Security Directory

P

POLOPLAST GmbH & Co KG

poloplast.com

40

POLOPLAST GmbH & Co KG is a well-established Austrian manufacturer specializing in plastic pipe systems with a strong presence across Europe. The company emphasizes sustainability, innovation, and quality, offering a broad range of products including multilayer pipe systems, building drainage, and wastewater disposal solutions. Their market position is that of a technology leader with a large operational scale and a parent company affiliation with Wietersdorfer. The website reflects a professional business with clear contact information and comprehensive privacy and cookie policies, supporting GDPR compliance. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Bootstrap for responsive design. However, the site suffers from slow performance and lacks HTTPS support, which is a critical security concern. The absence of SSL/TLS encryption and security headers exposes the site to potential risks and undermines user trust. Analytics and tracking tools such as Google Analytics and LeadFeeder are used with appropriate cookie consent mechanisms. Security posture is weak due to the lack of HTTPS and security headers, though no active vulnerabilities or malware were detected. Privacy compliance is strong with clear policies and consent banners. Business credibility is high given the detailed company information and social media presence. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate implementation of a valid SSL certificate, addition of security headers, performance optimization, and enhancement of incident response information to strengthen security culture and compliance.

S

Suntory Global Spirits

beamsuntory.com

40

Suntory Global Spirits is a leading global manufacturer and marketer of premium spirits, including whiskey, tequila, vodka, and gin. The company emphasizes quality craftsmanship, sustainability, and cultural heritage, targeting a global audience of premium spirit consumers and industry professionals. The website is professionally designed, content-rich, and consistent with the brand's market position and values. Technically, the site uses Drupal 10 CMS with modern JavaScript libraries and Google Tag Manager for analytics and marketing. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

L

Linde Material Handling Austria

linde-mh.at

40

Linde Material Handling Austria is a leading provider of material handling equipment and solutions, including forklifts, automated vehicles, and digital fleet management products. The company targets businesses requiring efficient logistics and warehouse operations, offering new, used, and rental equipment alongside comprehensive service packages. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the site uses JavaScript, jQuery, and tracking tools like etracker and SalesViewer, hosted likely on Microsoft Azure. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Business credibility is strong, supported by certifications and consistent domain registration data. Overall, the site is functional and professional but requires urgent security improvements to protect users and maintain trust.

C

Clariant Ltd.

clariant.com

40

Clariant Ltd. is a leading global specialty chemicals company focused on delivering innovative and sustainable chemical solutions across multiple industries including energy, manufacturing, and plastics. The website reflects a mature enterprise with comprehensive content, strong branding, and a clear business model targeting industrial customers, investors, and job seekers. Technically, the site is built on a modern CMS platform (Sitecore) and integrates multiple marketing and analytics tools, demonstrating a high level of digital maturity. However, the absence of a valid SSL/TLS certificate and disabled TLS protocols represent a critical security weakness that undermines user trust and data protection. While security headers and privacy policies are well implemented, the lack of HTTPS significantly lowers the overall security posture. Strategic improvements in SSL deployment and enhanced incident response documentation would strengthen the site’s security and compliance standing.

A

Active Solution

activesolution.at

36

Active Solution GmbH is a medium-sized Austrian technology and engineering company specializing in IT and engineering consulting, project execution, and recruitment services. With 17 years of experience and a portfolio of reputable clients, the company positions itself as a dedicated and passionate service provider for IT professionals and engineers. The website reflects a professional and consistent brand image targeting IT and engineering talent and clients. Technically, the site is built on TYPO3 CMS and uses modern JavaScript and CSS, but lacks HTTPS, which is a critical security gap. The presence of cookie consent and Google Analytics indicates some privacy awareness, though no explicit security or incident response policies are published. Overall, the company demonstrates moderate digital maturity but requires urgent improvements in security infrastructure to protect user data and enhance trust.

VML is a globally recognized marketing and communications agency operating under the parent company WPP. The company offers a broad range of services including brand experience, commerce, customer experience, and enterprise solutions, targeting enterprise-level clients. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content showcasing their work and insights. Technically, the site uses modern JavaScript frameworks and integrates analytics and marketing tools effectively, though performance is moderate. Security posture is weak due to the absence of a valid SSL certificate and HTTPS enforcement, which is a critical risk. Privacy compliance is strong with clear policies and consent mechanisms. Overall, VML presents a credible and professional business but must urgently address its SSL/TLS configuration to ensure secure user interactions.

H

Handl Tyrol GmbH

handltyrol.at

33

Handl Tyrol GmbH is a well-established Austrian family-owned company specializing in traditional Tyrolean ham, sausages, and roast specialities since 1902. The company positions itself as an ambassador of Tyrolean cuisine, offering both meat and plant-based products through retail and an online shop. The website reflects a strong brand identity with excellent content quality and clear navigation targeting consumers interested in authentic regional food products. Technically, the site employs modern JavaScript libraries and consent management tools but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, security headers, and DNS security features. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policy. Business credibility is supported by transparent contact information and trust signals such as quality guarantees and PGI certification. Overall, the site is professional but requires urgent security improvements to protect user data and enhance trust.

G

GEA Group Aktiengesellschaft

gea.com

40

GEA Group Aktiengesellschaft is a leading global supplier of systems and components primarily serving the food, beverage, and pharmaceutical industries. Founded in 1881 and headquartered in Germany, GEA offers a comprehensive portfolio including machinery, plants, advanced process technology, components, and services. The company is publicly listed and recognized for its sustainability efforts, being part of major sustainability indices. Technically, the website is built on modern frameworks such as Next.js and hosted on Microsoft Azure, with a Sitecore CMS backend, providing a rich and well-structured user experience across multiple languages. However, the security posture is currently weak due to the absence of a valid SSL/TLS certificate and lack of HTTPS support, which poses significant risks to data integrity and user trust. Privacy and cookie policies are well implemented and GDPR compliant, reflecting a strong commitment to data protection. Overall, the website demonstrates high professionalism and business credibility but requires urgent improvements in its security infrastructure to align with best practices and protect its users.

M

Metso

metso.com

40

Metso is a global enterprise specializing in sustainable technologies and end-to-end solutions for aggregates production, mining, and metals refining industries. The company positions itself as a partner for positive change, focusing on improving energy and water efficiency, productivity, and reducing environmental risks. Their offerings include products, parts, services, and advanced digitalization solutions integrating AI and cloud technologies. The website reflects a mature digital presence with comprehensive business information, investor relations, and sustainability commitments. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which poses significant risks to user data and trust. The site employs modern web technologies such as ASP.NET and Vue.js, and integrates analytics tools including Microsoft Application Insights and Hotjar, indicating a moderate level of digital maturity. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website is professional and trustworthy but requires urgent security improvements to enable HTTPS and strengthen its security posture.

A

acib GmbH

acib.at

35

acib GmbH is an international research center specializing in industrial biotechnology, focusing on sustainable and advanced processes for the biotech, pharmaceutical, and chemical industries. The website targets industry professionals, scientists, and the public, offering information about research projects, events, and career opportunities. The company maintains a moderate digital presence with a WordPress-based website enhanced by Elementor and several embedded multimedia services. However, the absence of a valid SSL certificate and HTTPS significantly undermines the site's security posture. While privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism, the lack of explicit security policies and incident response information indicates room for improvement in security governance. Overall, the site is professional and trustworthy but requires urgent security enhancements to protect user data and improve trust.

Pilz GmbH & Co. KG is a leading international provider of automation technology, specializing in components, systems, and services for safe automation. The company targets industrial automation customers, machine builders, and safety engineers with a comprehensive portfolio including products, consulting, training, and support. The website reflects a professional and consistent brand presence with detailed content tailored to its B2B audience in the manufacturing and technology sectors. Technically, the site uses Imperia CMS with JavaScript frameworks and integrates marketing and analytics tools such as Google Tag Manager, Cookiebot, and Etracker. However, the absence of a valid SSL certificate and lack of TLS support significantly weaken the security posture. Security headers are well configured, and privacy compliance is strong with GDPR-aligned cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained but requires urgent SSL/TLS remediation to improve security and user trust.

D

DenizBank A.Ş.

denizbank.com

40

DenizBank A.Ş. is a large Turkish financial institution offering a broad range of banking services including retail, corporate, and specialized banking sectors. The website reflects a mature digital presence with comprehensive service offerings, detailed legal disclosures, and strong branding consistency. The bank targets both individual and business customers with tailored products and digital banking solutions. The site includes rich content, interactive calculators, and marketing campaigns, indicating a well-developed digital marketing strategy. Technically, the website uses modern JavaScript frameworks and integrates third-party marketing and analytics tools such as Google Tag Manager and Adjust. However, performance metrics indicate slow loading times, and the SSL/TLS configuration is critically flawed with an invalid certificate and no TLS protocols enabled, posing significant security risks. Security posture is moderate with good use of security headers but undermined by the lack of valid SSL and TLS support. Privacy compliance is strong with detailed privacy policies and data protection disclosures, including a dedicated KVKK (Turkish data protection law) section. Contact information is clearly presented, enhancing business credibility. Overall, while the business and content aspects are strong, the critical SSL issues represent a major risk that must be addressed immediately to protect user data and maintain trust.

E

Eppendorf SE

eppendorf.com

40

Eppendorf SE is a well-established, leading life sciences company specializing in the development and sale of laboratory instruments, consumables, and services globally. Their product portfolio spans liquid handling, bioprocessing, centrifugation, and more, targeting academic, commercial, pharmaceutical, and industrial laboratories. The website reflects a mature, professional digital presence with comprehensive content, clear navigation, and multi-regional support. Technically, the site employs modern JavaScript frameworks and integrates advanced marketing and analytics tools, although performance data is limited. Security posture is currently weak due to invalid or missing SSL/TLS certificates and lack of enabled TLS protocols, which is a critical risk. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms in place. Overall, the site is trustworthy and credible but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

Bunge Global SA operates a comprehensive global agribusiness and food ingredient supply chain, connecting farmers to consumers with a focus on sustainability and renewable energy. The website reflects a large enterprise with a professional digital presence, including regional sites and investor relations. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent, but suffers from a critical lack of valid SSL/TLS certificates, impacting security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is content-rich and professionally designed but requires urgent security improvements to protect user data and trust.

IMC-Austria operates as a small non-profit meditation center focused on Vipassana meditation in the Theravada Buddhist tradition. The website provides informational content about meditation courses, the tradition of Sayagyi U Ba Khin, and links to related international centers. The target audience includes individuals interested in meditation and spiritual growth. Technically, the website is basic and static, using JavaScript, CSS, and Google services such as Analytics and Custom Search. However, the site suffers from slow load times and lacks modern web technologies or CMS platforms. Security posture is weak due to the absence of HTTPS, no valid SSL certificate, and missing security headers, exposing visitors to potential risks. Privacy compliance is poor, with no privacy or cookie policies and no consent mechanisms for tracking. Business credibility is moderate based on consistent WHOIS data and clear organizational identity but is weakened by lack of contact information and security best practices. Overall, the website requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

XIMES GmbH is a specialized consulting and software company focused on workforce management, including labor time models, shift planning, personnel demand calculation, and payroll solutions. The company targets businesses and social partners seeking practical and scientifically grounded solutions in these areas. Their website reflects a professional and consistent brand presence with detailed service offerings and clear contact information. Technically, the site is built on the Odoo CMS platform with modern web technologies but suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the business appears legitimate and consistent with WHOIS data, but urgent improvements in SSL/TLS configuration are necessary to enhance security and trust.

S

Südtiroler Sanitätsbetrieb

sabes.it

40

Südtiroler Sanitätsbetrieb operates as a regional healthcare provider in South Tyrol, Italy, serving the local population with healthcare services. The website is primarily a digital presence for the organization but currently offers minimal direct content or user interaction features. The technical infrastructure is hosted on Microsoft Azure and uses JavaScript-based analytics and cookie consent tools. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. Security headers are implemented, but the absence of TLS protocols and HSTS reduces the overall security posture. Privacy compliance is limited, with no visible privacy or terms of service policies, though a cookie consent mechanism is present. WHOIS data confirms the domain is mature and legitimately registered, consistent with the organization's profile. Overall, the website requires significant improvements in security, privacy transparency, and content richness to better serve its audience and meet modern standards.

fiskaly GmbH is a technology company specializing in cloud-based fiscalization solutions tailored for European markets including Germany, Austria, Spain, Italy, and France. Their services focus on enabling retailers and POS providers to comply with complex fiscal regulations through APIs and cloud services. fiskaly holds a strong market position as a leading provider of cloud TSS solutions in Germany and is expanding its footprint across Europe. The website demonstrates a professional, well-branded presence with comprehensive content, customer testimonials, and partner endorsements. Technically, the website is built on a modern Next.js framework hosted on Netlify, leveraging React and various marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security issue is present due to an invalid or missing SSL certificate and disabled TLS protocols, which significantly impacts the security posture. Security-wise, fiskaly implements several best practices including HSTS and security headers, and holds ISO 27001 certification, indicating a mature security framework. Despite this, the lack of a valid SSL certificate and TLS support is a major vulnerability that must be addressed urgently to protect user data and maintain trust. Overall, fiskaly presents a credible and professional business with strong compliance and technical capabilities but must remediate critical SSL/TLS issues to ensure secure and trustworthy operations online.

A

Ankerbrot Holding GmbH

linauer.at

33

Linauer.at is a transitional website for the Linauer bakery brand, which is being integrated into the Ankerbrot Holding GmbH group, a well-established bakery company in Austria. The site primarily serves as a redirect landing page to the main Ankerbrot website, indicating a brand consolidation. The business operates in the retail bakery sector targeting consumers in Austria. The website content is minimal, focusing on brand transition with a video and countdown redirect. Technical infrastructure includes JavaScript libraries such as jQuery and RequireJS, hosted on ip.co.at nameservers. However, the site lacks HTTPS, which is a critical security deficiency. No security headers or cookie consent mechanisms are implemented, and performance is slow with a large page size and long load time. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the site demonstrates basic digital maturity but requires significant security and privacy improvements.

G

Gentics Software GmbH

gentics.com

37

Gentics Software GmbH is a medium-sized technology company based in Austria specializing in enterprise content management solutions, e-government digital services, and customized software applications. Their website presents a professional and consistent brand image targeting enterprises and government agencies seeking digital transformation and content management platforms. The company offers a range of products including the Gentics Content Management Platform and related extensions. Technically, the website uses modern frameworks such as Bootstrap 5 and implements a GDPR-compliant cookie consent mechanism with opt-in functionality. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Performance is moderate with acceptable load times and resource counts, and the site is mobile optimized with basic accessibility features. From a security perspective, the absence of HTTPS and security headers significantly lowers the security posture. No incident response or security policy information is publicly available, and no contact information is provided on the site, which may impact user trust and compliance. DNS records show standard email protection via SPF but lack DNSSEC and CAA records. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, while the business and content quality are good, the lack of HTTPS and security best practices present a significant risk. Strategic improvements in SSL deployment, security headers, and contact transparency are recommended to enhance trust and compliance.

G

granITIC

granitic.eu

26

granITIC is a small IT consulting and software development company specializing in software architecture, Oracle and Java development, and medical office software solutions. The company targets sectors such as healthcare, production, industry, trade, aeronautical, and lottery. The website presents basic information about the business and its services but lacks detailed contact information and advanced content features. Technically, the website is hosted on an Apache server running Ubuntu, with Google Analytics integrated for visitor tracking. However, the site lacks HTTPS support, has no valid SSL certificate, and does not implement modern security headers or privacy compliance mechanisms. Performance data is unavailable, but the site appears minimal and slow, with poor mobile optimization and accessibility. From a security perspective, the absence of HTTPS and security headers represents a critical vulnerability, exposing users to potential data interception and undermining trust. The lack of privacy and cookie policies further indicates non-compliance with GDPR and related regulations. DNS and SPF records are properly configured, reducing email spoofing risks. Overall, the website's risk profile is elevated due to missing fundamental security controls and privacy compliance. Strategic improvements in SSL implementation, security headers, and privacy policies are essential to enhance trustworthiness and regulatory adherence.

E

Erste Digital GmbH

s-itsolutions.com

39

Erste Digital GmbH is the digital and IT services arm of Erste Group, the largest banking group in Central and Eastern Europe. The company focuses on delivering best-in-class IT solutions and digital transformation services to banking entities across the region, supporting both operational and innovation activities. The website reflects a professional and modern digital presence with rich content describing the business and its mission to enhance financial health for millions of customers. Technically, the site uses modern web technologies including JavaScript modules, service workers, and ElasticSearch for search functionality, hosted behind Amazon CloudFront CDN for performance and reliability. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, which significantly impacts the security posture and trustworthiness. Privacy and cookie policies are present and appear comprehensive, indicating good compliance with GDPR requirements. Contact information such as emails and phone numbers are not explicitly provided on the homepage, which may affect user engagement. Overall, the site demonstrates strong business credibility and technical maturity but requires urgent security improvements to enable HTTPS and strengthen its security framework.

B

Brenntag

brenntag.com

40

Brenntag is a global enterprise specializing in chemical distribution, logistics, and value-added services tailored to customer needs. The website serves as a multilingual portal with a splash page for country and language selection, indicating a broad international presence. The technical infrastructure leverages modern JavaScript frameworks such as Nuxt.js and integrates with Google Tag Manager and OneTrust for analytics and cookie consent management. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. No explicit privacy policy, terms of service, or contact information are readily available on the splash page, which may affect user trust and compliance. Overall, Brenntag's website reflects a professional business with good design and user experience but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

E

Eversheds Sutherland

eversheds.at

40

Eversheds Sutherland is a global law firm with a strong presence in Austria, offering a wide range of legal services across multiple sectors including banking, energy, technology, and real estate. The firm positions itself as a responsible business focused on helping clients, people, and communities to thrive. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to business clients seeking legal expertise. Technically, the site is built on a modern stack including React and Sitecore CMS, hosted on Microsoft Azure, and integrates various analytics and marketing tools. However, performance is currently slow, and there is room for improvement in SSL/TLS configuration and security hardening. Security posture is a concern due to the invalid SSL certificate and lack of enabled TLS protocols, which exposes users to risks and undermines trust. Despite strong security headers and content security policies, the absence of proper HTTPS implementation is a critical vulnerability. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and maintain compliance. Strategic recommendations include fixing SSL issues, enabling modern TLS, and enhancing session security to align with best practices.

Canon Austria operates as a leading provider of digital imaging and printing products in Austria, offering a wide range of cameras, lenses, printers, and professional video solutions for both consumer and business markets. The website reflects a strong market position with comprehensive product offerings and professional services, supported by a consistent and well-branded digital presence. Technically, the site leverages modern web technologies and integrates multiple third-party platforms for marketing, analytics, and customer engagement, indicating a mature digital infrastructure. However, a critical security weakness is the absence of a valid SSL certificate and lack of HTTPS support, which significantly undermines the security posture despite the presence of robust security headers and policies. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and maintain trust.

A

APG

apg.nl

40

APG is a large Dutch pension fund service provider specializing in pension administration, asset management, and advisory services. The website is content-rich, professionally designed, and targets pension participants and institutional investors. The technical infrastructure includes Cloudflare hosting, Umbraco CMS, and multiple marketing and analytics tools such as Google Tag Manager and Cookiebot. However, a critical security issue is the absence of a valid SSL certificate and enabled TLS protocols, which severely impacts the security posture. Security headers are well implemented, but the lack of HTTPS reduces trust and security. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Contact information is primarily via web forms, with no explicit emails or phone numbers found. Social media presence is active on LinkedIn, Facebook, and Instagram. Overall, the website is professional and trustworthy but requires urgent SSL/TLS configuration improvements to enhance security and user trust.

D

dm Slovensko

dm-drogeriemarkt.sk

40

dm Slovensko operates a well-branded online drugstore e-commerce platform targeting Slovak consumers with a broad range of personal care and health products. The website leverages a modern JavaScript and CSS technology stack with integrations from multiple third-party services for analytics, marketing, and user consent management. The technical infrastructure is hosted on Google Cloud, indicating a scalable and reliable hosting environment. However, the website currently lacks a valid SSL/TLS certificate, resulting in no HTTPS availability, which is a critical security concern. Security headers are mostly well implemented, but the disabled X-XSS-Protection header and malformed DNS CAA records indicate areas for improvement. Privacy and cookie policies are not detected in the provided content, representing a compliance gap with GDPR and related regulations. Overall, the website is functional and professionally designed but requires urgent security and compliance enhancements to protect user data and build trust.

S

STRG

strg.at

37

STRG is a well-established Austrian technology and research company specializing in custom software solutions, AI research, and digital transformation services. With over 20 years of experience, STRG offers a modular approach to software development, integrating AI and sustainability principles to optimize business processes across various industries including manufacturing, healthcare, finance, and media. The company maintains a strong market position supported by client testimonials, case studies, and industry partnerships. Technically, the website is built on WordPress with Elementor and employs modern web technologies and performance optimizations. However, the absence of a valid SSL certificate and HTTPS configuration is a critical security gap that undermines user trust and data protection. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, STRG demonstrates a mature digital presence but must urgently address its SSL/TLS security to enhance its security posture and trustworthiness.

KrankenhausExperte is a small German healthcare information website offering a searchable database of over 2,000 hospitals in Germany, along with health-related articles. The platform targets patients and individuals seeking hospital information and facilitates hospital contact and appointment scheduling. Technically, the site uses basic web technologies such as nginx, JavaScript, CSS, and HTML5 but lacks modern CMS or frameworks. Performance and mobile optimization are basic, and no analytics or tracking tools are detected. Security posture is weak due to the absence of HTTPS, SSL certificates, and security headers, exposing users to potential risks. Compliance is poor with no privacy, cookie, or terms of service policies present. Overall, the site is functional but lacks professionalism and trust indicators, limiting its credibility and user confidence.

A

All for One Customer Experience GmbH

b4b-solutions.com

40

All for One Customer Experience GmbH is a Germany-based technology company specializing in delivering innovative customer experience solutions leveraging the SAP Customer Experience Suite. Positioned as a SAP Platinum Partner and part of the All for One Group, the company offers comprehensive cloud-based services including consulting, software implementation, and custom development to enhance customer journeys and digital transformation for businesses. The website reflects a professional and consistent brand image targeting enterprises seeking to optimize their customer engagement and sales processes. Technically, the website is hosted on Amazon Web Services using Amazon S3 and CloudFront CDN, employing modern web technologies such as JSON-LD structured data and OneTrust for cookie consent management. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a high-quality user experience. However, performance metrics were not available. From a security perspective, while the site implements several important security headers and content security policies, it critically lacks a valid SSL/TLS certificate and does not support modern TLS protocols, resulting in a poor security posture. This exposes users to risks and undermines trust. Privacy compliance is strong with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in security infrastructure will significantly enhance the site's risk profile and user confidence.

Electrolux is a globally recognized leader in household appliances, offering a wide range of products including cooking, cooling, laundry, vacuum cleaners, and small kitchen appliances. The website targets Finnish consumers, providing comprehensive product information, promotions, and support services. The digital infrastructure is built on modern technologies such as Next.js, ensuring a responsive and user-friendly experience. While the site employs multiple analytics and marketing tools for personalization and tracking, it maintains good privacy compliance with clear cookie and privacy policies. Security headers are implemented, but the absence of a valid SSL certificate and some advanced security features reduces the overall security posture. The domain registration aligns well with the business identity, confirming legitimacy. Strategic improvements in SSL management and enhanced security practices are recommended to strengthen trust and compliance.

V

Vaillant

vaillant-group.com

40

Vaillant Group is a globally recognized leader in the energy sector, specializing in climate-friendly heating, cooling, and hot water solutions including heat pumps and gas condensing boilers. The company operates in over 60 countries with a workforce of approximately 16,000 employees, emphasizing sustainability and digital services. The website reflects a mature and professional business with consistent branding and comprehensive content tailored to customers, partners, and potential employees. Technically, the site leverages modern JavaScript libraries, lazy loading, and CDN hosting via Amazon S3 and CloudFront, with a CMS likely based on e-Spirit. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are present and GDPR compliant, and the site integrates Google Tag Manager for analytics and Consentmanager.net for consent management. Overall, the site is well-structured and user-friendly but requires urgent security improvements.

V

Vaillant Group Austria GmbH

vaillant.at

40

Vaillant Group Austria GmbH operates a comprehensive website focused on heating solutions including heat pumps, gas heating, photovoltaic systems, and smart home technologies targeted at private customers in Austria. The company is a well-established player with over 150 years of history and a dense service network, positioning itself as a market leader in the energy sector. The website provides detailed product information, customer testimonials, and service offerings, reflecting a mature business model with strong customer engagement. Technically, the site uses modern JavaScript libraries and marketing tools such as Optimizely and Google Tag Manager, with good mobile optimization and SEO practices. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are well implemented, but the lack of TLS protocols and OCSP stapling reduces the overall security posture. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

F

FRANZ OBERNDORFER GmbH & Co KG

oberndorfer.at

27

FRANZ OBERNDORFER GmbH & Co KG is Austria's largest precast concrete manufacturer with over 100 years of experience in planning, development, and production of concrete elements. The company holds a leading market position in Austria, offering a comprehensive product portfolio and full-service solutions including logistics and assembly. Their website reflects a mature digital presence built on Drupal 9, with good content quality and clear navigation targeting B2B customers in construction and real estate sectors. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap that undermines user trust and data protection. While cookie compliance and privacy policies are well implemented, the lack of explicit security policies and incident response information indicates room for improvement in security governance. Overall, the business is credible and professional, but urgent action is needed to secure the website infrastructure.

DHL-express.at is the Austrian localized website for DHL, the global leader in logistics and international shipping. The website offers comprehensive information about DHL's services including express document and package shipping, volume shipping for business customers, freight services, and supply chain logistics. The site targets both individual and business customers in Austria, providing tailored solutions and access to various DHL portals and services. Technically, the site is built on Adobe Experience Manager with integrations of Adobe Launch and other modern web technologies, indicating a mature digital infrastructure. However, a critical security gap exists as the site does not serve content over HTTPS, exposing users to potential risks. Security headers are well implemented, but the lack of SSL/TLS severely impacts the security posture. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is professionally designed, content-rich, and trustworthy but urgently requires HTTPS implementation to meet modern security standards.

R

ruwido austria gmbh

ruwido.com

29

Ruwido Austria GmbH is a well-established Austrian manufacturer specializing in the design, development, and production of remote controls and smart home devices. Founded in 1969, the company emphasizes sustainability, innovation, and high design quality, holding a strong market position supported by numerous prestigious awards. Their operations are vertically integrated under one roof in Austria, powered by 100% renewable energy, reflecting a commitment to environmental responsibility. The website is professionally designed, content-rich, and targets businesses and consumers interested in premium, sustainable remote control solutions. Technically, the website runs on TYPO3 CMS with a PHP backend served by Apache. While the site is mobile-optimized and SEO-friendly, it suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in HTTP-only access despite HSTS header presence. Analytics are implemented via Google Analytics and YouTube embeds, with a compliant cookie consent mechanism in place. Contact information is clearly presented, enhancing business credibility. Security posture is basic with no major vulnerabilities detected but significant improvement needed in SSL/TLS configuration to protect user data and enhance trust. No explicit security or incident response policies are published, which could be improved to strengthen security culture and compliance. Overall, the site is trustworthy and professional but requires urgent SSL implementation and enhanced security policies to align with best practices and regulatory expectations.

H

Hyperwave GmbH

hyperwave.com

40

Hyperwave GmbH is an established Austrian technology company specializing in intranet and private cloud solutions designed to facilitate efficient and secure information management within enterprises. With over 20 years of market presence, the company offers a range of services including document management, knowledge management, collaboration tools, and consulting services. The website targets businesses seeking robust data and information processing solutions, emphasizing ease of use, security, and adaptability. Technically, the website is built on a modern stack including Apache, Bootstrap, and JavaScript with Lottie animations, hosted via World4You DNS services. While the site is mobile-optimized and well-structured with good SEO practices, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and proper HTTPS configuration, which undermines user trust and data security. Performance metrics are unavailable, suggesting potential monitoring gaps. From a security perspective, the site implements some security headers but lacks a valid SSL/TLS setup, OCSP stapling, and DNSSEC, exposing it to potential risks. No explicit security policies or incident response contacts are published, indicating gaps in security governance and transparency. Privacy compliance is partially addressed with cookie consent mechanisms and a privacy policy, but no data protection officer or vulnerability disclosure information is provided. Overall, the website presents a professional business front with solid content and branding but requires urgent improvements in security infrastructure and transparency to enhance trustworthiness and compliance. Strategic recommendations include immediate SSL certificate deployment, DNS record corrections, and publication of security and incident response policies to align with best practices and regulatory requirements.

C

CeMM Research Center for Molecular Medicine of the Austrian Academy of Sciences

cemm.at

26

CeMM is a reputable interdisciplinary research center affiliated with the Austrian Academy of Sciences, focusing on molecular medicine and biomedical research. The website reflects a strong academic and scientific orientation, targeting researchers, students, and collaborators. The technical infrastructure is based on TYPO3 CMS with Apache hosting, and includes privacy-conscious analytics via Matomo. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. The site is well designed, mobile optimized, and rich in content, but security improvements are urgently needed to align with best practices and compliance requirements.

P

Philosophtware

philosophtware.com

28

Philosophtware is a small technology-focused business presenting itself as an IT consulting or software solutions provider. The website content is minimal, with a simple slogan and a single contact email, lacking detailed business descriptions or multiple contact channels. The technical infrastructure is basic, hosted likely on netcup servers, with no modern CMS or frameworks detected. Performance is slow despite the small page size, and SEO and accessibility optimizations are absent. Security posture is weak, with no valid SSL certificate, no HTTPS support, and no security headers or advanced configurations. The presence of Comodo TrustLogo scripts without a valid SSL certificate may mislead visitors about the site's security. Overall, the site lacks critical compliance documents such as privacy and cookie policies, reducing trust and compliance standing.

BRAUN Maschinenfabrik Gesellschaft m.b.H. is a well-established Austrian manufacturing company specializing in steel cutting and grinding machines, hydraulic steel structures, and decommissioning technologies. Founded in 1848, the company holds a strong market position as a technology leader with a global presence, serving industrial clients primarily in the energy and manufacturing sectors. Their product portfolio includes customized solutions for cutting, grinding, and dismantling applications, supported by in-house engineering and automation capabilities. The website reflects a professional business with clear branding and relevant content targeting industrial customers. Technically, the website runs on an Apache server and uses JavaScript libraries including Google Analytics and Google Maps API. However, the site lacks HTTPS encryption, which is a critical security shortfall. Performance metrics are not available, but the site shows basic mobile optimization and SEO practices. The hosting provider is identified via DNS as esys.at, an Austrian hosting service. From a security perspective, the absence of a valid SSL/TLS certificate and HTTPS is a major vulnerability, exposing users to potential data interception. No advanced security headers or policies are implemented, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is minimal, with no cookie consent mechanism detected, although a basic privacy policy and terms of service are present. Overall, the website demonstrates moderate business credibility and content quality but suffers from significant security and privacy compliance gaps. Strategic improvements in SSL deployment, security headers, and privacy mechanisms are recommended to enhance trust and protect users.

L

Lomography

lomography.com

32

Lomography is a well-established analogue photography community and e-commerce platform founded in 1994, offering a wide range of analogue cameras, films, lenses, and educational content. The website demonstrates excellent content quality, user experience, and community engagement, targeting photography enthusiasts globally. Technically, the site uses a modern stack with nginx and Phusion Passenger, and employs Google Tag Manager for analytics and marketing. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, exposing users to potential interception risks. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the business credibility is high, but the security posture requires urgent improvement to protect users and maintain trust.

N

Nameshift.com

ibk.fr

26

The website ibk.fr is a domain sales landing page managed by Nameshift.com, a company specializing in domain name transfers and escrow services. The business model focuses on providing a safe, fast, and fee-free domain transfer experience for buyers, with the seller paying commissions. The site targets individuals and businesses looking to purchase domain names securely. Technically, the site uses modern frameworks such as SvelteKit and is hosted on a CDN associated with Nameshift.com. However, the website suffers from critical security shortcomings, including the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Additionally, privacy and cookie policies are missing, and DNS security configurations are incomplete or malformed. These factors reduce trust and compliance with data protection regulations. Overall, the site presents a basic but functional domain sales platform with room for significant security and compliance improvements.

The website es-investments.com currently serves as a parked domain landing page with no active business content or services. It primarily displays advertising and affiliate links indicating the domain is for sale. The technical infrastructure is minimal, hosted on Hetzner Online with a Caddy server, and uses parking scripts from ParkingCrew and Afternic. There is no valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. Privacy compliance is minimal with only a basic privacy policy accessible via a popup link, and no cookie consent mechanisms are present. The lack of business information, contact details, and security best practices significantly lowers the site's trustworthiness and credibility.

The website polymet-solutions.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to be enabled. This prevents access to any substantive content or business information. The domain is registered and uses Cloudflare for DNS and security services but lacks a valid SSL certificate, resulting in no HTTPS support. The absence of privacy policies, contact information, or business details on the landing page limits the ability to assess the company's market position or services. Technically, the site employs Cloudflare's security headers but fails to implement modern TLS protocols or HSTS, reducing its security posture. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility due to the blocked content and missing critical elements.

A

AICHELIN Holding GmbH

aichelin.com

40

AICHELIN Holding GmbH is a leading industrial manufacturing company specializing in heat treatment solutions for metallic parts and components. The company offers a broad portfolio including industrial furnace systems, industrial burner systems, vacuum furnaces, and battery materials, supported by comprehensive global service offerings. Their website reflects a professional B2B focus targeting industrial clients and equipment manufacturers. Technically, the site uses modern JavaScript libraries, Bootstrap framework, and integrates consent management and Google Tag Manager for analytics and privacy compliance. However, the SSL/TLS configuration is critically flawed with an invalid certificate and no enabled TLS protocols, posing a significant security risk. Security headers are well implemented, but the lack of valid HTTPS severely impacts the security posture. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is content-rich and professionally presented but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions and trust.

The website onecareco.com is currently a parked domain with minimal content primarily consisting of advertising scripts and placeholders. There is no active business information, contact details, or meaningful content describing any products or services. The domain is mature, registered since 2007, but the website does not reflect an active or professional business presence. Technically, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. The hosting provider is Hetzner Online, and the site uses nginx and Caddy servers with JavaScript-based ad delivery. Security posture is weak with no modern TLS protocols enabled and no security headers configured. Privacy compliance is minimal with only a basic privacy policy page present and no cookie consent mechanism. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility.

W

Wienerberger AG

wienerberger.com

39

Wienerberger AG is a leading global manufacturer and supplier of building materials, specializing in bricks, clay roof tiles, pipe systems, and surface pavings. The company holds a strong market position as the world's largest brick producer and a market leader in Europe for clay roof tiles and infrastructure solutions. The website reflects a mature and professional digital presence with comprehensive content targeting investors, customers, and job seekers. Technically, the site is built on Adobe Experience Manager and uses modern web technologies, but critically lacks HTTPS/SSL encryption, exposing users to security risks. Security headers are partially implemented, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and content quality but requires urgent security improvements to protect user data and maintain trust.

F

FH Oberösterreich

fh-ooe.at

29

FH Oberösterreich (FH OÖ) is a leading university of applied sciences in Austria, offering a wide range of bachelor and master degree programs across multiple campuses. The institution emphasizes praxis-oriented education, personal consultation, and maintains strong international partnerships. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site uses modern frameworks such as Vue.js and Craft CMS, and integrates various analytics and marketing tools with user consent mechanisms. However, the security posture is weakened by the absence of a valid SSL certificate and lack of security headers, exposing users to potential risks. Privacy compliance is well addressed with detailed policies and cookie consent. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to ensure secure communications.

G

Getzner Textil AG

getzner.at

40

Getzner Textil AG is a well-established Austrian textile manufacturer with a history dating back to 1818. The company specializes in high-quality fashion fabrics, corporate fashion textiles, personal protective equipment, sports equipment textiles, and industrial textiles, emphasizing innovation and sustainability. Their market position is strong within Europe, serving a diverse clientele including fashion designers, garment makers, and industrial users. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Matomo Analytics, hosted behind Fastly CDN and Varnish cache. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts security posture. Privacy and cookie policies are well implemented with consent mechanisms, and the company maintains active social media channels. Overall, the domain registration and DNS data align with the company's claims, indicating legitimacy and trustworthiness.

C

Coloplast Group

coloplast.com

40

Coloplast is a mature, enterprise-level healthcare company headquartered in Denmark, specializing in intimate healthcare solutions such as ostomy, continence, bowel, wound, urology, and respiratory care. The company operates globally with a presence in over 100 countries and serves more than 2 million people annually. Their website reflects a professional and comprehensive digital presence, targeting healthcare professionals, patients, investors, and job seekers. Technically, the site uses modern JavaScript frameworks, Episerver CMS, and integrates multiple third-party services including Salesforce, Stripe, and Cookiebot. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by detailed investor relations and sustainability information. Overall, the site is professionally designed and trustworthy but requires urgent security improvements.