Security Directory

K

KIWI Norge AS

kiwi.no

36

KIWI Norge AS operates a large grocery retail chain in Norway with nearly 700 stores, targeting Norwegian consumers seeking affordable and convenient grocery shopping. The website provides rich content including store locators, customer magazines, and loyalty program information (KIWI PLUSS). Technically, the site is built on ASP.NET MVC with AngularJS and integrates multiple third-party services such as Google Analytics and Piwik Pro for analytics and marketing. The site is hosted on Microsoft Azure and uses modern web technologies but lacks a valid SSL certificate, resulting in insecure HTTP connections. Security headers like Content-Security-Policy are present but could be hardened further. Privacy and cookie policies are comprehensive and GDPR compliant, linked to the trusted trumf.no domain. Contact information is clearly provided with phone numbers and physical address, and social media presence is active. Overall, the site is professional and trustworthy but has a critical security gap due to missing HTTPS.

H

HYPO NOE Landesbank für Niederösterreich und Wien AG

hyponoe.at

38

HYPO NOE Landesbank für Niederösterreich und Wien AG is a well-established regional financial institution in Austria, offering a broad range of banking services including retail accounts, savings, investments, financing, and green banking products. The website targets private customers, young adults, companies, and public sector entities, emphasizing sustainability and digital banking solutions. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes cookie consent management and analytics integration. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS support, which is critical for a banking website. Despite this, the site maintains good privacy compliance and business credibility with clear contact information and certifications. Strategic improvements in SSL/TLS configuration and security headers are recommended to enhance trust and security.

C

CPB SOFTWARE AG

cpb-software.com

40

CPB SOFTWARE AG is a well-established full-service IT provider specializing in comprehensive software solutions and IT services, primarily targeting banking, finance, education, government, and industrial sectors. With over 25 years of experience and a customer base exceeding 550 active clients across Austria, Germany, and other countries, CPB positions itself as a trusted partner for digital transformation, core banking, compliance, and cloud services. The website reflects a mature business with clear market positioning and a broad portfolio of products and services. Technically, the site is built on WordPress with modern plugins and tools, though performance is moderate and SSL configuration is currently inadequate, posing security risks. Security headers are present but the lack of a valid SSL certificate and HTTPS enforcement significantly lowers the security posture. Privacy compliance is mostly addressed with a comprehensive privacy policy, but cookie consent mechanisms are missing. Overall, CPB demonstrates strong business credibility and professional online presence but should urgently address SSL and security improvements to enhance trust and compliance.

W

wb-bc Business Consulting und Beteiligungs GmbH

wb-bc.at

37

wb-bc Business Consulting und Beteiligungs GmbH is a small Austrian consulting firm specializing in digital and online business consulting services. Their offerings include business founding, digital transformation, performance improvement, financing, business model innovation, and succession planning. The company emphasizes practical, tailored solutions delivered through digital channels such as phone, Skype, MS Teams, and Zoom, with modular booking and payment options available online. The website is built on WordPress using Elementor and integrates various marketing and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. While the site is content-rich and professionally designed with good navigation and mobile optimization, it lacks a valid SSL certificate, serving content over HTTP only, which is a significant security concern. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Contact information is clearly presented, and the company maintains an active social media presence. Overall, the business appears legitimate and trustworthy, but the lack of HTTPS significantly impacts the security posture.

L

List SpA

list-group.com

40

List SpA is a medium-sized Italian company specializing in advanced software solutions for banking and finance, including trading, compliance, risk management, and treasury management. As part of the ION Group, it holds a strong market position with a professional digital presence targeting financial institutions and trading venues. The website is well-structured, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital infrastructure based on WordPress and Elementor. However, a critical security gap exists due to the absence of a valid SSL certificate, exposing users to potential risks and undermining trust. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the company demonstrates strong business credibility but must urgently address its SSL/TLS configuration to improve security posture and user trust.

Trinergy International, led by Dr. Roman Braun, is a prominent European educational institution specializing in NLP and coaching training. The website presents a comprehensive portfolio of NLP seminars, coaching certifications, and diploma programs, targeting individuals and professionals seeking personal and career development. The company holds recognized certifications from international and Austrian bodies, reinforcing its market leadership. Technically, the site is built on WordPress with modern plugins and frameworks, offering good SEO and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, exposing users to potential risks. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

C

CREATE

create.at

25

CREATE is a medium-sized Austrian eLearning company specializing in interactive and immersive digital learning solutions for businesses, academies, and trainers. The company offers a comprehensive range of services including consulting, content creation, learning management systems, and XR learning experiences. Positioned as a multiple award-winning full-service eLearning agency, CREATE targets organizations seeking innovative and tailored digital education solutions. The website reflects a professional and consistent brand image with excellent content quality and user experience.

S

SimTech GmbH

simtechnology.com

31

SimTech GmbH is a specialized software company providing advanced simulation technology primarily for energy and chemical engineering sectors. With over 30 years of experience, the company offers simulation software (IPSEpro), model libraries, consulting, and training services targeted at plant manufacturers, consultants, and R&D organizations. The website reflects a professional and consistent brand with clear business information and reputable client references. Technically, the site is built on Joomla CMS with modern frameworks but lacks HTTPS, which is a critical security gap. Security headers are present but insufficient without SSL/TLS. Privacy compliance is good with a clear privacy policy, though no cookie consent mechanism is implemented. Overall, the site is content-rich and trustworthy but requires urgent security improvements to protect user data and enhance trust.

A

Adapt Centre

adaptcentre.ie

37

The ADAPT Centre is a prominent Irish research centre specializing in AI-driven digital content technology, collaborating with leading academic institutions such as Trinity College Dublin, Dublin City University, University College Dublin, and Dublin Institute of Technology. It serves a diverse audience including industry partners, researchers, and the public, focusing on advancing AI research, fostering innovation, and supporting enterprise collaboration. The centre is well-positioned in the technology research sector with strong government funding and industry partnerships. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced functionality such as Gravity Forms and FacetWP. Hosting is managed by WP Engine with Cloudflare CDN providing content delivery and some security features. While the site is mobile-optimized and SEO-friendly, performance data is missing, and some accessibility features are basic. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS properly, which is a critical vulnerability. Other security headers and best practices are partially implemented, but the absence of HTTPS and HSTS significantly lowers the security posture. No explicit security or incident response policies are found on the site, and cookie consent mechanisms are missing, indicating partial privacy compliance. Overall, the website is professional and trustworthy in terms of business credibility and content quality but requires urgent improvements in security infrastructure to protect user data and comply with best practices. Strategic recommendations include implementing valid SSL/TLS certificates, enabling modern TLS protocols, and adding privacy and security policies to enhance compliance and user trust.

D

DAXNER GmbH

daxner.at

40

DAXNER GmbH is a medium-sized Austrian manufacturing company specializing in bulk material technology and engineering solutions for various industrial sectors including food, chemical, and non-food industries. The company has a strong market position as an internationally leading provider with a comprehensive portfolio of products and services such as engineering, production, assembly, and control technology. Their website reflects a professional and well-structured digital presence with excellent content quality and SEO optimization. Technically, the site is built on WordPress with modern plugins and scripts, but lacks a valid SSL certificate and proper HTTPS configuration, which is a significant security concern. Security headers are well implemented, but the absence of TLS protocols and session resumption reduces the overall security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information and social media presence enhance business credibility. Overall, the website is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and improve trust.

P

promitto organisationsberatung gmbh

promitto.at

26

promitto organisationsberatung gmbh is a small Austrian consulting firm specializing in organizational development, leadership coaching, and change management. Their website presents a professional image with clear descriptions of their services, targeting organizations and leadership teams seeking vitality and transformation support. The technical infrastructure is based on WordPress with common plugins like Yoast SEO and Contact Form 7, but lacks a valid SSL certificate, which is a significant security concern. The site includes GDPR-compliant privacy and cookie policies with consent mechanisms, but no terms of service or explicit security policies are found. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. Overall, the website is functional and informative but requires urgent security improvements to protect user data and improve trust.

NETCONOMY GmbH is a mature technology consulting and digital platform services company founded in 2000 and based in Austria. The company focuses on helping businesses transform digitally by providing services in digital strategy, consulting and innovation, platform building, and operations excellence. Their market position is supported by long-term global customer relationships and partnerships with leading technology providers such as SAP, Google Cloud, and Microsoft Azure. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, GDPR compliance plugins, and marketing tools like HubSpot and Facebook Pixel. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security shortfall. Security headers are minimal, and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

P

planetsoftware

cad.at

28

planetsoftware is a well-established Austrian company specializing in 3D CAD software solutions, primarily focusing on SOLIDWORKS and 3DEXPERIENCE platforms. As a partner of the Bechtle Group, they provide comprehensive product lifecycle management software and services including design, data management, simulation, and manufacturing solutions. Their website reflects a mature digital presence with detailed product offerings, customer references, and educational resources targeting industrial and technical sectors. Technically, the site is built on WordPress with modern plugins and tools, but lacks a valid SSL certificate, which is a significant security concern. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. Overall, the business demonstrates strong market positioning and professional online representation but must urgently address its lack of HTTPS to improve security posture and trust.

SGL Carbon is a global technology leader specializing in carbon-based materials and solutions, serving key industries such as sustainable mobility, energy, semiconductor technology, and chemical manufacturing. The company operates worldwide with a strong presence in Europe, North America, and Asia, employing approximately 4,700 people and generating significant revenue. The website reflects a mature and professional business with comprehensive content, clear branding, and a focus on sustainability and innovation. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools, but suffers from a critical lack of HTTPS and valid SSL certificates, severely impacting security posture. Privacy compliance is well addressed with cookie consent mechanisms and detailed policies. Overall, the site is trustworthy and professional but requires urgent security improvements to protect users and data.

B

bluesource - mobile solutions gmbh

bluesource.at

23

bluesource - mobile solutions gmbh is a well-established Austrian company specializing in mobile app development and digital transformation services primarily for banking, retail, and industrial sectors. With over 20 years of experience, the company offers a comprehensive suite of services including app development, strategy and consulting, UX/UI design, accessibility, and data/AI solutions. Their market position is strong, supported by a portfolio of notable clients and an ISO 27001 certification that underscores their commitment to security and quality. The website is professionally designed, content-rich, and well-structured, targeting B2B clients seeking digital innovation. Technically, the site is built on WordPress with modern frontend libraries and integrates marketing tools such as HubSpot forms. However, the absence of a valid SSL certificate and HTTPS support is a critical security vulnerability that undermines the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Social media presence and trust indicators further enhance business credibility.

S

Symvaro GmbH

symvaro.com

22

Symvaro GmbH is a small Austrian company specializing in digital solutions for water and waste management, targeting municipalities and associations. Their key offerings include WATERLOO, a water meter data management system, and Die Müll App, a smart waste management service. The company positions itself as a niche provider focused on efficiency, simplicity, and data protection. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet, but lacks a valid SSL certificate and proper DNS configuration, which negatively impacts security and trust. The security posture is weak due to missing HTTPS and DNS records, although some security headers like HSTS are present. Privacy compliance is partially met with a comprehensive privacy policy hosted externally but lacks cookie consent mechanisms. Overall, the website is functional and professionally designed but requires significant improvements in security and domain management to enhance trust and compliance.

S

Stryker

stryker.com

40

Stryker is a large multinational healthcare company specializing in medical devices and healthcare solutions, serving a global audience including healthcare professionals and patients. The website serves as an international homepage with localized country sites, reflecting a broad global presence. Technically, the site is built on Adobe Experience Manager and hosted via AWS CloudFront, utilizing various marketing and analytics technologies such as Adobe DTM, Google Analytics, and Marketo. However, the website lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Security headers are implemented but cannot compensate for the absence of HTTPS. Privacy and cookie policies are not found, and no explicit contact information is provided on the homepage, which impacts privacy compliance and user trust. Overall, the site demonstrates moderate business credibility but requires urgent improvements in security and privacy compliance to meet modern standards.

S

Schäfer Shop Deutschland

schaefer-shop.de

36

Schäfer Shop Deutschland is a well-established e-commerce retailer specializing in office furniture, office supplies, and warehouse equipment, serving primarily business customers across Europe. With over 50 years of experience, the company offers a comprehensive product range exceeding 85,000 items, emphasizing quality, service, and fast delivery. The website reflects a mature digital presence with professional design, clear navigation, and multi-language support for various European markets. Technically, the site employs modern marketing and analytics tools including Usercentrics for consent management, Google Tag Manager, and Adobe Experience Cloud, ensuring compliance with privacy regulations and effective user tracking. However, a critical security concern is the absence of a valid SSL certificate and lack of HTTPS support, which significantly undermines the site's security posture and user trust. Despite this, the site maintains strong trust indicators such as ISO certifications, Trusted Shops membership, and sustainability awards. Overall, while the business and technical maturity are high, immediate remediation of SSL/TLS issues is essential to secure the platform and protect customer data.

I

ICW Group

icwgroup.com

36

ICW Group is a national commercial insurance provider specializing in workers' compensation, catastrophe insurance, and assumed reinsurance coverage. The company targets businesses seeking comprehensive insurance solutions and risk management services. Their website reflects a mature digital presence built on WordPress with Elementor, featuring well-structured content, clear navigation, and integration with multiple marketing and analytics tools such as Hotjar, Pardot, and Google Tag Manager. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. While cookie consent mechanisms and privacy policies are in place, explicit security policies and incident response information are absent. Overall, the website demonstrates good business credibility and user experience but requires urgent improvements in security to protect user data and enhance trust.

N

NNZ United States

nnzusa.com

40

NNZ United States is a well-established multinational packaging company with a history dating back to 1922. The company specializes in providing customized packaging solutions primarily for the fresh produce and industrial sectors. It operates through a broad network of subsidiaries across Europe, North America, and Africa, positioning itself as a market leader with a strong emphasis on sustainability and innovation. The website reflects a professional and comprehensive digital presence, offering detailed product portfolios, sustainability initiatives, and corporate information. Technically, the website is built on WordPress with modern tools such as Gravity Forms and Google Tag Manager integrated for analytics and marketing. While the site is well-structured, mobile-optimized, and SEO-friendly, it suffers from a critical security shortfall: the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Security headers are properly configured, but the lack of encryption undermines user trust and data protection. The company demonstrates good privacy compliance with clear privacy and cookie policies, including consent mechanisms. Contact information is readily available, including phone numbers, physical address, and contact forms, enhancing business credibility. However, no explicit security policy or incident response information is found on the site. Overall, NNZ USA presents a strong business and digital profile but must urgently address its SSL/TLS configuration to improve security and trustworthiness. Strategic improvements in this area will enhance user confidence and align the website with modern security standards.

Josef Thurner Holz GmbH operates as a medium-sized wood trading company based in Austria, specializing in both international and retail wood commerce, including wood mediation services. The company is positioned as the largest wood market in the Carinthia and East Tyrol regions, offering a broad range of wood products such as construction timber, laminated wood, biofuels, and wood protection products. Their business model combines wholesale, retail, and online sales channels, targeting both business clients and consumers interested in wood products. Technically, the website employs legacy technologies like jQuery and custom PHP-based CMS, hosted likely by A1.net, but suffers from slow performance and basic mobile optimization. Critically, the site lacks a valid SSL certificate and HTTPS support, which severely impacts its security posture. While privacy compliance is addressed with a cookie consent banner and a privacy policy, the absence of a security policy or incident response information indicates gaps in security maturity. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

P

Pointy Hills Media Ltd

fall-line.co.uk

35

Fall Line Skiing is a specialized UK-based media company operating a ski magazine and website focused on ski gear reviews, resort guides, and skiing stories. The company targets ski enthusiasts and offers subscriptions, single issue sales, advertising, and an e-commerce shop. The website is built on WordPress with WooCommerce and uses modern marketing and analytics tools, including Google Analytics, Tag Manager, and Microsoft Clarity. The content quality and branding are excellent, with clear navigation and professional design. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Security headers are present but insufficient without HTTPS. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms implemented. Contact information is clearly provided, including a UK physical address and phone number. Overall, the website is trustworthy but requires urgent security improvements to protect user data and enhance trust.

B

Baumit.com

baumit.com

36

Baumit.com is an established international company specializing in building materials, facade insulation, and innovative construction technologies such as 3D concrete printing. The company emphasizes sustainability and healthy living environments, supported by research initiatives like the VIVA Research Park. The website presents a professional and consistent brand image with good content quality and navigation. Technically, the site uses a variety of modern JavaScript libraries and custom CMS solutions, but the main domain lacks HTTPS, which is a significant security concern. The subdomain int.baumit.com uses HTTPS properly. Security posture is weak due to missing SSL on the main domain and lack of security headers. Privacy compliance is well addressed with clear cookie consent and privacy policies. Business credibility is supported by consistent WHOIS data and structured organization information. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance trust.

E

Econsult

econsult.at

25

Econsult is a small Austrian logistics consulting firm specializing in production logistics, supply chain design, transport economics, system and warehouse planning, process management, and public projects. The website targets businesses seeking expert logistics consulting services and presents a professional, content-rich presence primarily in German with English alternatives. The technical infrastructure is based on Joomla CMS with PHP 8 and hosted by Austria Web Hosting. However, the site lacks HTTPS, exposing visitors to significant security risks. Basic security headers are present, but critical SSL/TLS configurations are missing. Privacy compliance is minimal with no cookie consent mechanism despite Google Analytics tracking. Contact information is limited to an obfuscated email address, with no phone or physical address visible. Social media presence includes LinkedIn and Xing profiles.

Raiffeisen-Landesbank Tirol AG is a regional financial institution serving private and corporate clients primarily in Tirol, Austria. The website presents a comprehensive portfolio of banking services including private banking, corporate banking, online banking, loans, savings, insurance, and real estate services. The company positions itself as a trusted regional partner with a strong emphasis on sustainability and customer service. Technically, the website is built on Adobe Experience Manager with modern JavaScript frameworks such as Angular and includes advanced tracking and consent management tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical issue for a financial institution. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

M

MBI Institut für Marketingberatung

mbi.eu

23

MBI Institut für Marketingberatung is a healthcare-focused private broker based in Austria, specializing in increasing accessibility to licensed medical products for vulnerable populations. With over 30 years of experience, the company partners with globally recognized vaccine manufacturers and genetic testing providers to supply governments and NGOs. The website is built on WordPress using Elementor and related plugins, hosted on a LiteSpeed server. While the site is professionally designed and provides clear contact information and GDPR-compliant cookie consent, it lacks a valid SSL certificate and modern TLS support, which is a critical security concern. No explicit security or incident response policies are found, and no vulnerability disclosure mechanisms are present. Overall, the business appears credible and established, but the technical security posture requires urgent improvement.

E

EC2U

ec2u.eu

40

EC2U is a European educational alliance focused on collaboration among city universities, providing joint academic programs, mobility opportunities, and research initiatives. The website targets students, staff, researchers, and citizens, offering multilingual content and resources. Technically, the site is built on WordPress with a modern tech stack including jQuery and various plugins, hosted via Gandi. While the site has good design, accessibility, and SEO practices, it critically lacks a valid SSL certificate, exposing users to security risks. Security headers are present but their effectiveness is diminished without HTTPS. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Overall, the domain registration is consistent and trustworthy, with active social media presence enhancing credibility.

A

ATMOsphere

atmo.org

56

ATMOsphere is a globally recognized event organizer specializing in conferences and networking events focused on natural refrigerants and clean cooling technologies. Established in 2009 and managed by the parent company shecco, ATMOsphere serves as a market accelerator by bringing together key industry stakeholders including policy makers, manufacturers, and end users. The website effectively communicates the business purpose, upcoming events, and team information, supported by multimedia testimonials and social media engagement. Technically, the website is built on WordPress with Elementor and uses modern plugins to enhance user experience and analytics. However, the absence of a valid SSL certificate and lack of a privacy policy represent significant security and compliance gaps. The cookie consent mechanism is implemented, but GDPR compliance cannot be fully confirmed due to missing privacy documentation. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect user data and build trust.

A

ATMOsphere

naturalrefrigerants.com

48

NaturalRefrigerants.com is a well-established industry portal published by ATMOsphere, focusing on natural refrigerant-based cooling and heating technologies. It serves as a global marketplace and news source, connecting buyers and providers worldwide. The website demonstrates a strong market position as a leading source of information since 2006, with a professional design and comprehensive content. Technically, the site is built on WordPress with Elementor and WooCommerce, leveraging modern web technologies but suffers from slow performance and lacks a valid SSL certificate, which impacts its security posture. The absence of HTTPS and security headers are critical vulnerabilities that need immediate attention. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is credible and trustworthy but requires significant security improvements to protect user data and enhance trust.

The British Council is a globally recognized UK-based non-profit organization specializing in cultural relations and educational opportunities. With a presence in over 100 countries and a history spanning 90 years, it offers a broad range of services including English language learning, exams such as IELTS, study and work abroad programs, and arts and cultural initiatives. The website reflects a mature, professional digital presence with excellent content quality and clear navigation tailored to a diverse international audience.

A

AIM Group International

aimgroupinternational.com

35

AIM Group International is a medium-sized service provider specializing in event management, digital communication, and consultancy services primarily targeting companies and associations. The company offers a broad portfolio including conference management, virtual and hybrid events, healthcare meetings, digital marketing, and consultancy services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern libraries and plugins, hosted on Amazon AWS infrastructure. However, the website lacks a valid SSL certificate and does not support HTTPS, which significantly impacts its security posture. While cookie consent and privacy policies are implemented and GDPR compliant, the absence of HTTPS and security headers exposes the site to risks. Overall, the business appears legitimate and well-established with active social media presence and trust indicators such as an annual report and newsletter. Strategic improvements in security configuration are recommended to enhance trust and compliance.

G

Gottschligg

gottschligg.com

29

Gottschligg is a medium-sized manufacturing company based in Austria specializing in the development and delivery of customized and standard load carriers for industrial clients, particularly in the automotive and manufacturing sectors. The company offers a range of products including special load carriers, universal load carriers, plastic and textile carriers, wooden carriers, and repair services. Their website reflects a professional and consistent brand presence with clear contact information and compliance with GDPR and cookie consent regulations. Technically, the site is built on WordPress with Yoast SEO and jQuery, hosted on Google Cloud infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly weakens their security posture. Security headers are properly configured but cannot compensate for the lack of encryption. Overall, the site is accessible and well-structured but requires urgent security improvements to protect user data and enhance trust.

A

Austria Institut für Europa- und Sicherheitspolitik (AIES)

aies.at

26

The Austria Institut für Europa- und Sicherheitspolitik (AIES) is a well-established independent research institute based in Vienna, Austria, focused on European integration, security, defense, and foreign policy. Founded in 1996, it serves public stakeholders by providing expert analysis, organizing events, and publishing research. The website reflects a professional and content-rich platform targeting policymakers, academics, and the public interested in European and security policy. Technically, the site uses modern frontend technologies such as jQuery, Swiper.js, and Usercentrics for consent management, but suffers from a critical lack of valid SSL/TLS configuration, impacting its security posture. The site is mobile-optimized, accessible, and SEO-friendly, with strong social media integration and clear contact information. Security-wise, the absence of HTTPS and security headers is a significant vulnerability, though no active WAF or blocking mechanisms are detected. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Strategic improvements in SSL deployment and security headers are recommended to enhance trust and compliance.

D

Distillery | Paranormal Agency

distillery.cc

20

Distillery | Paranormal Agency is a small creative agency based in Austria specializing in transformative branding, experiential marketing, media production, and communication design. The company positions itself as a niche player focusing on immersive and genuine cultural experiences. The website is built on WordPress with a modern tech stack including Yoast SEO and Contact Form 7, but lacks a valid SSL certificate, which is a critical security concern. The site implements cookie consent mechanisms indicating GDPR awareness but lacks explicit privacy policy and terms of service pages. Contact information including company emails and physical address is clearly presented, alongside active social media profiles. Overall, the website is professionally designed with good content quality and navigation but suffers from poor security posture due to missing HTTPS.

N

Ninefeb

ninefeb.com

37

Ninefeb is a European service provider specializing in technical documentation, eLearning, consulting, and personnel services. The company operates primarily in Austria with a subsidiary in the UK, targeting businesses requiring comprehensive technical communication support. The website presents a professional image with clear service offerings and client testimonials, positioning Ninefeb as a trusted partner in its niche. Technically, the site is built on WordPress using the Avada theme and Yoast SEO plugin, indicating a modern CMS approach but lacks HTTPS support, which is a significant security concern. The absence of a valid SSL certificate exposes users to potential data interception risks and undermines trust. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

H

Haberkorn GmbH

haberkorn.com

38

Haberkorn GmbH operates a multi-country B2B online shop specializing in industrial products and services, primarily serving Central and Eastern European markets. The company maintains a strong regional presence with subsidiaries and partner sites in Germany and neighboring countries. The website is professionally designed with good content relevance and user experience, supporting multiple languages and regional adaptations. However, the technical infrastructure shows critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and trustworthiness of the site. The site uses modern JavaScript libraries and tracking tools, including Google Tag Manager, Facebook Pixel, and Hotjar, with a comprehensive cookie consent mechanism indicating basic privacy compliance. Overall, while the business model and content quality are solid, the lack of HTTPS and security policies present significant risks that should be addressed promptly.

I

InfoMatrix Technologies Pvt. Ltd.

infomatrix.com

23

InfoMatrix Technologies Pvt. Ltd. is a small Indian IT services company specializing in web design, software development, ecommerce solutions, SEO, and hosting services primarily targeting clients in Noida and Delhi/NCR. The company has an established regional presence with repeat business and a focus on customer satisfaction. Technically, the website is built on an outdated Joomla 1.5 CMS platform hosted on Apache servers without HTTPS enabled, which exposes users to security risks. The site includes basic SEO and accessibility features but lacks modern performance optimizations and mobile responsiveness. Security posture is weak due to absence of SSL/TLS, missing security headers, and no published security or incident response policies. Privacy compliance is minimal with no cookie consent mechanism despite use of Google Analytics tracking. Overall, the website presents a basic professional front but requires significant improvements in security, privacy, and technical modernization to meet current standards.

U

unit-IT Dienstleistungs GmbH & Co KG

unit-it.at

20

unit-IT Dienstleistungs GmbH & Co KG is a medium-sized Austrian IT services company specializing in SAP solutions, IT operations, infrastructure, and mobile solutions. The company targets the Austrian mid-market and benefits from its international affiliation with the parent company Atos. Their website presents a professional image with clear service offerings, references, and certifications, positioning them as a trusted regional player in the technology sector. Technically, the website is built on WordPress with common plugins and frameworks, but suffers from a critical lack of HTTPS and modern TLS support, which significantly impacts its security posture. Privacy compliance is well managed with comprehensive privacy and cookie policies and a consent mechanism. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to protect user data and build trust.

J

Job-TransFair gemeinnützige GmbH

jobtransfair.at

27

Job-TransFair gemeinnützige GmbH is a Vienna-based non-profit organization dedicated to supporting disadvantaged individuals in the labor market by facilitating permanent employment opportunities. The organization collaborates with a large network of partner companies and receives financial support from the AMS Wien and the City of Vienna. Their website provides comprehensive information about their services, success stories, and job offers, targeting both job seekers and employers. The content is well-structured, professionally presented, and primarily in German. Technically, the site is built on the Contao CMS platform with modern frontend technologies like Bootstrap and jQuery, but suffers from a critical lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. Privacy compliance is strong, with Cookiebot implemented for consent management and clear privacy and cookie policies. The site also integrates Google Tag Manager for analytics and marketing purposes. Overall, the business is credible and transparent, with clear contact information and trust indicators such as certifications and partnerships.

L

LKB

lkb.eu

23

LKB is a small healthcare-focused company based in Austria, specializing in the supply and distribution of life science and routine medical diagnostics products. The company holds ISO 9001 certification and emphasizes customer and technical support, targeting laboratories and medical diagnostics professionals. The website presents a professional design with clear navigation and relevant content, supporting the company's market position as a trusted supplier in the region. Technically, the website uses modern frontend technologies such as Bootstrap 5 and jQuery, hosted on SuperHosting.bg, but lacks HTTPS support and advanced security configurations, which significantly impacts its security posture. The absence of SSL/TLS encryption and security headers exposes the site to risks and undermines user trust. Privacy compliance is minimal, with a privacy policy present but no cookie policy or consent mechanisms. Contact information is comprehensive and clearly displayed, enhancing business credibility. Overall, while the business and website demonstrate professionalism and market relevance, critical security improvements are necessary to protect users and data.

U

UNiQUARE Software Development GmbH

uniquare.com

22

UNiQUARE Software Development GmbH is an Austrian company specializing in software solutions for customer-centric banking, with 36 years of experience. The company offers digitized, integrated end-to-end banking processes and provides a complete service package including software development, integration, implementation, and maintenance. Their market position is strong within the banking sector, serving over 1,500 financial institutions and 200,000 users across three continents. The website reflects a professional and comprehensive digital presence with clear business information and customer testimonials. Technically, the site is built on WordPress with Elementor and related plugins, optimized for SEO and mobile use, but suffers from slow performance and basic accessibility.

M

MH|Direkt

mhdirekt.com

25

MH|Direkt is a mature and established e-commerce fulfillment service provider based in Austria with over 28 years of experience. The company operates multiple fulfillment centers across Austria, Germany, and the UK, offering comprehensive services including warehousing, packaging, cross-border shipping, personalization, and API integration. Their business model focuses on supporting online shops to efficiently manage logistics and shipping across Europe, including direct market entry into Switzerland. The website reflects a professional and well-branded digital presence with extensive content and customer testimonials, positioning MH|Direkt as a reliable partner in the e-commerce logistics sector. Technically, the website is built on WordPress using popular plugins and frameworks such as Elementor, Gravity Forms, and WP Rocket. It integrates multiple marketing and analytics tools including Google Analytics, Google Ads, Facebook Pixel, and LinkedIn Insight Tag, indicating a mature digital marketing strategy. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility features are basic. From a security perspective, the website lacks a valid SSL certificate, which is a critical issue impacting user trust and data security. Other security best practices such as HSTS, DNSSEC, and domain protection locks are not implemented, reducing the overall security posture. No explicit security or incident response policies are published on the site. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms in place. Overall, MH|Direkt presents a credible and professional business with strong market positioning in e-commerce fulfillment. However, the lack of HTTPS and some security best practices pose risks that should be addressed promptly to enhance trust and compliance. Strategic recommendations include immediate SSL certificate installation, enabling HSTS and DNSSEC, and publishing security policies to improve transparency and security culture.

A

AMAG Austria Metall AG

amag.at

27

AMAG Austria Metall AG is a well-established Austrian manufacturer specializing in environmentally friendly and future-oriented aluminium products and solutions. The company serves various industries including automotive, aerospace, industrial goods, and consumer goods, positioning itself as a leader in the aluminium manufacturing sector. Their website provides comprehensive information about their products, corporate values, investor relations, media, and career opportunities, targeting business customers and industry partners. The digital infrastructure is based on TYPO3 CMS with integration of modern frontend frameworks and analytics tools such as Matomo and Cookiebot for privacy compliance. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens the security posture. While security headers like Content Security Policy and X-Content-Type-Options are present, critical improvements are needed to secure data transmission and enhance trust. Overall, the website is professional and content-rich but requires urgent security upgrades to meet modern standards.

B

BELFOR

belfor.com

40

BELFOR is a global leader specializing in disaster recovery and property restoration services, serving a worldwide audience with a strong presence across multiple countries. The website is built on WordPress and leverages modern SEO tools like Yoast, with Cloudflare providing hosting and CDN services. Despite a professional design and good content relevance, the site lacks a valid SSL certificate, which significantly impacts its security posture. The cookie consent mechanism is implemented, indicating some level of privacy compliance, but explicit privacy policies and terms of service are not found in the provided content. Social media integration and global office listings enhance business credibility. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols is a critical weakness. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

P

Patheon pharma services - Global CDMO

patheon.com

39

Patheon pharma services, a brand under Thermo Fisher Scientific, operates as a global contract development and manufacturing organization (CDMO) serving the pharmaceutical, biotech, and life sciences industries. The website presents a comprehensive portfolio of services including small and large molecule development, advanced therapies, clinical trial services, and commercial manufacturing. Positioned as a trusted partner with a global footprint, Patheon emphasizes integrated solutions and innovative drug development approaches to accelerate treatments to market. The business model focuses on end-to-end drug development and manufacturing partnerships, targeting pharmaceutical and biotech companies worldwide. The domain is mature and strongly protected, reflecting a stable and legitimate enterprise presence. Technically, the website is built on Adobe Experience Manager (AEM) and leverages modern JavaScript libraries such as jQuery, FontAwesome, and Slick Carousel, alongside marketing and analytics tools like Adobe Target and Genesys Messenger. Hosting and content delivery are managed via Akamai CDN, ensuring global reach and performance. The site is mobile optimized with good SEO practices and structured data for enhanced search visibility. However, performance metrics are not explicitly available. From a security perspective, the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, which is a critical vulnerability impacting user trust and data security. While some security headers are present, the misconfiguration of HSTS and absence of modern TLS protocols and cipher suites significantly weaken the security posture. Privacy compliance is well addressed through comprehensive privacy and cookie policies linked to the parent company’s domain, with GDPR compliance implied. Contact information is primarily via web forms, with no direct emails or phone numbers prominently displayed. Overall, the website demonstrates strong business credibility and professional digital presence but requires urgent remediation of its SSL/TLS and HTTPS implementation to meet modern security standards and protect user data. Strategic improvements in security configuration and explicit contact channels would enhance trust and compliance.

F

Federico Solutions

federico.pro

28

Federico Solutions operates a professional website focused on design, prototyping, and manufacturing services, targeting businesses seeking custom solutions. The company presents a mature market presence with a domain registered since 2009 and consistent branding. Technically, the site is built on WordPress using the Divi theme and integrates SEO and analytics tools, but lacks HTTPS, which is a significant security gap. The security posture is weak due to the absence of SSL/TLS encryption and modern security headers, exposing users to potential risks. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact details are limited to a contact form. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

S

SPIDI Friedl & Partner Unternehmensberatungs GmbH

spidi.at

28

SPIDI Friedl & Partner Unternehmensberatungs GmbH operates a professional language and intercultural learning institute based in Vienna, Austria. The company offers a broad portfolio of language courses, including group and individual training, online courses, and certification test centers such as ÖSD and Linguaskill. The business targets both private individuals and corporate clients, positioning itself as a quality provider in adult education with recognized certifications. The website reflects a mature digital presence built on WordPress with modern SEO and consent management tools, supporting GDPR compliance. However, the absence of a valid SSL certificate undermines the security posture and user trust. The company maintains clear contact channels and social media engagement, enhancing business credibility.

Post Office Limited operates a comprehensive UK-wide network providing postal, financial, travel, insurance, and identity services. The website reflects a mature digital presence with extensive service offerings and strong brand consistency. The company leverages multiple external partners for financial and travel services, integrating them seamlessly into their platform. Technically, the site uses Magnolia CMS, Akamai CDN, and common JavaScript libraries like jQuery, ensuring a robust infrastructure. However, the SSL/TLS configuration is critically flawed with an invalid certificate and no enabled TLS protocols, exposing users to security risks. Additionally, a subdomain takeover vulnerability exists on api.postoffice.co.uk, which could be exploited if not remediated. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

D

DIE KÄSEMACHER GmbH

kaesemacher.at

23

Die Käsemacher GmbH is a small Austrian specialty food manufacturer focused on producing high-quality cheese and antipasti products using traditional methods and sustainable milk production. The company operates a well-structured website with a comprehensive product catalog and an online shop subdomain, targeting both end consumers and B2B partners. Technically, the website is built on the concrete5 CMS platform and uses modern JavaScript libraries to enhance user experience and mobile responsiveness. However, the absence of HTTPS is a critical security flaw that significantly impacts the site's security posture. While cookie consent mechanisms and privacy policy references exist, formal security policies and incident response contacts are not found. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and build trust.

Jacobs Douwe Egberts is an established enterprise-level company operating in the retail sector, specializing in coffee and related consumer goods. The website presents a professional corporate image with clear branding and content focused on product portfolio, sustainability, careers, and corporate responsibility. The target audience includes consumers, job seekers, and stakeholders interested in corporate responsibility. The business model centers on product sales and brand reputation in the global coffee market. Technically, the website uses a modern CMS platform (Episerver) and integrates analytics and tag management tools such as Microsoft Application Insights and Google Tag Manager. However, the site suffers from slow load times and lacks a valid SSL certificate, which impacts user trust and security. Mobile optimization and SEO are adequately addressed, but accessibility is basic. From a security perspective, the absence of HTTPS and security headers is a critical vulnerability. The DNS configuration lacks DNSSEC and CAA records, and no advanced security policies or incident response contacts are published. Cookie consent is implemented via OneTrust, indicating some privacy compliance efforts. Overall, the website is functional and professional but requires urgent improvements in security infrastructure, particularly enabling HTTPS and adding security headers. Performance optimization is also recommended to enhance user experience and trust.