Security Directory

A

ALPINE BRANDS GmbH & Co KG

auer-waffeln.at

40

Auer is a well-established Austrian brand specializing in gourmet waffle products since 1920, operated by ALPINE BRANDS GmbH & Co KG. The company offers a range of premium waffle specialties and confectionery products targeting consumers who appreciate high-quality gourmet foods. The website reflects a mature digital presence with a WordPress CMS enhanced by Elementor and optimized with WP Rocket. It includes comprehensive metadata, structured data, and social media integration, supporting good SEO and user engagement. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though improvements such as HSTS and additional security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, providing clear contact information and business legitimacy.

S

syncONE Solutions GmbH

sync-one.net

40

syncONE Solutions GmbH operates a professional website focused on providing software solutions for optimizing communication processes and people management within organizations. Their flagship product, syncONE®, offers modular tools including ticketing, training via Mobile Learning®, news distribution, chat, calendar, and resource management. The company targets businesses seeking to improve internal communication and employee engagement. The website is well-structured, content-rich, and professionally designed, reflecting a mature digital presence.

京

京东全球购

jd.hk

38

JD.hk operates as a major e-commerce platform specializing in cross-border and overseas shopping, targeting Chinese-speaking consumers interested in authentic global products. The platform offers a wide range of categories including mother and baby products, beauty, electronics, and luxury goods, supported by partnerships with well-known brands and stores such as Walmart and Rakuten. The website demonstrates a consistent brand presence aligned with JD.com's ecosystem, leveraging advanced front-end technologies and multiple JD.com subdomains for content delivery and user interaction. Technically, the site uses a modern JavaScript stack including jQuery, Sea.js, and JD's proprietary JMFE framework, but suffers from critical security shortcomings such as the absence of a valid SSL certificate and lack of modern TLS protocol support. Performance metrics are incomplete, and mobile optimization is basic with a redirect to a mobile subdomain. SEO and content quality are good, with clear navigation and rich product listings. From a security perspective, the lack of HTTPS and TLS support is a significant risk, exposing users to potential data interception. Security headers are minimal, and no incident response or vulnerability disclosure policies are evident. Privacy compliance is weak, with no cookie policy or consent mechanism detected, raising concerns about GDPR and other regulatory adherence. Overall, while JD.hk is a professionally designed and content-rich e-commerce platform with strong business credibility, its security posture and privacy compliance require urgent improvement to protect user data and maintain trust. Strategic recommendations include immediate SSL certificate deployment, enhanced security configurations, and implementation of comprehensive privacy policies.

Pint-Pharma is a pharmaceutical company focused on serving patients with rare diseases in Latin America, particularly Brazil. The company emphasizes a community-centric approach and participates in public health consultations, aiming to become a leader in its specialized market segment. The website reflects this positioning with content in Portuguese and links to relevant public health consultation pages. Technically, the site is built on WordPress with Elementor and hosted on a LiteSpeed server. While the site is accessible and well-structured with good design and navigation, there are notable security shortcomings, including the absence of modern TLS protocols and lack of HSTS enforcement. The SSL certificate is valid but the overall SSL/TLS configuration is weak. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site demonstrates moderate digital maturity but requires improvements in security and privacy compliance to enhance trust and protect users.

A

Appac Mediatech Pvt. Ltd

appacmedia.com

37

Appac Mediatech Pvt. Ltd is a digital marketing and web development agency based in Coimbatore, India, with over 18 years of experience. The company offers a wide range of services including SEO, social media marketing, web design and development, corporate branding, and ecommerce solutions. Positioned as a leading B2B agency in South India, Appac emphasizes 100% in-house production and strong domain knowledge in industries such as manufacturing, healthcare, education, and real estate. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website uses a traditional Apache server on Ubuntu, with common JavaScript libraries and tools such as jQuery, Owl Carousel, Google Tag Manager, Ahrefs Analytics, and Microsoft Clarity. However, the site lacks a valid SSL certificate and proper DNS records, which significantly impacts its security posture. The absence of HTTPS and security headers exposes the site to risks and reduces trustworthiness. Performance metrics are missing, but the site appears to have moderate mobile optimization and basic accessibility features. From a security perspective, the site has critical issues including no valid SSL certificate, no HSTS, no OCSP stapling, and no security.txt or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Business credibility is supported by multiple trust signals such as Google Partner status, client testimonials, and active social media presence. Overall, the site is functional and professional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data. Strategic recommendations include installing a valid SSL certificate, configuring DNS properly, enabling security headers, and implementing cookie consent mechanisms.

Bharat Fritz Werner Ltd. (BFW) is a well-established Indian manufacturer specializing in Vertical Machining Centers (VMCs) and CNC machine tools, boasting over 60,000 global installations. The company targets industrial manufacturing sectors and offers an online platform for machine enquiries and purchases. The website reflects a professional and consistent brand presence with clear contact details and social media integration. Technically, the site uses a modern JavaScript and CSS stack including jQuery, Bootstrap, and FontAwesome, hosted on GoDaddy infrastructure. However, the absence of a valid SSL certificate and HTTPS significantly undermines the security posture. While forms implement CSRF tokens and OTP verification, the lack of HTTPS and security headers exposes users to risks. Privacy compliance is minimal, with no cookie consent mechanism despite cookie usage. Overall, the site is functional and business-focused but requires urgent security improvements to protect user data and enhance trust.

S

Sovos Compliance, LLC

sovos.com

62

Sovos Compliance, LLC operates a comprehensive global tax compliance platform, offering scalable software solutions that automate VAT, sales and use tax, information reporting, and specialty compliance needs. The company targets enterprise clients worldwide, including half of the Fortune 500, positioning itself as a leader in the tax compliance SaaS market. Their platform integrates with numerous ERP, accounting, eCommerce, and consulting systems, reflecting a mature and extensible technical infrastructure. The website is built on WordPress with Elementor, leveraging modern JavaScript libraries and marketing tools such as Google Tag Manager and Crazy Egg for analytics and user engagement. Security posture is strong with HTTPS enforced, robust security headers, and a well-defined content security policy, though some improvements like OCSP stapling and enhanced CSP could be made. Privacy compliance is well addressed with a comprehensive privacy policy and terms of service, though a cookie consent mechanism is absent. Overall, Sovos presents a professional, trustworthy, and technically sound online presence aligned with its enterprise business model.

T

TCG GreenChem, Inc.

tcggreenchem.com

40

TCG GreenChem, Inc. is a US-based subsidiary of TCG Lifesciences Pvt. Ltd., specializing in contract research and manufacturing services for the pharmaceutical industry, focusing on drug discovery, development, and commercialization. The company offers a broad range of CMC development services including process research, analytical R&D, and cGMP API manufacturing, supported by US FDA approved facilities. Their leadership team comprises experienced pharmaceutical executives with extensive industry backgrounds. Technically, the website is built on WordPress with modern libraries and SEO optimizations, hosted behind Cloudflare for performance and security. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the business credibility is strong, but security posture requires urgent improvement.

E

Erwachsenenbildungsforum Oberösterreich

weiterbilden.at

38

Erwachsenenbildungsforum Oberösterreich operates as a regional consortium providing adult education services and information in the Oberösterreich region of Austria. The website serves as a central hub for course listings, educational providers, libraries, and funding information, targeting adult learners and education professionals. The business model is non-profit and focused on educational coordination and support. Technically, the site is built on WordPress with the Avada theme and Fusion Builder, incorporating GDPR-compliant cookie consent and Matomo analytics for user tracking. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. While privacy policies and cookie consent mechanisms are well implemented, the lack of HTTPS and security headers exposes the site to risks. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect user data and enhance trust.

L

LBA Leitbetriebe GmbH

leitbetriebe.at

40

Leitbetriebe Austria operates as a certification and excellence platform for leading Austrian companies, promoting exemplary businesses across various sectors including energy, transportation, manufacturing, and finance. The platform offers certification services, news dissemination, educational initiatives, and partnerships with industry and government entities. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to Austrian business stakeholders. Technically, the site is built on WordPress with modern plugins and optimizations, hosted on a reputable provider, and demonstrates good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforcement, multiple security headers, and no detected vulnerabilities, though some CSP relaxations and missing OCSP stapling suggest room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site presents a trustworthy and professional business front with active content updates and strong branding consistency.

H

HOFER KG

rettenswert.at

34

Rettenswert.at is a website representing a sustainable private label brand by HOFER KG, focused on rescuing agricultural food surpluses and converting them into consumer products. The brand operates in Austria and targets environmentally conscious consumers interested in reducing food waste. The website is built on WordPress with WooCommerce and Elementor, featuring a professional design and good content quality. However, the site lacks a valid SSL certificate, which critically impacts its security posture. Security headers are partially implemented, and a cookie consent mechanism is present, indicating some privacy compliance efforts. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. The domain registration aligns well with the business claims, showing legitimacy and consistency. Overall, the site is functional and professional but requires urgent security improvements.

L

Leifheit Group

leifheit-group.com

34

Leifheit Group is a well-established German manufacturer and retailer of household products with over 60 years of market presence and approximately 1,100 employees. The company maintains a strong brand portfolio including Leifheit and Soehnle, targeting consumers, investors, and job seekers primarily in Europe. Their website provides comprehensive investor relations information, career opportunities, and corporate news, reflecting a mature business model focused on product quality and sustainable growth. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, though performance metrics are unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, exposing the site to risks and undermining user trust. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site is professional and trustworthy but requires urgent security improvements.

C

C-Loans Commercial Loan Databank

c-loans.com

40

C-Loans.com operates a specialized commercial loan portal connecting borrowers, brokers, and lenders across the United States. The platform offers a streamlined application process to 750 commercial lenders, enabling users to submit loan requests and receive competitive offers efficiently. The website also provides extensive training resources and tools for mortgage brokers and real estate professionals, positioning itself as a comprehensive service provider in the commercial finance sector. Technically, the site is built on WordPress with Elementor and leverages modern plugins and a Sucuri WAF for protection. However, the absence of a valid SSL certificate is a critical security gap that undermines user trust and data protection. Security headers are implemented, but the lack of HTTPS and cookie consent mechanisms indicates compliance and security posture weaknesses. Business credibility is supported by clear licensing information, contact details, and client testimonials, though privacy compliance could be improved. Overall, the site is functional and content-rich but requires urgent security enhancements to meet modern standards.

K

KAEFER

kaeferblu.com

35

KAEFERblu is a technology-driven service provider specializing in Corrosion Under Insulation (CUI) management and predictive maintenance solutions. Leveraging KAEFER’s extensive industry experience, the company offers sensor-based real-time monitoring and innovative robotic installation solutions to improve safety, reduce costs, and enhance sustainability in the energy sector. The website reflects a modern digital presence with interactive animations and video content aimed at industrial clients seeking advanced CUI solutions. Technically, the site is built on WordPress with popular plugins and libraries, but lacks a valid SSL certificate, which critically undermines its security posture. Privacy and cookie policies are present but basic, and contact information is limited to social media and a newsletter form, with no direct company emails or phone numbers visible. Overall, the site demonstrates good content quality and SEO practices but requires urgent security improvements to protect user data and build trust.

K

KAEFER Foundation

kaefer.foundation

56

The KAEFER FOUNDATION is a small non-profit charitable organization established in 2010, focusing on providing support in areas such as disease prevention, education, science, environmental protection, and disaster relief. The foundation maintains a professional online presence with clear mission statements and calls to action for involvement. Technically, the website is built on WordPress with a modern plugin ecosystem including multilingual support and cookie consent management, hosted on a reputable provider. Security posture is solid with HTTPS enforced and multiple security headers, though some improvements in SSL/TLS configuration and HSTS enforcement are recommended. Privacy compliance is well addressed with cookie consent and a privacy policy in place. Overall, the website reflects a trustworthy and credible organization with good digital maturity.

.

.kloos digital GmbH

kloos.de

40

The website represents .kloos digital GmbH, a specialized digital marketing and SEO agency based in Vienna, Austria. The company offers a comprehensive suite of services including SEO, Google Ads, analytics, content marketing, social media marketing, web design, WordPress development, and professional workshops. Positioned as a leading SEO agency in Vienna, it targets businesses seeking to improve their online presence and marketing effectiveness. The website is professionally designed, well-structured, and optimized for SEO and user experience, reflecting a mature digital presence. Technically, the site is built on WordPress with modern technologies such as jQuery, Yoast SEO, and Borlabs Cookie for consent management. Hosting is provided by kasserver.com, and the site supports modern TLS protocols with a valid SSL certificate. Performance is fast, mobile optimization is good, and accessibility features are present. Analytics are implemented via Google Analytics and Matomo Tag Manager, with a clear cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS with TLS 1.2 and 1.3, includes some security headers, and employs a robust cookie consent framework. However, improvements are recommended such as enabling full HSTS, adding additional security headers, and implementing OCSP stapling. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, and no privacy protection or suspicious WHOIS patterns were found, indicating a trustworthy and legitimate operation. Overall, the website demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations. It effectively supports the business model of a digital marketing agency and provides clear contact channels and trust signals. Strategic recommendations include enhancing security headers and publishing a formal security policy to further strengthen trust and compliance.

N

Net Patrol Italia srl

acaraweb.it

38

Net Patrol Italia srl operates a specialized whistleblowing platform called Acara, designed to support companies in compliance with European privacy and whistleblowing regulations. The platform emphasizes privacy by design, allowing anonymous or identified reporting, and aligns with ISO 37001:2016 anti-corruption standards. The website is built on WordPress with Elementor and uses modern SEO tools like Yoast. However, a critical security gap is the absence of a valid SSL certificate, leaving the site without HTTPS protection. Security headers are partially implemented, but the lack of TLS protocols and DNS security features reduces the overall security posture. Contact information and privacy policies are clearly presented, supporting GDPR compliance. The company maintains a moderate digital maturity with room for improvement in security and technical infrastructure.

S

SUPPLYGROUP, SAS

supplygroup.fr

37

SupplyGroup is a French medium-sized company specializing in supply chain, logistics, and business development solutions leveraging Big Data and artificial intelligence. Their offerings include software platforms for order management, shipment tracking, warehousing, data management, and quality control, targeting businesses from startups to large groups. The website is built on WordPress with integrations such as Google Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and lack of HTTPS support, which significantly impacts security posture. The site provides comprehensive legal and privacy information in French, including a named Data Protection Officer, but lacks a cookie policy and consent mechanism. Overall, the business credibility is strong with clear company registration details and contact information, but security improvements are critical to protect user data and enhance trust.

E

ENVASES Group

minikeg.blog

30

The MiniKEG Blog is operated by the ENVASES Group, a medium-sized German manufacturing company specializing in innovative packaging solutions, particularly 5-liter party kegs. The company holds a strong market position as a world leader in party keg production and packaging innovation. The website serves as an online magazine targeting beverage industry professionals and consumers interested in party kegs, providing product news, quality insights, and customer stories. Technically, the site is built on WordPress with the Divi theme and uses common plugins for cookie consent and newsletter management. However, the site suffers from a critical security flaw: the SSL certificate is invalid or missing, resulting in no HTTPS support and no modern TLS protocols enabled, which significantly impacts security posture. Privacy compliance is addressed with a privacy and cookie policy and consent mechanism, but no terms of service or security policies are published. Contact information is clearly provided, enhancing business credibility. Overall, the website is content-rich and professionally designed but requires urgent security improvements to protect users and business reputation.

B

Boston Scientific Corporation

intracept.com

40

The website intracept.com represents the Intracept Procedure by Relievant, a medical treatment for chronic low back pain, supported by clinical evidence and patient testimonials. It is owned by Boston Scientific Corporation, a large healthcare company. The site targets patients and healthcare professionals, providing educational content and resources about the procedure. Technically, the site is built on WordPress with the Divi theme, hosted on WP Engine and served via Cloudflare CDN. It uses modern web technologies and includes tracking tools like Google Tag Manager and Facebook Pixel. However, the site currently lacks a valid SSL certificate, which is a critical security issue. Privacy policies and terms of service are present and comprehensive, but no cookie consent mechanism is detected. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance user data protection.

T

The Intracept Procedure by Relievant

relievant.com

38

Relievant.com represents The Intracept Procedure by Relievant, a healthcare-focused business specializing in treatment for chronic low back pain through a clinically supported medical procedure. The website is professionally designed with clear navigation and rich content targeting patients and healthcare providers. It is owned by Boston Scientific Corporation, a recognized entity in the medical device industry. Technically, the site is built on WordPress with the Divi theme and uses common JavaScript libraries and external resources. However, the absence of a valid SSL certificate and HTTPS is a critical security flaw that undermines user trust and data protection. Privacy policies are present and comprehensive, but cookie consent mechanisms are lacking despite the use of tracking pixels. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements.

O

Orchestrade

orchestrade.com

40

Orchestrade is a specialized software provider offering a comprehensive cross-asset front-to-back trading and risk management platform primarily targeting investment banks, hedge funds, asset managers, and energy companies. The company positions itself as a market leader with a strong portfolio of industry awards and a broad client base. Technically, the website is built on WordPress with modern plugins and integrations, hosted on WP Engine with Cloudflare protection, and employs multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and HTTPS support, which is a critical vulnerability. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates professionalism and trustworthiness but requires urgent security improvements to protect user data and maintain credibility.

F

Fenergo

fenergo.com

40

Fenergo is a medium-sized SaaS financial technology company founded in 2009, specializing in client lifecycle management (CLM) and regulatory compliance solutions for banking and financial institutions. The company offers a comprehensive suite of services including KYC, client onboarding, transaction monitoring, and regulatory compliance, supported by AI-powered technologies such as FinCrime OS and Agentic AI. Fenergo is recognized as a market leader in its sector, with strong client endorsements and multiple industry awards. Technically, the website is built on Webflow and leverages modern JavaScript libraries and Cloudflare CDN for delivery, with good mobile optimization and SEO practices. However, the site currently lacks a valid SSL certificate and modern TLS support, which is a critical security concern. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Overall, the business demonstrates strong credibility and trustworthiness, but the security posture requires urgent improvement to protect user data and maintain compliance.

M

M3 PARK SERVICE Szolgáltató és Üzemeltető Korlátolt Felelősségű Társaság

m3outlet.hu

19

M3 Outlet is a retail outlet shopping center located in Polgár, Hungary, offering over 100 fashion brands with discounts ranging from 30% to 70%. The website targets regional shoppers interested in branded fashion products and provides multilingual support including Hungarian, English, Romanian, and Slovak. Key services include retail shopping, promotions, customer amenities such as free wifi, and tourism-related offerings like tax-free shopping. The business operates under M3 PARK SERVICE Kft., positioning itself as a significant regional outlet center with a medium-sized footprint. Technically, the website is built on Concrete CMS 9.3.2 and utilizes modern frontend technologies such as jQuery, Bootstrap 5, and Owl Carousel. Google Tag Manager is used for analytics and marketing tracking. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. Performance data is missing, but inferred to be slow. Mobile optimization and SEO are good, but accessibility is basic. Security posture is weak due to the absence of HTTPS, lack of HSTS, and missing advanced security headers. No explicit privacy or cookie consent mechanisms are implemented, and no security or incident response policies are visible. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professionally designed but requires urgent security improvements, especially SSL/TLS configuration, to protect user data and improve trust. Implementing privacy compliance features and enhancing security headers would further strengthen the security posture.

Designer Outlet Luxembourg operates a retail outlet shopping center featuring over 60 major brands offering discounts year-round. The website presents a professional and consistent brand image targeting shoppers in Luxembourg and nearby regions. The technical infrastructure is based on TYPO3 CMS hosted on Apache servers with integration of modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. Security posture is adequate with a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information and social media presence enhance business credibility. Overall, the website is functional, secure, and compliant with relevant regulations, supporting the business's retail operations effectively.

C

ConSol* Consulting & Solutions Software Poland Sp. z o.o.

consol.pl

74

ConSol* Consulting & Solutions Software Poland Sp. z o.o. is a reputable IT service provider specializing in custom IT solutions, software architecture, web application development, and managed services. The company serves a diverse range of industries with a focus on digital transformation and technological excellence. Their market position is reinforced by notable clients and an ISO 27001 certification, indicating a strong commitment to information security. Technically, the website is built on TYPO3 CMS with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security measures include robust HTTP headers, valid SSL certificates, and no detected vulnerabilities, although enabling OCSP stapling and enhancing HSTS settings could improve security further. Privacy compliance is well addressed with comprehensive privacy and cookie policies, consent mechanisms, and moderate user tracking via Matomo analytics. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting the company's credibility and business goals.

W

webcapital

quli.nl

40

Quli.nl is a Dutch digital health platform offering a Personal Health Environment (PGO) that centralizes users' healthcare data, enabling better management and communication with healthcare providers. The platform targets patients, caregivers, healthcare organizations, and patient groups, positioning itself as a leader in digital accessibility and personal health data management in the Netherlands. The website is built on WordPress with modern web technologies and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Security headers are properly configured; however, the absence of a valid SSL certificate and HTTPS implementation is a critical vulnerability that significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are well implemented and GDPR compliant. Overall, the site demonstrates good content quality and business credibility but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.

C

ConSol Consulting & Solutions Software GmbH

consol.com

75

ConSol Consulting & Solutions Software GmbH is a medium-sized, owner-managed IT service provider founded in 1984 in Germany. The company specializes in delivering customized IT solutions, supporting clients throughout the entire software lifecycle with a focus on agility, innovation, and technical excellence. Their offerings include IT consulting, software engineering, cloud and platform engineering, AI, automation, and product solutions based on open-source technologies. The company maintains strong partnerships with industry leaders such as Red Hat, AWS, SUSE, and others, reinforcing its market position. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and utilizes various JavaScript libraries for enhanced user experience. Analytics are implemented via Matomo and Google Tag Manager, with a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks modern TLS protocol support and full HSTS implementation. Security headers are present but could be enhanced. No critical vulnerabilities or exposures were detected. The company demonstrates compliance with data protection regulations, supported by ISO 9001 and ISO 27001 certifications. Overall, ConSol presents a professional, trustworthy, and technically mature online presence with strong business credibility and a good security posture. Strategic improvements in SSL/TLS configuration and security header enhancements are recommended to further strengthen their security stance.

T

The AES Corporation

lightingsimplified.com

40

Miami Valley Lighting, a division of The AES Corporation, specializes in providing comprehensive outdoor lighting solutions including street lighting, parking lot and security lighting, decorative lighting, and customized solutions primarily serving West Central Ohio. The company positions itself as a regional leader with a focus on safety, security, energy savings, and responsive maintenance services. The website is built on Drupal 10 with modern front-end technologies and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant security vulnerabilities that undermine user trust and data protection. Privacy and cookie policies are present but basic, and no explicit security or incident response policies are published. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.

A

AES Hawai‘i

aes-hawaii.com

65

AES Hawai‘i is a regional branch of the global AES Corporation, focused on accelerating the transition to renewable and clean energy solutions in Hawai‘i. The company operates multiple renewable energy projects and emphasizes sustainability, community partnerships, and innovation. The website is professionally designed using Drupal 10 and modern web technologies, providing a rich user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, security headers, and a content security policy, though improvements such as enabling full HSTS and OCSP stapling are recommended. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site reflects a mature digital presence aligned with the company's business goals and market position.

T

The AES Corporation

aes-vietnam.com

71

AES Vietnam operates as a regional branch of The AES Corporation, a global energy company focused on delivering sustainable and clean energy solutions. The website reflects a mature digital presence with comprehensive content in Vietnamese, targeting energy sector stakeholders and community partners. The company emphasizes sustainability, innovation, and community development as core pillars of its business model. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is solid with HTTPS and multiple security headers, though TLS protocols are not enabled, which is a notable gap. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the corporate identity, supporting legitimacy. Overall, the site presents a professional, trustworthy, and well-maintained digital asset for AES Vietnam.

T

The AES Corporation

aespuertorico.com

69

AES Puerto Rico operates as a regional subsidiary of The AES Corporation, focusing on accelerating the future of energy through sustainable and smart energy solutions. The website demonstrates a strong market position in the energy sector with a clear emphasis on clean energy, community partnerships, and innovation. The company targets energy consumers, businesses, and community stakeholders in Puerto Rico and related AES markets. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities, although some improvements in SSL configuration and security policy transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's global and local energy initiatives.

T

The AES Corporation

aespanama.com

40

AES Panama is a regional branch of The AES Corporation, a large multinational energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website targets energy consumers, business clients, investors, and community partners primarily in Panama and other global markets. The company emphasizes community investment, sustainability, and advanced energy technologies. Technically, the website is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support despite security headers and policies being in place. Privacy and cookie policies are present and indicate some GDPR compliance, but no explicit incident response or security policy pages were found. The domain registration data is consistent and trustworthy, with no signs of suspicious activity. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

A

A1 Telekom Austria AG

befunkt.at

37

BE.funkt is a telecommunications service provider offering affordable mobile and internet tariffs primarily targeting consumers in Austria. The business operates as a joint project between Burgenland Energie and A1 Telekom Austria AG, leveraging the A1 network to provide 5G mobile services, eSIM options, and hardware sales such as smartphones and 5G webcubes. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Swiper.js, ensuring good mobile optimization and user experience. However, the absence of a valid SSL/TLS certificate is a critical security flaw, exposing users to insecure connections. The site implements a cookie consent modal indicating some privacy compliance efforts, but lacks a visible privacy policy page and security policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

T

The AES Corporation

aes-ohio.com

40

AES Ohio operates as a regional energy utility under The AES Corporation, providing electricity services and customer support to residential and commercial customers in Ohio. The website offers comprehensive information on energy supply options, billing, outages, safety, and sustainability initiatives. It leverages modern web technologies including Drupal 10 CMS and integrates multiple third-party analytics and marketing tools to enhance user engagement and service delivery. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well-established, indicating a commitment to compliance and user data protection. Overall, the site presents a professional and content-rich experience but requires urgent security improvements to align with best practices.

T

The AES Corporation

aesindiana.com

40

AES Indiana is a large regional energy provider operating under The AES Corporation, focused on delivering electric utility services to residential and business customers in Indiana. The website offers comprehensive information on billing, outages, energy saving, and company initiatives, reflecting a mature business model with significant investments in infrastructure and digital transformation. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. While security headers and content security policies are implemented, critical gaps remain in SSL configuration and incident response transparency. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance compliance.

A

AES El Salvador

aes-elsalvador.com

40

AES El Salvador operates as a major energy provider in El Salvador, offering electricity distribution, generation, and energy solutions. The website reflects a well-established corporate entity with a broad service portfolio and strong community engagement. The technical infrastructure is modern, leveraging Drupal 10 CMS and multiple JavaScript libraries for enhanced user experience and analytics. However, the absence of a valid SSL certificate is a critical security gap, undermining the site's HTTPS security and potentially affecting user trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

T

The AES Corporation

aesdominicana.com

40

AES Dominicana is a regional subsidiary of The AES Corporation, focused on accelerating the future of energy through sustainable and innovative solutions in the Dominican Republic. The website presents a professional corporate image with comprehensive content about their products, sustainability initiatives, community partnerships, and investor relations. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security issue is the absence of a valid SSL certificate and HTTPS, which severely impacts the security posture. The site implements strong security headers and content security policies but lacks advanced SSL/TLS configurations and DNS security features. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is credible and professionally maintained but requires urgent security improvements to protect user data and trust.

A

AES Chile

aeschile.com

40

AES Chile operates as a major energy company focused on accelerating the future of energy through sustainable and innovative solutions. The company emphasizes renewable energy, advanced energy networks, energy storage, and community partnerships. The website reflects a strong corporate presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site presents a professional and trustworthy image but requires urgent security improvements to protect users and data.

T

The AES Corporation

aesbulgaria.com

40

AES Bulgaria operates as a regional branch of The AES Corporation, a global energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website presents a professional corporate image emphasizing clean energy, sustainability, community partnerships, and employee engagement. The technical infrastructure is based on Drupal 10 CMS with modern frontend libraries and integrations with multiple analytics and marketing tools, indicating a mature digital presence. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. The site implements strong security headers and content security policies but lacks visible incident response or vulnerability disclosure information. Overall, the domain registration data aligns well with the corporate identity, supporting legitimacy. Strategic improvements in SSL deployment and security practices are recommended to enhance trust and compliance.

A

Abzorba Games

abzorbagames.com

24

Abzorba Games is a medium-sized technology company specializing in mobile social casino games, founded in 2011 in Greece. The company offers multiplayer casino titles and B2B partnership opportunities to leverage brand presence in the social gaming market. The website is built on WordPress with Elementor and targets mobile social casino players and industry partners. Technically, the site uses standard web technologies but lacks HTTPS, which is a critical security gap. The cookie consent mechanism is implemented via OneTrust, indicating awareness of privacy compliance. However, no explicit security or incident response policies are present. Overall, the site presents a professional business image but requires urgent security improvements to protect user data and enhance trust.

F

Fluidtime Data Services GmbH

fluidlife.app

38

FluidLife is a German-language SaaS platform focused on corporate mobility and resource management, helping companies achieve sustainability goals through modular tools including routing, ride sharing, CO2 reporting, and employee motivation. The website is professionally designed with comprehensive content and clear navigation, targeting companies, municipalities, and NGOs primarily in Austria and German-speaking regions. Technically, the site is built on WordPress with modern SEO and analytics integrations but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy compliance is well addressed with cookie consent mechanisms and detailed privacy policies. Contact information and business details are clearly presented, enhancing credibility. However, the absence of HTTPS and modern security headers significantly lowers the security posture and overall trust score. Strategic improvements in SSL deployment and security hardening are essential to elevate the site's security and user trust.

A

Alpinebrands

alpinebrands.at

23

Alpinebrands.at is a website representing Alpinebrands, a company focused on marketing and distributing traditional Austrian food and drink brands such as Gasteiner, AUER, Honigmayr, Blaschke, and GOAL. The company emphasizes quality, tradition, and innovation, targeting both national and international consumers interested in authentic Austrian products. The website is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are well implemented, demonstrating GDPR compliance and user consent mechanisms. Contact information is limited to email addresses for domestic and international inquiries, with no phone numbers or physical addresses found. Overall, the site presents a professional image but requires urgent security improvements to protect user data and enhance trust.

M

Mediaprint Zeitungs- und Zeitschriftenverlag Gesellschaft m.b.H. & Co KG

mediaprint.at

38

Mediaprint Zeitungs- und Zeitschriftenverlag Gesellschaft m.b.H. & Co KG is a leading Austrian media company operating prominent brands such as Kronen Zeitung and KURIER. The company offers a broad range of media-related services including corporate publishing, printing, logistics, marketing, and subscription management, positioning itself as a market leader in Austria's media sector. The website reflects a professional and consistent brand image targeting both consumers and business clients within Austria. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, FontAwesome Pro, and integrates Google Tag Manager and Didomi for analytics and consent management. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.

R

RE.COMM

recomm.eu

27

RE.COMM operates a professional real estate leaders summit event in Austria, targeting top managers and decision makers in the real estate sector. The website serves as an information and registration platform for the annual summit scheduled for November 2025. The company positions itself as a leading think tank and networking forum within the real estate industry. Technically, the website is built on WordPress with Elementor and several plugins for SEO, multilingual support, and GDPR compliance. However, the site suffers from critical security issues including an invalid or missing SSL certificate and lack of HTTPS enforcement, which significantly impacts user trust and security posture. The DNS configuration appears incomplete or misconfigured, lacking essential A/AAAA records and DNSSEC, which raises concerns about domain management. Privacy and cookie policies are well implemented, and social media presence is active. Overall, the site is professionally designed but requires urgent technical and security improvements to ensure trustworthiness and compliance.

P

Pizzeria Uno Corporation

pizzeriaunodue.com

28

Pizzeria Uno Corporation operates a well-established restaurant brand known for inventing the Chicago Style Deep Dish Pizza in 1943. The website promotes their core business of pizza restaurants along with catering, group events, cooking classes, and fundraising activities. The brand has a strong market position with a legacy appeal and multiple service offerings targeting pizza enthusiasts and event organizers. Technically, the website uses a modern frontend stack including Bootstrap and jQuery, with embedded analytics and accessibility tools. However, the site lacks a valid SSL certificate and HTTPS configuration, which is a critical security flaw. The absence of cookie consent mechanisms and security headers further reduces the security posture. Overall, the business credibility is high due to consistent branding, clear contact information, and social media presence, but the security and privacy compliance need urgent improvement.

F

Freyssinet

freyssinet.com

40

Freyssinet is a well-established global civil engineering company specializing in the construction and repair of infrastructure using advanced technologies such as post-tensioning and cable systems. With over 80 years of experience and a network of 60 subsidiaries worldwide, it serves a broad international market primarily in the energy and transportation sectors. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site is built on WordPress with modern plugins for SEO, performance, and GDPR compliance, hosted on OVHcloud. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Social media integration and detailed case studies enhance business credibility. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

G

Geoquest Group

terre-armee.com

40

Geoquest Group is a globally recognized leader in geotechnical engineering, specializing in reinforced earth structures and soil-structure interaction solutions. With a presence in 80 countries and a history spanning over 60 years, the company offers a broad portfolio of engineering services and products tailored to infrastructure, hydraulic, industrial, and urban development sectors. The website reflects a mature business with comprehensive content, professional design, and a strong international network supported by its parent company, Soletanche Freyssinet. Technically, the website is built on a modern WordPress platform using advanced plugins and frameworks such as Avada Fusion Builder and Slider Revolution. It employs analytics tools like Google Tag Manager and Matomo for user tracking and performance insights. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security-wise, while several HTTP security headers are implemented, the absence of a valid SSL certificate and disabled TLS protocols present critical vulnerabilities. The site does implement GDPR-compliant cookie consent mechanisms and maintains comprehensive privacy and legal policies, indicating good privacy compliance. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to enhance security and trustworthiness. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and enhancing HSTS policies to protect users and improve compliance.

G

Geoquest Group

geoquest-group.com

40

Geoquest Group is a globally recognized leader in geotechnical engineering, specializing in reinforced earth structures and soil-structure interaction solutions. With over 60 years of experience and a presence in 80 countries, the company offers a broad range of engineering services and products tailored to infrastructure, hydraulic, industrial, and urban development sectors. The business operates under the parent company Soletanche Freyssinet, leveraging a strong international network of subsidiaries and partners. Technically, the website is built on a modern WordPress platform with advanced plugins and themes, providing a professional and user-friendly experience. However, the security posture is weakened by an invalid SSL certificate and lack of proper HTTPS configuration, which is a critical issue that must be addressed immediately to protect user data and maintain trust. Privacy compliance is well managed with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates strong business credibility and digital maturity but requires urgent security improvements to align with best practices.

M

Menard group, world specialist in ground improvement

menard-group.com

67

Menard Group is a global leader specializing in foundation solutions based on ground improvement and reinforcement technologies. Operating in over 80 countries, the company offers innovative and economical solutions across various infrastructure sectors including ports, airports, rail, road, process, energy, and building projects. Their expertise spans the entire infrastructure lifecycle, positioning them as a key player in the construction and engineering industry. The website reflects a professional and comprehensive digital presence, showcasing detailed service offerings and project portfolios. Technically, the site is built on WordPress with modern frameworks and libraries, though performance could be improved. Security measures include a valid SSL certificate and strong email authentication policies, but enhancements like HSTS and OCSP stapling are recommended. Privacy compliance is well addressed with clear cookie and privacy policies, including consent mechanisms. Overall, Menard Group demonstrates a strong business and digital maturity with room for technical and security optimizations.