Security Directory

G

Geberit Gruppe

geberit.com

40

Geberit Gruppe is a leading European manufacturer of sanitary products, recognized as a market leader with a comprehensive product portfolio including installation and flushing systems, piping systems, and bathroom systems. The company targets professionals in the sanitary industry, investors, media, and career seekers, emphasizing innovation, quality, and sustainability. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Microsoft Azure, and includes a consent management system for privacy compliance. Security headers are implemented; however, the SSL certificate is currently invalid, and no modern TLS protocols are enabled, which poses a security risk. Overall, the website is professional, well-structured, and trustworthy, but the SSL issues should be addressed promptly to enhance security and user trust.

S

SoftwareOne Österreich GmbH

comparex.at

40

SoftwareOne Österreich GmbH is a leading enterprise software and cloud solutions provider with a strong global presence and local expertise in Austria. The company offers a broad range of services including cloud migration, application modernization, IT asset management, software sourcing, and customer training. Their business model focuses on B2B services, supporting digital transformation initiatives for enterprises across multiple industries. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates advanced cookie consent and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses a significant risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent improvements in SSL/TLS configuration to enhance security.

C

Ceramiche Atlas Concorde S.p.A.

atlasconcorde.com

40

Atlas Concorde is a well-established Italian manufacturer specializing in ceramic and porcelain tiles for floors, walls, outdoor spaces, furniture, and related products. The company has a mature market presence with 25 years of experience and offers a comprehensive product system including various collections and innovative technologies. The website demonstrates a high level of digital maturity with a modern tech stack based on Next.js and Vercel hosting, providing a professional and user-friendly experience across multiple languages. Security measures are in place with several HTTP security headers configured; however, the absence of a valid SSL certificate and lack of advanced SSL features like OCSP stapling reduce the overall security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website reflects a credible and professional business with a solid online presence.

S

Saffron Brand Consultants

saffron-consultants.com

32

Saffron Brand Consultants is a well-established global brand consultancy specializing in creating memorable brand experiences through strategy, design, and product delivery. With multiple international offices and a strong portfolio of clients in technology and other sectors, Saffron positions itself as a leader in brand identity and experience ecosystems. The website reflects a professional and consistent brand image with rich multimedia content and comprehensive policy documentation. Technically, the site uses modern frameworks such as Next.js and React, with CDN and video hosting integrations, but lacks HTTPS which is a critical security gap. Security headers are partially implemented but the absence of SSL/TLS severely impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, but urgent security improvements are needed to protect user data and trust.

A

Austria Center Vienna

acv.at

39

Austria Center Vienna (ACV) is Austria's largest congress center, offering extensive event spaces and modern technology in a central location in Vienna. It serves a wide range of event types including congresses, exhibitions, corporate events, product presentations, galas, and e-sports, targeting both national and international clients. The business is operated by the public company IAKW-AG and holds a strong market position with numerous awards and certifications, emphasizing sustainability and innovation. Technically, the website is built on modern frameworks like Next.js and React, hosted via Cloudflare, and integrates consent management tools such as Usercentrics. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical issue. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to protect user data and enhance trust.

R

Ricoh USA, Inc.

ricoh-usa.com

40

Ricoh USA, Inc. is a leading enterprise providing digital business services and printing solutions primarily targeting businesses, government agencies, and educational institutions in the United States. The company offers a comprehensive portfolio including managed print services, cloud and IT infrastructure, cybersecurity, and business process automation. Their market position is reinforced by industry recognitions such as being named a leader in cloud print services by Quocirca and IDC MarketScape. Technically, the website is built on modern frameworks like React and Next.js, managed via Contentful CMS, and hosted with Cloudflare DNS services. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy and cookie policies are well implemented with consent mechanisms, and contact information is readily available through multiple channels. Overall, the website demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

D

durchblicker GmbH

durchblicker.at

37

durchblicker GmbH operates Austria's largest tariff comparison portal, specializing in consumer savings on household fixed costs such as insurance, energy, finance, and telecommunications. The platform offers a broad range of comparison calculators and personalized expert consultations, positioning itself as a trusted advisor for Austrian consumers. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a strong market presence. Technically, the site leverages modern frameworks like Next.js and React, hosted on Google Cloud infrastructure with Cloudflare DNS services. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of support for modern TLS protocols, exposing users to potential risks. Privacy compliance is well addressed with clear policies and consent mechanisms, and business credibility is reinforced by strong trust signals including eKomi ratings and industry awards. Strategic improvements in SSL/TLS implementation and DNS security would significantly enhance the overall security and trustworthiness of the platform.

iSi GmbH is a well-established global manufacturer specializing in pressurized gas chargers and related solutions across automotive, components, and culinary sectors. Founded in 1867 in Vienna, the company has a strong market presence with operations in over 90 countries. The website reflects a professional digital presence using modern web technologies such as Next.js and React, supported by a Shopware 6 CMS backend. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact the security posture and user trust. Privacy compliance is well addressed with comprehensive policies and a consent management platform. The company maintains transparency through corporate policies and whistleblower mechanisms, and engages users via social media and career portals.

C

CPB Contractors

cpbcon.com.au

40

CPB Contractors is a well-established major contractor specializing in critical and complex infrastructure projects across Australia and New Zealand. The company operates as a subsidiary of the CIMIC Group and holds a leading market position in sectors such as transport, energy, and construction. Their website reflects a professional business model focused on large-scale infrastructure delivery, with key services including rail, tunneling, roads, water, and new energy projects. The target audience includes government agencies, industry partners, and prospective employees. Technically, the website is built on modern frameworks including Next.js and Material-UI, integrated with Sitecore CMS, and employs Google Analytics and Tag Manager for tracking. However, the site suffers from slow load times and lacks a valid SSL certificate, which critically impacts security and user trust. Mobile optimization and SEO are adequately addressed, but accessibility features are basic. From a security perspective, the absence of HTTPS and security headers represents a significant vulnerability. No explicit security policies or incident response contacts are published, and privacy compliance is limited despite the presence of a privacy policy. The site uses tracking technologies but lacks cookie consent mechanisms, indicating partial privacy compliance. Overall, the website is functional and professional but requires urgent security improvements, especially SSL implementation and enhanced privacy compliance, to reduce risk and improve trustworthiness.

G

GEA Group Aktiengesellschaft

gea.com

40

GEA Group Aktiengesellschaft is a leading global supplier of systems and components primarily serving the food, beverage, and pharmaceutical industries. Founded in 1881 and headquartered in Germany, GEA offers a comprehensive portfolio including machinery, plants, advanced process technology, components, and services. The company is publicly listed and recognized for its sustainability efforts, being part of major sustainability indices. Technically, the website is built on modern frameworks such as Next.js and hosted on Microsoft Azure, with a Sitecore CMS backend, providing a rich and well-structured user experience across multiple languages. However, the security posture is currently weak due to the absence of a valid SSL/TLS certificate and lack of HTTPS support, which poses significant risks to data integrity and user trust. Privacy and cookie policies are well implemented and GDPR compliant, reflecting a strong commitment to data protection. Overall, the website demonstrates high professionalism and business credibility but requires urgent improvements in its security infrastructure to align with best practices and protect its users.

S

SimCorp A/S

simcorp.com

40

SimCorp A/S is an established enterprise software provider specializing in integrated, multi-asset investment management solutions for leading asset managers globally. The company offers a comprehensive platform, SimCorp One, alongside specialized point solutions such as Axioma risk models. The website reflects a mature business with a strong market position, supported by numerous industry awards and client testimonials. Technically, the site is built on modern frameworks including Next.js and hosted on Vercel, with a headless Sitecore CMS backend, ensuring good digital maturity and user experience. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks to data confidentiality and user trust. Privacy and legal compliance are well addressed with comprehensive policies and GDPR adherence. Overall, the site is professional and credible but requires urgent security improvements to align with best practices.

I

International Workplace Group plc

iwgplc.com

40

International Workplace Group plc (IWG) is a global leader in providing hybrid working solutions through an extensive network of office spaces, coworking locations, virtual offices, and meeting rooms. The company targets businesses and professionals seeking flexible workspace options worldwide, positioning itself as the premier provider in the real estate sector for hybrid work environments. Their business model revolves around workspace-as-a-service, offering scalable and customizable solutions to meet diverse client needs. Technically, the website leverages modern frameworks such as Next.js and Sitecore CMS, hosted on Azure, with integrations including OneTrust for privacy management and Google Tag Manager for analytics. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, although performance metrics are moderate due to lack of explicit data. From a security perspective, the site exhibits several best practices including comprehensive security headers and secure cookie attributes. However, a critical issue is the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly impacts the security posture. Other vulnerabilities include disabled TLS protocols and missing HSTS enforcement. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, while the business and technical aspects of the website are robust and professional, the critical security gaps related to SSL/TLS must be addressed promptly to ensure user trust and data protection. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security headers to elevate the security posture.

EssenceMediacom is a global media agency specializing in creating breakthroughs for brands across diverse industries. With over 10,000 employees operating in 96 markets, the company offers integrated media solutions, analytics, creative futures, and specialist B2B marketing services. The website reflects a strong market position supported by a comprehensive service portfolio and global reach. Technically, the site is built on modern frameworks such as Next.js and React, hosted via Cloudflare, and uses DatoCMS for content management. While the site demonstrates good mobile optimization, accessibility, and SEO practices, performance metrics indicate slower load times that could be improved. Security posture is moderate; although security headers and content security policies are well implemented, the lack of a valid SSL certificate and disabled TLS protocols represent significant vulnerabilities. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is professional and trustworthy but requires urgent SSL and TLS improvements to enhance security and user trust.

fiskaly GmbH is a technology company specializing in cloud-based fiscalization solutions tailored for European markets including Germany, Austria, Spain, Italy, and France. Their services focus on enabling retailers and POS providers to comply with complex fiscal regulations through APIs and cloud services. fiskaly holds a strong market position as a leading provider of cloud TSS solutions in Germany and is expanding its footprint across Europe. The website demonstrates a professional, well-branded presence with comprehensive content, customer testimonials, and partner endorsements. Technically, the website is built on a modern Next.js framework hosted on Netlify, leveraging React and various marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security issue is present due to an invalid or missing SSL certificate and disabled TLS protocols, which significantly impacts the security posture. Security-wise, fiskaly implements several best practices including HSTS and security headers, and holds ISO 27001 certification, indicating a mature security framework. Despite this, the lack of a valid SSL certificate and TLS support is a major vulnerability that must be addressed urgently to protect user data and maintain trust. Overall, fiskaly presents a credible and professional business with strong compliance and technical capabilities but must remediate critical SSL/TLS issues to ensure secure and trustworthy operations online.

Electrolux is a globally recognized leader in household appliances, offering a wide range of products including cooking, cooling, laundry, vacuum cleaners, and small kitchen appliances. The website targets Finnish consumers, providing comprehensive product information, promotions, and support services. The digital infrastructure is built on modern technologies such as Next.js, ensuring a responsive and user-friendly experience. While the site employs multiple analytics and marketing tools for personalization and tracking, it maintains good privacy compliance with clear cookie and privacy policies. Security headers are implemented, but the absence of a valid SSL certificate and some advanced security features reduces the overall security posture. The domain registration aligns well with the business identity, confirming legitimacy. Strategic improvements in SSL management and enhanced security practices are recommended to strengthen trust and compliance.

F

Freshfields

freshfields.com

40

Freshfields is a leading global law firm serving the world’s biggest international organizations with comprehensive legal advisory services. The firm is well-positioned in the market with elite rankings and a strong brand presence. Their website reflects a mature digital infrastructure using modern web technologies such as React and Next.js, hosted on Cloudflare with extensive use of analytics and marketing tools. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses a critical risk to secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure client interactions.

C

CloudBees, Inc.

cloudbees.com

40

CloudBees, Inc. is a leading enterprise software company specializing in continuous integration and continuous delivery (CI/CD) solutions, primarily based on Jenkins. The company offers a comprehensive suite of DevOps tools and platforms designed to accelerate software delivery, improve developer productivity, and ensure security and compliance at scale. CloudBees holds a strong market position as the #1 Jenkins enterprise CI/CD platform provider, serving large enterprises globally with a focus on technology sectors. Their business model includes SaaS and on-premises offerings, targeting enterprise development teams and IT executives. Technically, CloudBees employs modern web technologies such as React and Next.js, hosted on AWS infrastructure with integrations to major cloud providers. The website demonstrates good digital maturity with responsive design, SEO optimization, and accessibility considerations. Marketing and analytics tools are implemented with user consent mechanisms, reflecting privacy compliance. From a security perspective, while the website implements multiple security headers and policies, a critical issue is the invalid or missing SSL certificate and disabled TLS protocols, which significantly impact the security posture. The company maintains security policies, incident response contacts, and certifications such as SOC 2 and ISO 27001, indicating a mature security framework. However, immediate remediation of SSL and TLS configurations is necessary to protect user data and maintain trust. Overall, CloudBees presents a professional and trustworthy online presence with strong business credibility and technical infrastructure. Addressing the SSL and TLS issues will elevate their security posture and align with their enterprise-grade offerings.

U

UNTHA shredding technology GmbH

untha.com

29

UNTHA shredding technology GmbH is a well-established manufacturer specializing in industrial shredding machines for various waste and recycling applications. With over 50 years of experience and a global presence including subsidiaries in the US, the company offers tailored shredding solutions for materials such as residual wood, metal, plastics, electronic waste, and more. The website reflects a professional and comprehensive digital presence with detailed product information and customer testimonials. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS CloudFront, and integrates privacy and analytics tools such as Cookiebot, Google Tag Manager, and Matomo. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that significantly impacts the site's security posture. Security headers are properly configured, but the lack of TLS protocols and certificate transparency compliance are notable vulnerabilities. Overall, the site is trustworthy and business credible but requires urgent security improvements to protect user data and enhance trust.

D

Dorner Electronic GmbH

dorner.at

35

Dorner Electronic GmbH is a medium-sized Austrian company specializing in technology and software solutions for concrete manufacturers, including ready-mix, precast concrete, dry batch, and bulk material sectors. The company positions itself as a European market leader with a global presence through subsidiaries and partner networks. Their offerings include automation solutions, software products, and apps that digitalize and optimize production processes from order to invoicing. Technically, the website is built on modern frameworks such as Next.js and React, hosted on HostingHub Cloud, and demonstrates good mobile optimization and SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

Tommy Hilfiger is a globally recognized fashion brand offering a wide range of apparel and accessories for men, women, and children through its official online shop. The website targets fashion-conscious consumers and provides a comprehensive e-commerce platform with seasonal collections, sales, and a membership program. The technical infrastructure leverages modern web technologies including Next.js, React, and Contentstack CMS, supported by a robust CDN via Akamai and integrated with multiple third-party services for analytics, marketing, and payment processing. Despite strong security header implementations, the absence of a valid SSL certificate and lack of HTTPS significantly undermines the security posture of the site. Privacy and cookie policies are well documented and indicate GDPR compliance. Overall, the website demonstrates a high level of professionalism and business credibility but requires urgent attention to its SSL configuration to ensure secure user interactions.

P

ProSiebenSat.1 PULS 4

atv.at

37

ATV.at is the official website of the Austrian TV channel ATV, operated under the parent company ProSiebenSat.1 PULS 4. The site offers streaming of live TV, video on demand, and detailed program guides, targeting German-speaking audiences interested in entertainment and reality TV. The business model is primarily advertising-driven, leveraging partnerships with streaming platforms like JOYN to deliver content. The website demonstrates a high level of digital maturity with modern web technologies such as React and Next.js, providing a responsive and user-friendly experience across devices. However, the site currently lacks a valid SSL certificate, which is a critical security gap. While privacy and legal policies are comprehensive and GDPR compliant, the absence of HTTPS and security headers reduces the overall security posture. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in SSL implementation and security headers are recommended to enhance user trust and compliance.

Digital Realty Trust operates a global platform of data centers and colocation services under the PlatformDIGITAL® brand, serving a broad range of enterprise, cloud, and network customers. The company is a market leader with a large global footprint, extensive certifications, and a strong partner ecosystem including AWS, Google Cloud, IBM, Oracle, NVIDIA, HPE, and Microsoft Azure. The website content is rich, professionally designed, and well-structured, targeting enterprises needing secure, scalable, and interconnected IT infrastructure. Technically, the site uses modern frameworks like Next.js and React, with integrations for marketing and analytics tools such as Marketo and VWO. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that impacts trust and security. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the site demonstrates high business credibility but requires urgent improvements in SSL/TLS configuration to enhance security.

Takeda Pharmaceutical Company Limited is a leading global biopharmaceutical company headquartered in Japan, focused on research, development, and commercialization of innovative medicines across multiple therapeutic areas including oncology, rare diseases, neuroscience, and vaccines. The website serves a diverse audience including patients, healthcare professionals, investors, and job seekers, offering comprehensive corporate, scientific, and investor information. Technically, the site is built on modern frameworks such as Next.js and hosted on Vercel with Cloudflare CDN, ensuring good performance and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. Privacy and cookie policies are well implemented with consent mechanisms, and the site demonstrates good compliance with GDPR. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

W

wikifolio Financial Technologies AG

wikifolio.com

37

wikifolio Financial Technologies AG operates a sophisticated online investment platform focused on European stocks and social trading. The platform enables investors worldwide to access trading ideas, create virtual portfolios, and invest in wikifolio certificates listed on stock exchanges in Germany, Austria, and Switzerland. The company is well-positioned in the European finance sector with a medium-sized operation and a strong brand presence supported by partnerships and positive testimonials. Technically, the website leverages modern web technologies including React, Next.js, and Chakra UI, hosted on Azure infrastructure with CDN support for performance. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a professional user experience. From a security perspective, the site currently lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability. Security headers are partially implemented but key features like HSTS and OCSP stapling are missing. Privacy compliance is strong with comprehensive policies and clear contact information, but incident response and security policy disclosures are absent. Overall, the website presents a trustworthy and professional business front but requires urgent improvements in SSL/TLS security to protect user data and maintain trust. Strategic recommendations include immediate SSL certificate installation, enabling TLS 1.2+, and enhancing security headers and incident response readiness.

T

TRIGO GmbH

trigo.at

39

TRIGO GmbH is a specialized technology company focused on delivering tailored software solutions that bridge user-centric design with technical expertise. Their market position is that of a cloud-native expert, offering key services such as Data System Development (notably Exosphere), OpenShift consulting and migration, and Single Sign-On solutions leveraging Keycloak. The company targets businesses seeking to scale IT infrastructure, integrate applications, and leverage data effectively. Technically, the website is built on modern frameworks like Next.js and Chakra UI, hosted on Vercel, but lacks HTTPS which is a critical security shortfall. The absence of SSL/TLS exposes the site to risks and undermines trust. Security headers are present but insufficient without HTTPS. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

BMO Global Asset Management (BMO GAM) is a leading Canadian asset manager offering a broad range of investment products including mutual funds, ETFs, and alternative products. The website clearly targets investors, advisors, and institutional clients, reflecting a mature and well-established financial services business. The company operates under the larger Bank of Montreal (BMO) umbrella, reinforcing its market position and credibility. Technically, the website leverages modern web technologies such as Next.js and integrates with Adobe Launch and OneTrust for marketing and compliance. Hosting is provided via Akamai CDN, ensuring global content delivery. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant technical and security shortcomings that undermine user trust and data protection. From a security perspective, while some security headers like HSTS and X-Frame-Options are present, the lack of HTTPS and modern TLS support is a critical vulnerability. No published security policies, incident response contacts, or vulnerability disclosure mechanisms were found, indicating gaps in security transparency and readiness. Overall, the website is professionally designed and content-rich, but the lack of proper SSL/TLS configuration and security disclosures lowers its security posture and trustworthiness. Strategic improvements in SSL deployment, security policy publication, and DNS security would significantly enhance the site's security and compliance standing.

K

Konica Minolta Business Solutions Austria GmbH

konicaminolta.at

40

Konica Minolta Business Solutions Austria GmbH operates as a leading technology and managed service provider specializing in intelligent workplace solutions, printing systems, cloud services, and IT infrastructure management. The company holds a strong market position in Austria and the DACH region, supported by a broad portfolio including multifunctional printers, professional printing, enterprise software, cybersecurity, and healthcare solutions. Their business model leverages direct sales and a partner network to serve a diverse business clientele. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, with a CMS likely powered by Contentstack. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is currently slow. Analytics and consent management tools like Google Tag Manager and Usercentrics are integrated, indicating a mature digital infrastructure. From a security perspective, the absence of a valid SSL certificate and HTTPS support is a critical vulnerability, severely impacting the site's security posture. While some security headers are present, the lack of TLS protocols and session management features exposes the site to risks. Privacy compliance is strong, with comprehensive policies and consent mechanisms in place. Overall, the site is professionally designed and content-rich, reflecting a reputable business. However, the critical lack of HTTPS undermines trust and security, necessitating urgent remediation to protect users and maintain compliance.

A

Arduino

arduino.cc

40

Arduino is a globally recognized open-source electronics platform that empowers makers, professionals, and educators to innovate with accessible hardware and software solutions. The company maintains a strong market position with a comprehensive product portfolio including hardware boards, cloud services, and educational resources. Their digital infrastructure leverages modern web technologies such as Next.js and DatoCMS, hosted on AWS and delivered via Cloudflare CDN, ensuring a robust and scalable online presence. Despite a rich content offering and professional design, the website currently suffers from critical SSL/TLS misconfigurations that undermine its security posture. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, Arduino demonstrates high business credibility and technical maturity but should urgently address SSL certificate validity and TLS protocol support to enhance security and trust.

R

Rendity GmbH

rendity.com

39

Rendity GmbH operates a leading European online platform for real estate investments, enabling users to invest in rental properties and development projects starting from 100 €. The company emphasizes investor protection through regulatory compliance with electronic securities law, PCI DSS, and PSD2 standards, and offers deposit protection up to 100,000 €. The platform is technologically modern, built on Next.js and served via Cloudflare CDN, with a strong focus on user experience and mobile optimization. However, the website suffers from a critical security issue: the SSL certificate is invalid and no TLS protocols are enabled, severely impacting the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and contact information is clearly provided. The domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness.

CERATIZIT S.A. is a leading high-technology engineering group specializing in cutting tools and hard material solutions, serving industrial and manufacturing sectors globally. The company is part of the Plansee Group and maintains a strong market position supported by innovation, patents, and sustainability certifications such as the EcoVadis Gold Rating. The website reflects a professional and well-branded digital presence with comprehensive content and multilingual support. Technically, the site uses modern frameworks including Next.js and Adobe Experience Manager, supported by Akamai CDN for content delivery. However, the security posture is currently weak due to the absence of a valid SSL certificate and HTTPS support, exposing the site to potential risks. Privacy and legal compliance are well addressed with clear policies and consent mechanisms. Overall, CERATIZIT demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS security to protect users and enhance trust.

O

Octapharma Handelsges.m.b.H.

octapharma.at

40

Octapharma Handelsges.m.b.H. is a large, family-owned healthcare company based in Austria, specializing in plasma-derived medicines and therapies for rare diseases such as hemophilia, immunology, and intensive care. The company operates globally with a strong market position and offers patient support, career opportunities, and healthcare services. The website is built on modern technologies including Next.js and React, hosted on AWS infrastructure, and managed via the Storyblok CMS. It features comprehensive privacy and cookie policies with a consent mechanism powered by Usercentrics. However, the website currently lacks a valid SSL certificate and does not support HTTPS, which is a critical security concern. Security headers are partially implemented but the absence of TLS protocols and HSTS reduces the overall security posture. Contact information is primarily available via contact forms, with no explicit phone numbers or emails prominently displayed except for a support email related to internal server error reporting. Social media presence is active on LinkedIn, YouTube, and Kununu. Overall, the website is professional, content-rich, and user-friendly but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.

O

Octapharma AG

octapharma.com

39

Octapharma AG is a leading global manufacturer of human protein therapies derived from plasma and human cell lines, serving patients in over 120 countries. The company operates a large network of plasma donation centers and production facilities, emphasizing patient engagement and innovation in immunotherapy, haematology, and critical care. The website is professionally designed with comprehensive content, including employee stories, press releases, and detailed product information. Technically, the site uses modern frameworks like Next.js and is hosted on AWS infrastructure, but suffers from critical SSL/TLS configuration issues, lacking a valid certificate and modern protocol support. Security headers are partially implemented, but the absence of HTTPS severely impacts the security posture. Privacy compliance is well addressed with clear policies and a cookie consent mechanism. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and trust.

P

Peek & Cloppenburg B.V. & Co. KG

peek-cloppenburg.com

40

Peek & Cloppenburg B.V. & Co. KG is a well-established European fashion retailer with a strong presence in physical stores and online platforms. The company offers a curated selection of international and exclusive brands, targeting fashion-conscious consumers across multiple countries. Their business model focuses on multi-brand retailing with a significant footprint in Europe, supported by a comprehensive loyalty program and customer service infrastructure. Technically, the website is built on modern frameworks like Next.js and Magnolia CMS, leveraging Cloudflare for hosting and CDN services. The site is well-optimized for mobile and SEO, with good accessibility features. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which critically impacts secure communications and user trust. Privacy compliance is robust, with clear policies and consent mechanisms implemented. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

F

FH Technikum Wien

technikum-wien.at

40

FH Technikum Wien is Austria's only purely technical university of applied sciences, offering a broad and practice-oriented range of study programs. The institution holds a leading market position in Austria's technical education sector, evidenced by its top ranking in the Industriemagazin and multiple certifications including sustainability and quality management awards. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good SEO, accessibility, and user experience. However, the absence of a valid SSL certificate is a critical security gap that undermines trust and secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the institution demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to improve security posture.

D

DP+ (now part of Fusion92)

duffeypetrosky.com

26

DP+ is a marketing and innovation company recently acquired by Fusion92, positioning itself as a Midwest marketing innovation powerhouse. The website serves primarily as a landing page to announce this acquisition and redirect visitors to Fusion92's main site for further information. The business targets organizations seeking marketing and brand innovation services, operating within the media sector. The site branding is consistent and professional, reflecting the parent company's identity. Technically, the website is built using modern frameworks such as Next.js and React, hosted on Vercel, indicating a contemporary digital infrastructure. However, performance data is missing, and the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Mobile optimization is good, but accessibility and SEO optimizations are basic. From a security perspective, the absence of a valid SSL certificate and TLS protocols severely impacts the security posture. While some security headers are present, critical best practices like OCSP stapling, session resumption, and comprehensive HSTS policies are missing. No privacy or cookie policies are actively presented on the landing page, and no contact or incident response information is available, limiting compliance and user trust. Overall, the website presents moderate business credibility but suffers from critical security issues that must be addressed urgently. Strategic improvements in SSL deployment, privacy compliance, and contact transparency are recommended to enhance trust and security.

Confidex is a mature and reputable company specializing in RFID, NFC, and BLE solutions for industries, logistics, and mobility sectors. Recently acquired by Beontag, a global leader in graphic and label materials and RFID technology, Confidex strengthens its global presence and service localization. The website reflects a professional and comprehensive digital presence with strong branding and relevant content targeting industrial and supply chain customers. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS CloudFront, with good SEO and accessibility practices. However, the lack of a valid SSL certificate and HTTPS support is a critical security gap that significantly impacts the overall security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain registration data confirms the legitimacy and maturity of the business. Strategic improvements in SSL/TLS configuration and incident response readiness are recommended to enhance trust and security.

A

Avanade Inc.

avanade.com

40

Avanade Inc. is a leading global provider of cloud, AI, and advisory services focused on the Microsoft ecosystem. With over 25 years of experience and a strong market position as the world’s leading Microsoft expert, Avanade serves enterprise clients across multiple industries including technology, energy, banking, healthcare, government, and retail. The company operates globally with headquarters in the United States, Europe, and Asia, and is a subsidiary of Accenture. Their business model centers on delivering advisory, managed services, and integrated Microsoft technology solutions to help organizations unlock digital transformation and sustainability goals. Technically, Avanade’s website leverages modern frameworks such as Next.js and Sitecore CMS, hosted on Vercel and integrated with marketing and analytics tools like Adobe Launch, Google Tag Manager, and OneTrust for consent management. The site is well-designed, mobile-optimized, and rich in content, providing a professional user experience with clear navigation and comprehensive business information. From a security perspective, the website currently suffers from critical issues including the absence of a valid SSL certificate and lack of TLS protocol support, severely impacting its security posture. While security headers such as Content-Security-Policy and HSTS are present, they are not fully hardened. The presence of a vulnerability disclosure page and detailed privacy and cookie policies indicate a mature approach to compliance and security awareness, but the lack of HTTPS is a major risk. Overall, the website is highly credible and professional but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and maintain trust. Strategic improvements in security practices and continued adherence to privacy compliance will strengthen Avanade’s digital presence and risk posture.

S

sklera KG

sklera.tv

38

Sklera KG operates a technology-focused website likely offering software solutions or digital services, as indicated by the use of Next.js and references to demos and newsletters. The company is based in Austria and has maintained the domain for over 9 years, reflecting a mature business presence. However, the website content is minimal and primarily serves as a contact and demo request portal without detailed business descriptions or extensive content. The technical infrastructure leverages modern frameworks but lacks critical security implementations such as HTTPS, valid SSL certificates, and security headers, which significantly undermine the site's security posture. Additionally, the absence of privacy and cookie policies indicates poor compliance with data protection regulations. Overall, the website presents a basic digital footprint with moderate business credibility but requires urgent security and compliance improvements to enhance trust and protect user data.

Ottobock is a well-established enterprise in the healthcare sector specializing in orthotics, prosthetics, and related mobility solutions. The company offers a broad range of products and services including prosthetics, orthotics, exoskeletons, adaptive sports programs, and veteran support. Their market position is strong, supported by a comprehensive digital presence and a global footprint. Technically, the website leverages modern frameworks such as Next.js and React, integrated with Contentful CMS and various analytics and marketing tools, indicating a mature digital infrastructure. However, a critical security issue is the absence of a valid SSL/TLS certificate, which undermines the security posture and user trust. Privacy compliance is robust with clear policies and consent management mechanisms in place. Overall, the website is professional, content-rich, and user-friendly but requires urgent attention to its SSL configuration to ensure secure communications.

Plansee SE is a globally recognized manufacturer specializing in refractory metals such as molybdenum, tungsten, and tantalum, serving high-tech industries including electronics, aerospace, and energy. With a century of experience and multiple production sites worldwide, Plansee positions itself as a leader in high-performance materials and sustainable manufacturing solutions. The website reflects a mature digital presence built on Adobe Experience Manager and Next.js, leveraging Akamai CDN and Google Tag Manager for performance and analytics. However, the current lack of a valid SSL certificate and disabled TLS protocols represent critical security vulnerabilities that undermine user trust and data protection. Despite these issues, the site maintains comprehensive privacy and cookie policies aligned with GDPR, and showcases certifications like EcoVadis Gold and ASML Sustainability Excellence Award, reinforcing its market credibility. Strategic improvements in SSL/TLS deployment and enhanced security configurations are recommended to elevate the overall security posture and user confidence.

G

GoDaddy Operating Company, LLC

alliedpanels.com

38

The website alliedpanels.com is a domain aftermarket sales landing page hosted and operated under GoDaddy's platform. It offers the domain for sale with options to buy now, lease to own, or make an offer. The site targets domain investors and businesses seeking premium domain names, leveraging GoDaddy's trusted marketplace and brokerage services. The business model is focused on domain sales and brokerage within the e-commerce sector, supported by GoDaddy's large market presence and infrastructure. Technically, the site is built using modern JavaScript frameworks such as React and Next.js, hosted on AWS infrastructure. However, the site suffers from slow load times and lacks a valid SSL certificate, resulting in no HTTPS support. While the design and user experience are good and mobile optimized, the absence of HTTPS and security headers significantly weakens the security posture. Security evaluation reveals critical issues including no valid SSL certificate, no HSTS, and missing security headers, which expose users to potential risks. Privacy compliance is supported by comprehensive GoDaddy privacy and cookie policies, with GDPR compliance indicated. Contact information is limited but present via phone and contact form. Overall, the site is legitimate and consistent with domain aftermarket sales but requires urgent security improvements. Strategically, the site should prioritize obtaining and configuring a valid SSL certificate to enable HTTPS, implement security headers, and improve performance to enhance trust and user experience. These steps will strengthen the security posture and align with best practices for e-commerce platforms.

D

Domains By Proxy, LLC (registrant proxy), actual company name not explicitly stated

frill.co

60

Frill.co is a SaaS platform specializing in customer feedback, product roadmaps, announcements, and surveys, targeting startups, charities, and entrepreneurs. The company positions itself as an independent and bootstrapped alternative to competitors like Canny and Beamer, offering a web app and widget for seamless customer feedback management. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience and strong trust indicators such as customer testimonials and third-party review ratings. Technically, the site is built on modern frameworks including Next.js and React, hosted on AWS infrastructure, and integrates multiple analytics and marketing tools. However, the website suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site demonstrates a mature business presence but requires urgent security improvements to protect user data and enhance trust.

Interacty is a mature SaaS platform specializing in interactive content and gamification solutions for education and business sectors. It offers a wide range of interactive activities including quizzes, games, and lead generation tools, supported by a modern web infrastructure built on React and Next.js. The platform targets educators, marketers, publishers, and brands globally, with multi-language support and a strong user base. Despite its comprehensive offerings and professional design, the website suffers from critical security issues due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy and cookie policies are well implemented, reflecting GDPR compliance awareness. Overall, Interacty presents a strong business proposition but requires urgent security improvements to protect user data and maintain trust.

S

StackJobs

stackjobs.io

59

StackJobs is a specialized job board platform launched in 2024, focusing on frontend developer roles filtered by actual technology stack requirements such as React, Vue.js, Angular, and Svelte. The platform aggregates job listings directly from company career pages, bypassing recruiters, and offers features like job alerts, job saving, and frequent job extraction. The business targets frontend developers seeking precise job matches, positioning itself as a niche alternative to traditional job boards. Technically, the website uses modern frontend frameworks including Vue.js, Svelte, React, and Angular, with hosting and DNS managed via Cloudflare. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, and no TLS protocols are enabled, resulting in insecure HTTP connections. This significantly impacts user trust and security. Additionally, no privacy, cookie, or terms of service policies are found, and no direct contact information is provided, which may affect compliance and user confidence. Analytics are implemented using PostHog, indicating moderate user tracking. Overall, the website demonstrates good design and user experience but requires urgent improvements in security and privacy compliance to enhance trustworthiness and protect users.

O

Opal Camera Inc.

opalcamera.com

64

Opal Camera Inc. is a California-based technology company specializing in the design and engineering of high-end webcams and camera-related products. Their flagship products include the Opal C1 professional webcam and the Opal Tadpole, the first webcam designed specifically for laptops. The company targets consumers and professionals seeking premium webcam solutions, positioning itself as an innovative niche player in the webcam market. The business model focuses on direct sales of hardware and complementary software, supported by customer service and digital marketing efforts. Technically, the website is built using modern web technologies including React and Next.js, hosted with Cloudflare DNS services. The site integrates multiple analytics and advertising platforms such as Google Analytics, TikTok, Facebook, and Twitter pixels, indicating a mature digital marketing strategy. However, the website suffers from slow load times and lacks a valid SSL certificate, which impacts user trust and security. From a security perspective, the site has enabled HSTS but lacks a valid SSL certificate, OCSP stapling, and DNSSEC, which are critical for secure communications and DNS integrity. No explicit security or incident response policies are found, and cookie consent mechanisms are absent, raising privacy compliance concerns. The domain registration is mature and consistent with the business claims, enhancing legitimacy. Overall, while the company presents a professional and trustworthy front with quality content and branding, critical security gaps and performance issues pose risks. Strategic improvements in SSL deployment, privacy compliance, and website optimization are recommended to enhance security posture and user trust.

L

Localytics

localytics.com

56

Localytics is an established enterprise SaaS company specializing in mobile app marketing and analytics software. Founded in 2008, it provides powerful tools for understanding user behavior, driving engagement, and optimizing mobile app campaigns. The company targets enterprise clients across multiple sectors including technology, retail, media, telecommunications, finance, and hospitality. The website reflects a mature digital presence with comprehensive content, professional design, and clear business messaging. Technically, the site leverages modern frameworks such as React and Next.js, hosted on Vercel with AWS DNS infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Openprovider is a mature wholesale domain registration and reseller platform established in 2002, offering domain names, SSL certificates, and Plesk licenses primarily to resellers, digital agencies, and web hosting providers. The company positions itself as a cost-effective platform with automated services and membership plans tailored to different business sizes. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, indicating a contemporary digital infrastructure. However, the site lacks a valid SSL certificate, which is a critical security flaw that undermines user trust and data protection. Security headers are implemented, but the absence of TLS protocols and other security best practices like DNSSEC and DMARC reduces the overall security posture. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. The WHOIS data confirms the domain's legitimacy and maturity, though domain protection locks are not enabled. Overall, the site demonstrates good business credibility and technical sophistication but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

S

Sikt

sikt.no

62

Sikt is a Norwegian public agency providing shared digital services and infrastructure to the education and research sectors. The organization offers a broad portfolio of services including network solutions, data sharing, cybersecurity, and research data archiving, positioning itself as a key national service provider. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional design tailored to its target audience of students, researchers, and educational institutions. Technically, the site uses modern frameworks such as Next.js and Drupal CMS, and integrates privacy-conscious analytics tools like Matomo and Siteimprove. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which are critical issues that must be addressed to ensure secure communications and trust. Privacy compliance is well handled with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS configuration to meet security best practices.

S

Sikt

uninett.no

61

Sikt is a Norwegian public agency providing shared digital infrastructure and services to the education and research sectors. The website clearly communicates its role as a key service provider supporting digitalization, data sharing, and open research for knowledge institutions in Norway. The target audience includes students, researchers, and educational organizations. The business model is that of a government agency offering essential infrastructure and services nationally. Technically, the website is built on modern frameworks such as Next.js and Drupal, with good mobile optimization and accessibility. However, performance is moderate and could be improved. Security posture shows critical weaknesses, notably an invalid SSL certificate and lack of modern TLS protocols, which significantly reduce the security score. Privacy compliance is good with clear privacy and cookie policies, though no explicit consent mechanism is observed. Business credibility is high due to consistent branding, professional content, and clear contact channels via forms. Overall, the site is trustworthy but requires urgent SSL and security improvements to protect users and data.

D

Direktoratet for høyere utdanning og kompetanse

diku.no

49

Direktoratet for høyere utdanning og kompetanse (HK-dir) is a Norwegian government agency responsible for national administration and policy implementation in higher education, vocational education, and competence development. Established in 2021 through a merger of several agencies, it serves as a key authority in Norway's education sector, providing services such as career guidance, foreign education recognition, funding programs, and statistical reporting. The website targets professionals and stakeholders in education and workforce development within Norway. Technically, the website is built using modern web technologies including Next.js and Sanity CMS, with integration of Google Fonts and Siteimprove Analytics. The site is well-structured, mobile-optimized, and provides good accessibility and SEO features. However, performance is moderate with a load time of approximately 5.8 seconds. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability. No security headers or advanced TLS configurations are present, exposing the site to potential risks. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and clear contact information. No cookie consent mechanism or terms of service were found. Overall, while the business and content aspects are solid and trustworthy, the lack of HTTPS and proper SSL configuration significantly lowers the security posture and overall risk rating. Immediate remediation of SSL/TLS issues is recommended to protect user data and enhance trust.