Security Directory

S

St. Anna Kinderspital

stanna.at

29

St. Anna Kinderspital is a well-established pediatric hospital located in Vienna, Austria, providing comprehensive medical care for children and adolescents. The website reflects a strong commitment to patient care and family support, offering detailed information about medical departments, services, and patient guidance. The institution operates as a non-profit entity supported by donations, with clear calls to action for donations and career opportunities. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie management, but lacks HTTPS which is a critical security shortfall. Security headers are partially implemented, but the absence of SSL/TLS and modern TLS protocols significantly weakens the security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but urgently needs to implement HTTPS to protect user data and improve security.

M

mtms Solutions

eventdata-services.com

40

mtms Solutions is an Austrian technology company specializing in SaaS software solutions for the event management industry. Their offerings include ticketing, accreditation, messaging services, guest management, live streaming, and business intelligence solutions. The company targets event organizers and businesses requiring integrated event and messaging platforms, positioning itself as a flexible and innovative provider in the event technology sector. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and featuring customer testimonials and certifications such as the Sport Leading Company seal. Technically, the site uses a variety of modern web technologies including Apache, Bootstrap, jQuery, and Matomo analytics, and appears to be built on the Redaxo CMS. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. Security headers are minimal, and no incident response or security policy information is provided. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the site demonstrates good business credibility and content quality but requires urgent improvements in security posture to protect user data and enhance trust.

Kathrein USA operates as a technology company specializing in broadcast, cellular, and IoT antennas, providing connectivity solutions primarily targeting businesses in telecommunications and related sectors. The website presents itself as a medium for sharing industry-related content and company information but lacks comprehensive contact and compliance documentation. Technically, the site is built on WordPress with common web technologies such as jQuery and Bootstrap, hosted behind Cloudflare. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture and user trust. Security headers are partially implemented, but critical modern TLS protocols and encryption are missing. Privacy compliance is minimal, with no visible privacy or cookie policies, and no GDPR indicators. The site uses Clicky Analytics for user tracking without clear privacy disclosures. Overall, the website demonstrates moderate business credibility but requires significant improvements in security and privacy to meet industry standards.

RHI Magnesita is a global leader in the refractory industry, providing high-grade refractory products, systems, and services primarily for steel, cement, glass, and non-ferrous metals industries. The company emphasizes sustainability and innovation, targeting industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, structured data, and multi-language support. Technically, the site is built on WordPress with modern plugins and libraries, but suffers from critical security shortcomings due to an invalid SSL certificate and lack of HTTPS enforcement. Security headers are present but insufficient without proper TLS. Privacy compliance is well addressed with Cookiebot consent management and a detailed privacy policy. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security posture and user trust.

Y

yandree GmbH

yandree.com

36

yandree GmbH is a small Austrian IT services company specializing in IT documentation and data migration with over 20 years of experience. The company serves clients primarily in the energy, insurance, hosting, and IT sectors worldwide. Their website is built on Joomla CMS with a modern UI framework and includes comprehensive business and legal information. However, the site lacks HTTPS encryption, which is a critical security shortfall. Cookie consent mechanisms are implemented with a privacy-first approach, denying analytics and advertising cookies by default. The company demonstrates moderate digital maturity but should prioritize securing their website with SSL/TLS and enhancing security policies. Overall, yandree GmbH presents a professional and trustworthy business presence with room for technical and security improvements.

T

Taideyliopisto

uniarts.fi

29

Taideyliopisto is a leading Finnish arts university formed in 2013 by merging three major arts academies. It offers top-level education in music, visual arts, performing arts, and writing, with a strong emphasis on research and continuous learning. The university holds a notable global position in music education, reflected in its QS ranking. The website is professionally designed, multilingual, and rich in content, targeting students, researchers, and the arts community. Technically, the site runs on WordPress hosted on DigitalOcean with modern JavaScript libraries and analytics tools, though performance metrics are not optimal. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, exposing users to potential risks. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is credible and trustworthy but requires urgent security improvements.

P

PricewaterhouseCoopers

pwc.at

38

PricewaterhouseCoopers Austria (PwC.at) is a leading professional services firm offering audit, tax, consulting, and advisory services. The website presents a comprehensive and professional digital presence targeting businesses and professionals in Austria, emphasizing expertise in finance, sustainability, cybersecurity, and technology consulting. The site uses modern web technologies including Adobe Experience Manager, AngularJS, and Akamai CDN, ensuring a good user experience and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. The site includes comprehensive privacy and cookie policies with GDPR-compliant consent mechanisms, but lacks explicit security policies or incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

A

at-visions GmbH

at-visions.com

35

at-visions GmbH is a medium-sized Austrian company specializing in hospitality technology solutions including mobile apps, hotel TV, professional WIFI, and digital signage. The company targets hotels and hospitality businesses, offering integrated guest experience platforms and IT consulting services. Their website demonstrates a strong market position with numerous reputable hotel clients and technology partners. Technically, the website is built on WordPress with modern frameworks and includes accessibility and SEO optimizations. However, the absence of a valid SSL certificate and lack of modern TLS protocols represent critical security weaknesses. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the business appears credible and professional, but urgent improvements in security infrastructure are recommended.

Insticore GmbH is a small Austrian digital agency specializing in digital marketing, web development, branding, and training services. The company targets a broad audience including small ventures, large businesses, and entrepreneurs, positioning itself as a comprehensive provider of digital solutions. The website is built on WordPress using the Divi theme and builder, with integrations for Google Analytics and HubSpot for marketing and analytics purposes. However, the site lacks HTTPS, which is a critical security shortfall. Security headers are partially implemented but the absence of SSL/TLS and modern security practices significantly lowers the security posture. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to protect user data and improve trust.

B

Bergner Group

bergnerhome.com

36

Bergner Group is a well-established homeware solutions provider founded in 1999, offering a broad range of kitchenware and home products under multiple brands. The company targets consumers and retail partners globally, emphasizing innovation, quality, and comprehensive business support services. The website reflects a professional and consistent brand image with strong content relevance and user experience. Technically, the site uses modern JavaScript libraries and tracking tools but lacks a valid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are present and GDPR compliant, but direct contact details like emails or phone numbers are not explicitly provided. The WHOIS data aligns well with the business claims, supporting domain legitimacy. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

voestalpine BÖHLER Edelstahl GmbH & Co KG is a leading manufacturer of special high-performance steels serving advanced industrial sectors including aerospace, automotive, and oil & gas. The company operates a state-of-the-art steel plant with a focus on innovation, quality, and environmental standards. The website reflects a mature digital presence with multilingual support, detailed product and application information, and strong branding aligned with its parent company voestalpine AG. Technically, the site is built on WordPress with modern plugins for SEO, multilingual content, and user interaction. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

Grammatix is a small-scale cultural and artistic photography website based in Germany, focusing on exhibitions, projects, and published books related to regions such as Nepal, Tibet, and Kashmir. The site is built on WordPress and uses common plugins like Yoast SEO and Flash Album Gallery to manage content and galleries. While the website offers good content quality and navigation, it lacks modern security measures such as HTTPS, exposing visitors to potential risks. Privacy compliance is minimal, with no visible privacy or cookie policies, and contact information is limited to a contact form without explicit emails or phone numbers. The domain registration is consistent and transparent, but the absence of domain protection locks is a minor security concern. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

A

Aldine ISD

aldineisd.org

37

Aldine ISD is a large, mature public school district based in Houston, Texas, providing a wide range of educational services and resources to students, parents, employees, and the community. The website is professionally designed with clear navigation, comprehensive content, and strong branding consistency. It serves as a central hub for district news, academic programs, employment opportunities, and community engagement. Technically, the site is built on WordPress with modern libraries and plugins, hosted on a reputable platform (WP Engine) and uses Cloudflare for CDN and caching. However, the absence of a valid SSL certificate and HTTPS support is a critical security concern that significantly impacts the site's security posture. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and authoritative but requires urgent security improvements.

R

Roland Spedition GmbH

rolsped.com

37

Roland Spedition GmbH is a well-established Austrian logistics company specializing in combined rail and intermodal transport services. With over 26 years of domain presence, the company positions itself as a leader in hinterland traffic within Austria, offering a comprehensive range of services including operating, trucking, intermodal solutions, and additional services such as customs clearance and hazardous goods transport. The website content is professionally presented in German, targeting businesses requiring efficient and climate-friendly freight transport solutions. Technically, the site is built on WordPress with common industry-standard libraries and plugins, but suffers from a lack of proper SSL/TLS configuration, which significantly impacts its security posture. The company maintains clear contact information and implements cookie consent mechanisms, reflecting basic GDPR compliance. However, no explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found.

B

Bohmann Druck und Verlag GmbH

bohmann.at

21

Bohmann Druck und Verlag GmbH is a well-established Austrian media company with an 80-year history, specializing in official and municipal publications such as the Amtsblatt der Stadt Wien and the Österreichische Gemeinde Zeitung. The company targets municipal decision makers and businesses, positioning itself as one of Austria's largest private communication firms. Their business model centers on publishing and communication services with a medium-sized operational scale. Technically, the website is built on an Apache server, likely using TYPO3 CMS with Bootstrap and jQuery for frontend components. Hosting is provided by A1 Telekom Austria. The site includes Google Fonts and uses Matomo and Google Analytics for visitor tracking, with a cookie consent mechanism in place. However, performance metrics are unavailable, and mobile optimization is basic. From a security perspective, the website lacks HTTPS, which is a critical vulnerability. No SSL certificate is installed, and no modern security headers are present. While no known SSL vulnerabilities or exposed sensitive data were detected, the absence of HTTPS severely impacts the security posture. Privacy and cookie policies exist and appear GDPR compliant, but no incident response or security policies are publicly disclosed. Overall, the website is functional with good content relevance and moderate trustworthiness but requires urgent security improvements, especially the implementation of HTTPS and enhanced security headers, to protect user data and improve compliance.

Advance International Media Limited operates as a media planning and advertising agency focused on placing brands across influential media titles internationally. The company offers services including digital planning and advertising, programmatic advertising, content marketing, and print advertising. Their market position is that of a small, specialized media agency with a presence primarily in the UK and partnerships across Europe. The website content is professionally presented with good navigation and relevant business information targeting brands and advertisers seeking international media exposure. Technically, the website is built on WordPress using common libraries such as jQuery and Slick Carousel, hosted on 1&1 IONOS DNS infrastructure. However, the site lacks HTTPS, which is a critical security shortfall. Security headers are minimal and no advanced security policies or incident response contacts are disclosed. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website demonstrates moderate business credibility but requires significant improvements in security and privacy compliance to meet modern standards.

T

Tyromotion GmbH

tyromotion.com

29

Tyromotion GmbH is a medium-sized Austrian company specializing in the development and manufacture of advanced technology-driven rehabilitation and therapy devices, targeting healthcare professionals and patients globally. The company holds a strong market position as a leading innovator in robotic-assisted rehabilitation solutions and patient management software. Their website reflects a professional and comprehensive digital presence, showcasing detailed product information, customer references, and active engagement through social media and newsletters. Technically, the site is built on WordPress with modern SEO and multilingual support, but suffers from slow performance and lacks a valid SSL certificate, which critically impacts security and user trust. Security headers are partially implemented, but the absence of HTTPS and TLS protocols is a significant vulnerability. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and maintain trust.

A

AFFiRiS AG

affiris.com

27

AFFiRiS AG is a clinical-stage biopharmaceutical company based in Austria, specializing in the development of novel immunotherapies for chronic diseases such as neurodegenerative disorders and hypercholesterolemia. The company leverages its proprietary AFFITOME® technology to create Specific Active ImmunoTherapies (SAIT) aimed at improving patient outcomes beyond current treatment options. The website presents a professional and well-structured digital presence targeting patients, investors, and healthcare professionals, with clear business and contact information. However, the absence of a valid SSL certificate and HTTPS implementation represents a significant security risk that undermines user trust and data protection. The site uses WordPress CMS with common plugins and libraries, but performance metrics indicate slow loading times, suggesting room for technical optimization. Privacy compliance is addressed through a cookie consent banner and a privacy policy, though terms of service and explicit security policies are not evident. Overall, AFFiRiS demonstrates a credible business profile with a need to urgently improve its security posture to protect visitors and comply with best practices.

B

Bauer Media Group

bauermedia.co.uk

26

Bauer Media Group is a well-established UK-based media company operating across multiple sectors including audio broadcasting, publishing, and advertising services. The company targets a broad UK adult audience and maintains a strong market position with a portfolio of iconic brands. The website reflects a mature digital presence with comprehensive content, structured data, and good SEO practices. However, the technical infrastructure shows critical security gaps, notably the absence of a valid SSL/TLS certificate and lack of HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed through external policies and a consent management platform. Overall, the business credibility is strong, but the security weaknesses pose risks that should be urgently addressed.

B

biocrates life sciences ag

biocrates.com

40

biocrates life sciences ag is a well-established company specializing in quantitative metabolomics kits and services, serving a global scientific and research audience. Their offerings include metabolomics phenotyping, data analysis, pathway analysis, and multiomics data services, supported by a strong community and certified laboratories. The website is professionally designed with comprehensive content and clear navigation, targeting researchers and institutions in healthcare and biotechnology sectors. Technically, the site runs on WordPress with the Divi theme and integrates modern analytics and cookie consent tools, but lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by consistent WHOIS data and trust indicators such as testimonials and certifications. Strategic improvements in SSL deployment and security hardening are recommended to enhance trust and compliance.

E

Ethical Workforce

ethicalworkforce.co.uk

33

Ethical Workforce is a specialist hospitality recruitment agency based in London, offering permanent and temporary staffing solutions with an international reach. The company targets both employers seeking hospitality staff and jobseekers looking for roles in the hospitality sector. Their website presents a professional image with clear service offerings and client testimonials from notable hospitality figures, positioning them as a trusted niche player in the recruitment market. Technically, the website is built on WordPress using PHP 7.4 and Apache, with common plugins such as Yoast SEO and WPBakery Page Builder. Google Tag Manager is used for analytics and marketing tracking. The site is mobile optimized and SEO friendly, but lacks performance metrics data. The hosting provider is not explicitly identified but uses hdodns.com nameservers. From a security perspective, the site has critical weaknesses: it does not have an SSL/TLS certificate installed, serving content over HTTP only, which severely impacts user trust and data security. No modern TLS protocols or security headers are present. Cookie consent is implemented, but no privacy policy or terms of service pages were found, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements, especially implementing HTTPS and enhancing privacy compliance. Strategic recommendations include obtaining a valid SSL certificate, adding comprehensive privacy and terms pages, and improving security headers to protect users and build trust.

O

Ojo de Pez

ojodepez.com.py

22

Ojo de Pez is a Paraguayan advertising agency specializing in creative, digital, and media services, with a 20-year history in the industry. The company targets businesses seeking to strengthen their brand identity and communication strategies. The website reflects a professional and consistent brand image with good content quality and user experience. However, the technical infrastructure shows significant gaps, notably the absence of HTTPS and a valid SSL certificate, which critically undermines security and user trust. The site uses common marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, but lacks visible cookie consent mechanisms and privacy policies, raising compliance concerns. Overall, the business appears legitimate and established, but the digital security posture requires urgent improvement.

Z

ZETA

zeta.com

39

ZETA is a large, established engineering and consulting company specializing in the pharmaceutical and biotech industries. They provide comprehensive services including process engineering, automation, food engineering, lifecycle management, and digitalization solutions. The company operates globally with multiple locations and a strong market presence in Austria and beyond. Their website reflects a professional and content-rich digital presence targeting industry clients seeking advanced technological solutions. Technically, the website is built on the Contao CMS platform, served by Apache, and uses common web technologies such as jQuery and Google Tag Manager. While the site is well-structured and optimized for mobile devices, performance metrics indicate slow loading times, and accessibility features are basic. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability. Security headers are partially implemented, but important features like HSTS, OCSP stapling, and session resumption are missing. The extensive use of tracking and marketing tools is managed with a clear cookie consent mechanism, indicating good privacy compliance. Overall, the website presents a trustworthy and professional business front but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include immediate SSL certificate installation, enabling modern security protocols, and enhancing security headers to meet industry best practices.

B

BrandSourcery GmbH

adpl-solutions.at

23

BrandSourcery GmbH is a Vienna-based production agency specializing in below-the-line marketing materials and services. Their offerings include visual merchandising, promotional items, marketing logistics, print management, and digital solutions, targeting businesses seeking comprehensive marketing support. The website is built on WordPress with a range of plugins supporting multilingual content, marketing, and GDPR compliance. However, the absence of a valid SSL certificate and HTTPS implementation represents a significant security risk. While privacy and cookie policies are comprehensive and GDPR compliant, the lack of HTTPS undermines user trust and data security. The site is accessible without WAF or security challenges, but performance data suggests potential slowness. Contact information is complete and professional, supporting business credibility.

J

JOANNEUM RESEARCH Forschungsgesellschaft mbH

joanneum.at

27

JOANNEUM RESEARCH Forschungsgesellschaft mbH is a leading Austrian research institution specializing in applied research and technology development across multiple sectors including healthcare, digital technologies, robotics, and environmental sciences. The organization serves industry, government, and research partners with innovative solutions and maintains a strong market position supported by international collaborations and a large workforce. The website reflects a mature digital presence with comprehensive content and professional design, targeting stakeholders in research and industry. Technically, the site is built on WordPress with Elementor and uses modern web technologies, but suffers from a critical lack of HTTPS due to an invalid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are well implemented, indicating good GDPR compliance. However, the absence of explicit security policies and incident response information suggests room for improvement in security governance. Overall, the site is trustworthy and professional but requires urgent security enhancements to protect user data and improve trust.

W

WIG Wietersdorfer Holding GmbH

wietersdorfer.com

39

WIG Wietersdorfer Holding GmbH is a large, family-owned industrial enterprise based in Austria with a 125-year history. The company operates internationally with subsidiaries in multiple countries, focusing on sectors such as cement, lime, GFK and PP pipe systems, and industrial minerals. Their business model is centered on manufacturing and global distribution, targeting industrial and construction markets. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with the Avada theme and uses common plugins for forms, multilingual content, and cookie management. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which is a critical issue that needs immediate remediation. Privacy compliance is well addressed with comprehensive policies and a robust cookie consent mechanism. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect user data and maintain trust.

G

Grand Hotel Oslo

grand.no

33

Grand Hotel Oslo is a historic and iconic hospitality business located in the heart of Oslo, Norway. It offers premium hotel accommodations, multiple restaurants and bars, event hosting facilities, and spa services. The hotel targets tourists, business travelers, and event organizers, positioning itself as a luxury and culturally significant venue. The website reflects a professional and consistent brand image with clear business information and trust indicators such as environmental certification and social media presence. Technically, the site uses modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking, hosted likely on Microsoft Azure infrastructure. However, a critical security gap exists as the website lacks HTTPS/SSL encryption, exposing visitors to potential risks. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the website is functional and content-rich but requires urgent security improvements to protect user data and enhance trust.

D

DuPont

dupont.com

40

DuPont is a globally recognized enterprise specializing in manufacturing essential innovations across multiple sectors including automotive, electronics, healthcare, and water management. The company leverages science and innovation to deliver products such as protective equipment, clean water solutions, and advanced materials. The website reflects a professional and consistent brand presence targeting industrial and commercial clients. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and integrates analytics and marketing tools such as Adobe Launch and Pingdom. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are well implemented, indicating good compliance with GDPR and related regulations. Overall, the site demonstrates strong business credibility but requires urgent security improvements.

M

Mayr-Melnhof Holz Holding AG

mm-holz.com

40

Mayr-Melnhof Holz is a leading European manufacturer in the wood industry, specializing in engineered wood products such as glued laminated timber and cross-laminated timber. With a history spanning over 170 years, the company holds a strong market position and offers a comprehensive range of wood construction solutions. The website reflects a mature digital presence with detailed product information, references, and a multilingual interface targeting architects, planners, and industry professionals. Technically, the site is built on TYPO3 CMS and employs modern JavaScript libraries like Owl Carousel and Google Analytics for user tracking. However, the site suffers from slow load times and lacks a valid SSL certificate, which significantly impacts its security posture. The absence of HTTPS and modern TLS protocols is a critical vulnerability that needs immediate remediation. Security-wise, the company has implemented SPF records and avoids subdomain takeover risks, but the lack of DNSSEC, HSTS, and OCSP stapling reduces its overall security maturity. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website is professional and content-rich but requires urgent security improvements, especially regarding SSL/TLS configuration, to enhance trust and protect user data.

P

Pave Commute

carployee.com

36

Pave Commute, formerly known as Carployee, is a technology company focused on promoting sustainable commuting behaviors within organizations. Their primary offering is a SaaS-based app that incentivizes and rewards employees for sustainable commuting, aiming to improve employee satisfaction and foster a positive company culture. The company targets HR leaders, sustainability managers, teams, and transportation managers, positioning itself as a key player in the transportation and sustainability sector. The website demonstrates a professional and consistent brand presence with clear business information and multiple contact channels. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies such as jQuery and lazy loading for images. It is hosted behind Cloudflare, which provides CDN and security services. However, the site lacks a valid SSL certificate and does not support TLS, which is a significant security concern. Performance is currently slow, and while the site is mobile-optimized and accessible, improvements in security configurations are necessary. From a security perspective, the absence of HTTPS and TLS support is critical, exposing users to potential data interception risks. The site does implement some security headers and uses secure cookie flags, but lacks advanced protections like HSTS and OCSP stapling. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. Contact information is readily available, enhancing business credibility. Overall, while the business and content quality are high, the security posture significantly lowers the risk profile. It is recommended that Pave Commute prioritize obtaining and configuring a valid SSL/TLS certificate and enhancing their security headers to protect user data and maintain trust. The company shows strong legitimacy and market positioning but must address these critical security issues to ensure safe and compliant operations.

M

MD / MEDIADESIGNERIN e.U.

mediadesignerin.com

21

MD / MEDIADESIGNERIN e.U. is a small Austrian online marketing agency with over 22 years of experience, specializing in Google Ads, Facebook Ads, and YouTube Ads. The company holds a Google Partner certification and offers comprehensive online marketing consultancy, campaign management, and strategy development services primarily targeting small and medium-sized enterprises. The website is professionally designed using WordPress and Elementor, featuring rich content, client references, and clear contact information. However, the absence of a valid SSL certificate and HTTPS support represents a critical security vulnerability that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. The technical infrastructure leverages modern web technologies but shows room for improvement in performance metrics and security headers. Overall, the business is credible and well-positioned in its niche, but urgent security enhancements are recommended to safeguard client interactions and improve trust.

S

Schönherr Rechtsanwälte GmbH

schoenherr.eu

24

Schoenherr Attorneys at Law is a prominent full-service law firm operating primarily in Central and Eastern Europe, providing comprehensive legal advisory services to local and international companies. The firm positions itself as a leading legal advisor in the region, offering a wide range of services including publications, newsletters, and comparative legal guides. The website reflects a professional and consistent brand image, targeting corporate clients seeking expert legal counsel. Technically, the website is built on Microsoft IIS with ASP.NET and likely uses the Umbraco CMS, incorporating modern JavaScript libraries such as Slick Slider and Isotope for enhanced user experience. However, the site lacks HTTPS support, which is a critical security deficiency. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates attention to privacy compliance, while analytics are conducted via Matomo with user consent. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

I

IBT Connecting Energies GmbH

ibtgroup.at

28

IBT Connecting Energies GmbH is a medium-sized energy sector company specializing in high-efficiency cogeneration and trigeneration solutions for industrial clients. The company has a strong market position in Italy and Europe, supported by strategic partnerships with technology leaders such as Capstone Green Energy and Century Corporation. Their business model focuses on B2B energy efficiency projects, including consulting, implementation, maintenance, and investment services. The website reflects a professional digital presence with comprehensive content and clear navigation, targeting industrial customers seeking sustainable energy solutions. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted likely on SiteGround. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap. Privacy and cookie policies are well implemented and GDPR compliant, enhancing user trust. Social media integration and partner logos further strengthen credibility. Overall, the site demonstrates good digital maturity but requires urgent security improvements to protect user data and maintain trust.

P

Polymer Competence Center Leoben GmbH

pccl.at

38

The Polymer Competence Center Leoben GmbH (PCCL) is a leading Austrian research institution specializing in polymer technology and polymer sciences. It collaborates closely with industry partners and academic institutions to deliver innovative R&D projects across sectors such as automotive, aerospace, packaging, and renewable energy. The website reflects a mature organization with a clear focus on cooperative research and sustainable polymer solutions. Technically, the site is built on Joomla CMS with a variety of extensions and frameworks, but suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. Privacy and compliance documentation is well maintained, including GDPR-compliant privacy policies and incident reporting mechanisms. Overall, the site is professional and content-rich but requires urgent improvements in security infrastructure to align with best practices and user expectations.

Z

ZKW Group

zkw-group.com

40

ZKW Group is a leading global supplier specializing in innovative premium lighting systems and electronics for the automotive industry. The company positions itself as a strategic partner to automotive manufacturers worldwide, focusing on delivering advanced lighting solutions. The website reflects a professional corporate presence with multilingual support and strong branding aligned with its parent company, LG. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on WP Engine with Google Cloud infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. The site implements cookie consent mechanisms compliant with GDPR via Usercentrics, but lacks visible contact information and detailed security or incident response policies. Overall, while the business and technical maturity are solid, urgent remediation of SSL/TLS issues is necessary to ensure secure user interactions and maintain trust.

A

American Superconductor

amsc.com

40

American Superconductor (AMSC) is a medium-sized US-based technology company specializing in advanced power electronics and superconductor systems that support smarter, cleaner energy solutions globally. The company serves energy utilities, renewable energy developers, and marine power sectors, positioning itself as a key player in the energy technology market with NASDAQ listing and a global footprint. The website reflects a professional digital presence with clear business descriptions, investor relations, and product offerings focused on grid and renewable energy solutions. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, hosted on Pantheon, and optimized for mobile users. However, performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, exposing the site to risks and reducing trust. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site is credible but requires urgent security improvements to protect users and enhance trust.

F

FRIEDEN Informatik GmbH

steinringer.com

40

FRIEDEN Informatik GmbH is a specialized IT and software company serving the Austrian residential construction sector, offering consulting, custom software solutions, and IT support. The company is a subsidiary of the Wohnbaugenossenschaft FRIEDEN, leveraging over 25 years of industry experience to provide tailored IT services to housing cooperatives, property managers, and real estate developers. The website content is professionally presented, targeting a German-speaking audience primarily in Austria. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses advanced cookie consent management to comply with GDPR. However, the SSL/TLS configuration is currently invalid, which poses a significant security risk and undermines trust. Security headers are partially implemented, but critical protections like a valid HTTPS certificate and XSS protection are missing. The domain steinringer.com shows inconsistent DNS and SSL data, suggesting it may not be the primary domain for the website content, which is hosted on frieden-informatik.at. Overall, the business demonstrates strong market positioning and privacy compliance but requires urgent improvements in SSL security and domain configuration to enhance trust and security posture.

P

Pümpel

puempel.at

29

Pümpel is a well-established construction materials and services company based in Vorarlberg, Austria, with over 90 years of experience. The company serves both private and commercial customers, offering a wide range of products including wood, windows, doors, tools, and garden supplies, alongside services such as consultation, delivery, custom cutting, and professional installation. Their market position is strong regionally, supported by certifications and a professional online presence. Technically, the website is built on WordPress with a modern frontend stack including Bootstrap and jQuery, but it lacks HTTPS and uses an outdated PHP version, which poses security risks. The security posture is weak due to missing SSL and security headers, although SPF and DMARC email protections are in place. Privacy compliance is basic with cookie consent and privacy information available, but no dedicated security or incident response policies are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

F

FWT Composites & Rolls GmbH

fwt.at

20

FWT Composites & Rolls GmbH is a medium-sized Austrian manufacturing company specializing in composite rollers, tubes, drive shafts, and related services primarily for industrial sectors such as paper, film, and non-woven industries. Founded in 1996, the company has established itself as a leading manufacturer with a strong focus on product quality, customer service, and technical expertise. Their website reflects a professional business presence with detailed product and service descriptions, multilingual support, and active social media engagement via Facebook. Technically, the website is built on WordPress with common plugins and includes structured data for SEO benefits. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Privacy compliance is addressed through a cookie consent mechanism and a comprehensive privacy policy. Overall, the company demonstrates a solid market position but should urgently address its security posture to protect user data and improve trust.

TDK Corporation is a leading global manufacturer of electronic components and devices, specializing in high magnetics technology. The company maintains a strong market position with a comprehensive corporate website offering detailed information on its business, sustainability efforts, investor relations, and career opportunities. The website is professionally designed, multilingual, and targets investors, customers, and job seekers worldwide. Technically, the site is built on Drupal CMS with modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Security posture is weak due to missing HTTPS and security headers, though privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

T

TCI Consult GmbH

tciconsult.eu

38

TCI Consult GmbH is a specialized consulting firm with over 30 years of experience focusing on corporate management, banking control, business intelligence, and cybersecurity. The company operates primarily in Austria and Germany, targeting sectors such as finance, public services, telecommunications, and manufacturing. Their services include data warehousing consulting, cybersecurity assessments, and compliance support for EU regulations like NIS 2 and DORA. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery and Foundation, with analytics powered by Google Analytics and Piwik/Matomo. However, the site suffers from a critical security flaw due to an invalid SSL certificate, resulting in no HTTPS protection. This significantly impacts the security posture and trustworthiness of the site. Privacy compliance is partially addressed through Cookiebot consent mechanisms and a privacy policy located on the impressum page, but lacks comprehensive GDPR indicators. Overall, the website presents professional content and consistent branding but requires urgent security improvements to meet modern standards.

O

Oper Graz

oper-graz.com

37

Oper Graz is a well-established cultural institution based in Austria, specializing in opera, ballet, concerts, and related performing arts. The website serves as a portal for event information, ticket sales, and community engagement, targeting a broad audience including families, youth, and cultural enthusiasts. The business model revolves around live event performances and ticketing services, supported by partnerships with regional theater organizations. Technically, the site is built on WordPress with a multilingual setup and uses common plugins for SEO, forms, and interactive content. However, the absence of a valid SSL certificate and HTTPS severely impacts the site's security posture. While the site demonstrates good content quality, accessibility, and SEO practices, the lack of modern security protocols and headers exposes it to risks. Privacy compliance is addressed with clear policies and cookie consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

P

PageGroup

page.com

40

PageGroup is a well-established global recruitment consultancy operating since 1976 with a strong market position and multiple specialist brands. The website reflects a professional corporate presence with comprehensive content targeting job seekers, employers, and investors. Technically, the site uses a mature Drupal CMS platform with modern front-end libraries and integrates multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which critically impact secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy but requires urgent security improvements to protect user data and maintain credibility.

ACS Vienna is a small Austrian consulting firm specializing in business growth strategies, including external growth, exit and liquidity planning, and internal growth. The company has a long-standing market presence with 25 years of experience, targeting businesses seeking growth and exit planning services. The website reflects a professional business image with clear service offerings and consistent branding. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Google Analytics, but lacks modern security features such as HTTPS, which significantly impacts its security posture. The absence of SSL/TLS encryption and security headers exposes the site to potential risks and undermines user trust. Privacy compliance is minimal, with a basic privacy policy but no cookie consent mechanism or GDPR indicators. Overall, the site demonstrates moderate business credibility but requires urgent security improvements to protect user data and enhance trust.

M

Monopol Medien GmbH

monopol.at

27

Monopol Medien GmbH is a small Austrian media house and agency specializing in content creation, design, social media, event management, web development, and web hosting. The company targets creative industries, culture, and art sectors primarily in Vienna and Austria. Their website is built on WordPress with WooCommerce integration, leveraging popular plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. While the site demonstrates good content quality, clear navigation, and consistent branding, it suffers from a critical security flaw due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the site's security posture and user trust.

S

SOS-Kinderdorf Österreich

sos-kinderdorf.at

40

SOS-Kinderdorf Österreich is a well-established non-profit organization dedicated to providing loving homes and support to children in need both in Austria and globally. Founded in 1949, it operates in 138 countries and relies on donations, sponsorships, and volunteer engagement to fulfill its mission. The website reflects a professional and consistent brand presence with comprehensive content and clear navigation targeting donors, volunteers, and families in need. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates modern libraries like jQuery and FontAwesome, and employs a consent management platform for GDPR compliance. However, a critical security gap exists due to the absence of HTTPS and a valid SSL certificate, exposing users to potential risks. Privacy policies and cookie consent mechanisms are well implemented, supporting regulatory compliance. Overall, the site demonstrates strong business credibility and user trust but requires urgent security improvements.

M

Moser Holding AG

moserholding.com

37

Moser Holding AG is a well-established Austrian media company with a history dating back to 1945. It operates as a leading media house in Austria, offering a broad portfolio of print and digital media services including newspapers, magazines, corporate publishing, and logistics. The company targets regional audiences primarily in Austria and maintains a strong market position with a large employee base and multiple locations. Technically, the website is built on ASP.NET with Bootstrap and uses common web technologies such as jQuery and Font Awesome. However, the site lacks HTTPS, which is a significant security deficiency. The security posture is weak due to the absence of SSL/TLS, modern security headers, and secure session management over encrypted channels. Privacy policies and cookie policies exist but lack explicit consent mechanisms, indicating partial GDPR compliance. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

D

Das Österreichische Patentamt

patentamt.at

40

Das Österreichische Patentamt is the central government authority in Austria responsible for intellectual property rights including patents, trademarks, and designs. The website serves as an information and service hub offering online filing, advisory services, and educational programs such as the IP Academy. The organization holds ISO 9001 and ISO 27001 certifications, reinforcing its commitment to quality and information security. The site targets a broad audience including inventors, businesses, startups, legal professionals, and students. Technically, the website is built on TYPO3 CMS with modern frontend libraries and frameworks, providing a professional and accessible user experience. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are well implemented but cannot compensate for the lack of encryption. Privacy compliance is strong with comprehensive cookie consent mechanisms and GDPR-aligned policies. Overall, the site is authoritative and trustworthy but requires urgent improvements in SSL/TLS deployment to enhance security posture.

T

Tourismusschulen Bad Gleichenberg

tourismusschule.com

27

Tourismusschulen Bad Gleichenberg is a well-established private educational institution in Austria specializing in tourism and hospitality education. With a history dating back to 1946, it offers a variety of programs including practical internships and international exposure, positioning itself as a leading school in its sector. The website reflects a professional and consistent brand image targeting students interested in tourism careers. Technically, the site is built on WordPress with common plugins and scripts but suffers from a critical lack of valid SSL/TLS certificates, exposing it to security risks. Privacy compliance is addressed with cookie consent and a privacy policy, though some security policies are absent. Overall, the site is content-rich and credible but requires urgent security improvements to protect user data and enhance trust.

A

Avaya LLC

avaya.com

40

Avaya LLC operates a mature, enterprise-grade website focused on delivering AI-powered contact center and unified communications solutions to global enterprises. The company positions itself as a leader in technology and telecommunications sectors, offering comprehensive platforms and services to enhance customer and employee experiences. The website is professionally designed, well-branded, and content-rich, targeting business customers with detailed product and solution information. Technically, the site is built on Adobe Experience Manager and leverages Cloudflare for hosting and CDN services, integrating modern marketing and analytics tools such as Google Tag Manager and Adobe Launch. However, a critical security weakness exists due to an invalid or missing SSL certificate and lack of support for modern TLS protocols, which significantly impacts the site's security posture. Privacy and legal compliance are well addressed with clear policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent remediation of SSL issues to ensure secure communications and trust.