Security Directory

L

Lionbridge

lionbridge.com

40

Lionbridge is a mature, enterprise-level global language services provider specializing in translation, localization, AI data services, and content creation for diverse industries including technology, healthcare, finance, and e-commerce. The company leverages advanced AI and automation tools to deliver multilingual content solutions, positioning itself as a leader in the digital-first economy. The website reflects a strong brand presence with excellent content quality, comprehensive service offerings, and a global reach supported by multiple language options and localized content. Technically, the website is built on Adobe Experience Manager with integrations of modern marketing and analytics technologies such as Marketo, OneTrust, Vidyard, and Google Analytics. The site is mobile optimized and SEO friendly, with good accessibility features. However, the SSL/TLS configuration is currently broken, lacking a valid certificate and modern TLS protocol support, which significantly impacts the security posture. Security-wise, the site implements strong security headers and content security policies but suffers from critical SSL issues that must be addressed to ensure secure communications. Privacy compliance is well handled with clear cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by long domain age, strong WHOIS data consistency, ISO certifications, and visible trust indicators such as customer testimonials and case studies. Overall, Lionbridge presents a professional and trustworthy digital presence with advanced technological adoption but requires urgent remediation of SSL/TLS issues to maintain security standards and user trust.

D

DIS AG

dis-ag.com

40

DIS AG is a leading personnel placement and recruitment company operating primarily in Germany and Austria, with a strong market position supported by over 90 branches and a parent company, The Adecco Group. The website provides comprehensive information about their services, including temporary employment, personnel placement, and training programs, targeting job seekers and companies. Technically, the site uses modern JavaScript libraries and consent management tools but suffers from a lack of valid SSL/TLS configuration, impacting security posture. Privacy compliance is well implemented with clear cookie and privacy policies. Overall, the site is professional and trustworthy but requires urgent improvements in security infrastructure to protect user data and enhance trust.

V

vis vitalis gmbh

vis-vitalis.com

27

Vis Vitalis GmbH is an established contract manufacturer of nutritional supplements based in Austria, with a business history dating back to 1986. The company specializes in the development and production of capsules, powders, liquids, and proprietary PANMOL® raw materials, serving a diverse clientele with both small and large batch orders. Their market position is strengthened by nearly four decades of experience, a medium-sized workforce, and certifications such as IFS 8, underscoring their commitment to quality and food safety. Technically, the website is built on a modern WordPress platform utilizing PHP 8.2 and various contemporary JavaScript libraries and plugins, including WP Grid Builder and Contact Form 7. While the site demonstrates good mobile optimization, accessibility, and SEO practices, performance metrics indicate potential issues with load time measurement. The site employs cookie consent mechanisms compliant with GDPR, including Borlabs Cookie and conditional loading of Matomo Tag Manager. From a security perspective, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical vulnerability. No modern TLS protocols or strong cipher suites are enabled, and essential security headers like HSTS are missing. Although no active vulnerabilities such as Heartbleed or POODLE were detected, the absence of proper SSL/TLS configuration significantly lowers the security posture. Overall, Vis Vitalis presents a professional and trustworthy online presence with comprehensive business information and compliance with privacy regulations. However, the critical lack of HTTPS and proper SSL configuration poses a significant risk that should be addressed promptly to protect user data and maintain trust.

I

IMPROCESS GmbH

improcess.at

24

IMPROCESS GmbH is a small Austrian biotech consulting engineering firm specializing in process improvement, energy efficiency, and environmental performance for manufacturing operations. Their website presents a professional image with clear business focus and partner affiliations. The technical infrastructure is based on WordPress with common web technologies but lacks HTTPS, which is a critical security gap. The site uses Google Analytics for user tracking but does not provide privacy or cookie policies, indicating poor privacy compliance. Security posture is weak due to missing SSL, lack of security headers, and exposed PHP version. Overall, the website is functional and informative but requires significant improvements in security and privacy to meet modern standards.

S

Schmied & Fellmann

schmied-fellmann.at

25

Schmied & Fellmann is a medium-sized Austrian company specializing in electrical engineering services including consulting, planning, installation, and maintenance. They also operate a retail business offering electrical devices, installation materials, postal services, and school and office supplies. The company targets businesses and institutions primarily in the St. Pölten and Wilhelmsburg regions. Their market position is solid locally, supported by certifications such as 'Leitbetrieb' and a broad portfolio of services and references. Technically, the website is built on TYPO3 CMS with common frontend libraries and demonstrates good content quality and navigation. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. No modern security headers or cookie consent mechanisms are implemented, and no analytics or tracking scripts are detected. Overall, the website is functional and professional but requires urgent security improvements to protect user data and improve trust. Strategic recommendations include obtaining a valid SSL certificate, implementing security headers, and adding privacy compliance features.

ArcelorMittal Construction is a large, established manufacturing company specializing in steel-based building solutions for architectural projects, with a strong presence in Austria and multiple European markets. The website reflects a professional and comprehensive business offering, targeting construction professionals and project developers with a broad portfolio of products and services emphasizing sustainability and innovation. Technically, the website uses modern JavaScript libraries and analytics tools, hosted behind Cloudflare, but suffers from a critical lack of valid SSL/TLS configuration, exposing users to security risks. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. The security posture is weak due to missing HTTPS, but other security headers and practices are present. Overall, the website is trustworthy and professional but requires urgent security improvements to protect users and maintain credibility.

B

BIGagency

bigagency.es

31

BIGagency is a digital marketing franchise business offering a comprehensive suite of services including branding, social media management, web design, digital marketing, content and video production, and e-commerce solutions. The company targets marketing professionals and commercial agents seeking to establish their own digital agency with low upfront investment. The website is built on WordPress using Elementor and integrates marketing tools such as ActiveCampaign and Google Tag Manager. However, the site lacks a valid SSL certificate, which is a critical security concern. Contact information is clearly provided with multiple physical locations in Portugal, Germany, and Spain, supporting a European market presence. Privacy and cookie policies are absent, indicating compliance gaps.

ROSMARIE is a small Dutch theatrical business focused on monologue performances and play instruction, led by Rosmarie 'Roos' Blaauboer. The website serves as a professional portfolio and booking platform, targeting theater audiences and cultural event organizers. The business operates with a niche market position emphasizing artistic productions and cultural heritage. Technically, the site is built on WordPress with common plugins for SEO and sliders, but suffers from lack of HTTPS and performance optimization. Security posture is weak due to missing SSL, lack of security headers, and absence of privacy and cookie policies. The domain is mature and consistent with the business history, but domain protection is minimal. Overall, the site is functional and professional in content but requires urgent security and privacy improvements to reduce risk and improve trust.

C

CubeServ Group

cubeserv.com

38

CubeServ Group is a well-established consulting company specializing in SAP Business Intelligence, Advanced Analytics, and Business Analytics solutions. With over 21 years of domain presence and more than 5,000 analytics projects, CubeServ holds a strong market position in the technology sector, particularly focusing on SAP products and services. Their offerings include business analytics platforms, SAP analytics products, software development, and application management services, targeting companies seeking to leverage SAP for data-driven decision making. The website is professionally designed, content-rich, and well-structured, supporting a positive user experience and clear navigation. Technically, the site uses WordPress with Elementor and various modern plugins, hosted likely on AWS infrastructure. However, a critical security gap exists due to the absence of HTTPS/SSL, which significantly impacts the security posture and trustworthiness. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, CubeServ demonstrates strong business credibility but must urgently address the lack of SSL to improve security and user trust.

ITS Industrial Turbine Services GmbH is a specialized company focused on providing advanced systems and solutions for industrial gas turbines, including monitoring, control, and spare parts. Their key offerings include the TMOS SCADA monitoring system, MACH7 turbine control system, premium flame scanners, and GE Speedtronic™ spare parts. The company targets industrial sectors such as oil, gas, steel, aluminum, and paper industries worldwide, positioning itself as a reliable and experienced partner with over a decade of expertise. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, with integration of Google Tag Manager and Cookiebot for analytics and cookie consent management. However, the absence of a valid SSL certificate and HTTPS support is a significant technical and security shortfall. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features. From a security perspective, the lack of HTTPS and related security headers severely impacts the security posture. No explicit security policies or incident response contacts are published, and DNS security features like DNSSEC and CAA are not enabled. Cookie consent is implemented, but GDPR compliance indicators are minimal. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enhancing security headers, publishing security policies, and improving GDPR compliance measures.

H

H World International

deutschehospitality.com

40

H World International is a large hospitality group operating multiple hotel brands with a focus on cultural diversity, tradition, and sustainable growth. The company targets hotel guests, business partners, franchisees, and job seekers, offering hotel accommodation, franchising, business travel, and development services. The website is professionally designed with clear navigation and good content relevance, supporting the company's market position as an established international hospitality group. Technically, the site uses standard web technologies and is hosted on Amazon AWS, but lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security posture significantly. Privacy compliance is supported by a comprehensive privacy policy, but no cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust.

H

Hirsch Technology

hirsch-technology.com

40

HIRSCH Technology is a well-established manufacturer and technology leader in the EPS machine industry with over 35 years of experience. The company offers a comprehensive range of high-quality machines and turnkey plants for processing EPS, EPP, and molded pulp, serving multiple industrial sectors including construction, electrical, food, and packaging. Their market position is strong, supported by multiple locations across Europe and a parent group, HETech, which consolidates their industry presence. Technically, the website is built on a modern WordPress platform with various plugins for SEO, performance, and social media integration, but lacks a valid SSL certificate, which is a significant security concern. The security posture is basic with some security headers present but no active TLS protocols or strong cipher suites, exposing the site to potential risks. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism in place. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

V

Victaulic

victaulic.com

37

Victaulic is a globally recognized manufacturer specializing in mechanical pipe joining, flow control, and fire protection solutions tailored for complex piping applications. The company holds a strong market position as a leader in these sectors, serving commercial, industrial, and energy markets with a broad portfolio of products and services including customer training and virtual design tools. Their website reflects a professional and consistent brand image with comprehensive product information and clear contact details. Technically, the site is built on WordPress with modern SEO tools and interactive features, but suffers from slow load times and lacks advanced accessibility features. Security posture is weak due to the absence of a valid SSL/TLS certificate and missing security headers, exposing users to potential risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is functional and credible but requires urgent improvements in security and performance to enhance user trust and compliance.

M

Miraplast GmbH

miraplast.at

28

Miraplast GmbH is a medium-sized, family-owned manufacturing company based in Austria, specializing in plastic injection molding products and tooling. With over 50 years of experience, it operates two main brands, MiraHome and MiraTech, serving both consumer and industrial markets. The company maintains production sites in Austria and Hungary, emphasizing quality and sustainability. Technically, the website is built on WordPress with common plugins for SEO, multilingual support, and user management, hosted on Cloudways. However, the site lacks HTTPS, which is a critical security gap. Privacy and cookie policies are present and managed via Borlabs Cookie, but GDPR compliance is basic. Overall, the business is credible and well-positioned in its sector, but the website's security posture requires urgent improvement.

W

Wilhelm Schwarzmüller GmbH

schwarzmueller.com

38

Wilhelm Schwarzmüller GmbH operates as one of Europe's largest providers of towed commercial vehicles, specializing in manufacturing and servicing premium transport solutions tailored to various industries such as construction, logistics, and tank transport. The company maintains a strong market position with a broad portfolio of over 150 vehicle types and a commitment to quality, evidenced by ISO certifications and industry awards. Their digital presence is robust, featuring multilingual support, active social media channels, and comprehensive customer service offerings including telematics and rental services. Technically, the website is built on WordPress with modern frameworks and SEO optimizations, although it lacks HTTPS encryption, which is a significant security concern. The security posture is weak due to the absence of SSL/TLS, HSTS, and other critical security headers, exposing users to potential risks. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business credibility is high, supported by consistent branding, detailed contact information, and trust signals. Strategic improvements in security infrastructure are essential to enhance trust and protect user data.

S

STUDEN & CO Holding

sco-group.com

23

STUDEN & CO Holding is an international agribusiness holding company specializing in the processing, trading, and distribution of agricultural commodities such as sugar, edible oils, oilseeds, and grains. The company operates through subsidiaries including AGRANA-STUDEN Group and BIMAL Group, targeting agribusiness stakeholders and investors. The website presents a professional corporate image with multilingual support and clear business descriptions. Technically, the site is built on WordPress with common plugins like Yoast SEO and Visual Composer, but suffers from outdated PHP and lack of HTTPS, impacting security and performance. Security posture is weak due to missing SSL, no modern TLS support, and absence of advanced security headers. Privacy compliance is minimal with no visible privacy policy but a cookie consent banner is present. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

A

asa technology Produktions- und Vertriebs GmbH

asahydraulik.com

21

asa technology Produktions- und Vertriebs GmbH is a mature Austrian manufacturing company specializing in hydraulic cooling and connection technologies. Their website showcases a broad portfolio of heat exchangers, pumps, valves, and connection solutions targeting industrial and mobile equipment manufacturers. The company positions itself as an innovative leader with over 40 years of experience and a global footprint. Technically, the website is built on Drupal 9 with modern front-end libraries but lacks HTTPS, which is a critical security flaw. The site includes a cookie consent mechanism but lacks explicit privacy and terms of service pages. Contact information is clearly provided, enhancing business credibility. Security headers are partially implemented, but the absence of SSL/TLS and other modern security features significantly lowers the security posture. Overall, the website is professional and content-rich but requires urgent security improvements.

THQ Nordic GmbH is a global video game publisher and developer founded in 2011, operating primarily in the media industry with a focus on video game publishing, development, and sales. The company maintains a strong market position with multiple subsidiaries and a broad portfolio of game titles, targeting gamers, content creators, and trade partners. The website reflects a professional business model with clear navigation, consistent branding, and a comprehensive online presence including an online store and limited print runs. Technically, the site is built on Drupal 9 with modern front-end libraries and integrates Google Analytics for user tracking. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. Security headers are present but insufficient to compensate for the lack of encryption. Privacy compliance is well addressed with a cookie consent mechanism and clear privacy and terms of service pages. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

L

Linz Center of Mechatronics GmbH

lcm.at

29

Linz Center of Mechatronics GmbH (LCM) is a medium-sized Austrian research and development service provider specializing in mechatronics and manufacturing technologies. The company supports medium and large enterprises in sectors such as machinery, automotive, and medical technology by integrating scientific research into practical, economically viable solutions. Their services include integrated hydraulic and electrical drive systems, vibration technology, Industrial IoT, measurement services, and transformation consulting. The website is professionally designed, multilingual, and targets industrial clients seeking innovation and sustainability improvements. Technically, the site runs on WordPress with the Divi theme and includes modern SEO and multilingual plugins, but suffers from slow load times and lacks a valid SSL certificate, which impacts security posture. Security measures include GDPR-compliant cookie consent and captcha-protected contact forms, but the absence of HTTPS and security headers are critical vulnerabilities. Overall, LCM presents a credible and professional digital presence aligned with its business objectives, but should urgently address SSL and security header issues to improve trust and compliance.

H

Hirtenberger Defence Systems

hirtenberger.com

29

Hirtenberger Defence Systems is a medium-sized manufacturing company specializing in the development and production of mortar systems and related defense technologies. The company operates globally, targeting military and defense sector customers with a comprehensive product range including mortar ammunitions, weapon systems, and auxiliary equipment. The website reflects a professional business presence with consistent branding and good content relevance, though it lacks some advanced features such as detailed contact information and comprehensive privacy compliance mechanisms. Technically, the website is built on WordPress using the Divi theme and incorporates SEO tools like Rank Math. However, the site suffers from slow load times and basic mobile optimization. The hosting provider is hosttech.at, and the DNS setup is standard without advanced security features like DNSSEC or CAA records. From a security perspective, the website has critical shortcomings including the absence of a valid SSL certificate, lack of HTTPS support, and missing security headers. These issues significantly reduce the security posture and expose the site to potential risks. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No incident response or vulnerability disclosure information is available, which may impact trust and security readiness. Overall, the website is functional and presents the business adequately but requires urgent improvements in security and privacy compliance to enhance trustworthiness and protect user data. Strategic recommendations include implementing HTTPS, enabling security headers, and establishing clear privacy and incident response policies.

I

ISG

isg-one.com

40

ISG is a global AI-centered technology research and IT advisory firm providing comprehensive sourcing, benchmarking, governance, and research services to enterprise clients. The company positions itself as a leader in AI-driven technology advisory, offering SaaS platforms to govern third-party relationships and benchmark IT landscapes. The website content is professionally designed, rich in relevant business information, and targets enterprises seeking operational excellence through technology. Technically, the site employs modern JavaScript frameworks and integrates multiple third-party services, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security posture. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Social media presence is strong, enhancing trust and engagement. However, the absence of direct contact emails or phone numbers limits immediate contact options.

G

Grassfish

grassfish.com

40

Grassfish is a mature and established digital in-store platform and consulting company headquartered in Sweden, with additional presence in Austria. The company offers a comprehensive suite of digital signage and customer experience solutions tailored for retail brands and stores, positioning itself as the leading digital in-store platform in Europe trusted by over 500 brands. Their business model combines a SaaS platform with strategic, technical, and operational consulting services, targeting brands seeking to enhance their physical retail environments with digital innovation. Technically, the website is built on WordPress, leveraging modern web technologies and CDNs for content delivery, but currently suffers from critical SSL/TLS misconfigurations that undermine secure communications. The security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, posing significant risks to data confidentiality and user trust. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies aligned with GDPR requirements. Overall, while the business and content quality are excellent, the critical security gaps notably reduce the website's trustworthiness and require urgent remediation. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security headers and session management to safeguard user data and maintain compliance.

W

WunderLand Group

wunderlandgroup.com

37

WunderLand Group is a mature, medium-sized staffing solutions firm specializing in digital, creative, and marketing workforce services. The company offers a broad range of expertise including UX design, content editing, front-end development, and project management. Their market position is supported by strong client and consultant testimonials and industry awards such as the Best of Staffing®. Technically, the website is built on WordPress with Elementor and uses a variety of modern JavaScript libraries and marketing tools, hosted on WP Engine with Cloudflare CDN. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and undermining trust. Privacy compliance is partially addressed with a cookie consent mechanism, but GDPR compliance is not clearly demonstrated. Overall, the business credibility is solid, but the security weaknesses require urgent remediation.

C

CRIF Österreich

crif.at

40

CRIF Österreich operates as a leading provider of credit and risk management solutions, serving both businesses and private individuals primarily in Austria but also internationally. The company offers a broad portfolio including creditworthiness assessments, compliance, ESG risk management, identity management, and marketing services. The website reflects a mature enterprise with consistent branding and comprehensive content tailored to its target audience. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Swiper.js, alongside Matomo analytics and Usercentrics for consent management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are well implemented, indicating good GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements.

C

CP BAP

bankseminar.eu

35

CP BAP is a consulting company specializing in financial services and related sectors, offering tailored consulting, IT solutions, and blended learning services. The company positions itself as a trusted partner with a focus on sustainable success and regulatory compliance. The website is professionally designed with good content quality and SEO optimization, targeting financial institutions such as banks and IT service providers. Technically, the site is built on WordPress with Elementor and uses various plugins for search and cookie management. However, a critical security gap is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and enhance trust.

W

Weitzer Parkett Vertriebs GmbH

weitzer-parkett.com

40

Weitzer Parkett Vertriebs GmbH is a well-established Austrian family-owned manufacturer and distributor of parquet flooring and wooden stairs, with a history dating back to 1831. The company holds a leading market position in Austria and is recognized as one of the top parquet manufacturers in Europe. Their product portfolio includes innovative parquet solutions such as Pflegefrei-Parkett, Gesund-Parkett, and Flüster-Parkett, emphasizing sustainability and ecological responsibility. The website reflects a mature digital presence with comprehensive product information, multi-language support, and strong branding consistency. Technically, the website is built on WordPress with WooCommerce, utilizing modern libraries and plugins such as jQuery, Slick Slider, and Borlabs Cookie for cookie management. It is hosted behind Cloudflare, providing CDN and security services. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, impacting user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with explicit consent mechanisms. From a security perspective, while the site benefits from Cloudflare's protection and uses reCAPTCHA on forms, the lack of HTTPS and modern TLS protocols, as well as missing security headers like HSTS, reduce its security posture. No explicit security policy or incident response information is found, which could be improved to enhance transparency and readiness. Overall, the website is professional, content-rich, and business-credible but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include implementing a valid SSL certificate, enabling HTTPS, and enhancing security headers and protocols.

7

7LYTIX GMBH

7lytix.com

40

7LYTIX GMBH is a mature Austrian AI software company specializing in Action Intelligence solutions that optimize business processes such as predictive maintenance, supply chain management, and intelligent personalization. Recently acquired by the KEBA Group, 7LYTIX targets medium to large enterprises in manufacturing, retail, logistics, finance, and media sectors. The website reflects a professional and consistent brand presence with clear business information and customer trust indicators. Technically, the site uses modern JavaScript libraries and frameworks like Bootstrap and jQuery, with analytics implemented via Google Analytics and Matomo. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Privacy and cookie policies are present but basic, and no explicit security or incident response policies are found on the site. Overall, the business credibility is strong, but the security configuration requires urgent improvement to protect user data and maintain trust.

F

Flowserve Corporation

flowserve.com

40

Flowserve Corporation is a global enterprise specializing in manufacturing and servicing industrial flow control products such as pumps, valves, seals, and actuators. The company serves critical industries including energy, chemicals, water management, and oil & gas, positioning itself as a market leader with a comprehensive product portfolio and strong brand presence. The website reflects a mature digital infrastructure built on Drupal 10, with modern front-end technologies and multi-language support, indicating a high level of digital maturity and user experience focus. Security posture is mixed; while security headers and policies are well implemented, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, which poses a significant risk to secure communications. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website is professional, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to improve security and user trust.

W

Webconomy internet commerce GmbH

webconomy.com

24

Webconomy internet commerce GmbH operates a B2B-focused digital marketing agency website offering services such as growth boosting, SEO, Google Ads, mentoring, and performance marketing. The company targets B2B clients seeking to accelerate their digital growth and improve marketing performance. The website is built on WordPress with WooCommerce and several marketing and SEO plugins, indicating a moderate level of digital maturity. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. No advanced security headers or incident response policies are evident, and cookie consent mechanisms are missing despite the use of tracking and analytics tools. The domain is mature and consistent with the business claims, registered since 1998 without privacy protection, but domain protection locks are not enabled, posing a moderate risk. Overall, the website presents good content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

D

Danube Shipping Management Service GmbH

dsms.at

23

Danube Shipping Management Service GmbH is a medium-sized logistics and shipping management company based in Vienna, Austria, established in 1991. The company ranks among the top 50 logistics providers in Austria and offers key services including transport, agency, and port management. Their business model focuses on providing comprehensive logistics solutions to industrial clients such as Voestalpine and HBIS. The website reflects a professional business presence with clear branding and relevant content targeted at business customers in the transportation sector. Technically, the website is built on WordPress and uses common web technologies such as jQuery, Google Analytics, and Yoast SEO for optimization. However, the site suffers from slow load times and lacks modern security configurations. The absence of a valid SSL certificate and HTTPS support is a critical vulnerability, exposing users to potential data interception risks. The site also lacks cookie consent mechanisms and comprehensive privacy compliance features, which may pose regulatory risks under GDPR. From a security perspective, the website has significant weaknesses including no HTTPS, no security headers, and no incident response or vulnerability disclosure information. While the company holds recognized certifications such as ISO 9001:2015 and FIATA, the digital security posture is weak and requires urgent improvements to protect business and customer data. Overall, the website demonstrates moderate business credibility and content quality but is hindered by poor security practices and compliance gaps. Strategic recommendations include immediate SSL implementation, enhanced privacy compliance, and adoption of security best practices to improve trust and reduce risk.

A

ANGER MACHINING GmbH

anger-machining.com

21

ANGER MACHINING GmbH is a medium-sized manufacturing company specializing in turnkey machining solutions for the automotive industry, focusing on battery trays, profiles, and structural components. The company has a mature online presence with a domain registered since 2007 and holds recognized certifications such as TÜV Süd. Their website is multilingual and professionally designed, targeting B2B clients in automotive manufacturing. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and cookie compliance. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site provides good business credibility and content quality but requires urgent security improvements.

W

Weingut Michael Schroth

weingut-schroth.de

34

Weingut Michael Schroth is a small regional winery located in Grünstadt-Asselheim, Germany, specializing in a variety of wines including Winzersekt, Chardonnay, and Riesling. The website serves primarily as a digital presence showcasing the winery's offerings and regional identity. The business model focuses on wine production and sales targeted at wine consumers interested in the Pfalz region's specialties. Technically, the website uses basic HTML, CSS, JavaScript, and Adobe Typekit fonts, with jQuery for scripting. Hosting appears to be provided by Ionos, but the site suffers from slow load times and minimal mobile optimization. Security posture is weak, with no SSL/TLS certificate, no HTTPS, and absence of security headers or DNS security features. Privacy and compliance policies are missing, and no contact information is provided on the landing page, limiting user trust and regulatory compliance. Overall, the site is functional but lacks modern security and privacy standards, which poses risks to visitors and the business's credibility.

L

Lakeside Labs GmbH

lakeside-labs.com

35

Lakeside Labs GmbH operates as a research and innovation hub specializing in self-organizing networked systems. The organization targets researchers, technology innovators, and academic-industry partners, offering research projects, publications, and collaborative partnerships. The website reflects a medium-sized technology entity based in Austria with a professional online presence and consistent branding. Technically, the site is built on WordPress with common plugins and libraries, but suffers from slow performance and basic mobile optimization. Security posture is weak due to the absence of a valid SSL certificate and missing DNS records, which undermines trust and exposes the site to potential risks. Privacy compliance is minimal, lacking cookie consent and comprehensive GDPR indicators. Overall, the site is functional but requires significant improvements in security and compliance to enhance trustworthiness and protect user data.

C

Christof Group

christof-group.at

26

Christof Group is a large, family-owned industrial group specializing in critical process equipment manufacturing and plant engineering services, operating across Austria, Germany, and Slovenia. The company is positioned as a world leader in its sector with a strong portfolio of subsidiaries and a history of over 150 years in the industry. The website reflects a professional B2B business model targeting industrial clients in energy, petrochemical, and pharmaceutical sectors. Technically, the site is built on WordPress with modern SEO and multilingual capabilities but lacks HTTPS, which is a significant security shortfall. The security posture is weak due to the absence of SSL/TLS encryption and limited security headers, exposing the site to potential risks. Privacy compliance is addressed with a cookie consent mechanism and privacy policy, but incident response and security policies are missing. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

S

SPAR International

spar-international.com

32

SPAR International is a well-established global voluntary food retail group founded in 1932, operating over 13,900 stores across 48 countries. The business model focuses on licensed wholesalers and retailers working in partnership to deliver diverse store formats and retail solutions. The website reflects a mature digital presence with comprehensive content, clear navigation, and a focus on partner engagement and responsible retailing. Technically, the site is built on WordPress with common plugins and libraries, but suffers from significant security shortcomings including lack of a valid SSL certificate and DNS configuration issues. Privacy compliance is well addressed through Cookiebot consent management and a comprehensive privacy policy. However, the absence of HTTPS and security headers poses risks to user data and trust. Overall, the site is professional and content-rich but requires urgent security improvements to align with best practices and user expectations.

M

MCR

morse.com

40

MCR is a well-established and large hotel management and ownership company, recognized as the third largest hotel owner-operator in the United States. The company operates a diverse portfolio of hotels across multiple states and brands, with a strong reputation supported by numerous industry awards and recognitions. The website reflects a mature business with a professional online presence, targeting investors, partners, and hospitality professionals. Technically, the website is built on WordPress with a modern tech stack including jQuery and Google Maps integration, but suffers from a lack of HTTPS due to an invalid or missing SSL certificate, which significantly impacts its security posture. Security headers are well implemented, but the absence of SSL and modern TLS protocols is a critical vulnerability. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but the lack of a cookie consent mechanism is a gap. Overall, the website is content-rich and professionally designed but requires urgent security improvements to protect user data and enhance trust.

A

Algonquin Orthodontics

algonquinorthodontics.com

36

Algonquin Orthodontics is a specialized orthodontic practice located in Lake in the Hills, Illinois, led by Dr. Amer Shammaa. The practice offers a range of orthodontic services including metal braces, clear braces, and Invisalign® clear aligners, targeting patients of all ages in the local McHenry County area. The website presents a professional and user-friendly interface with clear navigation and relevant content aimed at educating and attracting patients. Technically, the site is built on a Symfony PHP framework hosted on AWS infrastructure, utilizing modern web fonts and iconography, and integrates Google Tag Manager for analytics. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Security headers are minimal, and privacy compliance is poor due to the absence of privacy and cookie policies. The WHOIS data aligns with the business claims, indicating a legitimate small healthcare business. Overall, while the business and content quality are good, the security posture and privacy compliance require urgent improvements to enhance trust and protect user data.

L

LVA GmbH

lva-gmbh.at

37

LVA GmbH is a well-established Austrian company specializing in food safety, quality control, certification, and training services primarily targeting the food, cosmetics, pharmaceutical, and supplement industries. Founded in 1926, it holds a strong market position as a leading competence center in the Central and Eastern European region, serving clients in over 80 countries. The company offers a comprehensive portfolio including laboratory analyses, expert assessments, inspections, research, and educational seminars. Technically, the website is built on WordPress with modern SEO and cookie consent tools, but lacks a valid SSL certificate, which impacts security and user trust. The security posture is basic with no HTTPS, no HSTS, and missing advanced security headers, exposing the site to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to align with best practices.

D

DIG GmbH

dig.at

40

DIG GmbH is a medium-sized Austrian company specializing in digital spend management solutions across Source2Pay, Finance, and Supply Chain sectors. As part of the Proalpha Group, DIG offers ERP-independent software and consulting services targeting enterprises seeking to optimize procurement and financial processes. The website demonstrates a professional and consistent brand presence with comprehensive content, customer testimonials, and references from reputable clients. Technically, the site is built on the HubSpot CMS platform, utilizing modern marketing and analytics tools such as HubSpot Analytics, Google Tag Manager, and Cookiebot for consent management. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Performance is also suboptimal with a high load time and resource count. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is credible and well-positioned in its market but requires urgent security improvements.

I

ILF Consulting Engineers

ilf.com

23

ILF Consulting Engineers is a large, privately owned international engineering and consulting firm specializing in infrastructure, energy, water, and environmental projects. With over 3,000 employees and a global presence spanning 45+ offices across six continents, ILF positions itself as a leader in sustainable engineering solutions. The website reflects a professional and comprehensive digital presence, offering detailed information about their services, business areas, and corporate values. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, providing a good user experience and mobile optimization. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. Security headers are present, but the lack of TLS protocols and HSTS reduces overall security. Privacy compliance is addressed with a comprehensive privacy and cookie policy, though no explicit consent mechanism is detected. Business credibility is strong with clear company information and trust indicators such as ISO 27001 certification and Great Place to Work recognition. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

A

Amomed Pharma GmbH

amomed.com

25

Amomed Pharma GmbH is a medium-sized healthcare company specializing in pharmaceutical products for intensive care, emergency medicine, anesthesia, psychiatry, and neurology. The company operates as a member of the AOP Health Group, providing critical care medications aimed at reducing mortality and improving quality of life. The website targets healthcare professionals and institutions, offering product information and therapy solutions. Technically, the website is built on WordPress with a PHP backend and uses common web technologies such as jQuery, Bootstrap, and Font Awesome. However, the site lacks a valid SSL certificate, resulting in no proper HTTPS support, which is a significant security concern. Security headers are partially implemented, but critical configurations like TLS protocols and cipher suites are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is not readily visible on the homepage, limiting user trust and engagement. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security and privacy to meet modern standards.

D

Donauchem GmbH

donauchem.at

36

Donauchem GmbH is a medium-sized chemical distributor operating primarily in Austria and Central/Eastern Europe. The company specializes in the distribution of chemical raw materials and offers tailored product development through its own research and development department. It serves diverse industries including food, pharma, cosmetics, agriculture, and manufacturing. The website reflects a professional business with clear branding and a comprehensive product portfolio. Technically, the site is built on ASP.NET Web Forms with Kentico CMS and hosted on Microsoft IIS. However, the absence of a valid SSL certificate and lack of HTTPS significantly undermine the security posture. Privacy compliance is well addressed with a privacy policy and cookie consent mechanism in place. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

K

Kienbaum Consultants Austria GmbH

kienbaum.at

22

Kienbaum Consultants Austria GmbH is a well-established HR and management consulting firm with a strong presence in Austria since 1958 and origins dating back to 1945. The company offers a comprehensive range of services including assessment, executive search, compensation management, and organizational transformation. Their Vienna office serves as an international hub for compensation data and global studies. Technically, the website is built on WordPress using the Divi theme, with modern tools like Matomo analytics and Cookiebot for privacy compliance. However, the absence of a valid SSL certificate and HTTPS significantly weakens the security posture, exposing the site to risks and reducing trust. Despite this, the site demonstrates good privacy compliance and business credibility with clear contact information and certifications. Strategic improvements in SSL/TLS implementation and security headers are recommended to enhance overall security and user trust.

L

Leftshift One

leftshift.one

23

Leftshift One is an established Austrian technology company specializing in generative AI solutions, particularly their MyGPT platform which leverages Retrieval-Augmented Generation (RAG) to provide secure, scalable, and customizable AI-powered knowledge management for enterprises and SMEs. The company positions itself as a technology leader with over 8 years of experience and 200 successful AI projects, emphasizing data privacy and compliance with GDPR. Technically, the website is built on WordPress with modern frameworks like Elementor and optimized with WP Rocket, but lacks a valid SSL certificate and proper TLS configuration, which are critical security gaps. The security posture is moderate with some vulnerabilities such as a subdomain takeover risk. Overall, the website is professional, content-rich, and compliant with privacy regulations, but requires urgent improvements in SSL/TLS security to enhance trust and protect user data.

G

GS1 Austria

gs1.at

40

GS1 Austria is a well-established non-profit organization serving as the official barcode and GTIN issuing authority in Austria. It provides a comprehensive suite of GS1 standards and services to businesses across multiple sectors including retail, manufacturing, transportation, and government. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding supported by major corporate clients. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates Google analytics and marketing tools, but suffers from a critical lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Contact information is primarily via contact forms, with no direct emails or phone numbers publicly listed. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to improve security and user trust.

Summit Printing LLC operates as an established online commercial printing company founded in 2010, offering a wide range of printing services including banners, brochures, business cards, mailing services, and graphic design. The company targets businesses and graphic designers across the United States and Canada, leveraging multiple plant locations to provide fast production and free shipping. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses PHP 7.0.33, jQuery, Modernizr, and is hosted behind Cloudflare with LiteSpeed server technology. However, the absence of a valid SSL certificate and HTTPS implementation is a significant security shortfall. Security headers such as HSTS, X-Frame-Options, and X-Content-Type-Options are present, but the lack of TLS protocols and certificate transparency compliance reduces the overall security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site scores moderately on content quality and business credibility but is penalized heavily for security deficiencies.

M

MWS

mws.eu

21

MWS is an international market leader specializing in aluminum casting technologies including sand casting, permanent mold casting, and low-pressure casting. The company offers comprehensive services from development and prototyping to series production and mechanical processing, targeting industrial sectors such as automotive, electromobility, and transportation. The website is built on Concrete CMS and employs standard web technologies with Google Analytics for user tracking. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are well implemented and GDPR compliant, but no explicit terms of service or security policies are present. Overall, the site presents professional content and clear navigation but requires urgent security improvements.

E

ekey biometric systems GmbH

ekey.net

35

ekey biometric systems GmbH is a medium-sized Austrian technology company founded in 2002, specializing in fingerprint-based access control and smart home integration solutions. The company holds a leading market position in Europe for fingerprint access systems, offering a range of products including door-integrated fingerprint readers, wall-mounted units, and retrofit kits. Their business model focuses on manufacturing, sales, and providing support and training services. The website reflects a mature digital presence with multilingual support and comprehensive product information targeting homeowners, businesses, and smart home users. Technically, the site is built on WordPress with modern plugins and analytics tools, but suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Security headers are well configured, and privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

T

Tyco

tyco.com

40

Tyco, a subsidiary of Johnson Controls, is a mature enterprise-level provider of integrated security products and solutions, including access control, video surveillance, cloud services, and fire suppression. The company targets commercial and enterprise customers globally, leveraging a broad partner ecosystem and multiple subsidiary brands. The website demonstrates a professional design with good content quality and clear navigation, supported by modern technologies such as Sitecore CMS and Bootstrap. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses risks to secure communications. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the domain registration and WHOIS data confirm the legitimacy and maturity of the business. Strategic improvements in SSL and TLS configuration are recommended to enhance security and trust.