Security Directory

A

akaryon

akaryon.com

24

Akaryon is a mature small-sized company founded in 1999, specializing in software development with a focus on environmental informatics and sustainability tools. Their offerings include websites, webshops, CSR reporting tools, CO2 calculators, and support for funding applications. The company targets organizations, companies, and municipalities aiming to digitalize sustainability management. Technically, the website is built on WordPress with a variety of plugins for SEO, forms, and cookie management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

J

JAWA Management Software GmbH

jawa.at

23

JAWA Management Software GmbH is an established Austrian technology company specializing in customized software solutions for process optimization and information management. Their flagship product, the inforum management platform, supports supplier management, quality control, production planning, and AI-enhanced business solutions. With over 25 years of market presence and a medium-sized operation, JAWA serves a broad international clientele with a focus on efficiency and productivity improvements. Technically, the website is built on a modern WordPress CMS infrastructure using popular plugins and frameworks such as WPBakery, WPML, and Woodmart theme. The site is well-structured, mobile-optimized, and SEO-friendly, demonstrating a mature digital presence. However, the hosting environment lacks a valid SSL certificate and proper TLS configuration, which significantly undermines the security posture. Security-wise, the absence of HTTPS and modern TLS protocols is a critical vulnerability, exposing users to potential data interception and trust issues. While no active vulnerabilities or malware are detected, the site misses essential security headers and DNS security configurations. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a professional and credible business front but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL deployment, enabling modern security protocols, and implementing advanced security headers and DNS protections.

E

EPSIMEC GmbH & Co KG

epsimec.com

28

EPSIMEC GmbH & Co KG is a small Austrian digital agency specializing in social media marketing, newsletter marketing, content management, and web development services. Established in 2012, the company has a mature online presence with a professional website built on WordPress, leveraging modern plugins such as Yoast SEO and WP Rocket for optimization. The website presents a consistent brand image, clear contact information, and client references, positioning EPSIMEC as a credible service provider in the technology sector. Technically, the site uses PHP 8.0.3 on an Apache server hosted by Host Europe, but lacks HTTPS support, which is a significant security concern. The cookie consent mechanism is well implemented, indicating good privacy compliance. However, the absence of SSL/TLS encryption and security headers lowers the overall security posture. No explicit security policies or incident response contacts are published, and no vulnerability disclosure or security.txt files are found. Overall, EPSIMEC demonstrates a solid business and technical foundation but should prioritize securing its website with HTTPS and enhancing security best practices to improve trust and compliance.

W

wunderweiss

wunderweiss.com

40

Wunderweiss is a specialized agency based in Austria focusing on software and design development, with a strong emphasis on AI applications integrated into CMS systems, UI/UX consulting, and corporate branding. The company targets businesses seeking innovative technology and design solutions, positioning itself as an expert in user-oriented design and AI-driven application development. The website presents a professional and consistent brand image with detailed project showcases and clear service offerings. Technically, the website employs modern web technologies including jQuery, Django Framework, and Wagtail CMS, hosted behind Cloudflare. However, the site suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no proper HTTPS support. This significantly impacts the security posture and user trust. Performance metrics are not available, but the site shows good mobile optimization and basic accessibility features. Security-wise, the site implements several important HTTP security headers such as X-Frame-Options and Referrer-Policy, but lacks a valid SSL certificate, OCSP stapling, and session resumption. There is no visible incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the website is professionally designed and credible from a business perspective but requires urgent remediation of its SSL configuration to improve security and trust. Strategic recommendations include fixing HTTPS, implementing cookie consent, and adding security and incident response policies.

D

decide Clinical Software GmbH

decide-clinical.com

26

decide Clinical Software GmbH operates the GlucoTab platform, a specialized clinical decision support system designed to assist healthcare professionals in managing diabetes patients in hospital settings. The company holds important certifications such as ISO 13485 and MDR Class IIa, underscoring its commitment to quality and regulatory compliance. Their product integrates evidence-based insulin dosing algorithms and workflow digitalization, targeting hospitals and clinical staff. The website is professionally designed, multilingual, and content-rich, reflecting a mature digital presence. However, the lack of a valid SSL certificate and HTTPS support significantly undermines the security posture, especially critical in healthcare. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Contact information and trust indicators are clearly presented, enhancing business credibility.

W

Wombats Hostels

wombats-hostels.com

21

Wombat's Hostels is a medium-sized hospitality business operating city hostels in multiple European cities including Vienna, London, Munich, Budapest, and Leipzig. The company targets travelers seeking affordable accommodation with social and event experiences. The website is built on TYPO3 CMS and hosted on Apache servers, with a modern but basic technical infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. The site includes privacy and cookie policies with a consent mechanism, but lacks explicit contact information and advanced security policies. Matomo analytics is used with cookie-less tracking, indicating some privacy awareness. Overall, the website is functional and professionally designed but requires urgent security improvements to protect user data and enhance trust.

S

Sanochemia Pharmazeutika GmbH

sanochemia.at

20

Sanochemia Pharmazeutika GmbH is an established Austrian pharmaceutical manufacturer specializing in contrast agents for medical imaging, including MRI and CT products, with a focus on gadolinium-free alternatives to enhance patient safety. The company operates globally with distribution in over 50 countries and offers contract manufacturing and API production services. The website is built on WordPress with modern plugins and multilingual support, providing a professional and content-rich user experience. However, the absence of a valid SSL certificate is a critical security gap, exposing users to potential risks. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. Overall, the business presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to improve security posture.

U

Università degli Studi Internazionali di Roma - UNINT

unint.eu

37

Università degli Studi Internazionali di Roma - UNINT is a large, established higher education institution based in Italy, offering a wide range of undergraduate and graduate programs with a strong international focus. The website is professionally designed, content-rich, and targets students, faculty, and academic partners. The technical infrastructure is based on WordPress with modern plugins and frameworks, though performance is somewhat slow. Security posture is basic with critical issues such as an invalid SSL certificate and lack of security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy but requires immediate attention to SSL and security configurations to enhance user trust and data protection.

S

Swimsol GmbH

swimsol.com

28

Swimsol GmbH is a specialized energy company focused on providing floating and rooftop solar photovoltaic (PV) systems primarily for island environments such as the Maldives. The company positions itself as a leader in solar-at-sea technology with over 35 islands operating their systems and a significant installed capacity. Their business model includes system design, installation, operation, maintenance, and financing options, targeting luxury resorts and small businesses in tropical regions. Technically, the website is built on WordPress with a modern tech stack including Fusion Builder and WP Rocket, but lacks a valid SSL certificate, which impacts security and user trust. The site is well-designed, mobile-optimized, and SEO-friendly, with comprehensive content and strong branding. However, the absence of HTTPS and security headers represents a critical security gap. Privacy compliance is addressed with visible policies and consent mechanisms. Overall, Swimsol demonstrates a strong market presence and professional online representation but should prioritize securing their website with HTTPS and enhanced security practices.

H

HTL Braunau

htl-braunau.at

28

HTL Braunau is a well-established higher technical vocational school located in Braunau am Inn, Austria, offering specialized education in electronics, electrical engineering, mechatronics, and information technology. The institution serves approximately 1000 students and emphasizes project-based learning with national and international recognition. The website reflects a professional educational institution with clear communication channels and a focus on student engagement through events and partnerships. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and integrates Google Analytics and Tag Manager for visitor insights. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks and reducing trust. Privacy and cookie policies are present and GDPR compliant, indicating awareness of data protection requirements. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

B

bulthaup

bulthaup.com

22

bulthaup is a premium kitchen brand specializing in high-quality kitchen concepts and living space solutions. The company operates a multilingual WordPress-based website that serves as a platform for product information, dealer location, and appointment scheduling. The site targets affluent consumers and businesses seeking bespoke kitchen solutions, positioning itself as a premium retail brand with a global dealer network. Technically, the website employs modern JavaScript libraries and WordPress plugins, including hCaptcha for form security and Cookiebot for cookie consent management. However, the site lacks a valid SSL certificate and modern TLS support, which significantly weakens its security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

A

Amaris Consulting

amaris.com

25

Amaris Consulting is a well-established global technology consulting firm founded in 2007, operating across multiple sectors including technology, healthcare, finance, transportation, and energy. With a workforce of approximately 7,600 employees spread over 60 countries, it serves over 1,000 clients worldwide. The company is part of the Mantu group, which is confirmed by website footer references and structured data. The website presents a professional and consistent brand image, with comprehensive content describing its services, centers of excellence, and industry focus. Technically, the site is built on WordPress using Elementor and optimized with WP Rocket, but suffers from a critical security issue due to the lack of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is partially addressed with a clear privacy policy and GDPR-compliant contact form, but lacks a cookie consent mechanism. Overall, the site demonstrates good business credibility and user experience but requires urgent security improvements.

I

Interfood Lebensmittelgroßhandel Ges.m.b.H.

interfood.at

23

Interfood Lebensmittelgroßhandel Ges.m.b.H. is a medium-sized Austrian wholesaler specializing in international fine foods. The company emphasizes quality, freshness, and supply reliability, supported by certifications such as IFS, MSC, ASC, and organic labels. Their website targets retailers and fine food distributors, showcasing a curated product portfolio and strong logistics capabilities. Technically, the site runs on WordPress with popular plugins and themes but lacks HTTPS, which is a critical security gap. The site includes comprehensive privacy and cookie policies, indicating GDPR compliance. However, the absence of SSL/TLS significantly impacts the security posture and trustworthiness. Overall, the website is professionally designed with good content quality and user experience but requires urgent security improvements.

V

VF Corporation

vfc.com

40

VF Corporation is a large multinational retail company specializing in outdoor, lifestyle, and workwear apparel and footwear. The website presents a comprehensive portfolio of well-known brands such as Vans, The North Face, Timberland, and others, targeting consumers, investors, and job seekers. The business model focuses on brand management and retail operations with a strong emphasis on corporate responsibility and investor relations. Technically, the website uses Apache server technology, integrates Google Analytics, and leverages CDN services like Amazon Cloudfront for content delivery. The site is well-designed, mobile-optimized, and provides rich content with clear navigation and professional branding. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical vulnerability. Privacy compliance is good with a comprehensive privacy policy and terms of use, but no cookie consent mechanism was detected. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

B

BMI Productivity Solutions

bmisw.com

28

BMI Productivity Solutions is a small technology company specializing in productivity enhancement software and services, including document management, loan management, and workflow automation. Established since 1992, the company targets organizations seeking to improve business processes and compliance. Their offerings include both on-premise and cloud-hosted solutions, with cloud hosting on Microsoft Azure and a SOC 2 TYPE II certification indicating some level of security assurance. The website is built on WordPress using the Divi theme and includes plugins for performance and download management. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Other security best practices such as security headers and incident response policies are absent or not publicly disclosed. Privacy compliance is minimal, with a basic privacy policy present but no cookie policy or consent mechanism. Contact information is limited to an email address and a contact form, with no phone number or physical address provided. Overall, the website is professionally designed and content is relevant, but the lack of HTTPS and security controls significantly lowers the security posture and trustworthiness.

M

Makino Inc.

makino.com

40

Makino Inc. is a global leader in manufacturing technology, specializing in CNC machine tools including horizontal and vertical machining centers, EDM, and graphite machining centers. The company targets industrial sectors such as aerospace, automotive, medical, semiconductor, and job shops, offering comprehensive solutions including automation, software, engineering services, and support. Their market position is strong, supported by extensive product information and a global presence with regional subsidiaries. Technically, the website employs a modern tech stack with ASP.NET backend and various JavaScript libraries for enhanced user experience. It is hosted behind Cloudflare, ensuring performance and availability. The site is mobile-optimized and includes accessibility features, although performance metrics are not provided. From a security perspective, the site has several important security headers configured, but critically lacks a valid SSL certificate, resulting in no HTTPS protection. This significantly lowers the security posture and exposes users to potential risks. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, the website is professional and trustworthy in content and business representation, but the lack of HTTPS is a critical issue that should be addressed immediately to protect user data and enhance trust.

B

Byte Media GmbH

vbwienbaden.at

34

Byte Media GmbH operates a WordPress-based website providing SEO, domain trading, and digital marketing services, with a focus on banking and insurance information for Baden bei Wien. The site targets private and business customers seeking financial services in the region. The technical infrastructure relies on nginx, WordPress, jQuery, and Bootstrap, hosted on a Plesk Linux environment. While the content is well-structured and SEO-optimized, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Additionally, no cookie consent mechanism or explicit privacy compliance features are implemented, despite the use of Google Analytics and Tag Manager for tracking. Contact information is clearly presented, and social media presence is strong, enhancing business credibility. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect users and comply with privacy regulations.

T

TS-Promotion

ts-promotion.at

23

TS-Promotion is a small Austrian digital marketing company specializing in social media advertising and content creation. The website presents a professional and consistent brand image targeting marketers and content creators. It leverages WordPress with popular plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The company maintains active social media profiles on Facebook, Instagram, TikTok, and Messenger, enhancing its market presence. However, the lack of HTTPS is a critical security gap that undermines user trust and data protection. The website includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good GDPR compliance practices. Contact options include an email address and a contact form, but no phone number or physical address is provided.

R

Rexel

rexel.com

40

Rexel is a global leader in multichannel distribution for the energy sector, providing sustainable and innovative solutions to professional customers worldwide. The company operates in 17 countries with nearly 2,000 branches and a workforce of approximately 27,000 employees. Their business model focuses on supporting electricians, installers, commercial and industrial companies, and suppliers with a broad portfolio of energy-related products and services. The website reflects a mature digital presence with comprehensive content, investor relations, and sustainability commitments. Technically, the site is built on WordPress with modern SEO plugins and integrates multiple analytics and marketing tools. However, the absence of a valid SSL certificate and HTTPS support is a critical security deficiency that undermines user trust and data protection. The site implements strong cookie consent mechanisms and complies with GDPR requirements, but lacks explicit security policies or incident response information. Overall, Rexel's website demonstrates high professionalism and business credibility but requires urgent security improvements to align with best practices.

E

Extreme Networks

enterasys.com

39

Extreme Networks is a leading enterprise technology company specializing in AI-powered cloud networking solutions that simplify and secure IT infrastructure. The company holds a strong market position as a Gartner Magic Quadrant Leader for wired and wireless LAN infrastructure. Their key services include the Extreme Platform ONE™, network fabric, cloud-based network management, and comprehensive security solutions. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and rich content tailored for enterprise IT professionals and partners. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that must be addressed to ensure secure communications and trust. Privacy compliance is well managed with comprehensive policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and well-structured but requires immediate improvements in SSL/TLS configuration to enhance security.

W

WIFI Wien

wifiwien.at

35

WIFI Wien is a prominent educational institution based in Austria, offering a comprehensive range of adult education courses and training programs across multiple sectors including business, health, IT, management, and languages. The website demonstrates a strong market position with extensive course offerings, a user-friendly interface, and integration of modern web technologies. However, the absence of a valid SSL/TLS certificate and lack of HTTPS significantly undermines the site's security posture, exposing users to potential risks. While privacy and cookie policies are well implemented with consent mechanisms, the technical security measures require urgent enhancement to meet modern standards. Overall, WIFI Wien presents a professional and trustworthy educational platform but must prioritize securing its web infrastructure to protect user data and maintain compliance.

G

Graz-Köflacher Bahn und Busbetrieb GmbH

gkb.at

23

Graz-Köflacher Bahn und Busbetrieb GmbH (GKB) is a regional transportation company based in Austria, providing rail and bus services primarily in the West Styria region. The company has a long history dating back to 1935 and focuses on sustainable mobility solutions including electrification of rail lines and regional bus services. Their website serves as an information portal for passengers, offering schedules, fare information, and service updates. The company maintains an active social media presence and provides comprehensive privacy and cookie policies in compliance with GDPR. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS and modern TLS protocols exposes users to potential risks. Despite this, the site is well-structured, mobile-optimized, and provides clear contact information. Overall, the business is credible and well-established, but the website's security posture requires urgent improvement to protect user data and maintain trust.

V

Vapiano Franchising s.r.o.

vapiano.com

37

Vapiano is an established international hospitality brand specializing in fresh handmade pasta, pizza, and salads served in a casual dining environment. Founded in 2002, the company operates a franchise business model with over 155 global restaurants. The website reflects a professional brand presence with consistent design and clear navigation targeting consumers seeking quality Italian cuisine in a relaxed setting. Technically, the site is built on WordPress hosted on WP Engine and protected by Cloudflare, utilizing common web technologies such as jQuery, Google Tag Manager, and Google Maps API. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility but requires urgent security improvements to meet modern standards.

Raiffeisen Landesbank Kärnten is a prominent regional bank in Austria, specializing in comprehensive financial services for private and corporate clients. The website reflects a mature digital presence with extensive service offerings including corporate banking, private banking, investment, insurance, and online banking solutions. The bank emphasizes personalized service and regional economic support, positioning itself as a trusted partner for businesses and individuals in Carinthia. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and includes advanced cookie consent management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. Privacy policies and legal documents are well presented, supporting GDPR compliance. Overall, the site is professional and trustworthy but urgently requires remediation of its SSL/TLS configuration to ensure secure communications and maintain customer trust.

A

acccoi partners GmbH

acccoi.com

27

acccoi partners GmbH is a small technology-focused company based in Austria specializing in enabling corporate business development through startup collaboration, corporate accelerators, and co-innovation programs. Established since 2012, the company targets large corporates and startups seeking innovation partnerships. The website is built on WordPress using Elementor and several plugins for SEO and marketing, but lacks HTTPS which is a critical security shortfall. The site includes standard legal pages and contact mechanisms, including a contact form and social media links. However, Google Analytics is installed but not configured, and performance metrics are unavailable. Security posture is weak due to missing SSL/TLS and security headers, exposing the site to risks. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

F

Fair Finance

fairfinance.org.uk

38

Fair Finance is a UK-based direct lender specializing in affordable personal loans up to £3000, targeting individuals including those with bad credit or on benefits. The company emphasizes social impact and financial advice, operating with FCA authorization. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as Google Analytics, Tag Manager, Hotjar, and Trustpilot for reputation management. Despite a professional design and clear business information, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy and terms of service pages are present and comprehensive, but no cookie consent mechanism is implemented despite tracking scripts being active. Contact information including phone and physical address is clearly provided, enhancing business credibility.

H

HICO

hico-ics.com

39

HICO is a specialized provider of Integrated Product Support (IPS) business solutions targeting sectors such as civil and military aviation, security and defence, shipbuilding, rail, and IT solutions. Their offerings include engineering support, maintenance planning, supply support, IPS management, technical documentation, and training services. The company positions itself as a niche player with a focus on maximizing system availability and cost optimization. The website is professionally designed using WordPress CMS with modern plugins and SEO optimizations, though performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, lack of security headers, and missing advanced SSL features. Privacy compliance is adequate with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by detailed service descriptions and consistent branding, but contact information lacks explicit phone numbers or direct emails on the homepage. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

C

Collini gruppe

collini.eu

25

Collini gruppe is a well-established European leader in surface technology, specializing in industrial coatings for metals and plastics. With over 125 years of experience, the company offers a broad range of surface treatment processes including anodizing, precious metal coatings, galvanizing, and organic coatings. The website targets industrial clients across sectors such as automotive, medical, and machinery manufacturing, emphasizing customized surface solutions to enhance product success. The business model is B2B with a strong international presence, supported by multiple global locations and a large workforce. The website content is rich, professionally designed, and well-structured, supporting multiple languages and providing detailed service information and contact options.

E

EVOLUXER

evoluxer.com

17

EVOLUXER is a Spanish consultancy company specializing in the comprehensive management of international tenders. The company targets businesses and public/private entities seeking to expand their international presence and develop new projects globally. Their services include advisory, administrative, and financial management throughout the project lifecycle, with experience working alongside major multilateral organizations such as EuropaAid, the World Bank, and the Inter-American Development Bank. The website reflects a professional and consistent brand image with clear contact information and relevant business content. Technically, the site is built on WordPress using Elementor and related plugins, but suffers from slow load times and lacks modern security configurations such as HTTPS and security headers. The absence of a valid SSL certificate and security policies represents a significant security risk. Privacy compliance is basic, with privacy and cookie policies present but lacking consent mechanisms. Overall, the website demonstrates moderate business credibility but requires urgent improvements in security and technical performance to enhance trust and user experience.

M

MAN Truck & Bus Vertrieb Österreich GmbH

mantruckandbus.at

36

MAN Truck & Bus Vertrieb Österreich GmbH operates a comprehensive commercial vehicle website targeting the Austrian market, offering trucks, buses, transporters, and related services. The website demonstrates a strong market position with extensive product information, digital services, and customer engagement tools such as configurators and contact forms. The technical infrastructure leverages modern web technologies including AWS CloudFront CDN, Bootstrap, and jQuery, ensuring a responsive and user-friendly experience. However, the absence of HTTPS and a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

C

Continental Trading GmbH

wetrade4you.at

20

Continental Trading GmbH operates as a specialized retailer of used printing and finishing machines, rooted in Salzburg, Austria, with an international customer base. The website presents basic information about the business and its offerings but lacks comprehensive contact details and legal policies. The technical infrastructure relies on Apache web server with Plesk hosting, AngularJS framework, jQuery, and Bootstrap for frontend, and uses Google Analytics for visitor tracking with IP anonymization enabled. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. No privacy or terms of service policies are present, indicating compliance gaps with GDPR and other regulations. Overall, the website is functional but exhibits outdated technology and security weaknesses that require urgent remediation.

B

BE-terna

terna.com

40

BE-terna is a medium-sized technology solutions provider specializing in modern business software solutions including ERP, CRM, business intelligence, AI, and automation. The company partners with leading global technology providers such as Microsoft, Infor, Qlik, and UiPath, positioning itself as a trusted partner for digital transformation across multiple industries including manufacturing, retail, energy, and financial services. The website reflects a professional and comprehensive digital presence with strong branding and customer trust signals. Technically, the site uses modern JavaScript libraries and CMS technologies but suffers from an invalid SSL certificate which impacts its security posture. Security headers are well configured but the lack of a valid HTTPS setup and cookie consent mechanism are notable gaps. The site does not expose contact emails or phone numbers explicitly but provides contact forms and social media channels for engagement. Overall, the business appears legitimate and well-established with a consistent domain registration and partnership ecosystem.

L

Linde Material Handling Austria

linde-mh.at

40

Linde Material Handling Austria is a leading provider of material handling equipment and solutions, including forklifts, automated vehicles, and digital fleet management products. The company targets businesses requiring efficient logistics and warehouse operations, offering new, used, and rental equipment alongside comprehensive service packages. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the site uses JavaScript, jQuery, and tracking tools like etracker and SalesViewer, hosted likely on Microsoft Azure. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Business credibility is strong, supported by certifications and consistent domain registration data. Overall, the site is functional and professional but requires urgent security improvements to protect users and maintain trust.

O

OVIVO Inc.

ovivowater.com

40

Ovivo Inc. is a well-established global leader in sustainable water treatment solutions with over 150 years of expertise. The company provides a comprehensive portfolio of equipment, technology, and services targeting industrial, municipal, and electronics sectors. The website reflects a mature digital presence with multilingual support and rich content tailored for B2B audiences. Technically, the site is built on WordPress with modern SEO and analytics tools, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, Ovivo demonstrates strong business credibility and professionalism but must urgently address its SSL/TLS configuration to improve security posture and user trust.

C

Clariant Ltd.

clariant.com

40

Clariant Ltd. is a leading global specialty chemicals company focused on delivering innovative and sustainable chemical solutions across multiple industries including energy, manufacturing, and plastics. The website reflects a mature enterprise with comprehensive content, strong branding, and a clear business model targeting industrial customers, investors, and job seekers. Technically, the site is built on a modern CMS platform (Sitecore) and integrates multiple marketing and analytics tools, demonstrating a high level of digital maturity. However, the absence of a valid SSL/TLS certificate and disabled TLS protocols represent a critical security weakness that undermines user trust and data protection. While security headers and privacy policies are well implemented, the lack of HTTPS significantly lowers the overall security posture. Strategic improvements in SSL deployment and enhanced incident response documentation would strengthen the site’s security and compliance standing.

T

TableConnect GmbH

tableconnect.net

22

TableConnect GmbH is a technology company specializing in the design and manufacture of large-scale interactive touch products such as Multi Touch Tables, Digital Blackboards, and Touchscreen Modules. Their products target enterprises, retail, hospitality, and media sectors, serving notable clients including Fortune 500 companies. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. However, the lack of HTTPS and modern security headers represents a critical security gap. Privacy policies and terms are present, but cookie consent mechanisms are missing. Overall, the company demonstrates a credible market position with strong branding and client trust signals.

D

DYWIDAG Dyckerhoff & Widmann GmbH

dywidag.at

23

DYWIDAG Dyckerhoff & Widmann GmbH is a well-established construction company operating primarily in Austria and Southern Bavaria, specializing in general contracting and complex construction projects. The company holds multiple recognized certifications such as ISO 9001, ISO 45001, and compliance management certifications, underscoring its commitment to quality and safety. Their website reflects a professional business with a clear focus on construction services, career opportunities, and regional presence through multiple offices. The target audience includes construction clients and partners within the real estate and building sectors in Austria. Technically, the website is built on WordPress with common plugins and frameworks, including Visual Composer and Slider Revolution, and integrates Google Analytics and marketing pixels for user tracking. However, the site suffers from slow performance and outdated SSL/TLS configuration, lacking a valid HTTPS certificate, which is a critical security concern. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Contact information is clearly provided with multiple channels and locations. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

E

esarom gmbh

esarom.com

40

esarom gmbh is a medium-sized manufacturing company based in Austria specializing in the development of compounds, flavours, extracts, and ingredients for the beverage and food industries. The company positions itself as a global partner in taste, serving a broad international market with a strong export rate exceeding 80%. Their business model focuses on B2B partnerships, providing tailored flavour solutions and full-service support to manufacturers worldwide. The website reflects a professional and well-branded presence with multilingual support and detailed partner network information. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, multilingual support, and user experience enhancements. However, the site suffers from a critical security misconfiguration: it lacks a valid SSL certificate and does not properly support HTTPS, which significantly undermines its security posture. Despite this, the site implements several security headers and content policies that indicate an awareness of security best practices. From a security perspective, the absence of HTTPS and TLS protocols is a major vulnerability, exposing users to potential interception and undermining trust. The site lacks explicit incident response or vulnerability disclosure policies, and no cookie consent mechanism was detected, which may impact privacy compliance. The presence of certifications such as halal, kosher, and organic, along with transparent contact information and a global partner network, enhance business credibility. Overall, while the business and content quality are strong, the technical and security shortcomings, especially the missing SSL certificate, pose significant risks. Strategic improvements in SSL deployment, privacy mechanisms, and incident response transparency are recommended to elevate the site's trustworthiness and compliance.

T

TicketLens GmbH

ulmon.com

37

TicketLens GmbH operates a travel-focused media and ticket comparison platform primarily targeting travelers seeking tickets, tours, and activities worldwide. The website provides travel app reviews and curated travel content to support its audience. The business model centers on affiliate marketing and price comparison, positioning TicketLens as a niche player in the travel media sector. Technically, the site is built on WordPress with common SEO and performance plugins, hosted on WP Engine, and uses privacy-conscious analytics via Plausible. However, the absence of a valid SSL certificate and HTTPS support represents a critical security gap, exposing users to potential risks. Privacy compliance is basic, with privacy and terms pages present but lacking explicit GDPR compliance indicators or cookie consent mechanisms. Contact information is limited to email and social media, with no phone or physical address provided. Overall, the website is functional and content-rich but requires urgent security improvements to protect user data and enhance trust.

S

softwareXperts GmbH

sw-xperts.com

40

softwareXperts GmbH is a medium-sized IT recruitment company operating primarily in Austria and Germany, with over 20 years of experience connecting IT professionals with companies. Their website targets both IT candidates and companies seeking talent, offering job and project placement services. The company positions itself as a trusted partner with local expertise and a strong market presence in the technology recruitment sector. Technically, the website is built on TYPO3 CMS with modern frontend libraries like Bootstrap and GSAP, providing a good user experience and mobile optimization. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security flaw. Security headers are well implemented but undermined by the absence of HTTPS. Privacy and cookie policies are present and GDPR compliant, with HubSpot used for marketing and analytics. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

L

Laakirchen Papier AG

heinzelpaper.com

26

Heinzelpaper, operated by Laakirchen Papier AG, is a well-established paper manufacturing company with a history dating back to the late 19th century. As a subsidiary of the Heinzel Group, it focuses on sustainable paper production, renewable energy integration, and wood processing. The company targets business customers in the packaging and paper sectors, emphasizing sustainability and circular economy principles. The website reflects a professional business presence with clear navigation and relevant content, though it lacks advanced SEO and accessibility features. Technically, the website uses common web technologies such as nginx, jQuery, Bootstrap, and FontAwesome. However, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. The site lacks modern TLS protocols, HSTS, and other security headers, exposing it to potential risks. Performance is rated slow, and while mobile optimization is good, accessibility and SEO are basic. From a security perspective, the lack of HTTPS is a critical vulnerability that undermines user trust and data protection. No incident response or security policy information is provided, and no vulnerability disclosure or security.txt files are found. Cookie consent and privacy policies are implemented, indicating some compliance with GDPR requirements. Overall, the website presents a moderate risk profile due to its security deficiencies, despite good business credibility and content quality. Strategic improvements in SSL deployment, security headers, and incident response transparency are recommended to enhance trust and compliance.

SCAG Power Equipment is a well-established manufacturer specializing in commercial and residential lawn care machinery, including zero-turn riding mowers, electric mowers, stand-on mowers, and various attachments. The company operates a comprehensive dealer network and offers financing options and warranty programs, positioning itself as a trusted brand in the lawn equipment manufacturing sector. The website reflects a mature digital presence built on WordPress with WooCommerce and Elementor, providing rich product information and user-friendly navigation. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Marketing and tracking tools such as Google Tag Manager, Meta Pixel, and LinkedIn Insight Tag are actively used, with appropriate cookie consent mechanisms in place, indicating good privacy compliance. Overall, while the business and content quality are strong, immediate attention to security infrastructure is necessary to enhance the website's trustworthiness and compliance.

H

Hackabu Growth Consulting

hackabu.com

40

Hackabu Growth Consulting is a specialized digital marketing and growth consulting firm based in Austria, serving both B2C and B2B clients. The company offers a broad range of services including online marketing, marketing automation, performance marketing, programmatic advertising, social recruiting, AI consulting, and workshops. Their market position is that of a leading online marketing and growth consultancy with a strong focus on data-driven strategies and innovative technologies. The website is professionally designed, content-rich, and targets businesses seeking growth through digital channels. Technically, the site is built on WordPress with Elementor and uses various modern web technologies and optimization tools. However, a critical security issue is the absence of a valid SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the business credibility is high, supported by clear contact information, social media presence, and client logos. Strategic recommendations include immediate SSL implementation and enhancement of security configurations to protect user data and improve trust.

A

ABAX Informationstechnik GmbH

abax.at

27

ABAX Informationstechnik GmbH is a well-established Austrian IT service provider with over 25 years of experience, offering a broad portfolio of IT infrastructure, support, security, and data analytics services. The company is part of the Roxcel Group, enhancing its enterprise readiness and market credibility. The website is professionally designed, content-rich, and targets businesses of various sizes seeking comprehensive IT solutions. Technically, the site uses WordPress with Elementor and integrates modern marketing and consent tools, but suffers from a critical lack of valid SSL/TLS configuration, impacting security posture significantly. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business presents a trustworthy and professional image, though security improvements are urgently needed.

E

ECOTEC GmbH

ecotec.at

21

ECOTEC GmbH is a small Austrian company founded in 1992 that supports European companies in establishing a presence in East Africa by managing communication and partnerships during initial phases. The company has a niche market position with a long history in development cooperation and consultancy. The website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, showing moderate digital maturity but suffers from slow performance and lacks modern security configurations. Critically, the site does not have a valid SSL certificate or HTTPS enabled, exposing visitors to security risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional but requires urgent security improvements to protect users and improve trust.

R

Ramar Record Retention, LLC

ramarrecords.com

22

Ramar Record Retention, LLC is a small business specializing in document and record storage, management, and secure shredding services primarily serving Maryland and surrounding areas. The company offers a range of services including records management, indexing, retention scheduling, and transportation. The website is built on Drupal 7 and incorporates modern web technologies such as Google reCAPTCHA and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and lack of HTTPS significantly weaken the security posture. While some security headers are present, critical best practices such as HSTS and OCSP stapling are missing. The website lacks published privacy, cookie, and security policies, which impacts privacy compliance and user trust. Overall, the site is functional with good content quality and navigation but requires urgent security improvements to protect user data and enhance credibility.

Moncler Group is a prominent luxury fashion company headquartered in Milan, Italy, operating key brands such as Moncler and Stone Island. The website serves as a corporate portal providing investor relations, sustainability information, and brand insights. The company targets investors, luxury consumers, and stakeholders interested in corporate governance and sustainability. Technically, the site is built on WordPress with multilingual support and uses modern JavaScript libraries and tracking tools. However, the absence of a valid SSL certificate and HTTPS support significantly weakens its security posture. Privacy and cookie policies are well implemented with consent mechanisms, reflecting GDPR compliance. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect user data and enhance trust.

E

EasyAds

easyads.eu

38

EasyAds is a Dutch online marketing bureau specializing in e-commerce growth through automation, marketing optimization, and integration with marketplaces and advertising channels. The company has a solid market position supported by recognized partnerships with Channable, Google, Microsoft, and Cookiebot, and has been operating since 2006. Their services include datafeed management, marketplace integrations, advertising channel management, and managed campaign services, targeting retailers and brands seeking scalable online growth. Technically, the website is built on WordPress with Elementor and several plugins, hosted on WordPress.com's Atomic infrastructure. The site is multilingual and uses modern marketing and analytics tools, including Google Analytics and LinkedIn Insight, with a cookie consent mechanism via Cookiebot. However, the SSL certificate is invalid or missing, resulting in no HTTPS support, which is a critical security issue. Security headers are partially implemented, but TLS protocols are disabled, and no DNSSEC or CAA records are configured. Contact information is available via email, phone, and contact forms, but no explicit privacy policy or terms of service pages were found. Overall, the website is professional and content-rich but requires urgent security improvements to ensure trust and compliance.

R

Research Center Pharmaceutical Engineering GmbH

rcpe.at

25

The Research Center Pharmaceutical Engineering GmbH (RCPE) is a non-profit organization specializing in pharmaceutical process engineering, combining academic expertise from Graz University of Technology, University of Graz, and Joanneum Research GmbH. The company is positioned as a global leader in pharmaceutical innovation, providing advanced scientific solutions including simulation, AI, and quality control to pharmaceutical partners worldwide. The website reflects a professional and consistent brand image targeting pharmaceutical industry stakeholders and researchers. Technically, the site is built on WordPress with modern plugins and themes but lacks a valid SSL certificate, impacting security posture. Borlabs Cookie is used for cookie consent, indicating GDPR compliance efforts. Security best practices are partially implemented but require improvements, especially in SSL configuration and security headers. Overall, the site is trustworthy and credible but should address critical security gaps to enhance user trust and compliance.

H

Handl Tyrol GmbH

handltyrol.at

33

Handl Tyrol GmbH is a well-established Austrian family-owned company specializing in traditional Tyrolean ham, sausages, and roast specialities since 1902. The company positions itself as an ambassador of Tyrolean cuisine, offering both meat and plant-based products through retail and an online shop. The website reflects a strong brand identity with excellent content quality and clear navigation targeting consumers interested in authentic regional food products. Technically, the site employs modern JavaScript libraries and consent management tools but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, security headers, and DNS security features. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policy. Business credibility is supported by transparent contact information and trust signals such as quality guarantees and PGI certification. Overall, the site is professional but requires urgent security improvements to protect user data and enhance trust.