Security Directory

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 27 security findings identified across all modules.

W

Windows and doors | Internorm INT

internorm.com

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 26 security findings identified across all modules.

W

WSG Consulting, Inc. – Web Design & IT Consulting | Saratoga & Albany NY

wsg.net

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 28 security findings identified across all modules.

G

GASSAUER-FLEISSNER Rechtsanwälte

gassauer.com

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 27 security findings identified across all modules.

S

Startseite - Weischer.Cinema Österreich

cinecom.at

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

S

Study Abroad Programs & Internships | IES Abroad

iesabroad.org

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 25 security findings identified across all modules.

T

Top Ideas, Big Impact.

topideas.digital

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 25 security findings identified across all modules.

G

Getränkeautomat FRUCTOMAT

asco.at

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 28 security findings identified across all modules.

S

Streng geprüfte & seltene Naturkosmetik online kaufen | Biomazing Schweiz

biomazing.ch

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 31 security findings identified across all modules.

S

s-team IT solutions GmbH

s-team.at

0

s-team IT solutions GmbH is a small Austrian IT services company based in Vienna, specializing in IT infrastructure, server maintenance, virtualization, and custom web development. Established in 2002, it serves a diverse clientele including small and large companies as well as public organizations. The website reflects a professional and consistent brand presence with clear contact information and client testimonials, indicating a trustworthy business. Technically, the site runs on Contao CMS with common JavaScript libraries but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS exposes visitors to potential data interception risks. Security headers are well configured, but the lack of modern TLS protocols and HSTS reduces the overall security posture. Privacy compliance is partially met with a GDPR-compliant privacy policy but no cookie consent mechanism. Overall, the website is functional and professional but requires urgent security improvements to protect users and enhance trust.

T

Transsystem Spółka Akcyjna

transsystem.pl

0

Transsystem Spółka Akcyjna is a Polish manufacturing company specializing in the production and general contracting of technological transport systems, primarily serving the tire industry, intralogistics, and e-commerce sectors. With over 31 years of market presence and a portfolio of international projects, the company maintains a solid market position supported by partnerships with major industry players such as Michelin, Goodyear, and Bridgestone. The website reflects a professional business model focused on manufacturing and technological transport solutions. Technically, the site is built on WordPress with common plugins like Yoast SEO and Contact Form 7, and it integrates Google Tag Manager and reCAPTCHA for analytics and security. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, exposing users to potential risks. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to align with best practices.

T

Tiroler Sparkasse

tirolersparkasse.at

0

Tiroler Sparkasse is a well-established Austrian banking institution with a history dating back to 1822. It offers a comprehensive range of financial services including retail banking, digital banking via the George platform, savings, investments, loans, and insurance products. The website reflects a mature digital presence with modern design, structured data, and clear navigation targeting diverse customer segments such as private customers, youth, businesses, and investors. Technically, the site uses a proprietary CMS (GEM) and is hosted on AWS CloudFront CDN, employing modern web technologies and accessibility features. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Security headers are partially implemented, and privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent SSL/TLS remediation to ensure secure user interactions.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 21 security findings identified across all modules.

K

KERRES | PARTNERS

kerres.at

0

KERRES | PARTNERS is a well-established Austrian law firm with over 30 years of experience, specializing in commercial law, litigation, arbitration, corporate, and contract law. The firm positions itself as a trusted legal advisor to companies, corporations, private clients, and foundations. The website reflects a professional and consistent brand image with good content relevance and clear navigation, targeting primarily German-speaking clients with multilingual support. Technically, the site runs on Drupal 7 with standard libraries and includes Google Analytics for visitor tracking. However, the absence of HTTPS and a valid SSL certificate is a critical security shortfall, exposing visitors to potential risks. Security headers are partially implemented, but key protections like HSTS and modern TLS protocols are missing. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security and privacy improvements.

P

planlicht GmbH&Co. KG

planlicht.com

0

PLANLICHT GmbH&Co. KG is an Austrian company specializing in architectural LED lighting solutions, serving sectors such as office, public, hospitality, and retail. Their website offers a comprehensive product catalog, customization options, and detailed technical documentation, targeting architects and lighting professionals. The company maintains a professional online presence with multilingual support and active social media channels. Technically, the website is built on WordPress with popular plugins and frameworks, providing a good user experience and moderate performance. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Business credibility is supported by clear contact information, job listings, and consistent branding. Overall, the site is functional and professional but requires urgent security improvements.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Boston Scientific Corporation is a leading global healthcare company specializing in innovative medical devices and solutions aimed at improving patient outcomes. The website targets healthcare professionals, patients, caregivers, investors, and other stakeholders, offering comprehensive product information, educational resources, and corporate responsibility content. The company is well-established with a mature domain and strong brand presence. Technically, the website leverages Adobe Experience Manager as its CMS, integrates modern marketing and analytics tools such as Adobe Target and Google Tag Manager, and provides a responsive, accessible user experience. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Security headers and content security policies are implemented but their effectiveness is limited without HTTPS. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and professionalism but requires urgent remediation of its SSL/TLS configuration to ensure user trust and data protection.

Hofegger Branding is a Vienna-based branding agency established in 2000, specializing in brand strategy, design, management, and consulting services. The company targets businesses seeking to develop or reposition their brands with a focus on meaningful connection and clarity. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses Craft CMS and SEOmatic, hosted on internex.at, and is optimized for mobile devices. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Security headers are present but cannot compensate for the lack of encryption. Privacy and terms policies are available, supporting GDPR compliance. Contact information is comprehensive, including email, phone, physical address, and a contact form. Overall, the site is credible and professional but requires urgent security improvements.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

SPP Pension & Försäkring AB is a well-established Swedish financial services company specializing in pension, savings, and insurance solutions for both private individuals and businesses. The website reflects a mature digital presence with comprehensive content tailored to its Swedish audience, emphasizing sustainable and accessible pension products. The company operates under the parent company Storebrand, reinforcing its market position in the Nordic financial sector. Technically, the site leverages modern frameworks such as Blazor Server and integrates multiple third-party marketing and analytics tools, including Google Tag Manager, Hotjar, and Salesforce platforms. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly impacts the site's security posture. While privacy and cookie policies are well implemented with consent mechanisms, no explicit security policy or incident response contacts are found. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

Visiativ Austria GmbH is a well-established digital transformation partner specializing in CAD and Product Lifecycle Management (PLM) solutions for manufacturing companies. With over 30 years of experience, the company offers a comprehensive portfolio including consulting, software sales, and training services. Their market position is strong within the manufacturing and technology sectors, supported by partnerships with Dassault Systèmes and a broad regional presence across Europe. The website reflects a professional and consistent brand image with high-quality content and effective SEO practices. Technically, the website is built on WordPress with modern plugins for SEO, caching, and cookie consent management. The infrastructure includes Apache hosting with DNS managed via Google Domains. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Other security best practices such as SPF records for email and vulnerability scanning show positive signs, but the lack of HTTPS is a major concern. The security posture is currently basic, with no detected vulnerabilities but missing essential HTTPS protections and security headers. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Contact information is clearly provided, including phone numbers and social media links, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols. Strategic recommendations include installing a valid SSL certificate, enabling HSTS, and improving server security headers to enhance trust and protect user data.

T

Ticket Gretchen GmbH

ticketgretchen.com

0

Ticket Gretchen GmbH operates a mobile application platform focused on providing fast and direct ticket sales for cultural events across Austria, including theater, musicals, concerts, and operas. The company targets cultural enthusiasts, especially younger demographics such as U27 and U30, offering exclusive promotions and original tickets without price surcharges. The website reflects a professional and well-branded presence with comprehensive event listings and user testimonials, positioning the company as a leading cultural ticketing service in Austria. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and WPBakery Page Builder. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, supporting moderate user tracking and marketing efforts. Hosting is provided via Amazon AWS DNS infrastructure. The site is mobile-optimized and SEO-friendly, delivering a good user experience. From a security perspective, the website lacks HTTPS encryption, which is a critical vulnerability exposing users to potential data interception. Security headers are minimal, and no advanced security policies or incident response information are published. While no immediate vulnerabilities or malware are detected, the absence of SSL/TLS and security best practices significantly lowers the security posture. Overall, the business is credible and trustworthy based on domain registration consistency, clear contact information, and positive user feedback. However, the lack of HTTPS and cookie consent mechanisms presents compliance and security risks. Strategic improvements in security infrastructure and privacy compliance are recommended to enhance user trust and regulatory adherence.

ConSol Consulting & Solutions Software GmbH is a medium-sized German IT service provider specializing in custom IT solutions and product solutions across the entire software lifecycle. The company has a strong market position with notable clients such as BMW Group, Union Investment, and Lidl, and holds ISO 9001 and ISO 27001 certifications. Their website is professionally designed, content-rich, and well-structured, targeting businesses seeking tailored IT and software services. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and integrates multiple analytics and marketing tools. However, the current lack of a valid SSL certificate and absence of HTTPS support represent critical security vulnerabilities that must be addressed promptly. The security posture is otherwise supported by appropriate security headers but lacks advanced SSL/TLS configurations. Overall, the website demonstrates good privacy compliance with comprehensive cookie and privacy policies and consent mechanisms. Strategic improvements in SSL/TLS implementation and security configurations are recommended to enhance trust and security.

SPX FLOW, Inc. is a well-established global manufacturer specializing in engineered industrial equipment and solutions primarily serving the Food & Beverage, Industrial, and Power & Energy sectors. The company operates multiple specialized brands and maintains a comprehensive website showcasing products, solutions, industries served, and corporate information. The website demonstrates good content quality, professional design, and clear navigation targeting industrial manufacturers and related sectors. Technically, the site uses a Microsoft IIS server with ASP.NET framework and modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. However, the website critically lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts security posture and user trust. Security headers are partially implemented but ineffective without proper SSL. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Business credibility is strong with consistent WHOIS data, a mature domain, and multiple trust indicators such as social media presence and detailed corporate content. Overall, the site is functional and professional but requires urgent security improvements to protect users and enhance trust.

LB-electronics GmbH is a market-leading distributor of high-quality and innovative broadcast technologies based in Austria. The company offers specialized system solutions including studio planning, lighting technology, mobile transmission, and video over IP, complemented by comprehensive service offerings. Their website targets broadcast technology professionals and media production companies, positioning them as a key player in the Austrian broadcast technology sector. Technically, the website is built on Joomla CMS with several modern libraries and plugins, but suffers from poor SSL/TLS configuration, lacking a valid certificate and modern protocols, which poses security risks. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, enhancing business credibility. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

The website legacybancorp.com is currently a parked domain with a landing page primarily focused on advertising the domain for sale. There is no active business content, contact information, or service descriptions available. The site targets domain buyers or investors rather than end customers. Technically, the site is hosted on Hetzner Online and served by a Caddy server, but it lacks a valid SSL certificate and does not support HTTPS, which is a significant security concern. The site relies heavily on third-party ad networks such as Afternic and ParkingCrew for monetization. Security posture is weak due to the absence of HTTPS, security headers, and privacy compliance mechanisms. Overall, the site has poor content quality, minimal technical sophistication, and low trustworthiness.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Luxoft, a DXC Technology Company founded in 2000 and headquartered in Switzerland, is a global enterprise technology services provider specializing in software engineering and digital transformation. The company serves multiple industries including automotive, finance, telecommunications, energy, and retail, offering a broad portfolio of services such as cloud solutions, data analytics, machine learning, and legacy modernization. Luxoft positions itself as a trusted partner for enterprises seeking to modernize IT systems and achieve sustainable digital advantage. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting enterprise clients worldwide. Technically, the site uses modern frameworks and integrates advanced marketing and analytics tools with consent management, indicating a high level of digital maturity. However, the security posture is weakened by an invalid SSL certificate and lack of TLS support, which poses significant risks to secure communications and user trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Luxoft demonstrates strong business credibility and professionalism but should urgently remediate SSL/TLS issues to enhance security and trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

ASM is a leading enterprise in the semiconductor technology and manufacturing sector, specializing in advanced equipment and process technologies such as Atomic Layer Deposition, Epitaxy, and Silicon Carbide processing. The company has a strong market position supported by over 50 years of innovation and a comprehensive digital presence targeting semiconductor manufacturers, investors, and job seekers. Technically, the website employs modern tracking and marketing technologies including Google Tag Manager, Hotjar, and Facebook Pixel, hosted behind Cloudflare. However, the site suffers from critical SSL certificate issues, lacking valid HTTPS encryption and TLS protocol support, which significantly impacts its security posture. Despite strong security headers and privacy policies, the invalid SSL undermines trust and security. The absence of direct contact information on the site limits user engagement channels. Overall, ASM demonstrates a mature business and digital footprint but requires urgent remediation of SSL and encryption to enhance security and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Smurfit Kappa is a globally recognized FTSE 100 company specializing in paper-based packaging solutions with operations in over 30 countries. The website reflects a mature business with a strong emphasis on sustainability, innovation, and customer-centric packaging services across multiple sectors. The digital infrastructure leverages modern technologies such as React and Sitecore CMS, supported by marketing and analytics tools including Google Tag Manager, Cookiebot, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which undermines the site's security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS issues to ensure secure user interactions.

ITH icoserve technology for healthcare GmbH is a medium-sized company operating in the healthcare technology sector, specializing in innovative software solutions for medical data management and healthcare networking. As a subsidiary of Siemens Healthineers, it holds a strong market position as a leading software provider in Health IT. The website is professionally designed with good content quality and clear navigation, targeting healthcare providers and IT professionals. Technically, the site is built on TYPO3 CMS with modern frontend libraries, but lacks a valid SSL certificate, which is a critical security shortfall. Security headers are properly configured, but the absence of HTTPS significantly reduces the security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism via Cookiebot. Contact information is clearly presented, enhancing business credibility. Overall, the site is trustworthy but requires urgent security improvements.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

E

Eyemaxx Real Estate AG

eyemaxx.com

0

Eyemaxx Real Estate AG is an established real estate development company operating primarily in Germany and Austria, with over 20 years of market presence. The company focuses on residential, micro and student apartments, hotels, urban quarters, retail, and logistics properties. It is publicly listed on the Frankfurt and Vienna Stock Exchanges and issues bonds, indicating a mature business model targeting investors and real estate clients. The website reflects a professional corporate presence with good content quality and consistent branding. Technically, the site uses standard web technologies such as Apache, Bootstrap, and Google Analytics, but lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols severely impacts the security posture. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism despite tracking usage. Contact information is not explicitly provided on the homepage, which may affect user trust and engagement. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to meet modern standards.

Roland Berger is a well-established global management consultancy with a significant presence in Brazil through its São Paulo office, founded in 1976. The company offers a broad range of consulting services across multiple industries, focusing on corporate performance, digital transformation, and sustainability. The website reflects a professional and consistent brand image targeting business clients seeking expert advisory services. Technically, the site uses modern web technologies including AngularJS, Usercentrics for consent management, Google Tag Manager, and Matomo analytics, hosted behind Cloudflare. However, the security posture is weakened by the lack of a valid SSL certificate and absence of HTTPS enforcement, which is a critical issue for trust and compliance. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the site is content-rich and professionally maintained but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

S

STAPPERT

stappert.biz

0

STAPPERT is a leading European stockholder and supplier of stainless steel long products and fittings, targeting industrial and business customers. The company emphasizes a comprehensive product range, quality, and customer-oriented service. The website is built on WordPress with professional SEO and multilingual support, indicating a mature digital presence. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. Cookie consent is managed via a third-party tool, and contact forms are protected with reCAPTCHA, showing some privacy awareness. Overall, the site is functional and professional but requires urgent security improvements to protect data and build trust.

Upstream Mobility is a small Austrian company specializing in digital municipal mobility solutions, offering a cloud-based platform and white-label apps to integrate various mobility providers and services. Their business model focuses on B2B and B2G markets, targeting municipalities and public transport authorities to enable Mobility as a Service. The website is built on Squarespace, featuring professional design and good content relevance, but suffers from critical security issues due to lack of a valid SSL certificate and HTTPS support. The security posture is weak, with no modern TLS protocols enabled and no advanced security headers beyond basic HSTS and X-Content-Type-Options. Privacy compliance is basic, with a cookie consent mechanism and a privacy policy page present, but no terms of service or incident response information. Contact is primarily via web forms, with no explicit company emails or phone numbers displayed. The domain registration is consistent with the business claims and hosted on Squarespace infrastructure. Strategic improvements in security and contact transparency are recommended to enhance trust and compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

ARWAG Holding-AG is a Vienna-based real estate developer specializing in provision-free residential and commercial properties. The company focuses on sustainable, high-quality housing projects and offers services including property development, leasing, and property management. The website reflects a mature market position with clear business offerings targeted at property buyers, renters, and investors in Vienna. Technically, the site is built on SilverStripe CMS with modern JavaScript libraries and includes privacy consent management and analytics integrations. However, a critical security gap exists due to the absence of a valid SSL certificate and disabled TLS protocols, which undermines secure communications. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

D

Der Grazer

grazer.at

0

Der Grazer is a regional online news media outlet focused on providing current news, event information, and photo galleries related to Graz, Austria. The website targets local residents and visitors interested in city news, politics, culture, and lifestyle. It operates primarily as an advertising-supported online news portal with additional services such as an e-paper and club membership. The site uses TYPO3 CMS and common web technologies like Bootstrap and jQuery, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and lack of HTTPS significantly weaken its security posture. While cookie consent and privacy policies are present, indicating GDPR awareness, no explicit security or incident response policies are found. Overall, the website is functional and professionally designed but requires urgent improvements in security to protect user data and enhance trust.

RMK Regionalmedien Kärnten GmbH operates the website Mein Sonntag, a regional media platform providing tourism and culinary content focused on the Alpen-Adria region. The site offers a mix of digital and print media, including articles, recipes, event information, and an online shop. The company is positioned as a trusted regional media provider with a consistent brand and a medium-sized operation based in Austria. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and themes, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS enabled and valid SSL certificates, though improvements like HSTS and OCSP stapling could enhance security further. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent management. Overall, the website demonstrates a professional and trustworthy digital presence suitable for its audience and business goals.

U

Up2Go International LLC

up2go.com

0

Up2Go International LLC is a small technology company founded in 2009 in Austria, focused on transforming organizational collaboration through its Responsibility-as-a-Platform™ digital solution. The company promotes non-hierarchical leadership and responsible collaboration models, targeting organizations seeking innovative operational frameworks. The website is professionally designed using Squarespace, with good content quality and consistent branding, although it lacks comprehensive privacy and terms of service documentation. Technically, the site uses modern web technologies but suffers from poor SSL/TLS configuration, lacking a valid certificate and modern protocol support, which significantly impacts its security posture. Minimal user tracking is implemented via Google Analytics, with essential cookies only, aligning with a privacy-conscious approach. Overall, the site is functional and credible but requires urgent security improvements and enhanced privacy compliance to strengthen trust and protect visitors.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Raiffeisen is Austria's largest banking group, offering a wide range of financial services to private and corporate customers through a strong regional presence and digital platforms. The website reflects a mature digital infrastructure built on Adobe Experience Manager with modern JavaScript frameworks, providing excellent user experience and comprehensive content. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, which is a critical issue for a financial institution. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect customer data and maintain trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

L

Lottomatica Group SpA

lottomaticagroup.com

0

Lottomatica Group SpA is a leading operator in the legal gaming sector in Italy, offering a comprehensive range of services including online gaming, sports betting, and franchising of gaming venues. The company emphasizes innovation, sustainability, and responsibility, targeting both consumers and investors within the Italian market. The website reflects a mature digital presence with clear navigation, professional design, and rich content focused on ESG commitments and corporate governance. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Kentico CMS, ensuring good mobile optimization and SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS, exposing users to potential risks. Security headers are partially implemented, but the SSL/TLS configuration is poor, significantly impacting the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is complete and professionally presented, enhancing business credibility. Overall, while the business and content quality are excellent, urgent improvements in security infrastructure are necessary to protect users and maintain trust.

A

Agos Ducato S.p.A.

agosducato.it

0

Agos Ducato S.p.A. is a well-established Italian consumer credit company with over 30 years of market presence, serving millions of customers through a large network of branches and digital platforms. The website provides comprehensive corporate information, social responsibility initiatives, and partner portals, reflecting a mature business model focused on customer-centric financial services. Technically, the site uses ASP.NET Web Forms with modern JavaScript libraries and integrates advanced consent management and analytics tools. However, the absence of a valid SSL certificate and missing DNS records represent significant security and operational risks. While the site demonstrates good privacy compliance and business credibility, these technical shortcomings reduce overall trust and security posture. Strategic improvements in SSL deployment, DNS configuration, and enhanced security headers are recommended to align the website with industry best practices and regulatory requirements.

The website for blumatix-consulting.at is currently not configured and serves a default Microsoft Azure 404 error page. There is no accessible business content, contact information, or policies available on the site. The domain is registered and DNS records indicate hosting on Microsoft Azure with email services via Outlook, consistent with a small consulting business based in Austria. However, the lack of a valid SSL certificate and absence of any meaningful content or security configurations significantly reduce the website's credibility and security posture. The site does not implement any privacy or cookie policies, nor does it provide contact or incident response information, indicating a very low level of digital maturity and compliance readiness.