Security Directory

V

voestalpine AG

voestalpine.com

66

voestalpine AG is a globally leading steel and technology group headquartered in Austria, operating over 500 companies worldwide with a strong presence in manufacturing sectors such as automotive, aerospace, energy, and railway systems. The company reported significant revenue and EBITDA figures for the fiscal year 2025/26, reflecting its enterprise scale and market leadership. The website presents comprehensive corporate, investor, and job-related information, targeting industrial clients, investors, suppliers, and potential employees. Technically, the website employs modern web technologies including Bootstrap, JavaScript libraries, and integrates Google Tag Manager and Usercentrics for analytics and consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and consistent branding support legitimacy. Overall, the website is well-designed, accessible, and trustworthy, with room for improvement in security transparency and WHOIS data availability.

D

DURABLE UK LTD

durable-uk.com

63

Durable UK Ltd is a well-established manufacturer and distributor of intelligent office products and workplace solutions, leveraging over 100 years of experience and innovation. The company targets business customers primarily in the UK and international markets, positioning itself as a reliable provider of quality, design, and functionality in office supplies. The website reflects a professional B2B e-commerce platform built on Shopware 6, integrating modern payment solutions such as PayPal and Mollie, and adhering to GDPR compliance with a comprehensive privacy and cookie policy. However, the absence of publicly available WHOIS registration data raises concerns about domain legitimacy and requires further verification. Technically, the site is well-structured, mobile-optimized, and implements essential security headers and HTTPS, but lacks published security policies and incident response information. Overall, Durable UK Ltd demonstrates a solid digital presence with room for improvement in transparency and security communication.

P

Parts Town UK Limited

firstchoice-cs.co.uk

64

Parts Town UK Limited operates a professional e-commerce platform specializing in genuine OEM commercial catering equipment spare parts, accessories, and consumables. The website targets commercial catering businesses across the UK, positioning itself as the largest stockholder of such parts in the region. The business model focuses on retailing OEM parts to ensure quality and compatibility for commercial catering equipment. The website's content and structure reflect a mature digital presence with clear navigation and a broad product catalog organized by manufacturer and category.

Katten Muchin Rosenman LLP is a well-established full-service law firm with nearly 650 attorneys operating across the United States and internationally in London and Shanghai. The firm provides a broad range of legal services including capital markets, pharmaceutical acquisitions, financial services advisory, and restructuring plans. Their website reflects a mature market position with comprehensive content such as case studies, news, publications, and events targeting business clients and legal professionals. Technically, the website is built on a custom CMS platform utilizing modern web technologies including jQuery, Slick Carousel, Font Awesome, Google Fonts, and Google Analytics for tracking. The site is mobile optimized, accessible, and SEO friendly, with a cookie consent mechanism implemented via Usercentrics. Performance is moderate with good design and navigation clarity. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled and security headers are not explicitly detected in the HTML content. There is no publicly visible security policy or incident response contact information. Privacy compliance is strong with clear privacy and cookie policies and GDPR compliance indicators. Overall, the website is professional, trustworthy, and secure with minor recommendations to enhance DNS security and publish explicit security policies. There are no signs of malicious activity or content safety concerns, making it a reliable digital presence for the law firm.

T

TXP

conceptresourcing.com

54

TXP Talent is a UK-based technology recruitment agency specializing in connecting outstanding tech professionals with career opportunities. The website presents a professional and consistent brand image, targeting tech talent and employers in the technology sector. The business model focuses on talent acquisition and recruitment services, positioning TXP as a specialist in tech opportunities. The digital infrastructure is built on WordPress with the Divi theme, leveraging common plugins for job management and contact forms. The site implements modern tracking with Google Analytics 4 and a consent management platform, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and published security policies indicates room for improvement. The WHOIS data is unavailable due to domain naming rules violations, which raises some legitimacy concerns, but the website content and contact information support a credible business presence. Overall, the site is functional, professional, and secure with minor gaps in privacy compliance and domain registration transparency.

R

Radiological Society of North America

rsna.org

63

The Radiological Society of North America (RSNA) operates a comprehensive and professionally designed website dedicated to supporting radiology professionals worldwide. The site offers extensive educational resources, research funding opportunities, annual meeting information, and access to multiple peer-reviewed journals. RSNA positions itself as a leading non-profit professional society in the healthcare and education sectors, targeting radiologists, researchers, educators, and trainees. The website reflects a mature digital presence with modern technologies, strong branding consistency, and clear navigation tailored to its audience. Technically, the website employs a robust tech stack including Bootstrap, jQuery, GSAP, and Sitecore CMS, ensuring responsive design and good performance across devices. The integration of a consent management platform and Google Tag Manager indicates a commitment to privacy compliance and analytics-driven insights. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be further enhanced. The absence of WHOIS data is mitigated by consistent branding and domain legitimacy, typical for professional organizations using privacy protection. Overall, RSNA's website demonstrates high professionalism, excellent content quality, and good privacy and security practices. It effectively serves its target audience with relevant, trustworthy information and resources. Minor improvements in security header implementation and incident response transparency could further strengthen its posture.

V

VTCT Skills

skillsfirst.co.uk

54

VTCT Skills is a prominent UK-based awarding organisation specializing in vocational and technical qualifications across multiple sectors. The website presents a professional and comprehensive digital presence, offering detailed information about qualifications, apprenticeship assessments, services, and support for centres and learners. The organisation targets educational institutions, learners, and employers, positioning itself as a market leader in its niche. The site is well-branded, content-rich, and supports multiple languages, enhancing accessibility and reach. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, GSAP for animations, and integrates with analytics and marketing platforms such as HubSpot, Google Tag Manager, and Usercentrics for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with privacy regulations. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website reflects a mature and trustworthy organisation with a strong focus on education and skills development. The lack of WHOIS data due to domain naming rules is a minor anomaly but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts.

J

J.P. Morgan Workplace Solutions

globalshares.com

70

J.P. Morgan Workplace Solutions operates a professional equity compensation management platform targeting enterprise clients globally. The website presents a polished, well-structured digital presence with comprehensive service offerings including equity compensation, cap table management, executive services, and financial education. The platform integrates modern web technologies such as WordPress CMS, jQuery, Owl Carousel, and Google Tag Manager, complemented by a consent management platform for GDPR compliance. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though explicit security headers and detailed privacy policies are absent. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the strong brand association with J.P. Morgan. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO, but would benefit from enhanced transparency in privacy and security disclosures.

T

Thruxton Experiences Limited and Thruxton Motorsport Limited

thruxtonracing.co.uk

67

Thruxton Circuit is a well-established UK motorsport venue known as the fastest race circuit in the country. Founded in 1950, it offers a wide range of driving experiences including supercar drives, racing cars, karting, and specialized training such as skid pan and 4x4 off-road. The business also caters to corporate events and provides gift vouchers, positioning itself as a premier destination for motorsport enthusiasts and corporate clients alike. The website reflects a mature and professional business with strong market positioning and a comprehensive service offering. Technically, the website employs modern JavaScript frameworks, integrates multiple third-party marketing and analytics tools, and uses a consent management platform to ensure GDPR compliance. Hosting assets on Azure Blob Storage and using Fasthosts as the domain registrar indicates a reliable infrastructure. The site is mobile-optimized, fast-loading, and SEO-friendly, providing an excellent user experience. From a security perspective, the site uses HTTPS with good SSL configuration and employs consent management for privacy compliance. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted as an area for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It presents low risk with strong business credibility and technical maturity.

C

Clear Group (Holdings) Limited

thecleargroup.com

62

Clear Group (Holdings) Limited operates as a large insurance group serving the UK, Ireland, and continental Europe. The company provides a broad range of insurance products and services through independent brokers, MGAs, and technology solutions, emphasizing client-centric approaches and growth via acquisitions. The website reflects a mature and professional business with clear branding and comprehensive content. Technically, the site uses modern web technologies including Umbraco CMS, jQuery, Google Fonts, and compliance tools like Usercentrics and Userway, ensuring good performance, accessibility, and GDPR compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are not explicitly detected and incident response information is absent. The WHOIS data is unavailable, which slightly reduces trust but the overall presentation and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information.

I

iSC GmbH

isc-gmbh.info

61

iSC GmbH operates a professional e-commerce platform specializing in spare parts, accessories, and services for garden and DIY tools. The website targets consumers and professionals in Germany and offers a structured catalog of products with multi-language support. The business model focuses on retail sales of replacement parts and related accessories, positioning itself as a niche player in the garden and tool maintenance market. The site demonstrates consistent branding and good content quality, supporting a medium-sized enterprise profile.

HASCO is a leading German manufacturer specializing in standard parts (Normalien) and hot runner systems for mold making and injection molding industries worldwide. The company offers a comprehensive product catalog including standard parts, hot runner solutions, CAD services, and custom manufacturing. The website demonstrates a professional and modern digital presence built on Angular framework, integrating consent management and analytics tools with a focus on privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The lack of public WHOIS data introduces some uncertainty about domain registration details, but the overall business credibility and website professionalism indicate a legitimate and established enterprise. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving accessibility compliance.

P

Perk

clicktravel.com

65

Perk operates a specialist platform branded as 'Click Travel, Powered by Perk', targeting UK-based companies and the public sector to facilitate business travel booking, management, and reporting. The website presents a professional and modern digital presence, leveraging technologies such as Astro framework, Storyblok CMS, and various analytics and marketing tools including Google Tag Manager, Datadog RUM, and Usercentrics for consent management. Despite the professional front-end and user experience, the absence of WHOIS registration data for the domain www.perk.com raises concerns about domain legitimacy and ownership transparency. The website is secured with HTTPS and employs consent mechanisms, but lacks visible privacy policies, terms of service, and direct contact information, which are critical for compliance and user trust. Overall, the platform appears functional and targeted, but verification of domain registration and enhanced transparency in privacy and contact details are recommended.

M

Morton Fraser MacRoberts LLP

macroberts.com

76

Morton Fraser MacRoberts LLP (MFMac) is a leading Scottish law firm providing expert legal services to businesses, the public sector, and individuals. The firm is well-positioned in the Scottish legal market, recognized by prestigious legal directories such as Chambers and Partners and Legal 500. Their services span multiple sectors including energy, real estate, public sector, manufacturing, and healthcare. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the website leverages modern technologies including Umbraco CMS, Google Tag Manager, Microsoft Application Insights, Hotjar, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA on forms. Privacy compliance is well addressed with detailed policies and consent mechanisms. The WHOIS data is unavailable, which limits transparency on domain registration details. However, the website content and business information strongly indicate legitimacy and professionalism. No critical security vulnerabilities or compliance gaps were detected. Overall, the site demonstrates a mature digital infrastructure suitable for a large professional services firm.

CTI Digital is a well-established full-service digital agency founded in 2003, specializing in web development, digital marketing, and AI innovation. With over 150 specialists across Manchester and Lancaster, the company positions itself as a leading partner for ambitious brands seeking digital transformation and measurable growth. Their service offerings include web design and build, digital marketing, strategic consulting, and AI-driven innovation solutions. The website reflects a professional and modern digital presence with comprehensive service descriptions, client case studies, and certifications that enhance credibility. Technically, the website leverages modern technologies including Umbraco CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile-optimized, fast-loading, and SEO-friendly, with structured data enhancing search visibility. Security posture is strong with HTTPS enforced and recognized certifications like ISO 27001 and Cyber Essentials, although explicit security headers were not detected in the provided data and should be verified. The WHOIS data is notably absent or inaccessible, which introduces some uncertainty regarding domain registration transparency. However, the website content, business information, and trust signals strongly support legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear contact information including email, phone, and physical addresses. Overall, CTI Digital demonstrates a robust business and technical foundation with a strong security and compliance stance. The primary risk lies in the lack of WHOIS transparency, which should be monitored. Strategic recommendations include enhancing security headers, publishing an incident response contact, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

A

ARNO Werkzeuge

arno.de

45

ARNO Werkzeuge is a German manufacturing company specializing in precision cutting tools for turning, long turning, grooving, drilling, and milling applications. The company offers a broad portfolio of tooling systems and tool management solutions, targeting manufacturing professionals and industries requiring high-quality tooling. Their website is professionally designed using TYPO3 CMS, hosted on AWS infrastructure, and supports multiple languages, indicating a global market presence. The technical infrastructure includes modern analytics and consent management tools, reflecting a mature digital presence. Security posture is adequate with HTTPS and cookie consent implemented; however, there is room for improvement in security headers and published security policies. Overall, the website is trustworthy and well-positioned in its industry, though it lacks explicit privacy and terms of service documentation. Strategic improvements in compliance and security transparency would enhance trust and regulatory adherence.

R

RW Armstrong

rwarmstrong.co.uk

55

RW Armstrong is a UK-based company specializing in high-end construction, restoration, and master craftsmanship services primarily across London and the South of England. The company operates multiple complementary brands offering services including construction, master trades, joinery, cabinetry, fine furniture, and heritage conservation. Their clientele includes discerning private clients, architects, heritage trusts, and luxury hospitality venues. The website reflects a professional and consistent brand image with a focus on luxury and quality craftsmanship. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries and frameworks such as GSAP, Swiper.js, and Usercentrics for cookie management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit privacy policies are missing. The WHOIS data for the domain is unavailable and indicates the domain name is invalid under Nominet UK rules, suggesting a possible misconfiguration or that the domain is a subdomain or alias rather than a registered domain. Overall, the website presents a trustworthy and professional front but would benefit from improved transparency in privacy and security policies.

O

OQEMA GmbH

oqema.com

66

OQEMA GmbH is a well-established German company specializing in chemical distribution and innovative service concepts, focusing on sustainable solutions. The company operates with a strong global network and local expertise, offering a broad portfolio of products and services including product development, warehousing, logistics, and recycling. Their website reflects a professional and consistent brand image, targeting chemical industry businesses and partners. Technically, the site is built on the Ibexa CMS platform with modern JavaScript frameworks and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Overall, the website is accessible, well-structured, and compliant with GDPR through the use of a consent management platform, but lacks explicit privacy and terms of service documentation. The risk profile is low with no signs of blocking or malicious content.

Babcock International Group is a large enterprise specializing in engineering and support services across defense, nuclear, aviation, and land sectors. The company operates globally with subsidiaries in Australia, Canada, and South Africa, targeting defense clients, investors, suppliers, and job seekers. Their website reflects a professional corporate presence with comprehensive sector information and investor relations content. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response details are not published. The absence of WHOIS data limits domain trust analysis, but the website content and branding indicate legitimacy. Overall, the site is well-designed, secure, and compliant with privacy regulations, serving as a credible digital asset for the company.

Cavendish Nuclear, a wholly-owned subsidiary of Babcock International Group, operates as a key player in the nuclear energy, defence, and civil decommissioning sectors. The company provides comprehensive nuclear lifecycle solutions including support for existing reactors, new construction, and advanced nuclear technology development. Their market position is strong within the UK and internationally, supported by strategic contracts and partnerships. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and consent management in place, though explicit security policies and incident response details are absent. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall business credibility remains high due to strong branding and professional content.

C

Clear Insurance Management Limited

lukerrowe.com

61

Clear Insurance Management Limited is a UK-based independent Chartered insurance broker specializing in commercial, property, construction, manufacturing, and life sciences insurance, with a notable focus on audio visual and events insurance. The company operates multiple branches including the Amersham branch, and is part of the Clear Group. The website reflects a professional and comprehensive digital presence with clear navigation, detailed service offerings, and strong regulatory compliance signals such as FCA authorization. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA, Usercentrics CMP for consent management, Hotjar for analytics, and Feefo for customer reviews, hosted behind Cloudflare DNS and CDN services. Security posture is good with HTTPS enforced and secure form handling, though security headers and incident response information are not publicly detailed. Overall, the website is trustworthy, well-branded, and compliant with privacy regulations, making it a reliable resource for prospective clients seeking insurance services.

C

Clear Insurance Management Limited

centor.co.uk

60

Clear Insurance Management Limited is a well-established independent Chartered insurance broker based in London, specializing in professional, financial, corporate, and property insurance lines. The company has a strong market position supported by a history of acquisitions and certifications such as Investors in People Platinum and B Corp. Their London Great Tower Street branch serves as a central hub for larger teams focusing on specialist risks and London markets. The website reflects a professional and trustworthy brand with comprehensive service offerings and clear contact channels. Technically, the site is built on modern platforms like Webflow, uses Cloudflare DNS, and integrates essential tools such as Google Tag Manager, Hotjar, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA on forms, and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the site is safe, compliant with GDPR, and provides a positive user experience with excellent design and navigation.

BCD Travel is a global leader in corporate travel management, offering a comprehensive suite of services including booking and trip management, spend analytics, meetings and events management, and consulting. The company targets corporate clients and procurement leaders, aiming to optimize travel spend and enhance traveler safety and productivity. Their UK presence is well-established with multiple office locations and a strong digital footprint. Technically, the website is built on WordPress with modern performance and accessibility optimizations, leveraging tools like Google Tag Manager and Usercentrics for privacy compliance. Security posture is strong with HTTPS enforced and consent management in place, though explicit security headers could be improved. The absence of WHOIS data slightly impacts trust but is mitigated by the professional presentation and external trust signals. Overall, BCD Travel demonstrates a mature, enterprise-level digital presence aligned with its market position.

A

AS Latvenergo

latvenergo.lv

56

AS Latvenergo is a leading Latvian state-owned energy company specializing in electricity and heat production, trading, and natural gas sales. Established in 1939, it holds a significant market position in the Baltic region, serving approximately 896,000 customers. The company emphasizes renewable energy, with 66% of its production from renewable sources, and offers services including energy efficiency and electric vehicle charging. The website reflects a professional corporate presence with clear navigation and comprehensive information about the company and its services. Technically, the website is built on OctoberCMS and employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Usercentrics for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed cookie and privacy policies. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. The presence of official contact details, social media links, and consistent branding further enhance credibility. No critical vulnerabilities or suspicious content were detected, indicating a low-risk profile for users and stakeholders.

I

Intersolar Middle East

intersolar.ae

54

Intersolar Middle East is a prominent event organizer specializing in solar energy exhibitions and conferences within the MENA region, particularly hosted at the Dubai World Trade Centre. The platform serves industry professionals, exhibitors, and visitors interested in photovoltaics, PV production technologies, and energy storage systems. The website reflects a well-established market position as a leading solar event in the Middle East, offering comprehensive event information, publications, and newsletters to its audience. Technically, the website employs modern JavaScript libraries, CAPTCHA for form security, and a consent management platform to ensure privacy compliance. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforcement and CAPTCHA usage, though it lacks some advanced security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Allgeier Schweiz

allgeier.ch

52

Allgeier Schweiz is a Swiss-based IT service provider and Microsoft partner specializing in guiding medium and large enterprises through digital transformation. Their key services include cloud adoption, migration, cyber security, Azure managed services, business automation, and data-driven business strategies. The company targets primarily German-speaking Swiss enterprises and positions itself as a trusted partner in IT transformation. The website is professionally designed using WordPress and Elementor, with modern SEO and tracking tools implemented. Security posture is solid with HTTPS and security headers, though explicit privacy and security policies are not published on the site. Overall, the business appears credible and technically mature, with room for improvement in privacy compliance and incident response transparency.

HMS Analytical Software GmbH is a German-based technology company specializing in data science and AI-driven software solutions for enterprises. The company positions itself as a full-service partner, offering services ranging from conceptualization to operationalization of data science projects, including AI consulting, SAS migration, SDMX implementation, and medical solutions. Their target audience primarily consists of businesses seeking advanced analytical and AI capabilities. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript frameworks like Alpine.js and uses Usercentrics for GDPR-compliant cookie consent. Security posture is solid with HTTPS and consent management, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness.

T

The smarter E

thesmartere.com

57

The smarter E Digital is a comprehensive online platform dedicated to smart energy solutions, offering a wide range of content including recordings from exhibitions, conferences, webinars, studies, interviews, and whitepapers from leading experts in the energy sector. The platform targets energy professionals and companies interested in renewable energy and smart grid technologies, providing both free and premium content access through user accounts. Technically, the website employs modern JavaScript libraries, consent management tools, and CAPTCHA for security, with a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response information are not evident. The absence of WHOIS registration data is a notable anomaly, suggesting either privacy protection or a technical issue, which slightly impacts trust but does not detract from the professional and comprehensive nature of the website content. Overall, the platform demonstrates a high level of professionalism, content quality, and user engagement, positioning it as a key player in the smart energy digital space.

M

Messe München GmbH

analytica.de

60

analytica.de is the official website for the analytica trade fair, a world-leading event for laboratory technology, analytics, and biotechnology organized by Messe München GmbH. The site serves a large professional audience including market leaders and decision-makers in the industry, providing comprehensive information about upcoming events, exhibitor registration, and conference programs. The website demonstrates a high level of digital maturity with modern web technologies, strong privacy compliance via Usercentrics CMP, and integration of analytics and advertising tools. Security posture is robust with HTTPS, security headers, and no detected vulnerabilities. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

I

Intersolar Europe

intersolar.de

57

Intersolar Europe operates as the world’s leading exhibition platform for the solar industry, focusing on photovoltaics, energy storage, and related renewable energy technologies. The website provides comprehensive information for visitors, exhibitors, and conference attendees, positioning itself as a key industry event organizer in Germany. The platform supports event applications, exhibitor services, and industry news dissemination, targeting solar industry professionals globally. Technically, the website employs modern JavaScript libraries, FontAwesome Pro icons, and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. The site is mobile-optimized with good SEO practices and uses HTTPS with strong SSL configuration. Security measures include bot protection via Friendly Captcha and cookie consent management, though explicit security policy and incident response pages are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. The WHOIS data is minimal but consistent with a legitimate business domain. The website maintains a professional design, clear navigation, and trustworthy content, supported by active social media channels and partner event links. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Recommendations include publishing dedicated security and incident response policies and enhancing security headers to further improve the security posture.

H

HARDY SCHMITZ

hardy-schmitz.de

66

HARDY SCHMITZ operates a professional B2B online shop specializing in electrical wholesale products for industry, trade, and crafts in Germany. The company offers a comprehensive product range exceeding 500,000 items, emphasizing fast delivery with next-day shipping for orders placed before 19:00. Their services extend beyond product sales to include logistics, cable assembly, KNX programming, and lighting planning, positioning them as a versatile supplier in the energy and industrial retail sectors. The website is well-structured and designed to cater to a professional audience, reflecting a medium-sized enterprise with consistent branding and a strong market presence. Technically, the website employs modern JavaScript libraries such as Tiny Slider and integrates Google Tag Manager and Usercentrics for analytics and consent management, indicating a mature digital infrastructure. Hosting is managed via cows.de, with Pimcore CMS inferred from HTML structure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous script loading enhancing user experience. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers and visible privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with the hosting provider, with no privacy protection or suspicious patterns identified. Overall, the security posture is solid but could be improved by publishing clear privacy policies and enhancing header configurations. The overall risk assessment is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include adding comprehensive privacy and terms of service documents, improving security headers, and making contact and incident response information more accessible to enhance trust and compliance.

A

Alexander Bürkle

alexander-buerkle.de

63

Alexander Bürkle is a well-established German company specializing in electrical wholesale and technology services, targeting primarily the crafts, industry, and specialized trade sectors. Their website presents a professional and comprehensive digital presence with multiple branded subsidiaries and partner domains, indicating a mature business ecosystem. The technical infrastructure includes modern consent management via Usercentrics and a GraphQL API for search functionality, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy policies, which are areas for improvement. Overall, the website is accessible and trustworthy, with no signs of malicious content or blocking mechanisms.

M

Münchener Verein Versicherungsgruppe

muenchener-assekuranz.de

63

Münchener Assekuranz is an insurance service platform associated with the Münchener Verein Versicherungsgruppe, a well-established insurance group in Germany. The website serves primarily German-speaking customers, offering insurance brokerage and customer login services. The business model focuses on providing insurance products and customer service through a secure online portal. The company maintains a consistent brand presence and targets a medium-sized market segment within the finance industry in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Usercentrics for consent management. Hosting and DNS services are provided via Cloudflare, enhancing security and performance. The site demonstrates good mobile optimization, accessibility, and basic SEO practices, although there is room for improvement in metadata and structured content. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a professional and trustworthy front for an insurance business but would benefit from enhanced privacy disclosures, security headers, and formalized security policies to improve compliance and user trust.

R

Regiondo

regiondo.fr

68

Regiondo is a French-language SaaS company providing an all-in-one online booking software solution tailored for tour operators, leisure activity providers, attractions, and destinations. The platform offers comprehensive features including online ticketing, reservation management, multi-channel distribution, POS solutions, and integrations with major OTAs like Viator and GetYourGuide. The company positions itself as a growth partner for businesses in the hospitality and tourism sector, emphasizing increased bookings, operational efficiency, and cost reduction. The website is professionally designed, multilingual, and rich in content, supporting a strong market presence in France and related markets. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and uses Google Tag Manager and Usercentrics for analytics and consent management. HubSpot forms are used for lead capture, indicating a mature digital marketing infrastructure. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata enhancing search visibility and social sharing. From a security perspective, the site enforces HTTPS and employs a consent management platform, but lacks explicit HTTP security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not raise legitimacy concerns. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with the site demonstrating professionalism, compliance with GDPR, and strong business credibility. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain security and trust.

H

Hotel Aarauerhof

aarauerhof.net

64

Hotel Aarauerhof is a modern self check-in hotel located in the center of Aarau, Switzerland, offering 75 rooms with amenities such as highspeed WLAN and breakfast. The website is professionally designed using modern web technologies including Next.js and React, with integration of Usercentrics for consent management and Aleno for reservations. The security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers and incident response information are missing. The domain WHOIS data is unavailable, which raises some legitimacy concerns, but the website content and business presentation are professional and trustworthy. Overall, the site is well-optimized for SEO, mobile, and accessibility, targeting business travelers and tourists seeking flexible accommodation.

M

Münchener Verein Versicherungsgruppe

mv-partnernetz.de

64

Münchener Verein Versicherungsgruppe operates a professional partner portal targeting insurance brokers and customers in Germany. The website offers comprehensive insurance products including health, life, pension, and business insurance solutions. It holds a strong market position as a multiple-time award-winning insurer, emphasizing trust and reliability. The portal supports partners with product details, contracts, and tools, reflecting a B2B and B2C hybrid business model. Technically, the site is built on TYPO3 CMS, integrates modern analytics and consent management tools, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and GDPR compliance, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

H

Hintbox

hintbox.de

72

Hintbox is a professional provider of secure whistleblower systems, offering ISO 27001 certified software solutions tailored to meet EU and German regulatory requirements. The company targets medium to large enterprises and public sector organizations, providing a cloud-based platform with multilingual support, case management, and customizable forms. The website demonstrates a strong market position with over 1000 customers, including notable enterprises such as REWE Group and Huf Group. Technically, Hintbox employs modern web technologies, integrates comprehensive consent management via Usercentrics, and uses reputable analytics and marketing tools. Hosting is provided by Hetzner, a certified German data center, ensuring data sovereignty and security. Security posture is robust, with end-to-end encryption, two-factor authentication, and isolated data storage, although some HTTP security headers could be improved. Overall, the website is well-designed, user-friendly, and compliant with GDPR and other privacy regulations.

M

Münchener Verein Versicherungsgruppe

muenchener-verein.de

11

Münchener Verein Versicherungsgruppe is a well-established German insurance provider with over 100 years of history, specializing in health, retirement, and business insurance products. The company operates as a mutual insurance association, emphasizing fair premiums and community strength without external shareholders. Their market position is strong, evidenced by multiple awards including 'Versicherer des Jahres' for 14 consecutive years and top ratings from Stiftung Warentest. Technically, the website is built on TYPO3 CMS, uses modern tracking and consent management tools, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and GDPR compliance, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and user-friendly, targeting both private and business customers with comprehensive insurance offerings and digital service channels.

D

DB InfraGO AG

dbinfrago.com

65

DB InfraGO AG is a subsidiary of Deutsche Bahn focused on the future of railway infrastructure in Germany. The company aims to set new standards in efficient and climate-friendly railway infrastructure management. The website reflects a professional and comprehensive digital presence with strong branding consistent with Deutsche Bahn. The technical infrastructure uses CoreMedia CMS, Matomo analytics, and Usercentrics for cookie consent, indicating a mature digital setup with GDPR compliance. Security posture is strong with HTTPS and modern best practices, though explicit security headers and incident response information are not clearly published. The absence of WHOIS registration data for the domain www.dbinfrago.com is a notable concern, potentially indicating privacy protection or an unregistered domain, which slightly reduces trust from a domain registration perspective. Overall, the website is well-structured, accessible, and trustworthy in content and design, serving business and stakeholder audiences in the German transportation sector.

LEDVANCE is a globally recognized company specializing in the development and supply of advanced lighting products and solutions for both professional users and end consumers. The website presents a comprehensive portfolio of lighting products including professional lighting, consumer lighting, renewable energy solutions such as photovoltaics, and smart home lighting. The company positions itself as a leading provider in the general lighting market with a strong focus on innovation and efficiency. The website is well-structured, professionally designed, and targets a German-speaking audience primarily in Germany and neighboring countries. Technically, the site employs modern web technologies including Google Tag Manager and Usercentrics for consent management, indicating a moderate level of digital maturity. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy or recent changes in domain ownership. Security posture is moderate with cookie consent implemented but lacking visible security headers and explicit privacy policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in domain registration and improved security and privacy disclosures.

S

SOMA GmbH

flexassistant.de

11

The website www.flexassistant.de represents SOMA GmbH's flexAssistant product, a digital worker assistance system designed for manual assembly and production processes. The company is positioned as a medium-sized, well-established player in the manufacturing technology sector, with a strong focus on Industry 4.0 solutions such as Pick by Light systems and paperless manufacturing. The site demonstrates a professional and comprehensive digital presence, supported by modern CMS technology (TYPO3), consent management, and analytics tools. Security posture is good with HTTPS and standard best practices, though some security headers could be improved. The business credibility is high, supported by certifications like ISO 9001 and awards such as the TOP 100 Innovator. Contact information is clear and includes a named contact person, enhancing trust.

I

IPCOM

ipcom.be

66

IPCOM is a leading European distributor specializing in energy-efficient insulation and HVAC-R solutions, operating through six dedicated business units across 21 countries. The company emphasizes sustainability, fast delivery, and customer service excellence, positioning itself as a market leader in its sector. The website is professionally designed using Drupal 11, incorporating modern tracking and consent management technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data is restricted, which is common for commercial entities in Europe, but the website's professionalism and trust indicators support its legitimacy. Overall, IPCOM presents a credible and well-established business with a strong online presence.

W

WEMAG Netz GmbH

wemag-netz.de

10

WEMAG Netz GmbH operates as a regional electricity and gas distribution network operator in Mecklenburg and parts of Brandenburg and Lower Saxony, Germany. The company manages extensive electricity and gas networks, providing services such as network connections, energy distribution, and customer portals. Their website reflects a professional and regionally focused utility business with clear service offerings and customer support channels. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and integrates GDPR-compliant cookie management via Usercentrics. Analytics are managed through Google Tag Manager, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the site lacks explicit security policy and incident response information. Overall, the website is well-structured, accessible, and trustworthy, supporting the company's business credibility in the energy sector.

A

Arbeitsgemeinschaft Medienwerbung GmbH im Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

arge-medien.de

41

ArGe Medien im ZVEH is a marketing and PR service provider operating within the German electrical trade sector, affiliated with the Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke (ZVEH). The organization focuses on advertising, public relations, and developing marketing concepts aimed at both trade members and end customers, including campaigns for image building and recruitment. The website demonstrates a strong market position within its niche, supported by a broad network of reputable industry partners and suppliers. Technically, the site is built on TYPO3 CMS, hosted on RZone infrastructure, and employs modern web technologies including Usercentrics for consent management and Google Analytics for tracking. The site is mobile-optimized and accessible, with good SEO practices.

D

Deutsche Bahn AG

deutschebahn.com

71

Deutsche Bahn AG operates as Germany's leading railway company, offering comprehensive passenger and freight transportation services, infrastructure management, and innovative mobility solutions. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content covering corporate information, sustainability, digitalization, and business units. The company targets a broad audience including customers, investors, and partners, positioning itself as a key player in the European transportation sector. Technically, the site leverages modern technologies such as CoreMedia CMS, Matomo analytics, and Usercentrics for consent management, ensuring compliance with GDPR and providing a good user experience across devices. The security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and professionally maintained, though the WHOIS data for the queried domain variant is missing, which warrants verification. The site does not exhibit any adult or questionable content and maintains good privacy compliance. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure mechanisms to enhance transparency and trust.

D

Deutsche Bahn AG

db-ersatzverkehr.de

61

The website 'Ersatzverkehr bei Generalsanierungen' is an official informational portal operated by Deutsche Bahn AG, focusing on replacement bus services during major rail infrastructure renovations in Germany. It serves travelers and freight customers by providing timely updates, travel alternatives, and detailed information about ongoing and upcoming construction projects. The site leverages a modern technical infrastructure including CoreMedia CMS, Usercentrics for cookie consent, and Matomo for privacy-conscious analytics. The design is professional, mobile-optimized, and accessible, reflecting Deutsche Bahn's strong brand identity and commitment to user experience. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

A

arsEdition

arsedition.de

69

arsEdition is a well-established German publishing company with over 125 years of history, specializing in creative publishing and retail of books and games for children, teens, and adults. The company operates a professional e-commerce website powered by Shopify, offering a broad range of products categorized by age groups and themes. The website demonstrates a mature digital infrastructure with modern technologies, including Shopify's Dawn theme, Usercentrics consent management, and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, hCaptcha protection on forms, and privacy compliance mechanisms in place. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and well-positioned in the retail and media sectors.

S

S-Bahn Berlin GmbH

abo-antrag.de

64

The website www.abo-antrag.de is an official online subscription management portal operated by S-Bahn Berlin GmbH, a medium-sized transportation company under Deutsche Bahn. It provides services for purchasing, managing, and canceling public transport subscriptions for Berlin and Brandenburg residents. The site is well-branded with official logos and integrates with partner domains such as sbahn.berlin and bahn.de. Technically, it is built on ASP.NET WebForms with modern JavaScript libraries and uses Adobe Analytics and Usercentrics for tracking and consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a general audience without any adult or questionable content.

F

Fachverband Elektro- und Informationstechnik Sachsen/Thüringen

elektro-sachsen-thueringen.de

38

The Fachverband Elektro- und Informationstechnik Sachsen/Thüringen is a regional trade association representing electrical and information technology craftsmen and companies in the German states of Saxony and Thuringia. The website serves as a professional platform offering information about the association, upcoming events, employee training, and member services. It targets electrical trade professionals and companies seeking industry support and networking. The business model focuses on member representation, training, and industry promotion within the regional market. Technically, the website is built on TYPO3 CMS, hosted on Strato servers, and integrates modern marketing and analytics tools such as Usercentrics CMP, Google Tag Manager, and TikTok Pixel. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with consent management, reflecting good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the association's credibility and member engagement.