Security Directory

P

Primagaz

primagaz.fr

40

Primagaz is a well-established French energy supplier specializing in propane, butane, GPL, and biopropane gas products and services. Founded in 1938, the company targets both residential and professional customers, including those in remote areas not connected to natural gas networks. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Marketing and analytics tools such as Google Tag Manager, Visual Website Optimizer, and Cludo search are integrated, indicating a focus on user experience and conversion optimization. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and comply with modern web standards.

M

Montanwerke Brixlegg AG

montanwerke-brixlegg.com

40

Montanwerke Brixlegg AG is a mature manufacturing company specializing in copper recycling and upcycling solutions, with a strong emphasis on sustainability. The company operates primarily in Austria and targets industrial customers requiring high-quality copper products such as cathodes and round bolts. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with common plugins like Yoast SEO and Borlabs Cookie, but suffers from a lack of a valid SSL certificate, resulting in no HTTPS support and weak security posture. Security headers are partially implemented, but critical TLS protocols and cipher suites are missing, exposing the site to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, the site scores moderately due to security shortcomings and technical performance issues.

C

Curium Austria GmbH

iason.eu

33

Curium Austria GmbH is a specialized manufacturer and distributor of radiopharmaceuticals for nuclear medicine, operating two production sites in Austria and integrated into the global Curium Pharma network since 2021. The company targets healthcare providers and hospitals across Europe, offering PET radiopharmaceuticals with marketing authorizations in multiple countries. The website is professionally designed using WordPress and Elementor, providing comprehensive content about the company, products, and career opportunities. Technically, the site uses modern web technologies and is hosted behind Cloudflare, but critically lacks a valid SSL certificate, exposing it to security risks. Privacy compliance is well managed with a detailed cookie consent mechanism and a comprehensive privacy policy. Contact information is available primarily via a contact form and physical addresses, but no explicit company emails or phone numbers are listed. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.

U

USU GmbH

usu.de

40

USU GmbH is a well-established enterprise technology company headquartered in Germany, specializing in IT service management, software asset management, knowledge management, cloud management, and digital consulting solutions. The company targets large enterprises and organizations seeking to optimize their IT landscapes and customer service experiences through AI-powered tools and services. USU maintains a strong market position supported by a comprehensive product portfolio, global customer base, and industry recognitions. Technically, the website is built on Drupal 10 with a modern tech stack including jQuery and various marketing and analytics integrations. The site is well-optimized for mobile and SEO, providing excellent user experience and navigation. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of TLS support, which significantly impacts the security posture. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting the company's commitment to data protection. Overall, USU demonstrates high business credibility and professionalism but must urgently address its SSL/TLS configuration to ensure secure communications and maintain trust.

Vision Estate India is a medium-sized real estate company based in India, specializing in residential and commercial properties primarily in Gurgaon. Established in 1996 and ISO 9001:2008 certified, the company offers services including buying, selling, and renting properties. The website is built on WordPress with WooCommerce and Elementor, showcasing property listings, testimonials, and partner logos. However, the site lacks HTTPS, which significantly impacts its security posture. No privacy or cookie policies are present, indicating compliance gaps. The technical infrastructure is moderate but could benefit from performance and security improvements.

Royal Avebe is a well-established cooperative specializing in the production and supply of potato-based ingredients such as potato starch and protein. With a history dating back to 1919, the company serves diverse markets including food, industrial applications, and animal nutrition. The website reflects a mature business with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and tracking tools but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Privacy compliance is well addressed with detailed policies and a cookie consent mechanism. Contact information and social media presence are clearly provided, enhancing business credibility.

W

WeRetail GmbH

weretail.com

24

WeRetail GmbH is a small German-based company specializing in integrated travel retail and cross-border e-commerce solutions targeting Chinese tourists and customers. Their services include enabling businesses to accept mobile payments via Alipay and WeChat Pay, providing POS solutions with table reservation and menu pre-ordering, and offering cross-border logistics and VAT refund services. The company leverages popular Chinese social media platforms such as WeChat and Xiaohongshu for marketing and customer engagement. Technically, the website is built on WordPress using the Enfold theme and Avia framework, hosted likely on AWS infrastructure. While the site is well-structured and content-rich, it suffers from a critical lack of HTTPS, which severely impacts its security posture. Cookie consent mechanisms are implemented, but Google Analytics is installed without active configuration. Contact information is clearly provided, enhancing business credibility.

biolution GmbH is a specialized scientific consulting and visualization company serving the life sciences sector with over 20 years of experience. Their services include scientific consulting, 3D visualizations, grant and funding support, project management, coaching, workshops, and media design. The company targets researchers and organizations in the life sciences domain, positioning itself as a niche expert with a professional online presence. Technically, the website is built on WordPress with modern plugins like Elementor and WooCommerce, hosted on a LiteSpeed server by mysecurecloudhost.com. While the site has good SEO and structured data, it lacks a valid SSL certificate, which is a critical security gap. Privacy compliance is well addressed with iubenda cookie and privacy policies, including consent mechanisms. Social media integration is strong, enhancing trust and engagement. Security posture is weak due to missing HTTPS and lack of advanced security headers, exposing the site to potential risks. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

C

celix Solutions GmbH

celix.at

40

celix Solutions GmbH is an Austrian technology company specializing in consulting and implementation services for Atlassian products. As an Atlassian Platinum Solution Partner and part of the Communardo Group, celix offers a comprehensive portfolio including consulting, deployment, migration, integration, custom development, training, support, and licensing. The company targets teams and enterprises seeking agile and efficient work processes, positioning itself as a trusted partner in the Atlassian ecosystem with a strong client base and partner network. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and integrates marketing and analytics tools like Google Analytics and Mailchimp, with privacy compliance mechanisms in place. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS enforcement, which is a critical vulnerability. No modern TLS protocols are enabled, and HSTS is not properly configured, exposing users to potential risks. Despite these issues, other security headers and best practices are partially implemented. Overall, celix Solutions GmbH presents a professional and trustworthy business with strong market positioning and comprehensive service offerings. Immediate attention to SSL/TLS configuration is recommended to enhance security and trustworthiness.

N

Nils Jürgens

nilsjuergens.com

35

Nils Jürgens operates a professional UX/UI design service website targeting businesses seeking digital product design expertise. The site presents a strong portfolio, client testimonials, and clear contact information, positioning the business as a trusted small-scale design consultancy in Austria. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO and WP Rocket for SEO and performance optimization. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks and undermining trust. The site lacks advanced security headers and cookie consent mechanisms, indicating partial privacy compliance. Overall, while the business and content quality are excellent, the security posture requires urgent improvement to meet modern standards and GDPR requirements.

Murexin GmbH is a medium-sized Austrian company specializing in manufacturing and distributing building materials and construction products. The company targets professional builders and tradespeople such as floor layers, tilers, painters, and masons, offering a broad product portfolio across six main categories. The website is well-structured, professionally designed, and optimized for SEO with multilingual support and social media integration. Technically, the site runs on WordPress with modern plugins and caching but critically lacks HTTPS, exposing users to security risks. The security posture is weak due to missing SSL/TLS and limited security headers, although privacy compliance is addressed with cookie consent mechanisms and a comprehensive privacy policy. Contact information is detailed with multiple physical locations and verified company emails and phone numbers. Overall, the site is credible and business-focused but requires urgent security improvements.

V

VINICKY Armaturen Handels GmbH

vinicky.at

37

VINICKY Armaturen Handels GmbH is an established Austrian company specializing in industrial valves and pumps, serving sectors such as water treatment, petrochemical, building technology, and power plants. The company has a long history dating back to 1952 and recently expanded its portfolio by acquiring Sonnleitner Industriearmaturen GmbH, enhancing its market position and product offerings. The website reflects a professional B2B supplier model targeting industrial clients with a focus on reliability and comprehensive solutions. Technically, the website is built on Joomla CMS with common JavaScript libraries and plugins, but lacks modern performance optimizations and mobile responsiveness is basic. Security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing users to risks. Privacy compliance is partially addressed with cookie consent mechanisms and basic privacy policy presence. Overall, the site is functional but requires significant improvements in security and technical modernization to meet current standards.

The Sigmund Freud PrivatUniversität Berlin is a private European university accredited under Austrian law, offering a range of degree programs primarily in psychology, psychotherapy, media, digital journalism, and related fields. The institution targets students and professionals seeking academic and continuing education in these disciplines, positioning itself as a specialized private university with a European footprint. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS and common web technologies, with good content quality and clear navigation tailored for its academic audience. Technically, the website uses Apache hosting on a Hetzner IP, with WordPress and several JavaScript libraries including jQuery and Turbolinks. SEO and accessibility features are adequately implemented, though performance data is unavailable. However, a critical security shortfall is the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture and user trust. Cookie consent mechanisms and GDPR compliance indicators are present, reflecting attention to privacy regulations. Security-wise, the lack of HTTPS and modern TLS protocols, absence of HSTS, and missing security headers expose the site to potential risks. No incident response or security policies are publicly documented. WHOIS data aligns well with the university's identity, showing consistent registration and no privacy protection, supporting legitimacy. Overall, while the website excels in content and business credibility, urgent improvements in security infrastructure are necessary to protect users and enhance trust. Strategic recommendations include immediate SSL deployment, enabling security headers, and enhancing incident response visibility.

E

ErgoServices Ltd.

ergogroup.ie

40

ErgoServices Ltd. is a leading Irish IT solutions provider with over 30 years of experience, specializing in managed services, cloud infrastructure, digital transformation, security, and license management. The company holds prestigious certifications such as Microsoft Country Partner of the Year 2024 and Azure Expert MSP, positioning it strongly in the Irish technology market. Their target audience includes organizations in financial services, public sector, and life sciences sectors. The website reflects a professional and consistent brand with rich content and clear navigation, supporting their market position. Technically, the website is built on WordPress hosted on WP Engine with Cloudflare CDN, utilizing modern JavaScript libraries and SEO tools like Yoast. The site is mobile-optimized and includes multilingual support via WPML. However, performance metrics are unavailable, and accessibility is basic. Security headers are well implemented, but the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, which is a significant security concern. The security posture shows strengths in header implementation and cookie security but is critically weakened by the lack of valid SSL/TLS encryption. No explicit security or incident response policies are found, and no vulnerability disclosure mechanism is present. Privacy compliance is strong with comprehensive privacy and cookie policies and consent mechanisms. Business credibility is high with clear company information, awards, and trust indicators. Overall, the website is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure communications and improve its security score. Strategic recommendations include fixing SSL configuration, enabling modern TLS protocols, implementing vulnerability disclosure, and enhancing accessibility and performance monitoring.

Fait Internet Software GmbH is an Austrian FinTech company with over 20 years of experience specializing in digital solutions for wealth management and securities advisory. Their offerings include a modern securities advisory tool (PIA), a comprehensive suite of APIs for financial institutions, and digitalization projects tailored for asset management and private banking. The company targets banks, FinTechs, and insurance firms, positioning itself as a trusted niche player in the German-speaking financial technology market. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as Bootstrap and jQuery, and integrates Google services like Maps and Analytics. While the site is well-structured, mobile-optimized, and SEO-friendly, it suffers from critical security shortcomings due to the absence of a valid SSL certificate and disabled TLS protocols, severely impacting its security posture. Privacy compliance is strong, with GDPR-aligned cookie consent mechanisms and comprehensive privacy policies. Overall, the business presents a professional and credible front but must urgently address its SSL/TLS deficiencies to ensure secure communications and maintain trust.

TIMETRON is a mature, family-owned investment company based in Vienna, Austria, with a diversified portfolio in consumer goods, medical devices, real estate, and e-commerce. The company has a strong market presence with 40 years of history and focuses on financing innovative brands and projects. The website reflects a professional business with good content quality and moderate branding consistency. Technically, the site uses a traditional Apache server with PHP and several JavaScript libraries but lacks modern security implementations such as HTTPS. The absence of a valid SSL certificate and security headers significantly impacts the security posture. Privacy compliance is basic, with a cookie consent banner but no dedicated privacy policy on the main domain. Overall, the site is functional but requires improvements in security and privacy to meet modern standards.

Romer Labs is a mature, globally recognized company specializing in innovative diagnostic solutions for food and feed safety, with a focus on mycotoxins, allergens, GMOs, and microbial contaminants. The company operates primarily in the healthcare sector, serving B2B clients such as laboratories and food industry professionals. It is a subsidiary of dsm-firmenich, reflecting strong corporate backing and market presence. The website is professionally designed, content-rich, and well-structured, supporting multiple languages and providing comprehensive resources including news, webinars, and product catalogs. Technically, the site is built on Magento CMS, hosted on AWS CloudFront, and integrates modern marketing and analytics tools such as Google Tag Manager, HubSpot forms, and Yoast SEO. While the site is mobile-optimized and SEO-friendly, performance metrics are not explicitly available. Security headers are implemented, but the lack of a valid SSL certificate and absence of TLS protocols represent critical vulnerabilities that significantly reduce the site's security posture. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and easily accessible, including email, phone, and physical address. No WAF or blocking mechanisms are detected, and WHOIS data confirms domain legitimacy and maturity. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

Pakistan Telecommunication Authority (PTA) is the official government regulatory body overseeing the telecommunication sector in Pakistan. The website serves as a comprehensive portal offering licensing information, consumer protection services, cyber security strategies, and digital inclusion initiatives. It targets telecom industry stakeholders, consumers, and government entities within Pakistan. The site is professionally designed with good content quality, clear navigation, and accessibility features, reflecting a mature digital presence for a government entity. Technically, the site uses modern front-end frameworks such as Bootstrap and Foundation, along with jQuery and Font Awesome, but suffers from poor SSL/TLS implementation with no valid certificate and no enabled TLS protocols, which significantly impacts security posture. Security headers are well configured, but lack of HTTPS and modern TLS protocols is a critical weakness. Privacy compliance is basic with a privacy policy and terms of use present but no cookie consent mechanism or GDPR compliance indicators. Contact information including phone and physical address is clearly provided, along with official social media links. Overall, the site is trustworthy and authoritative but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

V

VOID.PL

void.pl

25

VOID.PL is a mature and established IT services company founded in 2010, specializing in bespoke IT solutions including systems and network support, software development, and consultancy. The company emphasizes close collaboration with customers, transparency, and proactive support. It operates primarily in Poland with associated companies in the UK and Estonia, supporting products like Smart DNS Proxy. The website reflects a professional business with good content quality and consistent branding, targeting businesses seeking outsourced IT operations and agile support services. Technically, the website uses a standard Apache server on Ubuntu, with front-end technologies including Bootstrap, jQuery, and Google Analytics. However, the site lacks HTTPS, which is a critical security gap. Security posture is weak due to missing SSL/TLS and absence of security headers or policies. Privacy compliance is poor with no visible privacy or cookie policies. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.

B

BYTEPOETS

bytepoets.com

26

BYTEPOETS is a well-established software development company based in Graz, Austria, specializing in app development, web development, UI/UX design, and consulting services. With a domain age of 24 years and a recent integration into the MXP group, BYTEPOETS positions itself as a reliable partner for digital transformation projects, targeting businesses seeking tailored software solutions. The website content is professional, comprehensive, and clearly structured, reflecting a mature business with a strong client portfolio and detailed team information. Technically, the website employs modern technologies including Angular, Flutter, .NET Core, and various analytics tools such as Matomo and Google Tag Manager. However, the site lacks HTTPS, which is a critical security shortfall. The absence of a valid SSL certificate and related security headers significantly impacts the security posture, despite the presence of cookie consent mechanisms and privacy policies that indicate good privacy compliance. Security-wise, the site shows no evidence of incident response or vulnerability disclosure policies, and the SSL configuration is incomplete, lacking HSTS and OCSP stapling. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, BYTEPOETS demonstrates strong business credibility and digital maturity but must urgently address HTTPS implementation to improve security and trust. Strategically, BYTEPOETS should prioritize securing their website with a valid SSL certificate and enhancing security headers. Maintaining comprehensive privacy compliance and transparent contact information supports user trust and regulatory adherence. The integration with MXP suggests growth and potential for expanded market reach.

R

Rupp Austria GmbH

rupp.at

19

Rupp Austria GmbH is a well-established cheese product manufacturer and retailer based in Austria with over 100 years of history. The company offers a variety of cheese products and engages consumers through recipes and branded content. The website is professionally designed, content-rich, and optimized for SEO with structured data and social media integration. However, the absence of a valid SSL certificate and HTTPS support is a critical security vulnerability that undermines user trust and data protection. The site implements GDPR-compliant cookie consent mechanisms and provides comprehensive privacy and terms of service documentation. Overall, the business demonstrates strong market positioning in the retail cheese sector with a medium-sized operational scale.

M

MedQuest Imaging

mqimaging.com

36

MedQuest Imaging operates as a leading outpatient imaging provider in the United States, managing a network of over 60 radiology centers affiliated with hospitals and health systems. Their business model focuses on partnerships that enhance financial performance and patient care quality in radiology services. The website reflects a professional presence with clear business information and a comprehensive privacy policy. However, the absence of a valid SSL certificate and lack of cookie consent mechanisms indicate significant security and privacy compliance gaps. Technically, the site is built on WordPress with Elementor and uses Google Analytics for tracking, but performance data is unavailable. Security posture is weak due to missing HTTPS and security headers, which poses risks to user data confidentiality and trust. Overall, the site is functional and credible but requires urgent security improvements to meet modern standards.

nicsell.com is a domain backorder and auction platform operated by DomainProfi GmbH, targeting the German-speaking market with services for acquiring domains in deletion phases. The business model focuses on low starting bids and a no-risk payment approach, supported by ICANN accreditation and partnerships with multiple domain registries. Technically, the website uses a standard stack including nginx, Bootstrap, and jQuery, but lacks a valid SSL certificate, which is a significant security concern. The site is mobile optimized and SEO friendly but has slow performance metrics. Security posture is weak due to missing HTTPS and modern TLS protocols, although some security headers and cookie flags are set. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is limited to forms, with no direct emails or phone numbers publicly listed. Overall, the site is legitimate and professionally presented but requires urgent security improvements.

S

Sport England

sportengland.org

37

Sport England is a UK government-related non-profit organization dedicated to promoting sport and physical activity across England. The website serves as a comprehensive resource hub offering funding opportunities, research data, guidance, and campaigns to support various stakeholders including volunteers, grassroots organizers, schools, and national governing bodies. The organization is primarily funded by the National Lottery, which is prominently acknowledged on the site. The website is professionally designed with clear navigation and strong branding consistency, targeting a broad audience involved in sport and physical activity.

B

BEWOTEC GmbH

bewotec.de

24

BEWOTEC GmbH is a German-based technology company specializing in software solutions for travel agencies and tour operators. Their product suite includes myJACK, a comprehensive travel agency software, DaVinci for tour operators, and dynamic packaging tools like flexStore and OTDS Player. The company has a strong market presence in the German-speaking travel industry, with a history dating back to 1988. Technically, the website is built on WordPress with modern plugins and tools, offering good content quality and user experience. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance with GDPR. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance protection.

T

Today Experts

today-experts.com

37

Today Experts is a small Austrian IT recruitment company specializing in connecting IT specialists with client projects. Their website is professionally designed using WordPress and Elementor, targeting IT professionals and clients seeking staffing solutions. The company showcases partnerships with notable firms such as A1, ÖBB, IBM, UNIQA, and nagarro, indicating a credible market position within the technology and transportation sectors. Technically, the site uses modern web technologies but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts user trust and security posture. Privacy compliance is basic, with a cookie consent mechanism implemented but lacking comprehensive GDPR indicators. Overall, the site is functional and content-rich but requires urgent security improvements to meet modern standards.

R

Regent AG

regent.ch

33

Regent AG is a Swiss-based lighting manufacturer with a heritage spanning over 100 years, specializing in high-quality, human-centric lighting solutions and bespoke designs. Their website reflects a mature business with a strong brand presence, targeting professional customers such as electrical installers and corporate clients. The company offers a broad portfolio including connected lighting and upcycling services, supported by digital tools like product finders and configurators. Technically, the website is built on TYPO3 CMS and employs modern web technologies and marketing tools, but suffers from a critical security weakness due to the absence of a valid SSL certificate and disabled TLS protocols, which undermines secure HTTPS access. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information and social media presence are comprehensive, enhancing business credibility.

O

Oracle

sun.com

40

Oracle's website for hardware solutions presents a comprehensive and professional digital presence showcasing its enterprise-grade hardware products optimized for Oracle Database and cloud integration. The site targets IT professionals and enterprises seeking scalable, high-performance infrastructure solutions. The content is rich, well-structured, and supported by multimedia and customer success stories, reflecting Oracle's strong market position in technology and cloud services. Technically, the site leverages Oracle's own content management system, Akamai CDN, and modern JavaScript frameworks, ensuring good performance and accessibility. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, which significantly impacts the security posture and trustworthiness from a technical perspective. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR compliance. Overall, the site demonstrates high business credibility but requires urgent remediation of its SSL configuration to meet modern security standards.

G

Glanzer cosmetic engineering GmbH & Co KG

donau-kanol.com

37

Glanzer cosmetic engineering GmbH & Co KG is a well-established Austrian manufacturing company specializing in cosmetics, household cleaners, and biocides. With over 90 years of experience and 100% production in Austria, the company positions itself as a full-service partner for B2B clients seeking high-quality product development and manufacturing services. The website reflects this positioning with clear business descriptions, contact information, and a professional design. Technically, the site uses a modern technology stack centered around Craft CMS and popular JavaScript libraries, but suffers from poor performance metrics and lacks HTTPS security. Security posture is weak due to the absence of a valid SSL certificate and missing security headers, exposing the site to potential risks. Privacy compliance is also lacking, with no privacy or cookie policies present. Overall, the site is functional and professional but requires urgent improvements in security and compliance to reduce risk and enhance trust.

T

Transped Europe GmbH

transped.at

38

Transped Europe GmbH is a medium-sized Austrian transportation and logistics company specializing in European haulage and intermodal freight transportation since 1983. The company positions itself as a specialist in European road haulage, targeting logistics customers and transport partners across Europe. The website reflects a professional business with clear navigation and relevant content focused on their core services. Technically, the site uses a custom ASP.NET backend with common frontend libraries such as jQuery and Bootstrap, but lacks modern security implementations such as HTTPS and security headers, which significantly impacts its security posture. The absence of a valid SSL certificate and missing security headers expose the site to potential risks and reduce trustworthiness. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present, but no explicit data protection officer or incident response information is found. Overall, the website is functional and informative but requires urgent security improvements to protect user data and enhance trust.

P

Poesis Consulting GmbH

poesis.at

40

Poesis Consulting GmbH is a small, dynamic consulting firm specializing in strategy, project management, process management, and training services. The company targets businesses requiring tailored consulting solutions, particularly in complex projects where internal resources or expertise are limited. Their market position is regional with offices in Vorarlberg and Liechtenstein, emphasizing a personalized and deep consulting approach. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, supporting their credibility. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Cookiebot for consent management. Hosting is via Cloudflare CDN with DNS managed by United Hoster. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant technical and security deficiency. Performance is rated slow due to missing optimization metrics, but mobile responsiveness and SEO basics are adequately addressed. From a security perspective, the absence of HTTPS and TLS protocols severely undermines the site's security posture. While some security headers and best practices like HttpOnly cookies and reCAPTCHA are implemented, critical vulnerabilities exist including no DNSSEC, no certificate transparency compliance, and no session resumption. Privacy compliance is reasonably addressed with a privacy policy, cookie consent, and GDPR indicators, but no explicit security or incident response policies are published. Overall, the website presents a moderate risk profile primarily due to missing HTTPS and related security controls. Strategic recommendations include immediate SSL/TLS deployment, enhancement of DNS security, and publication of security policies. These improvements will bolster trust, compliance, and protect both the business and its clients from potential threats.

Q

Qidenus Technologies

qidenus.com

31

Qidenus Technologies is a specialized manufacturer of high-performance V-shaped book scanners and related capture software, serving a global clientele including libraries, archives, museums, and cultural heritage organizations. The company positions itself as a market leader with a strong product portfolio and a network of trusted partners and distributors worldwide. The website reflects a professional and well-branded digital presence with comprehensive product information and customer engagement features. Technically, the site is built on WordPress with modern plugins for SEO and analytics, hosted on LiteSpeed servers with PHP 8.1. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is partially addressed with cookie policies and consent mechanisms, but GDPR compliance indicators are limited. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect data and enhance trust.

O

Ospelt Gruppe

ospelt.com

30

Ospelt Gruppe is a well-established international manufacturer specializing in private label food products including ready meals, fresh meals, convenience foods, and pet food. Founded in 1958 and headquartered in Liechtenstein, the company operates multiple production sites across Liechtenstein, Switzerland, and Germany. The website reflects a mature digital presence with multilingual support and professional branding, targeting both consumers and business clients in the food manufacturing sector. Technically, the site is built on WordPress with the Divi theme and incorporates modern web technologies and SEO best practices. However, a critical security gap exists due to the absence of a valid SSL certificate, which undermines HTTPS security and user trust. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent improvements in security infrastructure to protect user data and enhance trust.

W

WTW

acclaris.com

40

WTW is a global leader in risk management, employee benefits, and capital advisory services, offering data-driven and insightful solutions to enterprises. The Finnish localized website reflects a mature digital presence with comprehensive content, professional design, and clear navigation targeting corporate clients and enterprises. The technical infrastructure leverages modern web technologies including Sitecore CMS, Bootstrap framework, Coveo search, and Brightcove video players, hosted likely on Microsoft Azure. Despite a strong security header configuration, the site suffers from a critical SSL certificate issue, lacking valid HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The site extensively uses third-party analytics and marketing tools, indicating a high level of user tracking and data collection. Overall, the website is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure communications and maintain user trust.

C

Continental Exchange Solutions, Inc.

riafinancial.com

40

Ria Financial Services operates a global money transfer platform, providing services to individuals and businesses for sending and receiving money internationally. The company maintains a strong market presence with localized country-specific websites and a corporate section, supported by a parent company, Euronet Worldwide, Inc. The website is built on the Liferay CMS platform, leveraging modern web technologies such as jQuery and Bootstrap, and includes multi-language support and a cookie consent mechanism to comply with privacy regulations. However, a critical security deficiency is the absence of a valid SSL certificate and TLS support, which severely impacts the security posture and user trust. While privacy and cookie policies are comprehensive and GDPR compliant, the lack of HTTPS undermines data protection efforts. The site includes social media integration and a contact form with CAPTCHA to mitigate spam. Overall, the website demonstrates good business credibility and content quality but requires urgent security improvements to meet industry standards.

S

SPS Technik Ges.m.b.H

sps.at

40

SPS Technik Ges.m.b.H is a well-established Austrian company specializing in turnkey automation solutions for various industries including manufacturing, transportation, and energy. The company operates internationally with subsidiaries in China and Poland, offering comprehensive services from electro planning, robot programming, mechanical construction, to service and maintenance. Their market position is strong, supported by over 70 years of experience and installations in more than 50 countries. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, featuring good mobile optimization and accessibility. Security-wise, the site uses a valid SSL certificate but lacks modern TLS protocols and some security headers, which lowers its security posture. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the website reflects a professional and credible business presence with room for security improvements.

H

HellermannTyton

hellermanntyton.at

40

HellermannTyton is a well-established manufacturer and provider of cable management and connectivity products, serving industrial sectors such as manufacturing, energy, and transportation. The website presents comprehensive product information, industry solutions, and sustainability initiatives, targeting professional and industrial customers primarily in Austria and surrounding regions. The company maintains a strong brand presence with consistent design and multiple social media channels. Technically, the website uses a modern tech stack including Apache, jQuery, Google Tag Manager, and Usercentrics for consent management, hosted behind Cloudflare DNS services. However, the SSL/TLS configuration is outdated, supporting only TLS 1.1 without TLS 1.2 or 1.3, which is a security concern. Security headers are well implemented, including a strict Content Security Policy and HSTS header, though HSTS is not fully enabled in SSL configuration. Privacy compliance is strong with clear privacy and cookie policies and active consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant, but would benefit from modernizing its TLS support and enhancing SSL configurations.

A

Apitech

apitech.fr

39

Apitech is a French technology company specializing in open source productivity solutions and custom software development. With over 30 years of experience, it positions itself as a trusted partner for organizations seeking sovereign and secure digital tools. The company leverages open source expertise and partnerships with major technology providers like Microsoft and Dell to deliver tailored solutions. The website reflects a professional and consistent brand image targeting business clients in France. Technically, the site is built on WordPress with the Divi theme and uses modern plugins and analytics tools. However, a critical security issue is the lack of a valid SSL certificate, resulting in no HTTPS, which significantly impacts the security posture. While some security headers are present, the absence of HTTPS and modern TLS protocols is a major vulnerability. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

G

Grant Thornton

grantthornton.com

40

Grant Thornton is a leading professional services firm specializing in audit, assurance, tax, and advisory services. With a large community of nearly 10,000 professionals, the company serves a diverse range of industries including energy, financial services, healthcare, manufacturing, and technology. The website reflects a mature digital presence built on Adobe Experience Manager, featuring comprehensive content, clear navigation, and strong branding consistency. However, the current SSL/TLS configuration is critically deficient, with no valid certificate and no enabled TLS protocols, which poses a significant security risk. The site implements standard security headers and privacy policies, including GDPR-compliant privacy and cookie policies with consent mechanisms. Social media integration and external partnerships are well established, enhancing business credibility. Overall, the site is content-rich and professionally designed but requires urgent remediation of its SSL/TLS security posture to ensure user trust and compliance.

V

Victory Capital Management Inc.

pioneerinvestments.com

40

Pioneer Investments, a franchise of Victory Capital Management Inc., operates a comprehensive investment services website targeting investors and financial professionals. The site offers a broad range of asset management products including mutual funds, separately managed accounts, and closed-end funds, supported by investment insights and research. The business is well-established with a history dating back to 1928 and maintains a strong market position within the finance sector in the United States. Technically, the website leverages Adobe Experience Manager CMS, integrates multiple modern libraries and marketing tools, and is hosted via Amazon CloudFront CDN, indicating a mature digital infrastructure. However, the site suffers from a critical security flaw due to an invalid or missing SSL certificate, which undermines the security posture despite the presence of robust security headers. Privacy compliance is moderate with a clear privacy policy but lacking explicit cookie consent mechanisms. Overall, the website is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions and compliance.

C

CAE Expert Group GmbH

caeexpert.group

27

CAE Expert Group GmbH is a specialized provider of ECAD engineering services and software solutions, operating primarily in Austria and Germany. The company offers a broad range of services including system automation, consulting, software development, training, and project support, positioning itself as a trusted expert with TÜV SÜD certification. The website is professionally designed, content-rich, and targets businesses and professionals seeking ECAD system expertise. Technically, the website is built on WordPress with Elementor and employs modern SEO and cookie consent tools, but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and overall trustworthiness from a cybersecurity perspective. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Contact information is comprehensive and transparent, supporting business credibility. Strategic improvements in SSL/TLS implementation and security headers are essential to elevate the security maturity and user trust.

S

SOL4 IT-Consulting GmbH

sol4.at

30

SOL4 IT-Consulting GmbH is a specialized IT consulting firm based in Austria, focusing on CRM software solutions and digitalization services for small and medium-sized enterprises. The company offers CRM software consulting, project implementation, industry-specific solutions, and support services, positioning itself as a market leader in CRM solutions within its region. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience. Technically, the site is built on Joomla CMS with modern UIkit framework and common JavaScript libraries, providing a good user experience and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture and trustworthiness. The site implements GDPR-compliant privacy and cookie policies with active consent mechanisms and transparent contact information. Overall, while the business and content quality are strong, the lack of HTTPS is a major risk that should be addressed promptly.

P

PRAXIS

praxispr.ca

40

PRAXIS is a Canadian marketing communications agency specializing in integrated services including PR, digital marketing, live events, social media management, and collaborations. The company positions itself as a leading Canadian-owned agency with a strong client portfolio including major brands such as Pepsi, Cineplex, and Purina. The website is professionally designed with rich content and clear navigation targeting Canadian businesses seeking marketing communications expertise. Technically, the site is built on WordPress with modern plugins and SEO tools, but suffers from a lack of HTTPS security due to an invalid or missing SSL certificate. Security headers are minimal but present, and no cookie consent or GDPR compliance mechanisms are evident. The agency maintains active social media presence and uses Google Analytics and LinkedIn Insight for tracking. Overall, the website reflects a credible and professional business but requires urgent security improvements to protect user data and enhance trust.

S

SPAX International GmbH & Co. KG

spax.com

40

SPAX International GmbH & Co. KG is a well-established German manufacturer specializing in screws and fastening technology, producing large volumes daily for a global market. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and digital tools for professionals in construction and woodworking. The company demonstrates strong branding consistency and trust indicators including certifications and detailed contact information. Technically, the site is built on Adobe Experience Manager with modern marketing and consent management tools, offering good user experience and SEO optimization. However, a critical security issue exists due to an invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility and content quality are high, but urgent remediation of SSL/TLS issues is recommended to ensure secure user interactions and maintain trust.

W

W.D. Matthews Machinery Co.

wdmatthews.com

40

W.D. Matthews Machinery Co. is a well-established heavy equipment dealer operating primarily in New England, with a history dating back to 1939. The company specializes in new and used forklifts, heavy machinery, warehousing supplies, rentals, parts, and service. It maintains strong partnerships with reputable brands such as Toyota, Manitou, Clark, and Bobcat, positioning itself as a leading regional provider in the transportation and industrial equipment sector. The website reflects a professional business model focused on equipment sales, rentals, and maintenance services targeting commercial and industrial clients in the region. Technically, the website is built on WordPress with WooCommerce and utilizes modern web technologies including Gravity Forms for data collection and Google Tag Manager for analytics. Hosting is provided by WP Engine with Cloudflare CDN for content delivery. While the site is mobile-optimized and well-structured with good SEO practices, performance data is incomplete, and some accessibility features are basic. The site lacks a valid SSL certificate, which is a critical security gap. From a security perspective, the absence of HTTPS and modern TLS protocols significantly reduces the site's security posture. No advanced security headers or mechanisms such as HSTS or OCSP stapling are implemented. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service page detected. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a moderate risk profile due to the lack of HTTPS and limited privacy compliance. Strategic improvements in security configuration and privacy practices are recommended to enhance trust and protect user data. The business itself appears legitimate and well-positioned in its market, but the website's security shortcomings could impact user confidence and compliance with regulations.

M

M. M. Newman

mmnewman.com

40

M.M. Newman Corporation is a specialized manufacturer and distributor of Heli-Tube® spiral cable wrap and related specialty tubing and hot tool products. Established in 1956, the company holds a strong market position as a leading supplier in the manufacturing sector, targeting industrial and commercial customers requiring cable management solutions. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, offering clear navigation and relevant product information. The company demonstrates trustworthiness through certifications such as ISO 9001:2015 and provides comprehensive contact information and social media presence. However, the technical infrastructure shows gaps in security, notably the absence of a valid SSL certificate and incomplete HTTPS implementation, which poses risks to user data and trust. The site uses multiple analytics and marketing tools but lacks a cookie consent mechanism, indicating partial privacy compliance.

V

Viz Flowics

flowics.com

37

Viz Flowics is a cloud-native platform specializing in live data-driven broadcast graphics, targeting broadcasters, live streamers, and corporations. The platform offers an intuitive web-based HTML5 graphics editor, native data connectors, social media integration, and NRCS integration, positioning itself as a modern solution in the media technology sector. The website reflects a professional and consistent brand presence supported by customer testimonials and case studies, indicating a solid market position under its parent company Vizrt. Technically, the site is built on WordPress with modern plugins and integrates multiple marketing and analytics tools, though performance metrics are not explicitly available. Security posture is weakened by the absence of a valid SSL certificate and lack of TLS support, which is a critical vulnerability for a platform serving professional clients. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

A

Amway Global

amwayglobal.com

40

AmwayGlobal.com serves as the official digital presence of Amway Corporation, a globally recognized leader in direct selling and wellness products. The website effectively communicates the company's extensive product portfolio, business opportunities, and corporate social responsibility initiatives, targeting health-conscious consumers and entrepreneurs worldwide. The site demonstrates a mature digital infrastructure leveraging WordPress CMS, modern JavaScript libraries, and performance optimization tools, ensuring a good user experience across devices. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant security gaps that undermine the site's secure communication capabilities. While security headers and privacy policies are well implemented, the lack of HTTPS is a critical issue that should be addressed promptly. Overall, the website reflects a reputable enterprise with strong branding and compliance posture but requires urgent improvements in its SSL/TLS configuration to enhance trust and security.

A

adRom Media Marketing GmbH

adrom.net

32

adRom Media Marketing GmbH is a well-established Austrian online marketing agency specializing in email marketing, lead generation, display advertising, and digital prospectus solutions. With over 25 years of experience and a large GDPR-compliant database of 45 million addresses, the company serves a broad B2B audience including agencies and enterprises. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site runs on WordPress with Elementor and employs performance tools like WP Rocket, but suffers from critical security weaknesses due to an invalid SSL certificate and lack of modern TLS protocols, which undermines secure HTTPS delivery. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Contact information and social media presence are transparent and professional. Overall, the site demonstrates high business credibility but requires urgent security improvements to protect user data and enhance trust.

I

iSEEit

iseeit.com

40

iSEEit is a technology company specializing in a native Salesforce Opportunity Management Tool designed to help sales teams visualize and qualify opportunities using structured sales methodologies such as MEDDIC and MEDDPICC. The company targets sales professionals and organizations seeking to improve sales process adoption and forecasting accuracy. The website presents a professional and content-rich platform with detailed product features, customer testimonials, and partner logos, positioning iSEEit as an award-winning solution in its niche. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Hotjar, and various marketing tools. Hosting is inferred to be on Amazon AWS infrastructure. While the site is mobile-optimized and SEO-friendly, performance metrics indicate slow loading times, suggesting room for optimization. From a security perspective, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which is a critical vulnerability impacting user trust and data security. Although some security headers like HSTS are present, the absence of HTTPS and other best practices significantly lowers the security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. Overall, the site demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS configuration and security practices to ensure safe user interactions and compliance with modern security standards.