Security Directory

C

Communi5

communi5.com

25

Communi5 is a medium-sized Austrian software manufacturer specializing in communications solutions for service providers, focusing on UCaaS and Cloud PBX offerings. The company demonstrates a mature market position with a future-oriented approach, integrating modern collaboration tools such as MS Teams. The website reflects a professional and consistent brand image with comprehensive content targeting service providers and business customers. Technically, the site is built on WordPress with Elementor and uses modern UI components like Smart Slider 3, but lacks a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. However, the absence of explicit security policies and incident response information is noted. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

I

iMedia Web Solutions

imediasolutions.biz

22

iMedia Web Solutions is a small technology company based in India specializing in web design, WordPress development, eCommerce solutions, and responsive websites. With over 9 years of operation and more than 500 satisfied clients, the company positions itself as a reliable service provider offering white label and outsourcing solutions. The website is built on WordPress with a modern tech stack including PHP 7.4, LiteSpeed server, and popular plugins such as WPBakery and Slider Revolution. However, the site lacks a valid SSL certificate, which critically impacts its security posture. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Contact information is clearly provided, including phone, email, physical address, and a detailed contact form. Overall, the site demonstrates good content quality and business credibility but suffers from significant security and privacy shortcomings.

SPGPrints is a well-established global company specializing in textile and industrial printing solutions, with a strong focus on rotary screen and digital textile printing technologies. The company offers a comprehensive range of products including printing machines, consumables, and services, targeting businesses in textile, label, healthcare, and printed electronics sectors. Their market position is supported by decades of experience, numerous patents, and a global presence. Technically, the website is built on HubSpot CMS and leverages modern web technologies and marketing tools, but lacks a valid SSL certificate, which is a significant security concern. The security posture is basic with some security headers present but critical gaps in SSL/TLS configuration and privacy compliance. Overall, the website is professional and content-rich but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

K

Kolibri

kolibri.is

38

Kolibri is a small Icelandic digital design and development agency offering comprehensive services including web and app solutions, product development, and optimization. The company presents a professional portfolio showcasing notable projects, targeting businesses and organizations seeking digital transformation. The website is built on modern web technologies such as Webflow and uses Cloudflare for hosting and CDN services, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. Additionally, the lack of privacy and cookie policies suggests compliance gaps with GDPR and related regulations. Overall, while the business demonstrates professionalism and a clear market position, urgent improvements in security and privacy compliance are necessary to enhance trust and protect users.

The website dondusang.net represents the official French public blood service, Etablissement français du sang (EFS). It provides comprehensive information and services related to blood, plasma, and platelet donations across France. The site is well-branded, content-rich, and targets donors, associations, and the general public with clear calls to action and partner engagement. Technically, the site is built on Drupal CMS, uses modern tracking and analytics tools, and integrates multiple partner domains. However, it lacks HTTPS support, which is a critical security flaw exposing users to risks. Security headers are well configured but cannot compensate for the absence of SSL/TLS. Privacy policies and cookie consent mechanisms are present and GDPR compliant. Overall, the site demonstrates a high level of professionalism and trustworthiness but requires urgent security improvements.

The website for kerstin-schleicher.de currently serves as a placeholder or customer menu page for Lind & Quittek GmbH, a small company based in Mannheim, Germany. The site content is minimal and displays a message indicating the requested domain could not be found on the server, suggesting the domain is not actively hosting business content or services. The technical infrastructure includes common JavaScript libraries and the Bulma CSS framework, but lacks a valid SSL/TLS certificate and modern HTTPS configuration, which significantly impacts security and trustworthiness. Security headers are present but insufficient without proper SSL. No privacy, cookie, or terms of service policies are found, indicating poor compliance with privacy regulations. Overall, the website's digital maturity is low, with poor content quality and minimal user engagement features.

B

Barmherzige Brüder Wien

bbwien.at

38

Barmherzige Brüder Wien operates as a large, well-established non-profit hospital in Austria, providing a broad range of medical services and patient care. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media engagement. Technically, the site uses a modern CMS (siteswift) and popular JavaScript libraries to enhance user experience. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in all traffic being served over HTTP, which exposes users to potential interception risks. The site implements GDPR-compliant privacy and cookie consent mechanisms, indicating awareness of privacy regulations. WHOIS data confirms domain legitimacy and consistency with the hospital's identity. Overall, the site is professional and trustworthy but urgently requires HTTPS implementation to secure user data and improve security posture.

C

CTI Meeting Technology

ctimeetingtech.com

40

CTI Meeting Technology is a mature and established provider of comprehensive meeting management software solutions, serving the STEM meeting industry for over 40 years. Their all-in-one platform supports virtual, hybrid, and in-person events with a wide range of modules including abstract management, presentation management, program management, and more. The company targets meeting organizers, associations, PCOs, and other stakeholders involved in event planning and execution. Technically, the website is built on WordPress with Elementor and integrates various modern tools such as Calendly and Microsoft Clarity. However, the absence of a valid SSL certificate and HTTPS significantly impacts the security posture. While security headers are present, the lack of encryption is a critical vulnerability. The website demonstrates good privacy compliance with clear policies and contact information. Overall, the business is credible and well-positioned in its market, but it must address critical security issues to improve trust and compliance.

V

Verlag Österreich

verlagoesterreich.at

24

Verlag Österreich is a specialized legal publisher based in Austria, offering a comprehensive range of legal literature including books, eBooks, journals, and commentaries. The website targets legal professionals, academics, students, and institutions, providing an e-commerce platform for purchasing legal publications. The business is well-established with a consistent brand presence and a professional digital footprint. Technically, the website uses a modern tech stack including Apache, jQuery, and a proprietary CMS (Datamints), with good mobile optimization and accessibility features. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Security headers are present but cannot compensate for the lack of encryption. Privacy and cookie policies are comprehensive and GDPR compliant, and the site employs Google Tag Manager for analytics and marketing. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to ensure secure user interactions.

W

WestLicht

westlicht.com

40

WestLicht is a well-established cultural venue in Vienna specializing in photography exhibitions, a camera museum, and related services such as a bookshop and café. The website targets photography enthusiasts and cultural visitors, offering detailed information about exhibitions, events, memberships, and retail options. The domain age of 24 years and consistent WHOIS data support the legitimacy and maturity of the business. Technically, the site uses a modern JavaScript stack with jQuery, Swiper.js, and Google services integrated, managed via the siteswift CMS and hosted by Hetzner Online GmbH. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing users to potential risks. The site implements a cookie consent mechanism compliant with GDPR, but lacks explicit security policies or incident response information. Overall, the website is professionally designed with good content quality and user experience but requires urgent security improvements to protect visitors and enhance trust.

V

VAM USA

vam-usa.com

40

VAM USA is a medium-sized company specializing in premium connection solutions for the oil and gas industry, with a strong market position as a world leader and a parent company relationship to Vallourec Oil and Gas France. The website provides comprehensive business information, product details, and service offerings targeted at energy sector professionals and distributors in North America. Technically, the site is built on WordPress with common marketing and analytics tools but suffers from slow performance and lacks modern security implementations such as HTTPS and security headers. The security posture is weak due to the absence of a valid SSL certificate and no HTTPS support, which is a critical issue. Privacy compliance is poor, with no visible privacy or cookie policies. Overall, the site is professional and credible but requires urgent security improvements to protect users and enhance trust.

Trūata Limited is a UK-based technology company specializing in privacy-enhancing data analytics solutions. Their offerings include anonymization services, privacy risk assessments, and privacy-compliant analytics platforms designed to help businesses extract value from data while maintaining compliance with global data protection regulations. The company targets enterprises and organizations seeking to leverage data securely and ethically, positioning itself as a leader in privacy technology with notable partnerships including IBM, Microsoft Azure, and Mastercard. The website is professionally designed, content-rich, and well-structured, supporting a positive user experience and clear navigation. Technically, the site is built on WordPress with integrations of marketing and analytics tools such as Adobe Analytics and HubSpot, and hosted on Microsoft Azure infrastructure. However, the security posture is weakened by the absence of a valid SSL certificate and lack of enabled TLS protocols, which is a critical vulnerability that undermines secure communications and user trust. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. WHOIS data confirms the domain's legitimacy and consistent registration history. Overall, while the business and content quality are strong, urgent improvements in SSL/TLS security are necessary to elevate the site's security and trustworthiness.

BEST - Bioenergy and Sustainable Technologies GmbH is a medium-sized Austrian research organization specializing in sustainable bioenergy technologies. The company focuses on developing biomass-based biorefineries, digital methods for energy systems, and sustainable supply and value chains. Their market position is that of a technological leader and research center in Austria and Central Europe, serving research institutions, industry partners, and policymakers. The website provides comprehensive information on projects, publications, and company offices, targeting stakeholders interested in renewable energy and bioeconomy. Technically, the website uses a CakePHP CMS with Bootstrap and common JavaScript libraries but lacks HTTPS, which is a critical security gap. The site is mobile-optimized and has good content quality and navigation but suffers from slow performance and basic SEO and accessibility. Security posture is weak due to missing SSL/TLS and modern security headers, though session cookies are set with secure flags and X-Frame-Options is enabled. Privacy compliance is basic with a cookie consent banner and a privacy policy PDF in German. Contact information is clearly presented with multiple Austrian office locations and verified company emails and phone numbers. Analytics tools include Google Analytics and Matomo, indicating moderate user tracking. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and enhance security headers.

B

bulmor industries GmbH

bulmor-airground.com

37

Bulmor airground technologies GmbH is a specialized manufacturer of medical highloaders (Ambulift SideBull) designed to facilitate safe and efficient boarding of mobility-impaired passengers at airports. The company has a niche market position with patented technology and partnerships with major airports and airlines. The website is built on TYPO3 CMS and uses several JavaScript libraries for enhanced user experience. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. The domain is mature and trustworthy, registered since 2011 with no suspicious patterns beyond lack of domain protection locks.

A

Audit Partner Austria Wirtschaftsprüfer GmbH

auditpartner.at

26

Audit Partner Austria Wirtschaftsprüfer GmbH is a professional services firm specializing in tax consulting and auditing services primarily serving Austrian businesses and professionals. The company emphasizes expertise, personal consultation, and proactive advisory services. Their website reflects a medium-sized firm with a consistent brand and a clear focus on finance-related services. The technical infrastructure is based on WordPress with common web technologies such as jQuery and Bootstrap, hosted on Austrian DNS infrastructure. However, the website lacks a valid SSL certificate, which significantly impacts its security posture. While basic security headers like HSTS are present, they are ineffective without HTTPS. The site provides comprehensive contact information and privacy policies, but lacks cookie consent mechanisms and explicit security or incident response policies. Overall, the website is professional and trustworthy but requires urgent improvements in SSL configuration and security transparency.

S

Sonnenberg-Apotheke, Helge Lehnert e.K.

sonnenberg-apotheke.com

38

Sonnenberg-Apotheke is a well-established local pharmacy in Chemnitz, Germany, operating since 2001. The business offers a range of pharmaceutical services including certified travel vaccination advice, medication reservation, rental of medical devices, and substitution care for opioid-dependent patients. The website reflects a professional and consistent brand presence targeting local customers with additional online service capabilities. Technically, the site uses a modern front-end stack with Foundation framework and common JS libraries but lacks performance metrics and has no valid SSL certificate, which is a critical security concern. Security headers are partially implemented but the absence of HTTPS and modern TLS protocols significantly weakens the security posture. Privacy and cookie policies are present, indicating GDPR awareness, though the cookie consent mechanism is minimal. Contact information is clearly provided and consistent with WHOIS data, supporting business credibility. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

M

MTEL Austria

mtel.at

39

MTEL Austria is a telecommunications provider offering a range of services including mobile tariffs, internet, and TV entertainment packages primarily targeting private and business customers in Austria. The company is part of the Telekom Serbien Group, indicating a solid regional market presence. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It leverages modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for consent management. However, the site currently lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Security headers are properly configured, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Contact information including email and phone numbers is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to protect user data and build trust.

I

Ingenieurbüro Arnold

arnostatik.de

20

Ingenieurbüro Arnold is a small, regionally focused engineering firm specializing in construction planning, structural statics, energy demand calculations, sound insulation, and fire protection services in the Potsdam area of Germany. The company emphasizes quality, reliability, and cost optimization, serving private and commercial clients with over 30 years of experience. Their business model is project-based engineering consultancy with a strong local market presence. Technically, the website is built on WordPress with common plugins and a responsive design, but suffers from slow performance and lacks modern security features such as HTTPS. Security posture is weak due to the absence of SSL/TLS encryption, missing security headers, and no published security or incident response policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism but no GDPR-specific indicators. Overall, the website is professional and credible but requires urgent security improvements to protect user data and enhance trust.

Deloitte Digital is a leading digital creative and marketing consultancy operating primarily in the Nordics region, backed by the global Deloitte network. The company offers a broad range of services including customer strategy, advertising, marketing, digital commerce, sales, service, and digital product design. Their market position is strong, evidenced by recognition as a leader in the 2024 Gartner Magic Quadrant for Digital Experience Services. The website reflects a mature, enterprise-level organization with a consistent brand and professional content targeting businesses seeking digital transformation and marketing consultancy. Technically, the site leverages Adobe Experience Manager, Akamai CDN, and modern JavaScript libraries, providing a good user experience with mobile optimization and accessibility features. However, the absence of a valid SSL/TLS certificate and lack of HTTPS enforcement significantly weaken the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and social media presence. Overall, Deloitte Digital demonstrates a high level of business credibility and digital maturity but must address critical security gaps to ensure trust and compliance.

I

IVM Ltd.

ivm-vending.eu

25

IVM Ltd. is a medium-sized manufacturing company based in Hungary specializing in industrial vending machines and tool management solutions. Their website, built on WordPress with the Divi theme, presents a professional and well-structured digital presence targeting industrial clients and partners. The company emphasizes innovation in micrologistics and asset management, supported by proprietary software and certifications such as ISO 9001 and ISO 27001. Technically, the site uses common web technologies including Apache, jQuery, and Google Tag Manager, but lacks a valid SSL certificate, which impacts security posture negatively. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and social media links are clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires improvements in security and privacy compliance to meet modern standards.

S

starlim sterner

starlim-sterner.com

38

starlim sterner is a well-established Austrian manufacturing company specializing in liquid silicone injection molding, holding a world market leader position. Their website reflects a mature business with comprehensive service offerings including product development, tooling, and cleanroom production. Technically, the site is built on WordPress with modern SEO and cookie consent implementations, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with no advanced protections like DNSSEC or security headers. Privacy compliance is strong with GDPR-aligned policies and cookie management. Overall, the business presents a professional image with moderate website performance and good user experience, but must urgently address HTTPS and security hardening to improve trust and security.

C

Cloudera

cloudera.com

40

Cloudera is a leading enterprise technology company specializing in hybrid data platforms that enable secure data management and cloud-native analytics. The company targets large enterprises across multiple sectors including technology, healthcare, finance, manufacturing, and government. Their platform supports data engineering, AI, streaming, and operational databases, positioning them strongly in the hybrid multi-cloud data market. The website reflects a mature digital presence with comprehensive content, strong branding, and extensive customer references. Technically, the site is built on Adobe Experience Manager with integrations of Adobe Analytics, Segment, Coveo search, and Brightcove video services. The site is mobile optimized and well structured for SEO and accessibility. However, the SSL configuration is currently invalid with no TLS protocols enabled, which is a critical security concern. Security headers are partially implemented but HSTS is not fully enabled. Privacy and compliance policies are comprehensive and prominently linked, indicating good GDPR and data protection awareness. Contact information is clearly provided with phone numbers and support portals. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Cloudera's website demonstrates strong business credibility and digital maturity but requires urgent remediation of SSL and TLS configurations to improve security posture and user trust.

Eblinger & Partner Personal- und Managementberatungs GmbH is a medium-sized Austrian consulting firm specializing in executive search, personnel consulting, and development services. Established since the 1990s, it holds a strong market position among Austria's top 10 personal consulting firms and is a member of international networks such as IIC Partners and AESC. The company emphasizes strategic, sustainable consulting with a focus on ESG compliance and diversity. Technically, the website uses jQuery and custom scripts but suffers from slow load times and lacks modern security configurations such as HTTPS. Security posture is weak due to the absence of SSL/TLS and security headers, posing risks to user data and trust. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website is professional and trustworthy but requires urgent security improvements.

N

New Frontier Investment AG

newfrontier.eu

26

New Frontier Investment AG is a technology-focused investment group based in Vienna, Austria, specializing in leading digital transformation initiatives with enterprise customers globally. The company manages a portfolio of subsidiary companies across various technology sectors, positioning itself as a key player in digital innovation and enterprise solutions. The website reflects a professional business presence with clear branding and consistent messaging about its investment and transformation leadership role. Technically, the website is built on WordPress with common plugins such as LayerSlider and Contact Form 7, but suffers from critical security shortcomings including lack of a valid SSL certificate and disabled HTTPS, which significantly impacts its security posture. The absence of privacy and cookie policies further reduces compliance with GDPR and privacy best practices. Contact information is clearly provided, including a physical address, phone number, and a contact form protected by Google reCaptcha, indicating some level of user interaction security. Overall, the site is functional and professional but requires urgent improvements in security and privacy compliance to meet modern standards.

G

George Labs GmbH

george-labs.com

40

George Labs GmbH operates the digital banking platform 'George', serving over 10 million users across Europe. The platform is positioned as a modern, intelligent, and personal financial companion, backed by Erste Group Bank AG. The website reflects a mature digital presence with professional design, clear branding, and multi-country banking partnerships. Technically, the site is built on WordPress with Elementor and uses modern web technologies, but suffers from critical SSL/TLS misconfigurations that undermine security. Privacy compliance is well addressed with GDPR-aligned cookie consent and policies. Overall, the business is credible and well-positioned in the European digital banking sector, but must urgently address its SSL issues to ensure user trust and security.

P

Porsche Informatik Gesellschaft m.b.H.

porscheinformatik.at

37

Porsche Informatik Gesellschaft m.b.H. is a medium-sized Austrian company specializing in software solutions and IT services for the automotive industry, operating as a subsidiary of the Porsche Holding group. The company focuses on digitalizing automotive trade and enabling future mobility through specialized software development. Their website reflects a professional and consistent brand image, targeting automotive clients and IT professionals. Technically, the site is built on WordPress with PHP 7.2.24 and Apache, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS impacts user trust and security posture significantly. Privacy and cookie policies are well implemented and GDPR compliant, with clear contact information provided. Social media presence is robust, supporting brand trust and outreach.

Docolution GmbH is a specialized Austrian company providing tailored document management and output management solutions, focusing on quality assurance, accessibility, and customer communication. Their business model targets organizations requiring professional document handling and communication services, supported by consulting and software development. The website reflects a professional presence with clear service offerings and contact information, but lacks some standard compliance documents such as privacy policy and terms of service. Technically, the site uses modern web technologies including JavaScript, jQuery, and Google Analytics, and is mobile optimized with good accessibility features. However, the absence of HTTPS and a valid SSL certificate is a critical security shortfall, exposing users to risks and undermining trust. Security headers are minimal, and no advanced security policies or incident response contacts are published. Overall, the site is functional and credible but requires urgent improvements in security and privacy compliance to meet modern standards.

A

APILayer

apilayer.net

40

APILayer is a mature and reputable API marketplace founded in 2015, offering a wide range of APIs across multiple categories such as finance, geolocation, marketing, and developer tools. The platform targets developers and engineering teams seeking scalable, easy-to-integrate API solutions. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern web technologies including OAuth for authentication, Google Tag Manager for analytics, and Cloudflare for CDN and security headers. However, a critical security issue is the absence of a valid SSL certificate and proper HTTPS configuration, which severely impacts the security posture and trustworthiness of the site. Privacy and legal policies are comprehensive and hosted on the parent company domain, indicating corporate governance. Social media presence and client testimonials add to the trust signals. Overall, while the business and content aspects are strong, the security configuration requires urgent remediation to ensure safe user interactions and compliance.

L

Light for the world INTERNATIONAL

light-for-the-world.org

27

Light for the World International is a well-established non-profit organization founded in 2004, focused on disability rights and eye health globally. The organization operates multiple country-specific websites, indicating a broad international presence and a strong commitment to inclusive education, economic empowerment, and humanitarian action. Their website content is rich, professionally designed, and regularly updated, targeting individuals and organizations interested in disability inclusion and health advocacy. Technically, the website is built on WordPress with modern SEO plugins and accessibility features, providing a good user experience and mobile optimization. However, the hosting environment lacks a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Other security headers and best practices are partially implemented but require improvement. The security posture is currently weak due to missing HTTPS and related configurations, posing risks to user data confidentiality and trust. Privacy compliance is well addressed with GDPR-compliant cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by transparent WHOIS data, trust seals, and clear contact information. Overall, the website is functional and trustworthy from a business and content perspective but requires urgent security enhancements to protect users and improve trustworthiness. Strategic recommendations include immediate SSL certificate installation, enabling HTTPS, and strengthening security headers and protocols.

E

ENERGIEALLIANZ Austria GmbH

energieallianz.com

25

ENERGIEALLIANZ Austria GmbH is a mature and leading energy sales and trading company in Austria, founded in 2001. The company serves a large customer base including private, commercial, and industrial clients with electricity, natural gas, and related services. The website reflects a professional corporate presence with good content quality, customer testimonials, and comprehensive contact information. Technically, the site is built on TYPO3 CMS with standard web technologies but suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the lack of visible security policies, incident response contacts, and terms of service pages are gaps in governance documentation. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

A

alt-lichtenberg.de

alt-lichtenberg.de

21

The website alt-lichtenberg.de appears to represent a small local or community-oriented entity based in Germany, as indicated by the German language and domain registration details. The site is built on WordPress 5.2.3 with an Apache server running PHP 7.2.34, which is outdated and may pose security risks. The content is minimal with no visible business description, contact information, or terms of service, limiting its professional appeal and user engagement. A cookie consent banner is present, indicating some awareness of privacy compliance, but the privacy policy is only linked and not detailed on the homepage. The site lacks HTTPS, which is a critical security deficiency, exposing visitors to potential risks. Social media presence is limited to a Facebook page link. Overall, the digital maturity of the site is low, with basic mobile optimization and minimal SEO or accessibility features.

P

Paris Lodron Universität Salzburg

uni-salzburg.at

35

Paris Lodron Universität Salzburg is a large, well-established public university in Austria, founded in 1622. It offers a broad range of academic programs across six faculties and serves approximately 18,000 students. The university maintains a strong regional and international research presence and provides extensive student services and community engagement. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with common web technologies such as jQuery and CSS. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, exposing users to potential risks. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The university demonstrates trustworthiness through certifications and active social media engagement.

I

Informa Connect Australia

informa.com.au

40

Informa Connect Australia is a leading event organiser specializing in conferences, exhibitions, and corporate training services primarily targeting business professionals in Australia. As part of the global Informa PLC group, it holds a strong market position with a large-scale operational footprint. The website reflects a professional business model focused on event management and corporate learning, supported by a consistent brand presence and trust indicators such as testimonials and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and frameworks, although performance metrics are unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS support, despite the presence of some security headers and Cloudflare protection. Privacy compliance is moderate with clear privacy and cookie policies and consent mechanisms, but lacks explicit GDPR compliance indicators or security policies. Overall, the site is functional and credible but requires urgent improvements in security infrastructure to protect user data and enhance trust.

KAUN GmbH is a medium-sized carpentry business based in St.Florian, Upper Austria, specializing in manufacturing and installation of windows, doors, furniture, sun protection, and window renovation services. The company targets residential and commercial customers within the region, emphasizing quality craftsmanship and sustainability. The website is built on Joomla CMS using the Helix Ultimate framework and incorporates modern frontend technologies such as Bootstrap and jQuery. However, the site lacks HTTPS, which is a critical security deficiency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Social media presence on Instagram and Facebook supports customer engagement. Overall, the business presents a professional image but must urgently address security gaps to protect user data and improve trust.

F

Freiform Werkzeugbau GmbH

freiform.eu

23

Freiform Werkzeugbau GmbH is a small manufacturing company specializing in tooling, plastic, aluminum, and graphite electrode products, serving clients primarily in Austria, Switzerland, and Germany. The website is built on WordPress with a modern tech stack including PHP 8, Yoast SEO, and GDPR-compliant cookie management. However, the site lacks a valid SSL certificate, exposing it to security risks and reducing trustworthiness. Legal and privacy documentation is comprehensive and GDPR compliant, with a cookie consent mechanism in place. The site uses Matomo for analytics, indicating a moderate level of user tracking with privacy considerations. Overall, the business presents a professional image but must urgently address its lack of HTTPS to improve security and user trust.

A

Anaplan Inc

anaplan.com

40

Anaplan Inc operates a mature, enterprise-grade AI-infused scenario planning and connected planning platform targeting large organizations across multiple industries including finance, supply chain, sales, marketing, and HR. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses Adobe Experience Manager CMS with modern marketing and analytics tools such as Marketo and OneTrust for privacy compliance. However, a critical security issue is the invalid or missing SSL certificate and lack of TLS protocol support, which significantly impacts the security posture score. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by analyst recognitions and a large customer base. Overall, the site is trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

B

Borouge

borouge.com

40

Borouge is a prominent petrochemical company specializing in the production and supply of innovative polyethylene and polypropylene solutions across multiple sectors including energy, infrastructure, healthcare, and agriculture. The company leverages advanced Borealis Borstar® technology to deliver tailored polymer products that meet specific customer needs, emphasizing sustainability and innovation. The website reflects a well-structured digital presence with comprehensive investor relations, media updates, and e-services, targeting industrial clients and stakeholders in the petrochemical industry. Technically, the site is built on Microsoft SharePoint, incorporating modern web technologies and basic mobile optimization. However, a critical security concern is the invalid or missing SSL certificate, which undermines the security posture despite the presence of multiple security headers and policies. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website demonstrates a solid business and digital foundation but requires urgent remediation of SSL issues to improve security and trust.

O

Opus Marketing GmbH

opus-marketing.de

23

Opus Marketing GmbH is a German branding agency specializing in transforming visions and ideas into impactful brands with a focus on strategic branding, digital transformation, and sustainability. The company targets businesses seeking creative and strategic brand development and positions itself as a medium-sized agency with a consistent and professional brand presence. Technically, the website is built on WordPress using WPBakery and integrates modern marketing and analytics tools such as Usercentrics for cookie consent, Google Tag Manager, and Facebook Pixel. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of security headers, which significantly impacts its security posture. Performance is also suboptimal with a slow load time and large page size. Overall, the business credibility and content quality are high, but technical and security improvements are necessary to enhance trust and compliance.

S

Sun Chemical

sunchemical.com

40

Sun Chemical is a globally recognized enterprise manufacturing inks, pigments, and advanced materials serving diverse industrial sectors including packaging, graphics, automotive, electronics, and healthcare. As a member of the DIC Group with over 22,000 employees and a legacy spanning over 200 years, the company holds a strong market position supported by extensive patents and sustainability initiatives. The website reflects a mature digital presence with comprehensive content, professional design, and good SEO practices. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the security posture, exposing users to risks and reducing trust. Security headers are partially implemented but insufficient without proper TLS. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit security or incident response policies are found. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect data and user trust.

KABEG is a major healthcare provider managing five hospitals in the Kärnten region of Austria, employing approximately 8,000 staff. The organization focuses on delivering professional healthcare services with an emphasis on patient well-being and humaneness. The website serves multiple audiences including patients, healthcare professionals, job seekers, and suppliers. Technically, the site is built on TYPO3 CMS with common web technologies such as jQuery and Bootstrap, hosted likely by A1.net. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, exposing visitors to potential risks. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Business credibility is strong with clear contact information, certifications, and consistent branding.

G

Greater Europe Mission

gemission.org

40

Greater Europe Mission is a well-established Christian missions non-profit organization focused on disciple-making and evangelism throughout Europe. The organization has a mature online presence with a professionally designed WordPress website that clearly communicates its mission, values, and ministry areas. The website targets Christian communities, churches, missionaries, and donors interested in European missions. It offers resources, contact options, and donation capabilities to support its mission. Technically, the site uses modern web technologies including WordPress, Beaver Builder, and integrates Google Analytics and Tag Manager for tracking. However, the site lacks a valid SSL certificate and HTTPS support, which is a significant security concern. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is credible and trustworthy but requires urgent security improvements to protect user data and enhance trust.

D

diego5 studios

diego5studios.com

37

diego5 studios is a medium-sized influencer marketing agency and video content production company based in Austria, founded in 2015. It operates the largest influencer community in Austria and offers comprehensive services including influencer marketing, branded entertainment, workshops, and live events. The company targets brands seeking to engage audiences through digital video content and influencer collaborations. The website reflects a professional and consistent brand presence with good content quality and clear navigation, optimized for mobile users. Technically, the site is built on WordPress using common plugins and jQuery libraries, hosted on servers managed by world4you.at. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. The business demonstrates legitimacy through client logos and active social media channels.

U

Ulrike Lahrs Steuerberatungskanzlei

kanzleilahrs.de

37

Ulrike Lahrs Steuerberatungskanzlei is a small, local tax consultancy firm based in Twistringen, Germany, specializing in tax advisory, accounting, payroll, and tax declaration services. The website presents a professional and clear business description targeting individuals and businesses seeking tax-related services in the region. The technical infrastructure is based on the IONOS MyWebsite platform, utilizing Apache server and common JavaScript libraries such as jQuery and Cookiebot for cookie consent management. However, the website lacks HTTPS support, which significantly undermines its security posture. Security headers are partially implemented, but the Content Security Policy is in report-only mode and permits unsafe script execution, increasing risk. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy, but no terms of service or explicit security policies are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

C

Capgemini

capgemini-consulting.com

40

Capgemini Invent is a prominent management consultancy brand under the Capgemini group, specializing in innovative consulting services that combine strategy, technology, data science, and design to help businesses transform and grow. The website reflects a mature, enterprise-level digital presence with comprehensive content, strong branding, and a wide range of services targeting C-level executives and large enterprises. Technically, the site is built on WordPress with modern frameworks like React and Bootstrap, indicating a contemporary and scalable infrastructure. However, a critical security issue is the lack of a valid SSL certificate, which undermines the site's security posture despite the presence of several security headers. Privacy and cookie policies are well implemented, showing good compliance with GDPR and related regulations. Overall, the site is professional and trustworthy but requires immediate attention to SSL configuration to enhance security and user trust.

ISOVOLTA AG is an international leader in manufacturing electrical insulation materials, technical laminates, and composite materials, serving over 20 industries including electronics, aviation, and machinery. The company operates globally with multiple production and sales locations across Europe, Asia, and the Americas. Their business model focuses on B2B manufacturing with strong emphasis on innovation and customer-specific product development. The website reflects a professional and consistent brand presence with comprehensive business and contact information.

H

HABAU

habau.at

27

HABAU is a well-established Austrian construction company with over 110 years of experience, offering a broad range of construction services including high-rise construction, civil engineering, pipeline construction, and precast concrete solutions. It operates as part of the larger HABAU GROUP, which has a significant international presence and a large workforce. The website reflects a professional and content-rich digital presence targeting construction clients, partners, and job seekers. Technically, the site is built on WordPress with common performance and cookie management plugins, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is weak due to missing HTTPS and security headers, exposing the site to risks. Overall, the site is trustworthy and professional but urgently needs to address its SSL and security configuration to protect users and improve trust.

S

SRG IT & Marketing GmbH

leadchamps.co

37

LeadChamps is a small Austrian technology company specializing in sales automation and lead generation services for B2B clients, primarily in the DACH region. Their offerings include intent data lead research, multi-channel campaigns leveraging LinkedIn and email, and a proprietary sales automation platform. The website is built on WordPress with the Divi theme and integrates HubSpot forms for lead capture. While the content is professionally presented and relevant to their target audience, the technical infrastructure lacks a valid SSL certificate and modern TLS protocols, exposing the site to security risks. The absence of cookie consent mechanisms and limited security headers further weaken their privacy and security posture. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

RUBICON IT GmbH is a medium-sized Austrian technology company specializing in digitalization solutions and IT services. Their product portfolio includes leading software such as Nova Find, a prominent lost and found software in Europe, alongside other enterprise solutions like Acta Nova and Document Partner. The company also offers professional services, managed services, and training, targeting business and public sector clients seeking digital transformation. The website is professionally designed, multilingual, and well-structured, reflecting a mature digital presence. Technically, the site is built on WordPress with various plugins and frameworks, including ASP.NET components, but suffers from critical SSL/TLS misconfigurations, lacking a valid certificate and modern protocol support. Security headers are partially implemented but incomplete, and no advanced security mechanisms like OCSP stapling or session resumption are enabled. Privacy compliance is strong, with clear cookie consent and a comprehensive privacy policy. Social media integration and certifications like Kubernetes demonstrate trust and industry alignment. Overall, the site is functional and business-credible but requires urgent security improvements to protect user data and enhance trust.

S

Statistik Austria

statistik.at

40

Statistik Austria is the official national statistical agency of Austria, providing independent and comprehensive statistical data to support fact-based decision making. The organization serves a broad audience including government entities, researchers, businesses, and the general public. Their services include data provision, publications, surveys, and various analytical tools. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with privacy-conscious analytics via Matomo, and includes modern web technologies such as FontAwesome and jQuery. However, a critical security weakness is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts the site's security posture. Despite this, the site implements multiple security headers and cookie consent mechanisms, demonstrating good privacy compliance. Overall, the site is trustworthy and authoritative but urgently requires SSL implementation to protect user data and communications.

S

SIGAL UNIQA

sigal.com.al

40

SIGAL UNIQA is a leading regional insurance group operating primarily in Albania, Kosovo, and North Macedonia, offering a comprehensive portfolio of insurance products including life, health, property, automobile, and marine insurance. The company is well-established since 1999 and is part of the larger UNIQA Insurance Group, which enhances its market credibility and operational scale. The website reflects a professional and well-branded digital presence with clear navigation and extensive content tailored to its target audience of individuals and businesses seeking insurance solutions. Technically, the site is built on WordPress with modern plugins and integrations, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and lack of HTTPS support, which poses risks to user data confidentiality and trust. The company demonstrates commitment to security governance through ISO 27001:2022 certification and implements privacy and cookie policies compliant with GDPR standards. Marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp are actively used, indicating a mature digital marketing strategy. Overall, while the business and content aspects are strong, urgent improvements in SSL/TLS configuration are necessary to enhance security posture and user trust.