Security Directory

T

The Los Angeles Film School

filmproductionservices.info

37

The Los Angeles Film School website presents a comprehensive and professional educational institution focused on film, media, animation, and music production programs. It targets prospective students and professionals seeking accredited degree programs both on-campus and online. The site highlights alumni success, industry recognition, and offers extensive resources such as tours, webinars, and detailed program information. Technically, the website is built on WordPress using the Avia framework and incorporates multiple JavaScript libraries for enhanced user experience. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Overall, the site is trustworthy and professionally maintained but requires urgent security improvements to protect user data and enhance trust.

X

x.test GmbH

xtest.at

22

x.test GmbH is a specialized company in electronic measurement technology based in Austria, founded in 2010. The company offers a range of products and consulting services focused on electronic measurement, emphasizing quality and customer trust. The website is built on WordPress with modern plugins and frameworks, providing a professional and user-friendly experience. However, the absence of an SSL certificate and HTTPS significantly impacts the security posture, exposing users to potential risks. The site implements GDPR-compliant cookie consent mechanisms and provides clear privacy and terms of service pages, reflecting good privacy compliance. Overall, the business appears legitimate and well-positioned in its niche, but security improvements are critical.

Zeuxis & Parrhasius is a small retail e-commerce business specializing in handcrafted luxury wallpapers based in Vienna, Austria. The website is built on the Shopify platform, leveraging modern web technologies and optimized for mobile devices. The business targets customers seeking premium wallcoverings with worldwide shipping options. While the site demonstrates good design quality, clear navigation, and professional content, it lacks a valid SSL certificate, which significantly impacts its security posture. The presence of multiple payment options and partner affiliations adds trust signals, but the absence of a visible privacy policy and direct contact emails limits privacy compliance and user trust. Overall, the site is functional and professional but requires critical security improvements to enhance user safety and compliance.

I

IT Services and Solutions, S. A. de C. V.

it-solutions.com.mx

36

IT Services and Solutions, S. A. de C. V., operating under the brand IT Solutions, is a Mexican technology company specializing in designing and implementing IT solutions to enhance business operations. Their offerings include infrastructure modernization, cybersecurity, digital transformation, cloud services, and support. The company targets businesses seeking comprehensive IT solutions and positions itself as a trusted partner with strong vendor alliances and professional services expertise. Technically, the website is built on WordPress with common plugins and sliders, but lacks a valid SSL certificate, resulting in no HTTPS support which is a critical security gap. The site includes contact forms with reCAPTCHA and social media links but lacks cookie consent mechanisms and detailed privacy compliance features. Security headers are minimal, and no incident response or security policies are publicly disclosed. Overall, the website presents a professional business image but requires urgent improvements in security posture and privacy compliance to meet modern standards.

A

AFI Solutions GmbH

afi-solutions.com

33

AFI Solutions GmbH is a medium-sized German technology company specializing in SAP-integrated software solutions for automated document processing. As part of the SER Group, it holds a strong market position with over 800 customers worldwide and offers certified SAP Add-Ons that enhance Purchase-to-Pay and Order-to-Cash processes using advanced technologies like AI and RPA. The company provides full-service offerings including consulting, implementation, training, and support. Technically, the website is built on TYPO3 CMS and employs modern analytics and consent management tools, but lacks HTTPS, which is a critical security shortfall. The absence of SSL/TLS encryption exposes users to risks and undermines trust. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website is professionally designed with clear navigation and strong branding, but the lack of HTTPS significantly impacts its security posture and overall trustworthiness.

K

Klippa App B.V.

klippa.com

59

Klippa App B.V. is a Dutch technology company specializing in AI-driven document automation solutions that help businesses reduce operational costs, save time, and prevent fraud. Their market position is strong, serving over 1000 brands with products like DocHorizon and SpendControl, targeting finance professionals and enterprises across various sectors including banking, logistics, and public services. The company leverages modern web technologies and cloud infrastructure (Microsoft Azure) to deliver scalable and efficient services. Security practices are generally good with HTTPS and Cloudflare protection, but improvements in SSL/TLS configuration are recommended. The website demonstrates strong compliance with data protection regulations and holds relevant certifications such as ISO 27001 and ISO 9001. Overall, Klippa presents a professional, trustworthy, and technically mature digital presence.

B

Biofaction KG

biofaction.com

33

Biofaction KG is a small interdisciplinary research and science communication company based in Austria, specializing in emerging sciences, technologies, and art-science collaborations. The company offers a range of services including research projects, integrated communication, public engagement events, training, and media production. Their market position is niche, focusing on bridging science and society through innovative communication and artistic approaches. The website is built on WordPress using the Divi theme and incorporates modern web technologies such as PHP 8 and jQuery, with integrations for Mailchimp and Contact Form 7 for marketing and contact purposes. However, the site lacks HTTPS, which is a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are present and appear GDPR compliant, with clear contact information and social media presence enhancing business credibility. Performance data is missing, suggesting potential issues with site speed or monitoring. Overall, the site is professionally designed and content-rich but requires urgent security improvements to meet modern standards.

A

Alkwin Kollege

alkwin.nl

32

Alkwin Kollege is a medium-sized secondary education institution located in Uithoorn, Netherlands, providing havo, atheneum, and gymnasium level education. The school emphasizes a safe and engaging learning environment and targets students and parents in the local region. The website is built on WordPress, uses Cloudflare for CDN and caching, and integrates Google Tag Manager for analytics. While the site has good content quality, SEO optimization, and mobile responsiveness, it lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. No explicit privacy or cookie policies are found, indicating gaps in privacy compliance. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and comply with modern web standards.

M

MarineXchange Software GmbH

marinexchange.com

25

MarineXchange Software GmbH operates a comprehensive enterprise software platform, MXP365, tailored for the cruise industry. The company provides a wide range of modules and digital solutions designed to enhance operational efficiency and guest experience onboard cruise ships. Positioned as a leading technology provider in this niche, MarineXchange leverages partnerships and acquisitions, such as Bytepoets, to expand its capabilities and market reach. The website reflects a mature digital presence with professional design and rich content targeting cruise lines and hospitality stakeholders. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS infrastructure with SEO and user experience considerations. However, performance metrics are lacking, and the site shows slow loading characteristics. Mobile optimization is good, but accessibility features are basic. The site integrates analytics and cookie consent tools, demonstrating awareness of privacy compliance. Security posture is a significant concern due to the absence of HTTPS and SSL certificates, lack of HSTS, and missing DNSSEC and CAA records. While no active vulnerabilities or malware are detected, the lack of encryption exposes users to risks and undermines trust. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, MarineXchange presents a credible and professional business with strong market positioning but must urgently address critical security gaps to protect its users and maintain trust. Strategic improvements in security infrastructure and performance optimization are recommended to align with industry best practices.

K

KAUFMANN S.A

kaufmann.cl

36

Kaufmann S.A is a leading automotive company in Chile specializing in the sale and servicing of automobiles, commercial vehicles, and related products. The website reflects a comprehensive digital presence with extensive content covering various vehicle categories, after-sales services, and customer support. The company maintains a strong market position with a wide network of branches across Chile and partnerships with recognized brands and service providers. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as React and jQuery, but suffers from a critical lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. Security headers are present but insufficient without proper SSL/TLS implementation. Privacy compliance is moderate with a clear privacy policy but no visible cookie consent mechanism. Overall, the site offers good user experience and content quality but requires urgent security improvements to protect user data and enhance trust.

S

Simone Buratto

simoneburatto.it

37

Simone Buratto is a small Italian company specializing in outdoor solar shading solutions and related products such as pergolas, outdoor furniture, and complements. The business operates primarily in Piemonte, Italy, targeting private customers, commercial hospitality businesses, architects, and construction firms. The website is built on WordPress with Elementor and Yoast SEO, showing a moderate level of digital maturity. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via iubenda. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and build trust.

Q

QimiQ Handels GmbH

qimiq.com

39

QimiQ Handels GmbH operates a well-established retail website focused on food products and cooking ingredients, targeting both consumers and professional chefs. The company offers a range of products such as QimiQ Classic, Sahne-Basis, Whip, Vegan, and Tiramisu, complemented by recipe content, professional workshops, and a newsletter. The website is multilingual and professionally designed, reflecting a consistent brand presence and active engagement through social media and marketing tools. Technically, the site is built on WordPress with modern plugins and frameworks, leveraging Cloudflare for CDN and caching. However, a critical security gap exists due to the absence of HTTPS/SSL, exposing users to potential risks. Privacy compliance is strong, with comprehensive policies and consent mechanisms in place. Overall, the site demonstrates good business credibility and user experience but requires urgent security improvements.

I

Institut Teknologi Sepuluh Nopember

its.ac.id

40

Institut Teknologi Sepuluh Nopember (ITS) is a prominent Indonesian university specializing in science, technology, and arts education. The website serves a broad audience including prospective and current students, faculty, staff, parents, and alumni. It offers comprehensive information on academic programs, research, innovation, and public services. The institution holds a strong market position with recognized rankings in Asia Pacific and globally. Technically, the website is built on WordPress with a modern tech stack including Visual Composer, Yoast SEO, and various JavaScript libraries, providing a rich user experience with good mobile optimization and accessibility. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are present but insufficient without proper SSL. Privacy and cookie policies are not found, indicating compliance gaps. DNS records are missing or incomplete, raising concerns about domain configuration. Overall, the site is professional and trustworthy in content but requires urgent improvements in security and privacy compliance.

Austria Trend Hotels is a well-established hospitality company operating multiple hotels across Austria and Slovenia, targeting both leisure and business travelers. The website provides comprehensive hotel listings, booking capabilities, and event services, supported by a modern technical infrastructure including Pimcore CMS and various tracking and marketing tools. However, the lack of a valid SSL certificate is a critical security weakness that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, and contact information is clearly presented. Overall, the site demonstrates strong business credibility and user experience but requires urgent security improvements.

K

Kulturformat

kulturformat.at

39

Kulturformat is a medium-sized Austrian media company specializing in cultural advertising formats such as City Lights, Telelights, and various poster and column advertising solutions. The website is built on Drupal 10 and hosted via Amazon CloudFront CDN, indicating a modern infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. Privacy and cookie policies are well implemented and GDPR compliant, reflecting good privacy awareness. The site offers clear navigation and professional design, targeting businesses and organizations interested in cultural advertising in Austria. Social media presence is limited to LinkedIn, and contact is primarily through web forms. Overall, the site is functional and professional but requires urgent security improvements.

CME Group Inc. operates as a leading global derivatives marketplace, offering a diverse range of futures and options products for risk management across multiple asset classes including agriculture, energy, equity indices, FX, interest rates, and metals. The company serves a broad audience of traders, investors, and financial institutions, providing comprehensive market data, clearing services, and technology solutions. The website reflects a mature, enterprise-level organization with consistent branding and high-quality content tailored to its professional audience. Technically, the website leverages modern technologies such as React, jQuery, and Adobe Experience Manager, hosted via Akamai CDN, and integrates various marketing and analytics tools including Google Tag Manager, Evergage, and OneTrust for cookie consent. The site is well-optimized for mobile and accessibility, with good SEO practices evident in meta tags and structured data. From a security perspective, while the site employs important security headers and cookie protections, the SSL/TLS configuration appears incomplete or misreported in the provided data, lacking valid certificates and modern protocol support. This represents a significant security concern that should be addressed promptly to ensure secure communications and user trust. Overall, CME Group's website is professional, content-rich, and business credible, but requires immediate attention to its SSL/TLS implementation to align with best security practices and maintain its high trustworthiness in the financial sector.

M

Mag. Boris Zalokar & Elke Blümel-Zalokar, MSc

ambros-zalokar.at

25

The website ambros-zalokar.at represents a small healthcare service provider specializing in psychological therapy, coaching, biofeedback, and corporate health management primarily serving clients in Austria. The business is positioned as a regional psychological practice with a focus on both individual and corporate clients, offering a broad range of mental health and workplace wellness services. The website content is well-structured, professionally presented, and provides clear contact information and service descriptions, targeting individuals and companies seeking psychological and health management support. Technically, the site is built on the IONOS MyWebsite CMS platform, leveraging Apache server technology and CDN services for content delivery. However, the site lacks HTTPS support due to an invalid or missing SSL certificate, which critically impacts security posture and user trust. Performance metrics are not provided, but the site is likely slow given the chunked transfer encoding and lack of optimization indicators. Mobile optimization is good, and basic SEO practices are in place, though accessibility features are minimal. From a security perspective, the absence of HTTPS and modern TLS protocols is a significant vulnerability. While some security headers are present, the lack of SSL/TLS encryption, HSTS, and incident response contact information exposes the site to risks. No privacy or cookie policies are published, indicating non-compliance with GDPR and related privacy regulations. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website presents a credible business with professional content but suffers from critical security and privacy compliance gaps. Strategic improvements in SSL deployment, privacy policy publication, and security best practices are essential to enhance trust and protect user data.

A

Alexander Hughes

alexanderhughes.com

30

Alexander Hughes is a well-established global executive search and leadership advisory firm with over 60 years of experience and a presence in more than 50 offices across 51 countries. The company specializes in attracting top leadership talent and providing governance, human capital assessment, succession planning, and interim executive services to global firms. Their website reflects a professional and comprehensive business model targeting corporate clients worldwide. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Lightslider, with analytics powered by Matomo. Hosting is provided by Cloudways, and the site employs a strong Content Security Policy and other security headers. However, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, which significantly impacts the security posture. Security-wise, while some best practices like CSP and HSTS are implemented, the lack of valid HTTPS and TLS support is a critical vulnerability. No explicit security or incident response policies are found, and no contact emails or phone numbers are directly listed on the site, which may affect user trust. Privacy and cookie policies are present and appear GDPR compliant. Overall, the site is professionally designed with excellent content quality and user experience but requires urgent remediation of SSL/TLS issues to improve security and trustworthiness.

K

Kammer für Arbeiter und Angestellte für Wien

akwien.at

40

The website akwien.at represents the Kammer für Arbeiter und Angestellte für Wien, a government-related non-profit organization advocating for workers' rights and social services in Vienna, Austria. The site offers comprehensive information and services including legal advice, consumer protection, educational resources, and digitalization funding. It targets employees and workers in Vienna, providing a rich content experience with clear navigation and strong branding. Technically, the site is built on a Gentics Portal CMS with a modern tech stack including jQuery, Bootstrap, Matomo Analytics, and Usercentrics for consent management. Hosting is provided by Anexia. While the site is mobile optimized and accessible, performance metrics indicate slow loading, and the SSL/TLS configuration is currently invalid, which is a critical security concern. Security posture is moderate with several security headers implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high due to consistent branding, official contact information, and alignment with WHOIS data. Overall, the site is a professional and trustworthy resource for workers in Vienna but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

M

Mixed Reality I/O

mixed-reality.io

40

Mixed Reality I/O operates a professional and content-rich website focused on augmented reality, virtual reality, 3D modeling, and AI consulting and development services. The company targets businesses seeking spatial computing strategies and innovative digital experiences. Their market position is supported by a history dating back to 2008, international experience, and notable client partnerships. Technically, the website is built on WordPress with a modern plugin ecosystem, supporting multilingual content and interactive 3D models. However, the absence of HTTPS and proper SSL configuration represents a critical security vulnerability, exposing users to risks and undermining trust. Privacy compliance is addressed with cookie consent and a comprehensive privacy policy, but incident response and security policies are not evident. Overall, the website demonstrates strong business credibility and user experience but requires urgent security improvements to meet industry standards.

Lohmann & Rauscher USA Inc. is a prominent international supplier specializing in medical devices and hygiene products, targeting healthcare professionals and patients. The company offers a broad portfolio including compression therapy, wound care, casting materials, and educational items. Their market position is strong, supported by recent acquisitions such as Unisurge International Ltd. and the teledermatology startup OnlineDoctor, indicating active growth and innovation. The website is professionally designed with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, but performance data is lacking and the site is currently not secured with HTTPS, which is a critical security gap. Security posture is weak due to the absence of a valid SSL certificate and lack of advanced security headers or policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is high given the detailed contact information, structured data, and active corporate communications. Overall, the site requires urgent security improvements to protect user data and enhance trust.

O

Otago Online Consulting GmbH

contentcook.at

26

Otago Online Consulting GmbH is a well-established Austrian online marketing agency specializing in SEO, SEA, social media marketing, display and video advertising, and data analytics. The company has a strong market position with a clear growth strategy including acquisitions such as Content Cook. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with no advanced headers or incident response information published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but urgently needs to implement HTTPS to improve security and trust.

A

Agenda Austria

agenda-austria.at

35

Agenda Austria is an established independent think tank based in Austria, focusing on economic and socio-political research and analysis. The organization provides a variety of content including publications, graphics, podcasts, and events aimed at policymakers, academics, and the interested public. Their market position as the first independent think tank in Austria specializing in these areas is supported by a consistent and professional online presence. Technically, the website is built on WordPress with a modern tech stack including caching, SEO optimization, and consent management tools. The site is well-structured, mobile-optimized, and offers good user experience with clear navigation and rich content. However, the SSL/TLS configuration is currently inadequate, lacking a valid certificate and modern protocol support, which poses a security risk. Security-wise, the site implements several important HTTP security headers and uses reCAPTCHA for form protection, but the absence of valid HTTPS and modern TLS protocols significantly lowers its security posture. Privacy compliance is strong, with clear privacy and cookie policies and GDPR-compliant consent mechanisms. Overall, the website is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing domain security with DNSSEC and CAA records.

F

FinTech Connector

fintechconnector.com

40

FinTech Connector is a US-based fintech community platform that connects financial services professionals, organizations, and fintech entrepreneurs globally to collaborate and innovate in financial services. The platform offers matchmaking, collaboration marketplaces, funding portals, and hosts fintech events to foster innovation and impact. The website is professionally designed and hosted on Squarespace, leveraging modern web technologies and social media integration to engage its target audience effectively. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Privacy and cookie policies are present but lack a full consent mechanism, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and trust.

N

N-SIDE

n-side.com

38

N-SIDE is a specialized deeptech company focusing on providing optimization and analytics solutions for the life sciences and energy sectors. Their offerings include software and professional services aimed at improving pharmaceutical manufacturing efficiency, clinical trial management, and energy forecasting and power matching for market participants. The website reflects a professional digital presence built on HubSpot CMS, leveraging modern web technologies and marketing tools such as Google Tag Manager. However, the security posture is weak due to the absence of a valid SSL certificate and proper HTTPS configuration, which poses a significant risk to user trust and data security. Privacy compliance is minimal, with no visible privacy or cookie policies, and no explicit contact information is provided on the homepage. Overall, the site demonstrates moderate business credibility and technical maturity but requires urgent improvements in security and privacy compliance to meet industry standards.

din – Dietmar Nocker Sicherheitstechnik GmbH & Co KG is a medium-sized Austrian company specializing in emergency lighting solutions with over 40 years of industry experience. The company offers a comprehensive portfolio including product development, systems, and service support, targeting businesses requiring compliant emergency lighting. Their market position is strong in Austria and neighboring countries, supported by multiple locations and a professional online presence. Technically, the website is built on WordPress with multilingual support and privacy-conscious analytics via Matomo. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security shortfall, exposing users to risks and undermining trust. The company demonstrates good privacy compliance with detailed cookie consent mechanisms and GDPR-aligned policies. Overall, the business is credible and professional but must urgently address its security posture to protect users and maintain trust.

Folyo GmbH operates a specialized out-of-home advertising platform focused on measurable vehicle advertising using premium electric and hybrid vehicles. Their business model emphasizes performance-driven campaigns with pay-per-impression pricing, targeting brands, agencies, and professional drivers primarily in Austria. The website presents a professional and consistent brand image with clear service offerings including vehicle branding, in-car digital screens, and creative add-ons such as product sampling and urban gamification. Technically, the site is built on Bitrix CMS and served via LiteSpeed, incorporating common web technologies like jQuery and Google Fonts. However, the absence of a valid SSL certificate and lack of HTTPS significantly undermine the security posture. Security headers are minimal, and no advanced security or incident response policies are publicly disclosed. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Vienna Capital Partners (VCP) is an established independent corporate finance advisory firm operating primarily in Central, Eastern, and Southeastern Europe with offices in Vienna and Warsaw. The company specializes in mergers and acquisitions, strategic advisory, capital advisory, and related financial services targeting large and mid-sized corporations, private equity funds, entrepreneurs, and family offices. Their market position is strong within their niche, supported by a professional website showcasing detailed transaction references and senior professionals. Technically, the website is built on WordPress with common plugins and frameworks but suffers from an invalid SSL certificate, which undermines its security posture. The site is mobile optimized and provides clear contact information but lacks advanced security headers and explicit security or incident response policies. Overall, the business credibility is good, but security improvements are necessary to enhance trust and compliance.

Berufsförderungsinstitut Burgenland (BFI Burgenland) is a regional vocational education and training provider based in Austria, specializing in continuing education, certifications, and workforce development services. The website targets individuals seeking professional development and companies aiming to qualify their workforce. The business holds several certifications and maintains a consistent brand presence with clear contact information and social media engagement. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries and hosted on servers associated with your-server.de and second-ns.de DNS providers. However, the website lacks a valid SSL certificate and HTTPS configuration, which is a critical security shortfall. Security headers are partially implemented, and cookie consent mechanisms are in place, indicating some privacy compliance efforts. Overall, the site offers good content quality and user experience but requires urgent security improvements to protect user data and enhance trust.

M

Microtronics Engineering GmbH

microtronics.at

27

Microtronics Engineering GmbH is a medium-sized Austrian company specializing in technology solutions for environmental technology and energy management. Their offerings include advanced data loggers, sensors, and an IoT platform designed for reliable data transmission even in harsh environments. The company has a strong international presence with partners in 80 countries and a focus on B2B markets in energy and environmental sectors. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating marketing and analytics tools such as HubSpot and Google Analytics. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect users and enhance credibility.

F

First Advisory

first.li

40

First Advisory is a well-established financial advisory and wealth management firm with over 70 years of private ownership and a strong presence in Liechtenstein and international financial centers. The company offers a broad range of services including asset structuring, legal and tax consulting, investment advisory, and family office services, targeting private and corporate clients seeking comprehensive financial solutions. The website reflects a mature digital presence built on Concrete CMS, with modern web technologies and a focus on user experience and multilingual support. Security posture is solid with appropriate HTTP security headers and cookie consent mechanisms, though DNSSEC and CAA records are absent and could be improved. Contact information is clearly provided with GDPR-compliant forms and multiple international office contacts. Overall, the site demonstrates high professionalism and trustworthiness, aligning well with the company's long-standing market position.

S

Stadtgemeinde Amstetten

amstetten.at

34

The website amstetten.at serves as the official online portal for the Stadtgemeinde Amstetten, a municipal government entity in Austria. It provides residents and visitors with comprehensive information about city administration, services, events, and public resources. The site targets local citizens and stakeholders, offering key services such as event announcements, service directories, job postings, and public transportation information. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website is built on the WordPress CMS platform, utilizing common plugins such as Yoast SEO for search optimization, WP Statistics for analytics, and Complianz for GDPR-compliant cookie management. The site employs Apache as the web server and includes JavaScript libraries like jQuery and RoyalSlider for interactive features. While the site is mobile-optimized and accessible, performance data is incomplete, and the site currently lacks a valid SSL certificate, resulting in no HTTPS support. From a security perspective, the absence of a valid SSL certificate is a critical vulnerability, exposing users to potential data interception risks. The site does not implement modern TLS protocols, HSTS, or OCSP stapling, which are essential for secure communications. However, no known vulnerabilities such as Heartbleed or POODLE were detected. Privacy compliance is strong, with a clear cookie consent mechanism and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website is a well-structured and professionally maintained municipal portal with good content quality and user experience. The primary risk lies in the lack of HTTPS, which should be addressed urgently to protect user data and enhance trust. Strategic recommendations include implementing a valid SSL certificate, enabling modern security protocols, and enhancing security headers to improve the site's security posture and compliance.

ش

شرکت مهندسی صنعت و تولید جمع‌ساز

jamsaz.com

20

شرکت مهندسی صنعت و تولید جمع‌ساز یک شرکت تولیدی متوسط در ایران است که در زمینه طراحی و تولید سیستم‌های روشنایی خودرو فعالیت می‌کند. این شرکت با سابقه بیش از 30 سال، محصولات متنوعی از چراغ‌های خودرو را ارائه می‌دهد و دارای آزمایشگاه تخصصی با گواهینامه‌های معتبر است. سایت شرکت به زبان فارسی و با استفاده از وردپرس و افزونه‌های رایج ساخته شده است. از نظر فنی، سایت از تکنولوژی‌های مدرن بهره می‌برد اما فاقد گواهی SSL معتبر است که یک ضعف امنیتی مهم محسوب می‌شود. همچنین سیاست‌های حفظ حریم خصوصی و کوکی‌ها در سایت به صورت آشکار وجود ندارد که می‌تواند ریسک‌های قانونی ایجاد کند. به طور کلی، شرکت موقعیت خوبی در بازار روشنایی خودرو ایران دارد اما نیازمند بهبودهای امنیتی و انطباق با مقررات حفظ حریم خصوصی است.

A

ASN CONCEPTS GmbH & Co. KG

asn-concepts.de

24

ASN Concepts is a medium-sized service provider specializing in facility management, cleaning, and hotel services primarily in Germany and Austria. The company targets commercial and hospitality clients, offering specialized cleaning and facility management solutions. The website reflects a regional service provider with a moderate market position and a client base including notable hotels and wellness centers. Technically, the website uses a custom PHP backend with common frontend libraries such as Bootstrap and jQuery, but suffers from slow performance and basic mobile optimization. Security posture is weak due to the absence of HTTPS and valid SSL certificates, lack of security headers, and missing incident response information. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no explicit GDPR compliance statements. Overall, the website is functional but requires significant improvements in security and technical modernization to enhance trust and compliance.

Pension Gatterhof is a small hospitality business located in Riezlern, Kleinwalsertal, Austria, offering holiday apartments and rooms with breakfast and hotel services. The website is built on TYPO3 CMS with a modern responsive design and includes online booking capabilities and social media integration. However, the site lacks a valid SSL certificate, exposing visitors to security risks and reducing trust. Privacy and cookie policies are present but basic, and no explicit security or incident response policies are found. The domain registration is consistent with the business claims and shows a stable history since 2008. Overall, the website provides a good user experience but requires significant security improvements to protect users and enhance credibility.

A

AutomationX GmbH

automationx.com

30

AutomationX GmbH is a mature, medium-sized Austrian company specializing in automation solutions for manufacturing, food, construction, and infrastructure sectors. Their business model focuses on consulting, system integration, service, and development of automation software and hardware, targeting industrial clients. The website reflects a professional and consistent brand presence with clear service offerings and international project experience. Technically, the site is built on the Contao CMS with Apache server hosting by graz4u.at, using common web technologies like jQuery and Google Tag Manager. However, the site lacks a valid SSL certificate and modern TLS support, which significantly impacts security posture. Cookie consent mechanisms and privacy policies are present but basic. Overall, the site is functional but requires critical security improvements to meet modern standards.

H

Hotel Elisabeth

hotel-elisabeth-tirol.com

28

Hotel Elisabeth is a well-established family hotel located in Kirchberg, Tyrol, Austria, offering a blend of traditional hospitality and modern amenities including wellness spa, outdoor activities, and event hosting. The website reflects a strong market position targeting families and multi-generational guests seeking a premium alpine experience. Technically, the site is built on TYPO3 CMS with integrations for marketing and consent management, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and disabled TLS protocols. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

S

Softsolution GmbH

softsolution.at

21

Softsolution GmbH, in partnership with LiteSentry LLC, operates as a leading provider of automated quality assurance systems for the glass industry. Their solutions focus on precision inspection technologies that detect defects in glass manufacturing, enhancing production efficiency and product quality. The company maintains a strong global presence with over 3,000 systems installed worldwide and offices in Austria and the USA. Their website reflects a professional and comprehensive digital presence, supporting multiple languages and showcasing extensive product and project information. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Slick Slider, and Borlabs Cookie for privacy management. Hosting is provided via Cloudways with Cloudflare CDN integration. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing the site to potential risks. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Security evaluation reveals critical issues including no HTTPS support, no HSTS, and no OCSP stapling, which are essential for secure communications. Despite these, the site employs some best practices like HttpOnly and Secure cookie flags and uses a reputable CDN. The overall risk is moderate but requires urgent remediation of SSL/TLS issues to protect user data and maintain trust. Strategically, the company should prioritize implementing a valid SSL certificate and modern security protocols, enhance incident response visibility, and continue leveraging their strong market position and trust indicators to maintain competitive advantage.

A

Austrian Baseball Softball Federation

baseballaustria.com

28

The Austrian Baseball Softball Federation operates as the national governing body for baseball and softball in Austria, providing comprehensive information on events, rankings, and federation activities primarily targeting players, clubs, and fans within Austria and Europe. The website serves as a central hub for news, schedules, and official communications, leveraging affiliations with the World Baseball Softball Confederation (WBSC) and related organizations to maintain authoritative content. Technically, the site employs a modern tech stack including nginx, Bootstrap, jQuery, and DataTables, hosted on Amazon CloudFront CDN, but suffers from a critical lack of a valid SSL certificate, resulting in no HTTPS support and outdated TLS configurations. This significantly impacts the security posture and user trust. Security headers are present but insufficient to compensate for the missing HTTPS. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism, though terms of service and incident response policies are absent. Overall, the site is professionally designed with good content relevance and navigation, but the lack of HTTPS is a major risk that should be remediated promptly.

S

SILVERLINE

silverline24.de

35

Silverline24.de is a German-based manufacturer and retailer specializing in kitchen appliances, particularly kitchen ventilation products such as wall-mounted hoods, island hoods, cooktop extractors, and related accessories. The company holds a recognized market position supported by industry awards like the Plus X Award for Fachhandelsmarke des Jahres 2020 and membership in the Arbeitsgemeinschaft Die Moderne Küche e.V. (AMK). Their website targets kitchen appliance buyers, retailers, and partners primarily in Germany and Europe, offering detailed product information, customer service, and partner portals. Technically, the website is built on WordPress with WooCommerce and uses modern plugins for SEO, cookie consent, and performance optimization. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Other security best practices such as HSTS, DMARC, DNSSEC, and security headers are missing or not configured. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

HappyTezos is a small EU-based technology company specializing in Tezos blockchain baking and delegation services. The company provides a secure and transparent platform for Tezos token holders to delegate their tokens and track rewards in real time via a dashboard. Despite a solid niche market position and transparent business model, the service is scheduled to close by the end of 2023. Technically, the website uses modern frontend technologies such as ASP.NET Core, Bootstrap, and jQuery, hosted behind Cloudflare CDN, but lacks a valid SSL certificate, resulting in no HTTPS support which is a critical security flaw. The site includes cookie consent mechanisms and basic privacy policies, but lacks formal security policies or incident response information. Overall, the website is functional and professional but has significant security shortcomings that reduce trust and compliance.

S

SSC GmbH

ssc-ingenieure.at

24

SSC GmbH is a small Austrian company founded in 2015 specializing in engineering, IT nearshore project services, and technical expert and management search. The company leverages over 25 years of experience and a strong national and international network to provide specialized technical staffing and engineering solutions, including custom machinery development and software development via nearshore partners. The website is professionally designed using WordPress and the Divi theme, targeting German-speaking technical and industrial audiences. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. Cookie consent mechanisms are implemented, reflecting GDPR compliance, but no explicit security or incident response policies are found. Overall, the company presents a credible business profile with clear contact information and a consistent brand presence.

H

HS-ART Digital

hs-art.com

24

HS-ART Digital is a specialized technology company focused on providing high-end digital film restoration software solutions, including the DIAMANT-Film Restoration Suite and DustBuster+. Established in 2001, the company serves a niche market of film archives, post-production houses, studios, and laboratories worldwide. Their website reflects a professional presence with detailed product information and clear contact channels, supporting their market position as an established player in the film restoration industry. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, hosted likely on Google Cloud infrastructure. However, the absence of HTTPS and valid SSL certificates significantly undermines the security posture, exposing users to risks. Cookie consent mechanisms and privacy policies are in place, indicating basic GDPR compliance, but there is no evidence of advanced security policies or incident response readiness. Overall, the website is functional and informative but requires urgent security improvements to protect users and enhance trust.

T

TOPPAN Digital Language GmbH

meinrad.cc

40

TOPPAN Digital Language GmbH is a medium-sized, ISO-certified translation and localization service provider based in Austria, serving leading companies primarily in the DACH region. The company offers a comprehensive suite of services including documentation translation, marketing translations, software and website localization, and outsourcing solutions, supported by consulting and workflow optimization. The website reflects a professional and well-branded digital presence, leveraging WordPress with Elementor and integrating multiple marketing and analytics tools such as HubSpot and Google Analytics. Despite strong content quality and privacy compliance, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. The domain registration and DNS configurations are consistent and trustworthy, with no signs of privacy protection or suspicious patterns. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

X

XYZ

wearexyz.com

36

XYZ is a creative visual production agency based in San Francisco specializing in 3D rendering, photography, retouching, video, motion graphics, and other visual content creation services. The company partners with notable brands to deliver compelling content and experiences that drive results. Their website showcases a strong portfolio of industry-leading clients, reflecting a solid market position in the media and creative production sector. Technically, the website is built on WordPress with Elementor and leverages modern JavaScript libraries and third-party services such as Vimeo and Google Analytics. Hosting is provided by WP Engine with Cloudflare as a CDN, indicating a professional infrastructure. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Security headers are minimal, and no advanced security policies or incident response contacts are found. Privacy and cookie policies are absent, which may impact compliance with GDPR and other regulations. Overall, the site presents a professional business front but requires urgent improvements in security and privacy compliance to reduce risk and enhance trust.

A

Avnet Embedded

msc-technologies.eu

40

Avnet Embedded is a division of Avnet, Inc., specializing in embedded computing, display, and software solutions for OEMs and businesses aiming to accelerate product time-to-market. The company positions itself as a world leader in embedded technology, offering a broad range of services including design, manufacturing, assembly, and software consultancy. Their business model leverages a strong partner ecosystem and in-house capabilities to deliver comprehensive embedded solutions. The website content is rich, professionally designed, and targets a global audience in the technology and manufacturing sectors. Technically, the website is built on WordPress with WooCommerce and several modern plugins such as Smart Slider 3 and Ultimate Member. The site uses Google Analytics and Google Tag Manager for tracking and marketing purposes. While the design and content quality are excellent, performance is slow, and there is a notable lack of valid SSL/TLS configuration, which impacts security and user trust. From a security perspective, the site implements several important HTTP security headers and cookie flags, but the absence of a valid SSL certificate and disabled TLS protocols represent critical vulnerabilities. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place, indicating good GDPR adherence. However, no explicit incident response or vulnerability disclosure policies were found. Overall, the site demonstrates a mature business presence with strong content and privacy practices but suffers from critical security configuration issues that should be addressed promptly to improve trust and protect users.

W

WK-Development GmbH

wk-development.com

38

WK-Development GmbH is a Vienna-based real estate development company specializing in exclusive residential projects in Vienna, its surroundings, and Eastern Europe. The company operates as a management holding for project companies involved in acquisition, development, and sale of high-end residential properties. With a portfolio exceeding 150,000 m² of new residential space developed in recent years, WK-Development targets private and institutional investors seeking profitable real estate investments. The website reflects a mature digital presence with detailed project showcases, team profiles, and partner information, supporting its market positioning as a reliable and growing player in Central European real estate development. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS and SEO-friendly infrastructure. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing users to potential data interception risks. The site lacks advanced security headers and email authentication mechanisms like DMARC, which could be improved to enhance trust and security. Performance data is unavailable, but the site uses WP Rocket for optimization and appears mobile responsive. Security posture is weak due to missing HTTPS and TLS protocols, no HSTS, and no OCSP stapling. Privacy compliance is partial; a comprehensive privacy policy exists, but no cookie consent mechanism is detected, which is a GDPR compliance risk. Contact information is clearly presented, including a company email and physical address, but no phone numbers are explicitly provided. Social media presence is active on Facebook, Instagram, and YouTube. Overall, WK-Development GmbH presents a professional and credible business front with strong content and branding but requires urgent security improvements to protect users and comply with privacy regulations. Strategic recommendations include immediate SSL implementation, enhanced email security, and cookie consent integration to align with best practices and regulatory requirements.

J

Jebsen & Co. Ltd.

jebsen.com

40

Jebsen & Co. Ltd. is a well-established company founded in 1895, specializing in marketing, distribution, and investment of premium brands primarily in Greater China. The company operates across diversified sectors including Motors, Beverage, Consumer, and Capital investments, positioning itself as a bridge between Eastern and Western markets. The website reflects a mature digital presence with comprehensive business information, multilingual support, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and user experience features, though performance metrics are unavailable. Security posture is currently weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is partially met with a privacy policy and incident response contact, but lacks cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to align with best practices.

Ploier + Hörmann is a medium-sized Austrian construction company specializing in energy and telecommunications infrastructure, with over 50 years of experience. The company operates as part of the larger Unternehmensgruppe LEYRER + GRAF, which strengthens its market position and resource base. Their website is professionally designed using TYPO3 CMS, providing clear navigation and relevant content targeted at clients in the construction and infrastructure sectors. However, the absence of a valid SSL certificate and HTTPS severely impacts their security posture and user trust. While cookie consent and privacy policies are implemented, there is a lack of explicit security policies or incident response information. The company maintains active social media channels and links to sister companies, indicating a well-connected business ecosystem.

Indorama Ventures Schoeller Wool Austria GmbH is a well-established global supplier specializing in worsted yarns with a history dating back to 1849. The company focuses on providing a wide range of yarn products including flat knit, performance, technical, hosiery, and weaving yarns, emphasizing sustainability and certified processing. Their target audience primarily includes textile manufacturers and technical yarn users. The website reflects a professional B2B manufacturing business model with consistent branding and trust indicators such as sustainability certifications and social media presence. Technically, the website is built on the Contao CMS platform using PHP 8.2 and nginx, with frontend technologies including jQuery and Bootstrap 4. Analytics are handled via Matomo, indicating a moderate level of digital maturity. However, the site lacks HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security posture. Performance data is unavailable, but mobile optimization and navigation are assessed as good. Security-wise, the site implements several HTTP security headers but fails to provide a valid SSL certificate or enable modern TLS protocols, resulting in a low security score. No explicit security or incident response policies are found, and no vulnerability disclosure or security.txt files are present. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, aligning with GDPR requirements. Overall, while the business and website content are credible and professional, the lack of HTTPS is a critical security gap that must be addressed urgently. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and enhancing security configurations to improve trust and compliance.