Security Directory

S

SABIC

sabic.com

0

SABIC is a large multinational petrochemical company headquartered in Saudi Arabia, specializing in manufacturing and supplying polymers, chemicals, specialties, and agri-nutrients. The website reflects a mature enterprise with a comprehensive digital presence targeting industrial customers, investors, and job seekers. The content is professionally presented with clear navigation and consistent branding. Technically, the site uses ASP.NET technology with modern JavaScript libraries and Google Tag Manager for analytics and marketing. However, the SSL/TLS configuration is critically flawed with no valid certificate and no TLS protocols enabled, severely impacting security posture. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and professional but requires urgent remediation of HTTPS and SSL issues to ensure secure user interactions.

N

NTS Retail

ntsretail.com

0

NTS Retail is a specialized B2B software provider offering smart commerce and retail management solutions primarily for telecommunications operators and specialist retailers. The company positions itself as a preferred partner for leading telco brands worldwide, delivering unified commerce platforms and tailored retail management services. Their website reflects a professional and consistent brand image with strong client references and active social media engagement. Technically, the website is built on Drupal CMS, hosted on Azure DNS infrastructure, and utilizes Apache server technology. It incorporates modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. Security-wise, while some security headers are implemented, the lack of HTTPS, HSTS, and incident response information exposes the site to risks and compliance gaps. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site demonstrates good business credibility but requires urgent security improvements. Strategically, the company should prioritize securing its website with HTTPS, implement comprehensive privacy and cookie consent mechanisms, and publish clear security policies and incident response contacts to enhance trust and compliance.

S

SBA Research gGmbH

sba-research.org

0

SBA Research gGmbH is a well-established research center specializing in information security, funded partly by national and European initiatives such as the COMET Competence Centers for Excellent Technologies. The organization offers a broad range of services including research, professional security consulting, security trainings, and vulnerability disclosure. Their market position is strong within Austria and Europe, supported by partnerships with governmental and scientific bodies. The website reflects a professional and content-rich digital presence targeting researchers, security professionals, and industry partners. Technically, the site is built on WordPress with Apache server and uses jQuery for client-side scripting. While the site is mobile-optimized and accessible, performance data is unavailable. Security headers are well implemented, but the lack of a valid SSL certificate and proper HTTPS configuration is a significant weakness. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy. Business credibility is supported by ISO 27001 certification and transparent partnership disclosures. Overall, the site is trustworthy but requires urgent SSL/TLS remediation to improve security posture and user trust.

N

n-ce Neuwirth Consulting & Engineering

n-ce.at

0

n-ce Neuwirth Consulting & Engineering is a small Austrian consulting and engineering firm specializing in foundry technology and related industrial applications. The company offers consulting, engineering services, and seminars targeted at clients in the foundry and manufacturing sectors. Their website reflects a professional and consistent brand presence with clear contact information and client references, positioning them as a niche specialist in their market. Technically, the website is built on WordPress with common plugins like WPBakery and Slider Revolution, but suffers from very poor performance and lacks HTTPS security. The absence of SSL/TLS and security headers represents a critical security risk. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no terms of service or incident response information is provided. Overall, the site is accessible and informative but requires urgent security improvements.

A

AURIGON Advisors AG

aurigon.ch

0

AURIGON Advisors AG is a specialized consulting firm focused exclusively on reinsurance and insurance sectors, serving clients primarily in Switzerland, the EU, USA, UK, and Latin America. Their key services include conflict resolution, audits, claims management, exit strategies, and strategic consulting. The company maintains a multilingual website with professional team profiles and contact information, indicating a small but internationally oriented business. Technically, the website is built on WordPress using the Enfold theme and includes multiple shortcodes and scripts, but lacks a valid SSL certificate, which is a critical security deficiency. The cookie consent mechanism is implemented, supporting GDPR compliance. Security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Overall, the website is functional and professional in content but requires urgent security improvements to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website team-rottensteiner.com currently serves a 404 Not Found error page, indicating that the site content is inaccessible or missing. There is no visible business information, contact details, or policy documents available on the site. The technical infrastructure shows the use of Phusion Passenger as the application server, but the site lacks a valid SSL certificate and does not support any TLS protocols, resulting in an insecure connection. Security headers are partially implemented but limited by the absence of HTTPS. Overall, the website's digital maturity is low, with poor performance, minimal content, and no evident SEO or accessibility features. The security posture is weak due to the lack of HTTPS and modern cryptographic protocols, exposing visitors to potential risks. Given these factors, the site presents a high risk from a security and trust perspective, and strategic improvements are necessary to establish a secure and professional online presence.

GMB Union is a well-established UK trade union with a mature domain and a large membership base exceeding 500,000. The website serves as a comprehensive platform for union campaigns, news, member benefits, and sector-specific advice, targeting workers across public and private sectors. The technical infrastructure is based on MODX Revolution CMS, hosted on a Plesk platform with nginx web server, and uses modern JavaScript libraries for enhanced user experience. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security concern. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security or incident response policies are found. Overall, the website is professionally designed, content-rich, and trustworthy but requires urgent improvements in its security posture to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website represents a small German engineering consultancy specializing in building physics, damage assessment, and related services for private clients, insurers, and courts. The business offers expert reports, simulations, and consulting in areas such as thermal protection, moisture protection, and building acoustics. The site is hosted on the Strato platform using the cm4all CMS and employs legacy JavaScript libraries. While the content is relevant and professionally presented, the technical infrastructure is outdated and lacks modern security features. Critically, the site does not support HTTPS, exposing visitors to security risks and undermining trust. Cookie consent mechanisms are implemented, but privacy compliance could be improved. Overall, the business appears legitimate and consistent with its domain registration data, but the website requires urgent security upgrades to meet modern standards.

KTM Sportmotorcycle GmbH operates a professionally designed and content-rich website targeting motorcycle enthusiasts primarily in Finland and Europe. The company is a leading European manufacturer of high-performance street and offroad motorcycles, supported by a large-scale business model including sales, parts, accessories, and motorsport activities. The website leverages modern technologies such as Adobe Experience Manager, Scene7 Dynamic Media, and Google Tag Manager, indicating a mature digital infrastructure. However, a critical security weakness is present due to an invalid SSL certificate and lack of TLS protocol support, which undermines secure communications. Privacy and cookie policies are well implemented and GDPR compliant, supporting good privacy practices. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

A

Ahoi Kapptn FlexCo

ahoikapptn.com

0

Ahoi Kapptn FlexCo is a technology-focused company specializing in digital solutions for businesses, including consulting, UI/UX design, AI applications, and scalable software development. The company serves a diverse clientele including notable brands such as Red Bull, SAP, and the Austrian Football Association, positioning itself as a trusted provider of innovative digital products. Their business model revolves around delivering end-to-end digital product development and optimization services, targeting businesses seeking to evolve their digital presence and capabilities. Technically, the website is built on a modern stack using Next.js and React, hosted on Vercel, with native mobile app development capabilities demonstrated in their projects. The site is well-structured, mobile-optimized, and rich in content, reflecting a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which undermines user trust and data security. Privacy compliance is generally good, with a clear privacy policy and GDPR adherence, though the lack of a cookie consent mechanism is a notable shortfall. Overall, the website presents a professional and credible business front but requires urgent security improvements to align with best practices and user expectations.

B

BVAEB Versicherungsanstalt öffentlich Bediensteter, Eisenbahnen und Bergbau

bvaeb.at

0

BVAEB is an Austrian government social insurance institution serving public servants, railway workers, and mining employees. It provides comprehensive information and services related to health insurance, accident insurance, pension, and family benefits. The website is well-structured and targets insured persons, employers, and partners within its sector. Technically, the site uses Apache, Jakarta Faces, and modern JavaScript libraries, but suffers from a critical lack of valid SSL/TLS certificates, severely impacting its security posture. Privacy and cookie policies are implemented with consent mechanisms, and contact information is clearly provided. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and comply with modern standards.

K

Kwizda – Kwizda Unternehmensgruppe

kwizda.at

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 30 security findings identified across all modules.

Ö

Österreichische Gesundheitskasse

meineoegk.at

0

The website meineoegk.at serves as the official service portal for the Österreichische Gesundheitskasse, Austria's public health insurance provider. It offers a broad range of online services including e-Rezept, insurance data access, pension applications, and various social insurance related forms. The portal targets insured Austrian residents and provides a secure login mechanism via ID Austria, ensuring user data protection and access control. The site is professionally designed with clear navigation and comprehensive content relevant to its audience. Technically, it employs a custom CMS with Jakarta Faces framework and uses modern JavaScript libraries such as jQuery 3.6.0 and Slick Carousel for UI components. Analytics is managed through Piwik PRO with user consent mechanisms in place, reflecting good privacy practices. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the site's security posture. The Content Security Policy is robust but includes unsafe directives that could be improved. Overall, the site is trustworthy and authoritative but requires urgent security enhancements to protect user data and comply with best practices.

S

Supersnow

supersnow.pl

0

Security assessment completed with an overall score of 0/100 (unknown risk). 6 critical issues require immediate attention. Total of 31 security findings identified across all modules.

B

BH Technologies, Eclairage Public & Gestion des déchets

bh-technologies.com

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 28 security findings identified across all modules.

S

Scheuch Group

scheuch.com

0

Scheuch Group is a well-established Austrian company specializing in industrial air cleaning and environmental technology solutions, holding a world market leader position since its founding in 1963. The company offers comprehensive services including devices, components, assembly, and consulting tailored to various industries. Their website reflects a professional digital presence with multilingual support and clear business information targeting industrial clients. Technically, the site is built on WordPress with modern plugins and frameworks, but suffers from a critical security weakness due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support. Security headers are partially implemented, but the lack of encryption significantly undermines the site's security posture. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, the site is trustworthy and professionally maintained, but urgent improvements in SSL/TLS configuration are necessary to enhance security and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Generali Gruppe Österreich operates as a major insurance provider in Austria, offering a broad spectrum of insurance and financial products targeting both private and corporate customers. The company enjoys a strong market position with over 2 million customers and is part of the global Generali Group. Their website reflects a professional and comprehensive digital presence, showcasing extensive product offerings and customer services. Technically, the site leverages modern frameworks such as React and Gatsby, hosted on AWS infrastructure with CDN support for content delivery. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly undermines the site's security posture. Privacy and cookie policies are well implemented, indicating good compliance with GDPR requirements. Overall, the website is user-friendly, mobile-optimized, and trustworthy, but urgent improvements in SSL/TLS configuration are necessary to ensure secure communications and maintain customer trust.

B

Business network solutions "engineered in Germany": LANCOM Systems GmbH

lancom-systems.com

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 23 security findings identified across all modules.

M

Make Brands. Sell Products. with CELUM

celum.com

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 21 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 21 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 5 critical issues require immediate attention. Total of 26 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 28 security findings identified across all modules.

A

adesso Austria GmbH - IT-Dienstleister - Kerngeschäftsprozesse optimieren durch gezielten Einsatz moderner IT

adesso.at

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 27 security findings identified across all modules.

The website amstm.com currently presents only a minimal HTML page with a redirect script and no accessible content, indicating it is either under construction, blocked, or a placeholder. The domain is registered through GoDaddy.com, LLC and has strong domain protection with multiple client prohibitions, but the lack of SSL/TLS certificate and absence of any meaningful content significantly reduce its trustworthiness and usability. Technically, the site lacks modern security configurations such as HTTPS, security headers, and DNSSEC, which are critical for protecting visitors and data integrity. No privacy or cookie policies, contact information, or business details are available, limiting compliance and user trust. Overall, the site is not currently functional as a business or informational platform.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 27 security findings identified across all modules.

S

StudiosDigital GmbH

studiosdigital.at

0

StudiosDigital GmbH is a small Austrian technology agency specializing in interactive media and Drupal-based web development. The company targets businesses and organizations in Vienna and Austria seeking professional web presence and digital solutions. Their website reflects a consistent branding and professional content focused on Drupal 7 CMS projects and interactive media services. Technically, the site runs on Drupal 7 with jQuery and nginx but lacks modern security practices such as HTTPS, which is a critical vulnerability. The absence of cookie consent and privacy compliance mechanisms indicates GDPR compliance gaps. Social media integration is present but no advanced analytics or marketing tools are detected. Overall, the website is functional but requires urgent security upgrades and privacy compliance improvements to meet modern standards.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 24 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

T

Timesheet - Mobile Time Tracking

timesheet.io

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

The website hollisterco.com appears to represent a large retail brand, Hollister Co., but the actual website content is inaccessible, returning only a minimal 'Bad Request' page. This prevents detailed content and business information extraction. The DNS and email configurations are properly set, indicating legitimate domain management and good email security practices. However, the lack of a valid SSL certificate and absence of HTTPS severely impact the security posture. The site is likely protected by a Web Application Firewall or similar security mechanism that blocks access to the content, further limiting analysis. Overall, the site shows signs of a mature business with enterprise scale but suffers from critical security configuration issues and content accessibility problems.

QCM Holding is a Swiss-based aviation competence center specializing in regulatory and Part-147 training, design approvals, aircraft technical management, and consulting services. With over 25 years of industry presence and recent ownership transition, QCM maintains a strong market position serving aviation professionals and organizations. The website reflects a professional and comprehensive service offering with clear navigation and relevant content. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, but lacks a valid SSL certificate, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business demonstrates credibility and trustworthiness, though the security weaknesses present a risk that should be addressed promptly.

M

Minimax GmbH

minimax.de

0

Minimax GmbH is a well-established leader in the fire protection industry with over 120 years of experience. The company offers a broad range of fire detection, suppression, and prevention systems tailored for various industries including energy, manufacturing, and transportation. Their market position is strong, supported by a comprehensive portfolio of products and services, including maintenance and training. The website reflects a professional and consistent brand image targeting industrial and commercial clients seeking reliable fire safety solutions. Technically, the site uses modern JavaScript modules, a CDN for content delivery, and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, leaving the site vulnerable to interception and undermining user trust. Security headers are properly configured, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to align with best practices and protect users.

The website yourccc.com is currently inaccessible beyond a Cloudflare Web Application Firewall (WAF) challenge page that requires JavaScript and cookies to proceed. This prevents access to any meaningful content or business information. The domain is registered with Google Domains nameservers and has valid MX records, indicating legitimate registration, but the SSL certificate is invalid and no HTTPS is effectively enabled. The lack of visible privacy, cookie, or terms of service policies, as well as absence of contact information, further limits the ability to assess the business or compliance posture. The technical infrastructure shows use of Cloudflare for security and Google Cloud for hosting, but the SSL/TLS configuration is poor and no modern TLS protocols are enabled. Overall, the website's security posture is weak due to missing SSL and blocked content, and the business credibility cannot be established from the available data.

E

EOX IT Services GmbH

eox.at

0

EOX IT Services GmbH is a specialized technology company focused on Earth observation data services and software solutions. Their offerings include satellite data visualization, cloudless mapping, and data catalog services targeting researchers and professionals in geospatial and environmental fields. The company maintains a professional web presence with a clear focus on open data and cloud-native solutions. Technically, the website is built on VuePress and modern JavaScript frameworks, providing a good user experience and mobile optimization. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security gap. Security headers are partially implemented, but the absence of TLS protocols and cipher suites severely impacts the security posture. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is minimal, with no explicit emails or phone numbers on the site, though social media presence is strong. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

E

ETC

etc.at

0

ETC is a well-established Austrian IT training and certification provider with a strong market position since 1999. The company offers a wide range of IT courses, certifications, and talent acquisition services across multiple locations including Vienna, Graz, and Attnang-Puchheim, as well as online. Their offerings cover major IT domains such as Microsoft, Cisco, Red Hat, VMware, and more, targeting IT professionals and enterprises seeking digital skill enhancement. Technically, the website is built on a modern WordPress platform with WooCommerce integration, leveraging popular libraries like jQuery, Algolia, and Swiper.js for enhanced user experience. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of TLS support, which is a critical risk for user data protection and trust. Privacy and cookie policies are present and supported by a consent management platform, indicating good compliance with GDPR. Overall, the site is professional and content-rich but requires urgent security improvements to ensure safe user interactions and maintain trust.

The website at shfl.com currently serves only a minimal HTML page that immediately redirects visitors to a /lander path, with no substantive content, metadata, or business information available. The domain is registered and has DNS records pointing to Amazon AWS IP addresses, but lacks critical security features such as a valid SSL certificate and HTTPS support. No privacy, cookie, or terms of service policies are present, and no contact or social media information is provided, indicating a very low level of digital maturity and online presence. From a technical perspective, the site is hosted on AWS infrastructure but does not implement modern web security standards or performance optimizations. The absence of TLS protocols and security headers exposes the site to potential risks and undermines user trust. The lack of content and metadata also negatively impacts SEO and user experience. Security posture is weak due to the absence of HTTPS, no HSTS, no DNSSEC, and no security headers. These gaps present significant vulnerabilities and compliance risks, especially if the site were to handle sensitive data. The WHOIS data shows the domain is registered and not vulnerable to subdomain takeover, but the lack of transparency and business information reduces trustworthiness. Overall, the site appears to be either under development or abandoned, with critical security and compliance deficiencies. Strategic recommendations include obtaining and configuring a valid SSL certificate, implementing security headers and DNS security features, developing meaningful website content with clear business information, and establishing privacy and cookie policies to comply with regulations and build user trust.

The website global-consulting.ca presents minimal content, consisting solely of an iframe embedding an external domain (iyfhshsp.com). There is no visible business information, contact details, or policies on the site. The domain is registered since 2019 with privacy protection enabled, hosted on HostGator, but lacks a valid SSL certificate and serves content over HTTP only. The technical infrastructure is basic with no modern security configurations or performance optimizations. Security posture is weak due to lack of HTTPS, missing security headers, and suspicious external content. Overall, the site exhibits low trustworthiness and poor professionalism, raising concerns about legitimacy and security risks. Strategic improvements are needed to establish a credible online presence and secure the website.

F

Ferrochema GmbH & Co KG

ferrochema.at

0

Ferrochema GmbH & Co KG is a well-established wholesale company specializing in steel, reinforcement, and civil engineering materials, headquartered in Spittal an der Drau, Austria. It operates as part of the larger Weyland Group, which has multiple locations across Austria and neighboring countries. The company offers a broad range of products including steel sheets, bars, beams, pipes, aluminum, stainless steel, reinforcement steel, and related services such as steel processing and logistics. Their business model focuses on wholesale distribution with value-added services and an online shop targeting commercial and industrial customers in the construction and manufacturing sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Tiny Slider, and uses Matomo for analytics. The hosting is on Microsoft Azure, with moderate performance and good mobile optimization. The site features a comprehensive cookie consent mechanism and clear navigation, but lacks HTTPS due to an invalid or missing SSL certificate, which is a critical security gap. From a security perspective, the site has no HTTPS enabled, no security headers, and lacks DNSSEC and CAA records, which lowers its security posture significantly. However, no known vulnerabilities or malware were detected. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Incident response contact is provided via a whistleblower email. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to improve security and user trust. Strategic recommendations include immediate installation of a valid SSL certificate, enabling security headers and HSTS, and implementing DNS security measures. These steps will enhance the security posture and compliance, thereby improving the overall trust and credibility of the website and business.

L

Lovely Systems GmbH

lovelysystems.com

0

Lovely Systems GmbH is a small technology company specializing in building and operating digital platforms, focusing on multi-platform applications and large-scale web services. Their website presents a modern chat interface and highlights their expertise in scalable digital solutions. The company maintains a presence on GitHub and LinkedIn, supporting their credibility and outreach to developers and businesses seeking digital platform services. Technically, the website uses modern JavaScript and CSS features but suffers from slow load times and lacks a content management system. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and missing security headers, which exposes users to potential risks. Privacy compliance is minimal, with no visible privacy or cookie policies, and limited user tracking via GoatCounter analytics. Overall, the site is functional but requires significant improvements in security and privacy to meet industry standards.

Q

Quality Austria

qualityaustria.com

0

Quality Austria is a leading Austrian institution specializing in integrated management systems, quality certification, and training services. The company offers a broad range of certifications including ISO standards, Austria Gütezeichen, and EOQ certificates, positioning itself as a trusted partner for organizations seeking quality assurance and compliance. The website reflects a mature digital presence with comprehensive content, multi-language support, and a professional design tailored to its target audience of businesses and public organizations. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by performance optimizations such as WP Rocket and advanced search via FacetWP. The use of Borlabs Cookie ensures compliance with privacy regulations through effective consent management. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. Security measures include several HTTP security headers and a content security policy restricting frame ancestors, but the invalid SSL certificate and lack of explicit security or incident response policies indicate areas for improvement. Overall, the site demonstrates strong business credibility and privacy compliance but requires urgent attention to its SSL configuration to ensure secure user interactions.

The website akkadia.eu currently serves a standard 404 'Site not found' error page hosted on Netlify, indicating that the site content is inaccessible or not deployed. There is no visible business information, metadata, or structured data to describe the company, its services, or market position. The technical infrastructure is minimal, with DNS records properly configured but lacking a valid SSL certificate and HTTPS support, which significantly impacts security posture. No privacy, cookie, or terms of service policies are present, and no contact or social media information is available. Overall, the site lacks essential elements for trust, security, and user engagement, resulting in a low digital maturity level and poor user experience.

S

Sclable Business Solutions GmbH

sclable.com

0

Sclable Business Solutions GmbH is a Vienna-based digital innovation studio founded in 2012, specializing in custom software development, AI-driven digital solutions, and human-centered design. The company serves a diverse B2B clientele across industries such as manufacturing, IoT, healthcare, construction, mobility, financial services, and energy. With over 50 professionals and 120+ live projects, Sclable positions itself as a medium-sized, reputable player in the technology consulting and software development market. The website reflects a professional and consistent brand image with strong client endorsements and comprehensive service descriptions. Technically, the website runs on an Apache server with modern frontend libraries like Swiper and QR code generation scripts. While the site is mobile-optimized and accessible with good SEO practices, it lacks a valid SSL certificate and proper HTTPS configuration, which is a significant security shortfall. Performance metrics are missing, but inferred to be slow. No CMS or major frameworks are detected, indicating a custom-built site. From a security perspective, the site has minimal security headers and no active TLS protocols, exposing it to potential risks. The absence of DMARC, DNSSEC, and CAA records further weakens email and domain security. No incident response or vulnerability disclosure policies are present, limiting transparency in security management. However, privacy and cookie policies with consent mechanisms are well implemented, indicating good GDPR compliance. Overall, while the business and website demonstrate professionalism and trustworthiness, the lack of HTTPS and modern security configurations poses a critical risk. Strategic improvements in SSL deployment, email security, and incident response transparency are recommended to enhance the security posture and maintain client trust.

H

Helvetia Versicherungen AG

helvetia.at

0

Helvetia Versicherungen AG is a well-established insurance provider in Austria with over 165 years of experience and a large customer base exceeding 650,000. The company offers a wide range of insurance and pension products tailored to private customers, including accident, vehicle, household, and life insurance. The website is professionally designed, content-rich, and provides comprehensive navigation and contact options, reflecting a mature digital presence. Technically, the site uses Adobe Experience Manager CMS and integrates Adobe DTM for analytics and marketing. However, a critical security gap exists as no valid SSL certificate is detected, resulting in no HTTPS support, which significantly impacts the security posture. Security headers are properly configured, but the lack of HTTPS is a major vulnerability. Privacy and cookie policies are present and comprehensive, indicating good compliance with GDPR. Overall, the website is trustworthy and credible but requires urgent security improvements to protect user data and maintain trust.

W

Wirtschaftsagentur Wien

wirtschaftsagentur.at

0

Wirtschaftsagentur Wien is a well-established government agency founded in 1982, dedicated to supporting economic development in Vienna. The agency offers a comprehensive range of services including free consulting, funding opportunities, event organization, and networking for startups, established businesses, and international companies. Their market position as the official economic development fund of the City of Vienna is strong, supported by consistent branding and a professional online presence. The website is content-rich, multilingual, and targets a broad audience of entrepreneurs and businesses in Vienna. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes interactive features such as animated content and a service compass tool.

S IMMO AG is a prominent Austrian real estate investment company with a diversified portfolio across several European Union countries. The company focuses on office, retail, hotel, and residential properties, targeting investors and stakeholders interested in European real estate markets. The website provides comprehensive corporate and investor relations information, including news updates and portfolio insights. Technically, the website is built on TYPO3 CMS and hosted on an Apache server with nameservers indicating a German hosting provider. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. The cookie consent mechanism and privacy policy are well implemented, indicating good privacy compliance. Security headers are minimal, and modern TLS protocols are not supported, which lowers the security posture significantly. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure to protect user data and enhance trust.

Shotview is a well-established artist management agency founded in 2002, specializing in representing photographers, stylists, casting professionals, and other creatives in the media and fashion industries. With offices in Berlin, Paris, and Vienna, the company offers strategic guidance, production expertise, and a platform for artists to showcase their work internationally. The website reflects a professional and visually rich portfolio showcasing featured projects and artists. Technically, the site uses modern frameworks such as Vue.js and Nuxt.js, hosted on Heroku and served via Cloudflare CDN. However, the absence of a valid SSL certificate is a critical security flaw, exposing users to risks and undermining trust. Additionally, the lack of privacy, cookie, and security policies indicates compliance gaps that should be addressed to meet GDPR and general best practices. Contact information is clearly provided, including multiple office addresses, emails, and phone numbers, supporting business credibility.