it suffers from critical security shortcomings due to the absence of a valid SSL certificate and disabled TLS protocols, severely impacting its security posture. Privacy compliance is strong, with GDPR-aligned cookie consent mechanisms and comprehensive privacy policies. Overall, the business presents a professional and credible front but must urgently address its SSL/TLS deficiencies to ensure secure communications and maintain trust.

I

Interbrand

interbrand.com

35

Interbrand is a leading global brand consultancy with a 50-year history, specializing in brand strategy, experience design, and brand valuation. The company targets global enterprises seeking to enhance their brand value and market presence through comprehensive consultancy services. The website reflects a mature digital presence built on WordPress, integrating modern analytics and marketing tools such as Google Analytics, HubSpot, and MonsterInsights. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing the site to potential risks and undermining user trust. Privacy compliance is well addressed with GDPR-compliant cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates strong business credibility and professional content but requires urgent security improvements.

P

PROVA

prova.fr

22

PROVA is a French manufacturing company specializing in custom brown extracts and aromatic solutions for the food industry, with a strong heritage of 75 years. The company targets B2B clients in the food manufacturing sector, offering tailored flavor creation and innovation services. The website is professionally designed, SEO optimized, and provides multilingual support via Weglot. However, the technical infrastructure lacks a valid SSL certificate and HTTPS enforcement, which is a critical security gap. The absence of DNSSEC and CAA records further reduces domain security. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is available primarily via contact forms and social media links. Overall, the business appears legitimate and well-positioned, but the security posture requires urgent improvement to protect user data and enhance trust.

M

MedQuest Imaging

mqimaging.com

36

MedQuest Imaging operates as a leading outpatient imaging provider in the United States, managing a network of over 60 radiology centers affiliated with hospitals and health systems. Their business model focuses on partnerships that enhance financial performance and patient care quality in radiology services. The website reflects a professional presence with clear business information and a comprehensive privacy policy. However, the absence of a valid SSL certificate and lack of cookie consent mechanisms indicate significant security and privacy compliance gaps. Technically, the site is built on WordPress with Elementor and uses Google Analytics for tracking, but performance data is unavailable. Security posture is weak due to missing HTTPS and security headers, which poses risks to user data confidentiality and trust. Overall, the site is functional and credible but requires urgent security improvements to meet modern standards.

ORF Beitrags Service GmbH operates the official website for managing ORF broadcasting fees in Austria, providing services such as SEPA direct debit, data changes, exemptions, and customer support. The website targets Austrian residents and businesses subject to ORF fees, positioning itself as a key public service provider in the media sector. The content is well-structured, professionally designed, and localized in German with multiple language options. The business model revolves around public service fee collection and administration. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries like Alpine.js and integrating analytics tools such as Matomo and Google Analytics. The site uses a comprehensive Content Security Policy and other security headers to protect against common web attacks. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security posture is moderate with good header implementations but severely impacted by the lack of HTTPS, no TLS protocols enabled, and missing HSTS. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Business credibility is supported by clear contact information, legal pages, and consistent branding. Overall, the website is functional and professional but requires urgent security improvements to enable HTTPS and strengthen encryption protocols. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS versions, and enhancing session security. These steps will improve trust, compliance, and user safety significantly.

B

BEWOTEC GmbH

bewotec.de

24

BEWOTEC GmbH is a German-based technology company specializing in software solutions for travel agencies and tour operators. Their product suite includes myJACK, a comprehensive travel agency software, DaVinci for tour operators, and dynamic packaging tools like flexStore and OTDS Player. The company has a strong market presence in the German-speaking travel industry, with a history dating back to 1988. Technically, the website is built on WordPress with modern plugins and tools, offering good content quality and user experience. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance protection.

O

Ospelt Gruppe

ospelt.com

30

Ospelt Gruppe is a well-established international manufacturer specializing in private label food products including ready meals, fresh meals, convenience foods, and pet food. Founded in 1958 and headquartered in Liechtenstein, the company operates multiple production sites across Liechtenstein, Switzerland, and Germany. The website reflects a mature digital presence with multilingual support and professional branding, targeting both consumers and business clients in the food manufacturing sector. Technically, the site is built on WordPress with the Divi theme and incorporates modern web technologies and SEO best practices. However, a critical security gap exists due to the absence of a valid SSL certificate, which undermines HTTPS security and user trust. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent improvements in security infrastructure to protect user data and enhance trust.

OTP Bank is a leading Hungarian financial institution with a strong regional presence in Central and Eastern Europe. Founded in 1949, it offers a comprehensive range of banking services including retail and corporate banking, loans, savings, insurance, and digital banking solutions. The website reflects a mature and professional digital presence with excellent content quality, clear navigation, and strong branding consistency. The bank leverages modern web technologies such as Vue.js and integrates multiple analytics and marketing tools to enhance user experience and business intelligence. From a technical perspective, the website employs robust security headers and content security policies, but suffers from critical SSL/TLS configuration issues including an invalid SSL certificate and lack of modern TLS protocol support. These issues significantly impact the security posture score and should be addressed promptly to ensure secure communications and user trust. Privacy compliance is well handled with clear GDPR-aligned privacy and cookie policies, supported by a consent mechanism. Overall, OTP Bank's website demonstrates high business credibility and professionalism, with comprehensive contact information and trust indicators such as awards and certifications. The domain registration data aligns well with the business history and legitimacy. Strategic improvements in SSL/TLS configuration and ongoing security audits are recommended to enhance the security posture and maintain customer confidence.

D

DACHSER

dachser.com

40

DACHSER is a well-established global logistics provider with a strong market position and comprehensive service offerings across multiple transport and warehouse networks. The website reflects a mature digital presence with multilingual support, rich content, and clear corporate governance and compliance information. Technically, the site uses modern tracking and consent management technologies but suffers from critical SSL certificate issues that undermine its security posture. Security headers and policies are well implemented, but the lack of valid HTTPS and modern TLS protocols is a significant risk. Overall, the site is professional and trustworthy but requires urgent remediation of SSL and TLS configurations to ensure secure user interactions and maintain compliance. Strategic recommendations include fixing SSL certificates, enabling modern TLS, and enhancing security mechanisms such as OCSP stapling and session resumption.

I

iSimulate

isimulate.com

40

iSimulate is a specialized company providing clinical education technology solutions focused on simulation products for healthcare training. Their product family includes modular simulation ecosystems, fetal heart rate monitor simulators, point of care device simulators, and training manikins. The website presents a professional and consistent brand image targeting healthcare educators and simulation trainers globally. Technically, the site uses modern JavaScript libraries and is hosted on AWS infrastructure, but critically lacks HTTPS support, exposing users to security risks. Privacy compliance is basic with a cookie consent banner and a linked privacy policy, but no terms of service or security policies are evident. The security posture is weak due to missing SSL/TLS and security headers, which should be addressed urgently to protect user data and trust. Overall, the site is functional and informative but requires significant security improvements to meet modern standards.

W

www.english-teacher-college.at

english-teacher-college.at

38

The website www.english-teacher-college.at operates as a specialized media platform providing comprehensive reviews, guides, and affiliate marketing services focused on online casinos in Austria. It targets Austrian online casino players by offering detailed casino ratings, bonus information, game variety, payment methods, and customer support evaluations. The site maintains a consistent brand presence with professional content and trust indicators such as DMCA protection and author credentials. Technically, the site is hosted behind Cloudflare and uses modern web technologies including JavaScript and Google Tag Manager, but lacks a valid SSL certificate, resulting in no HTTPS support and weak security posture. This absence of HTTPS and modern TLS protocols is a critical security gap that undermines user data protection and trust. Privacy and cookie policies exist but are basic in compliance, and no direct company contact emails or phone numbers are provided, though social media channels are linked. Overall, the site is functional and content-rich but requires urgent security improvements to enhance user trust and compliance.

I

iSEEit

iseeit.com

40

iSEEit is a technology company specializing in a native Salesforce Opportunity Management Tool designed to help sales teams visualize and qualify opportunities using structured sales methodologies such as MEDDIC and MEDDPICC. The company targets sales professionals and organizations seeking to improve sales process adoption and forecasting accuracy. The website presents a professional and content-rich platform with detailed product features, customer testimonials, and partner logos, positioning iSEEit as an award-winning solution in its niche. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Hotjar, and various marketing tools. Hosting is inferred to be on Amazon AWS infrastructure. While the site is mobile-optimized and SEO-friendly, performance metrics indicate slow loading times, suggesting room for optimization. From a security perspective, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which is a critical vulnerability impacting user trust and data security. Although some security headers like HSTS are present, the absence of HTTPS and other best practices significantly lowers the security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. Overall, the site demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS configuration and security practices to ensure safe user interactions and compliance with modern security standards.

VGN Medien Holding GmbH is a leading Austrian magazine publisher with a broad portfolio of print and digital media brands. Founded in 1992, it serves a wide Austrian audience with content spanning politics, lifestyle, business, and entertainment. The company operates multiple media brands and offers advertising and content marketing services. Technically, the website uses modern web technologies including nginx, JavaScript, and Google Analytics, but lacks a valid SSL certificate, which is a critical security shortfall. Security headers are implemented but without proper HTTPS, the site is vulnerable to interception and trust issues. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to align with best practices and user trust expectations.

Deutsche Lufthansa AG operates a comprehensive airline website offering flight booking and travel management services to a global audience. The site reflects Lufthansa's position as a leading international airline with a broad network and premium service offerings. The technical infrastructure leverages modern web technologies including Adobe Helix, Maui Design System, and Akamai CDN, ensuring a responsive and accessible user experience. While the website is rich in content and professionally designed, the SSL certificate is currently invalid, which poses a security risk. Security headers are well implemented, but the absence of a cookie consent mechanism indicates partial privacy compliance. Overall, the site demonstrates a mature digital presence with room for improvement in security and privacy practices.