Security Directory

S

Stadt Wien – Wiener Wohnen Kundenservice GmbH

wrwks.at

0

Stadt Wien – Wiener Wohnen Kundenservice GmbH is a municipal service provider based in Vienna, Austria, focused on delivering social and sustainable solutions within the city's organizational network. The company has evolved from a small marketing and call service agency into a medium-sized enterprise offering comprehensive construction and communication services. Their ISO 9001:2015 certification underscores their commitment to quality and customer satisfaction. Technically, the website is built on WordPress with modern JavaScript frameworks and plugins, providing good accessibility and SEO optimization. However, the lack of a valid SSL certificate and proper HTTPS configuration significantly undermines the site's security posture. Security headers are partially implemented, but critical TLS protocols and certificate transparency are missing. Privacy compliance is well addressed with a comprehensive privacy and cookie policy, including consent mechanisms. Overall, the business credibility is strong with clear contact information and trust indicators. Strategic improvements in SSL/TLS deployment and security policy transparency are recommended to enhance trust and security.

The website tmk-group.com is currently inaccessible beyond a browser checking page implemented by a DDoS protection service (ddos-guard). This prevents access to any substantive business content, metadata, or contact information. The domain is registered and has DNS records configured with multiple mail servers, but no SSL/TLS certificate is valid, and the site is served over HTTP only. The lack of HTTPS and security headers indicates a weak security posture. No privacy or cookie policies are present, and no contact or business information is accessible. Overall, the site appears to be protected behind a security mechanism that blocks direct content access, limiting the ability to perform a full analysis.

A

APK Group | Together we create smart and sustainable cities

apk.be

0

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 27 security findings identified across all modules.

A

Alturos

alturos.com

0

Alturos is a digital platform provider specializing in integrated solutions for the tourism and transportation sectors, including mountain railways, shipping companies, and airlines. Their flagship product, Destination OS, offers a comprehensive 360° solution for digital marketing, sales, communication, and guest entertainment. The company has a strong market presence with over 150 customers and numerous integrations with sales and marketing systems. Technically, the website is built on WordPress with modern frameworks like UIkit and uses performance optimizations such as WP Rocket. However, the absence of a valid SSL certificate and lack of HTTPS significantly weaken the security posture. While privacy and cookie policies are present and GDPR compliant, no explicit security or incident response policies are found. Overall, the site is professional and trustworthy but requires urgent security improvements.

Reckitt Benckiser Group PLC operates a global portfolio of trusted hygiene, health, and nutrition brands, serving millions of consumers worldwide. The company emphasizes scientific expertise and consumer understanding to deliver products that improve lives, with a strong market position supported by well-known brands such as Dettol, Lysol, and Durex. The website reflects a mature digital presence built on modern technologies like React and Gatsby, with good SEO and accessibility practices. However, a critical security gap exists as the site lacks HTTPS, exposing users to potential risks. Privacy and cookie policies are well implemented, indicating compliance with GDPR and other regulations. Overall, Reckitt's online presence is professional and credible but requires urgent security improvements to protect user data and maintain trust.

Glashütte Original is a prestigious German luxury watch manufacturer with a rich history dating back to 1845. The company operates under the Swatch Group umbrella and offers a range of technically sophisticated and iconic watch collections targeting discerning luxury consumers globally. The website reflects a mature digital presence with multilingual support, comprehensive product and brand information, and integrated e-commerce and customer service functionalities. Technically, the site is built on WordPress with WooCommerce and leverages modern JavaScript libraries and tracking technologies. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the business demonstrates strong credibility and branding but must urgently address its SSL/TLS configuration to improve security posture and user confidence.

N

Nameshift.com

unterweger.eu

0

The website unterweger.eu is a domain sales and transfer service platform operated in partnership with Nameshift.com, a domain escrow and marketplace service. The business model focuses on providing a secure and simple way for buyers to purchase domain names with escrow protection, free assistance, and VAT invoicing. The target audience includes individuals and businesses seeking domain ownership with minimal risk. The website is built using modern web technologies such as SvelteKit and is hosted on a CDN associated with Nameshift.com. However, performance metrics are not available, and the site shows basic content quality with limited interactive elements. From a security perspective, the website lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability impacting user trust and data security. Although some security headers are present, the absence of TLS protocols and HSTS reduces the overall security posture significantly. No privacy or cookie policies are published, indicating poor privacy compliance. Contact information is limited to a physical address in the Netherlands, with no emails or phone numbers provided, which may affect user confidence. Overall, the website demonstrates a basic level of technical implementation and business credibility but suffers from critical security and privacy compliance gaps. Strategic improvements in SSL/TLS deployment, privacy policy publication, and contact transparency are essential to enhance trust and security. The domain registration data aligns well with the business claims, showing consistency and legitimacy without privacy protection, which is appropriate for this type of service.

The United Nations Industrial Development Organization (UNIDO) is a well-established intergovernmental organization focused on promoting industrial development for sustainable economic growth and poverty reduction. The organization operates globally with a strong presence in Austria, where it is headquartered. UNIDO's key services include technical cooperation, policy advice, capacity building, and implementation of industrial development programs. The website represents a critical digital asset for UNIDO's communication and outreach efforts. Technically, the website is hosted behind Cloudflare, which provides security and performance services. However, the current website content is inaccessible due to a Cloudflare security challenge page requiring JavaScript and cookies, preventing full content analysis. The SSL/TLS configuration is critically flawed with no valid certificate detected, disabling HTTPS and exposing the site to security risks. Performance metrics are unavailable due to blocked content, and no modern web frameworks or CMS are identifiable from the limited HTML. From a security perspective, while several security headers are implemented, the lack of HTTPS and invalid SSL certificate significantly degrade the security posture. There is no evidence of privacy policies, cookie consent mechanisms, or incident response contacts on the accessible page. WHOIS data is consistent and trustworthy, showing a mature domain registered to UNIDO with no privacy protection, reinforcing the legitimacy of the domain. Overall, the website currently suffers from critical accessibility and security issues that limit its effectiveness and trustworthiness. Strategic improvements in SSL/TLS deployment, content accessibility, and privacy compliance are essential to enhance the organization's digital presence and security posture.

A

Anton Paar

anton-paar.com

0

Anton Paar is a globally recognized manufacturer of high-quality analytical and measuring instruments serving research and industrial sectors. The company holds a strong market position as a leader in density, concentration, CO2 measurement, and rheometry. Their website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive product information, regional office contacts, and support services. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens their security posture, exposing users to potential risks. The site employs modern analytics and marketing tools with appropriate privacy and cookie consent mechanisms, demonstrating good compliance with GDPR and user privacy standards. Strategic improvements in SSL/TLS deployment and security headers would enhance trust and security.

E

Evon Technologies

evontech.com

0

Evon Technologies Pvt. Ltd. is a well-established software development company based in India, with over 17 years of experience serving a global clientele. The company offers a broad range of services including custom web and app development, AI and machine learning solutions, cloud consulting, ERP/CRM implementations, and staff augmentation. Their market position is strengthened by certifications such as CMMI Level 5 and ISO 27001:2022, and a diverse client portfolio featuring technology heavyweights and startups. Technically, the website is built on Joomla CMS, hosted likely on AWS infrastructure, and integrates modern marketing and analytics tools. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security gap. Privacy and cookie policies are present with consent mechanisms, supporting basic GDPR compliance. Contact information is comprehensive and accessible via multiple channels.

T

Thommen Medical AG

thommenmedical.com

0

Thommen Medical AG is a Swiss-based manufacturer specializing in dental implantology products with over 35 years of clinical experience. The company offers a comprehensive range of dental implants, prosthetics, instruments, and digital workflow products, targeting dental professionals and patients globally. Their market position is strong within the healthcare manufacturing sector, emphasizing Swiss precision and innovation. The website is professionally designed, content-rich, and well-structured, supporting their business model of manufacturing and distribution alongside educational services and scientific collaboration. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates multiple analytics and marketing tools. However, a critical security weakness exists due to the absence of a valid SSL certificate and proper HTTPS configuration, which significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are present and GDPR compliant, enhancing user trust. Contact information is comprehensive and clearly presented, supporting business credibility. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

S

SHT Haustechnik GmbH

sht-gruppe.at

0

SHT Haustechnik GmbH is a leading Austrian wholesaler specializing in sanitary, heating, installation, and electrical products, serving primarily professional installers and industry partners. The company operates a comprehensive digital presence including a WordPress-based website, an online shop (sht.at), and regional offices across Austria, positioning itself as the market leader in the haustechnik sector. The website content is well-structured, professionally designed, and includes customer testimonials and partner logos, reinforcing trust and credibility. Technically, the site uses a modern WordPress stack with PHP 8.1 and React components, but lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. Privacy compliance is addressed with a cookie consent mechanism and clear privacy and terms of service pages. However, the absence of HTTPS and security headers significantly undermines the security posture. Strategic recommendations include immediate SSL deployment, enabling modern TLS protocols, and enhancing security headers and policies to protect user data and improve trust.

N

Newrest

newrest.eu

0

Newrest is a global leader in multi-sector catering and out-of-home food service solutions, operating in 53 countries with a workforce exceeding 60,000 employees. The company offers a broad range of services including inflight catering, rail catering, remote site management, concessions, and retail services, targeting corporate clients in transportation, energy, and retail sectors. The website is professionally designed, multilingual, and provides comprehensive business and CSR information, reflecting a mature global enterprise. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and privacy compliance, but suffers from a critical lack of HTTPS and valid SSL certificates, severely impacting security posture. Privacy compliance is well addressed with clear policies and a consent manager. The security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security effectiveness. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and maintain business credibility.

A

AVL List GmbH

avl.com

0

AVL List GmbH is a globally recognized leader in mobility technology, specializing in development, simulation, and testing solutions primarily for the automotive industry. The company offers a broad portfolio of engineering, simulation, and testing services, with a strong emphasis on sustainable and innovative mobility solutions such as hydrogen engines, hybrid powertrains, and fuel cells. Their market position is that of a mature, enterprise-level technology provider with a significant global presence and a history spanning over 28 years. Technically, the website is built on Drupal 10 with modern JavaScript libraries and includes Cookiebot for consent management. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Performance is also a concern, with a notably slow page load time and a large page size. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Business credibility is strong, supported by detailed corporate information, consistent branding, and multiple trust signals. Overall, while the business and content quality are excellent, the lack of HTTPS and slow performance are key vulnerabilities that should be addressed promptly.

L

When it has to be right | Leica Geosystems

leica-geosystems.com

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 20 security findings identified across all modules.

The website valleys-wordworks.com is currently a parked domain with no substantive business content or services presented. It primarily serves advertising placeholders and domain parking scripts, lacking any clear business description, contact information, or user engagement features. The technical infrastructure is minimal, hosted on Hetzner Online with a Caddy web server, but critically lacks a valid SSL/TLS certificate, resulting in no HTTPS support and poor security posture. The absence of privacy and cookie policies, as well as the lack of GDPR compliance indicators, further diminishes the site's trustworthiness and compliance standing. Overall, the site appears inactive or unused for legitimate business purposes, representing a low risk but also low value presence on the internet.

The website nufarm.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) blocking page, which prevents access to any substantive content. Nufarm is a well-established global agricultural chemical company with a mature domain registered since 1997. The domain registration details are consistent and indicate a legitimate business entity. However, the lack of a valid SSL/TLS certificate and the presence of a blocking WAF page severely limit the ability to assess the website's content, privacy, and security posture comprehensively. The technical infrastructure relies on Cloudflare for DNS and security services, but the absence of HTTPS and other modern security configurations is a critical vulnerability. Overall, the website's security posture is weak due to missing SSL and blocking mechanisms, and privacy compliance cannot be verified. Strategic improvements in SSL deployment and content accessibility are essential.

ERGO Versicherung Aktiengesellschaft operates the website das.at, providing legal protection insurance products under the D.A.S. Rechtsschutz brand in Austria. The company is a market leader with a strong reputation, offering services to private individuals, self-employed, and businesses. The website is professionally designed, content-rich, and targets Austrian customers with comprehensive insurance solutions and customer support channels. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates multiple marketing and analytics tools. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. WHOIS data confirms the domain's legitimacy and alignment with the ERGO group. Overall, the website is credible and professional but requires urgent security improvements to protect user data and trust.

H

Heartbeats Innovation & Communication

weareheartbeats.com

0

Heartbeats Innovation & Communication is a small professional service agency based in Vienna, Austria, specializing in responsible business communication and innovation. The company offers services such as impact communication, workshops, mentoring, event design, and content marketing, targeting organizations seeking to create value responsibly. The website is built on the Wix platform, leveraging modern web technologies including React 18 and Wix-specific widgets for video, galleries, and chat. While the site presents professional content and clear contact information, it suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly undermines user trust and data security. Privacy and cookie policies are present but basic, and no explicit security or incident response policies are found. Overall, the site is functional and moderately optimized but requires urgent security improvements.

W

Wolf Theiss – Leading Lawyers in CEE/SEE

wolftheiss.com

0

Wolf Theiss is a leading law firm specializing in Central, Eastern, and South-Eastern Europe, with over 400 lawyers across 13 countries. The firm offers comprehensive legal services spanning arbitration, banking, capital markets, intellectual property, and more, targeting international clients and businesses operating in the CEE/SEE region. The website reflects a mature, professional organization with strong branding, extensive content, and a focus on accessibility and compliance. Technically, the site is built on WordPress with modern SEO and accessibility plugins, but suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support. Security headers are well configured, but the lack of TLS protocols and valid certificates significantly lowers the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Overall, the site is trustworthy and professional but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Zurich Insurance Group operates as a global insurance provider primarily in the finance sector, offering insurance and risk management services. The domain zurich.com is mature and strongly protected, reflecting the company's established market presence. However, the website content is currently inaccessible due to Incapsula WAF security mechanisms, and no valid SSL certificate is configured, resulting in no HTTPS support. This severely limits the ability to assess the website's content, privacy policies, and user engagement features. The technical infrastructure shows hosting via Incapsula, but lacks modern TLS protocols and security headers, indicating a need for significant security improvements. Overall, the website's security posture is weak due to missing SSL and blocked content, and privacy compliance cannot be verified. Strategic recommendations include implementing a valid SSL certificate, enabling modern TLS protocols, configuring security headers, and ensuring privacy and cookie policies are accessible to users.

T

TEST-FUCHS GmbH

test-fuchs.com

0

TEST-FUCHS GmbH is a well-established manufacturing company specializing in test systems and aerospace systems, with a history dating back to 1946. The company has grown into a medium-sized enterprise with a global presence and over 600 employees. Their website reflects a professional corporate identity with clear navigation and relevant business content targeting industrial B2B clients. Technically, the website is built on Drupal CMS with modern JavaScript libraries, but lacks HTTPS security, which is a significant risk. The absence of a valid SSL certificate and modern TLS protocols exposes visitors to potential data interception and undermines trust. Privacy compliance is addressed with a cookie consent mechanism and a basic GDPR-compliant privacy policy. However, no explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are present. Overall, the website is functional and professional but requires urgent security improvements to protect users and enhance credibility.

Accenture Interactive's website for Accenture Song presents a mature, enterprise-level digital presence focused on delivering technology-powered creative and marketing services globally. The company positions itself as a leader in customer experience transformation, blending creativity and technology to drive business growth. The site is rich in multimedia content, well-structured navigation, and supports multiple languages and regions, reflecting a global market approach. Technically, the site leverages Adobe Experience Manager CMS, AWS CloudFront hosting, and integrates advanced analytics and consent management tools. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which undermines the otherwise strong security headers and policies in place. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Schrack Technik GmbH is a well-established Austrian company founded in 1920, specializing in the distribution and provision of electrical products and solutions across energy technology, building technology, industrial applications, networking, and lighting. The company operates a comprehensive online shop and physical stores, targeting electricians and industrial clients primarily in Austria and Central/Eastern Europe. Their market position is strong, supported by a broad product portfolio and personal customer service. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates a consent management platform for privacy compliance. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS support, which is a critical vulnerability. Privacy and cookie policies are well implemented, and the site shows good business credibility with ISO certification and trust marks. Overall, the website is professional and content-rich but requires urgent security improvements.

D

delfortgroup AG

delfortgroup.com

0

delfortgroup AG is a mature, enterprise-level global manufacturer specializing in specialty and functional papers, serving industries such as packaging, tobacco, battery separators, and more. The company emphasizes sustainability and innovation, supported by a comprehensive digital presence including detailed product catalogs, sustainability reports, and career opportunities. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, leveraging various JavaScript libraries and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and lack of HTTPS enforcement represent critical security weaknesses. Security headers are present but insufficient without proper TLS configuration. The domain is well-established with consistent WHOIS data, supporting business legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

B

BearingPoint

bearingpoint.com

0

BearingPoint is a global management and technology consultancy with European roots, operating in over 70 countries with 13,000 employees. The company offers a broad range of consulting services, products, and capital advisory, targeting enterprises across multiple industries including technology, finance, manufacturing, and government sectors. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to enterprise clients. Technically, the site uses Apache server technology, modern JavaScript frameworks, and cookie consent management tools, but lacks a valid SSL certificate and has disabled TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to enable HTTPS and modern TLS protocols.

A

Avanade Inc.

avanade.com

0

Avanade Inc. is a leading global provider of cloud, AI, and advisory services focused on the Microsoft ecosystem. With over 25 years of experience and a strong market position as the world’s leading Microsoft expert, Avanade serves enterprise clients across multiple industries including technology, energy, banking, healthcare, government, and retail. The company operates globally with headquarters in the United States, Europe, and Asia, and is a subsidiary of Accenture. Their business model centers on delivering advisory, managed services, and integrated Microsoft technology solutions to help organizations unlock digital transformation and sustainability goals. Technically, Avanade’s website leverages modern frameworks such as Next.js and Sitecore CMS, hosted on Vercel and integrated with marketing and analytics tools like Adobe Launch, Google Tag Manager, and OneTrust for consent management. The site is well-designed, mobile-optimized, and rich in content, providing a professional user experience with clear navigation and comprehensive business information. From a security perspective, the website currently suffers from critical issues including the absence of a valid SSL certificate and lack of TLS protocol support, severely impacting its security posture. While security headers such as Content-Security-Policy and HSTS are present, they are not fully hardened. The presence of a vulnerability disclosure page and detailed privacy and cookie policies indicate a mature approach to compliance and security awareness, but the lack of HTTPS is a major risk. Overall, the website is highly credible and professional but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and maintain trust. Strategic improvements in security practices and continued adherence to privacy compliance will strengthen Avanade’s digital presence and risk posture.

The domain conversations.at is registered and hosted with a reputable Austrian registrar and DNS provider. However, the website itself is effectively empty, serving only a minimal placeholder with no visible content, metadata, or interactive elements. There is no SSL certificate installed, resulting in no HTTPS support despite the presence of a Strict-Transport-Security header, which is misconfigured. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the site. The technical infrastructure is minimal, relying on Apache server software but lacking modern web technologies or performance optimizations. Security posture is weak due to the absence of HTTPS and other security headers, though no active vulnerabilities or malware indicators were detected. Overall, the site presents a low trust profile and limited business credibility.

S

SER Solutions Deutschland GmbH

ser.de

0

SER Solutions Deutschland GmbH is a well-established enterprise content management (ECM) software provider based in Germany, with over 35 years of experience. The company is recognized as a leader in the ECM market, evidenced by its inclusion in Gartner's Magic Quadrant and IDC MarketScape reports. Their core offerings include intelligent content automation, document management, process automation, and collaboration tools, targeting large enterprises and organizations undergoing digital transformation. The website reflects a mature digital presence with comprehensive content, multiple language support, and strong branding consistency. Technically, the website is built on the Contao CMS platform, hosted on Ubuntu servers with Amazon CloudFront CDN for content delivery. It employs modern marketing and analytics tools such as Google Tag Manager, Visual Website Optimizer, and Usercentrics for consent management. The site is mobile-optimized and accessible, with good SEO practices. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which severely impacts the security posture. Security headers are properly configured, but the lack of TLS protocols and valid certificates exposes the site to risks and undermines user trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, while the business and content quality are excellent, urgent remediation of SSL/TLS issues is necessary to improve security and trustworthiness.

The website at iiglobal.net is currently non-functional, serving only a generic 404 error page with no accessible content or business information. The domain is registered but lacks DNS records and a valid SSL certificate, resulting in no HTTPS support and poor security posture. There are no privacy policies, contact details, or any form of user engagement mechanisms present. Technically, the site shows minimal infrastructure and no modern web technologies or frameworks. Security best practices are absent, and the site is not GDPR compliant. Overall, the website appears inactive or improperly configured, posing significant trust and credibility concerns.

O

Ottakringer Getränke AG

ottakringerkonzern.com

0

Ottakringer Getränke AG is a well-established Austrian family-owned beverage group comprising key subsidiaries such as Ottakringer Brauerei, Vöslauer Mineralwasser, and Del Fabro Kolarik. The company focuses on manufacturing and distributing beer, mineral water, and beverage wholesale products, targeting both B2B and B2C markets primarily in Austria and neighboring countries. The website content is professionally presented in German, emphasizing sustainability and quality. Technically, the site is built on Joomla CMS with common web technologies like jQuery and Bootstrap, and it integrates Google Analytics for user tracking. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no functional HTTPS, which significantly impacts its security posture. Security headers are partially implemented, and cookie consent mechanisms are in place, indicating reasonable privacy compliance. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in SSL configuration and security practices to enhance trust and protect user data.

R

redmail Logistik & Zustellservice GmbH

redmail.at

0

redmail Logistik & Zustellservice GmbH is an established Austrian media distribution and logistics service provider specializing in the delivery of print advertising such as flyers and brochures. The company operates multiple offices across Austria and offers an online booking platform for print and delivery services. Their market position is supported by recognized certifications and a professional web presence. Technically, the website is built on WordPress with common plugins and modern design elements, but suffers from a critical lack of HTTPS and proper SSL/TLS configuration, exposing users to security risks. Privacy policies and cookie consent mechanisms are in place, reflecting GDPR compliance. Overall, while the business is credible and well-presented, the security posture requires urgent improvement to protect customer data and maintain trust.

G

Gewista

gewista.at

0

Gewista is a leading Austrian media company specializing in Out-of-Home advertising, operating under the majority ownership of global market leader JCDecaux. The company offers a broad portfolio of advertising media including traditional billboards, street furniture, and transport media, with a strong focus on digital innovation and public value initiatives. The website reflects a mature digital presence built on Drupal 10, leveraging modern JavaScript libraries and CDN hosting. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. Additionally, a subdomain takeover vulnerability was identified, posing a risk to brand reputation and security. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to meet modern standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

M

MPREIS

mpreis.at

0

MPREIS is a well-established Austrian supermarket chain offering a broad range of grocery and related products both in physical stores and online. The website reflects a mature digital presence with detailed product catalogs, recipe inspirations, and a focus on regional and organic products. The company maintains active social media channels and provides comprehensive privacy and cookie policies with consent management, indicating good privacy awareness. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates advanced marketing and search tools like Bloomreach and Algolia. However, the absence of a valid SSL certificate and lack of HTTPS support represent significant security shortcomings, exposing users to potential risks. Security headers are partially implemented, but critical TLS protocols and cipher suites are missing, reducing the overall security posture. The domain registration and hosting are consistent with the business claims, registered under A1 Telekom Austria AG, a reputable provider. No WAF or security challenge blocks access, allowing full content analysis. Privacy compliance is strong, but the lack of incident response and security policy pages suggests room for improvement in security governance. Overall, MPREIS demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to protect users and enhance trust. Strategic security enhancements and continuous compliance monitoring are recommended to maintain its market position and customer confidence.

F

FHV - Vorarlberg University of Applied Sciences

fhv.at

0

FHV - Vorarlberg University of Applied Sciences is a medium-sized educational institution based in Austria, offering a wide range of Bachelor and Master programs across technical, economic, design, and social-health disciplines. The institution emphasizes applied research and international cooperation, positioning itself as a leading university of applied sciences in the Bodenseeraum region. The website is professionally designed, content-rich, and well-structured, targeting prospective students, researchers, and academic partners. Technically, the site uses modern CMS Pimcore and Vue.js frontend framework, with Google Tag Manager for analytics and Cookiebot for consent management. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, despite having security headers and HSTS configured. This exposes users to potential risks and undermines trust. Contact information is clearly provided, and privacy policies comply with GDPR standards. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to improve security posture and user trust.

Ö

Österreichische Lotterien GmbH

lotterien.at

0

Österreichische Lotterien GmbH operates as the official national lottery provider in Austria, offering a wide range of lottery games, including Lotto 6 aus 45, EuroMillionen, and various scratch cards. The website serves as a comprehensive platform for game participation, result checking, and customer engagement, targeting Austrian lottery players and stakeholders. The company holds a strong market position as a government-associated entity with multiple subsidiaries in the gaming sector. Technically, the website is built on TYPO3 CMS and integrates modern analytics and consent management tools, demonstrating a mature digital infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. Despite this, the site implements several security headers and maintains a responsible disclosure page, reflecting a commitment to security awareness. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

S

sklera KG

sklera.tv

0

Sklera KG operates a technology-focused website likely offering software solutions or digital services, as indicated by the use of Next.js and references to demos and newsletters. The company is based in Austria and has maintained the domain for over 9 years, reflecting a mature business presence. However, the website content is minimal and primarily serves as a contact and demo request portal without detailed business descriptions or extensive content. The technical infrastructure leverages modern frameworks but lacks critical security implementations such as HTTPS, valid SSL certificates, and security headers, which significantly undermine the site's security posture. Additionally, the absence of privacy and cookie policies indicates poor compliance with data protection regulations. Overall, the website presents a basic digital footprint with moderate business credibility but requires urgent security and compliance improvements to enhance trust and protect user data.

W

Würth Oy

wurth.fi

0

Würth Oy operates a comprehensive B2B e-commerce and service platform focused on tool and accessory logistics for industrial, construction, and maintenance sectors in Finland. The company has a strong market presence with nearly 50 years of history and a wide network of centers. The website supports multiple login methods and offers extensive product and service information tailored for business customers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, managed via the FirstSpirit CMS, and integrates analytics tools like Piwik PRO and Google Tag Manager. Security headers are implemented, but a critical issue exists with an invalid SSL certificate and lack of TLS protocol support, which significantly impacts the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and contact information is clearly provided. Overall, the site is professional and trustworthy but requires urgent SSL remediation to ensure secure communications.

F

Frequentis

frequentis.com

0

Frequentis is a well-established company specializing in safety-critical communication and information solutions with over 75 years of market presence. The company serves key sectors including civil aviation, defence, public safety, maritime, and public transportation, positioning itself as a leader with a strong focus on innovation and user-centric design. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to government agencies and large organizations. Technically, the site is built on Drupal 10 with modern libraries and integrates multiple marketing and analytics tools. However, the absence of a valid SSL/TLS certificate and HTTPS support is a significant security gap, impacting the overall security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high business credibility but requires urgent security improvements to align with best practices.

I

International Commission on Missing Persons

icmp.int

0

The International Commission on Missing Persons (ICMP) is a globally recognized non-profit organization dedicated to addressing the issue of missing persons resulting from conflicts, disasters, and other causes. The organization collaborates with governments, civil society, and international bodies to provide expertise, data systems, and forensic services. Their website reflects a mature digital presence with comprehensive content, multilingual support, and clear navigation tailored to a diverse audience including families of missing persons and governmental agencies. Technically, the site is built on WordPress with modern plugins and Cloudflare CDN protection, but it suffers from a critical lack of a valid SSL certificate and proper TLS configuration, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent improvements in SSL/TLS security to protect user data and maintain credibility.

V

VIER PFOTEN International – gemeinnützige Privatstiftung

four-paws.org

0

FOUR PAWS International is a globally recognized non-profit animal welfare organization dedicated to protecting animals under human influence. The organization operates multiple country offices and campaigns worldwide, focusing on rescue missions, veterinary care, sterilization of stray animals, and advocacy against animal cruelty. Their website reflects a professional and comprehensive digital presence, targeting animal welfare supporters, donors, and volunteers. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript libraries such as Splide.js and Google Tag Manager for analytics and marketing. However, a critical security weakness is the absence of a valid SSL certificate and lack of TLS protocol support, which significantly undermines the site's security posture. Privacy and cookie policies are well implemented and GDPR compliant, enhancing user trust. Overall, the site demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

G

GEZE GmbH

geze.at

0

GEZE GmbH is a globally recognized family-owned company specializing in manufacturing and providing innovative door, window, and safety technology solutions. The company has a strong market position with over 3,000 employees and 37 subsidiaries worldwide, focusing on digital connectivity and building automation. The website reflects a professional and comprehensive presentation of their products and services, targeting architects, planners, and building operators. Technically, the site uses TYPO3 CMS hosted on AWS CloudFront with modern content delivery but suffers from critical SSL/TLS misconfigurations, impacting security posture. Privacy compliance is well addressed with a clear privacy policy and consent management via Usercentrics. The site offers multiple contact channels and social media presence, enhancing business credibility. However, the invalid SSL certificate and lack of HTTPS protocols represent significant security risks that should be urgently addressed.

B

Bacon & Bold

baconbold.com

0

Bacon & Bold is a medium-sized performance branding and social media marketing agency based in Austria, founded in 2016. The company positions itself as a leading social media agency focused on delivering measurable business success through targeted digital marketing strategies, workshops, and AI-driven applications. Their client portfolio includes notable companies such as Siemens, Wiener Linien, and voestalpine AG, underscoring their market presence and credibility. Technically, the website is built on Webflow CMS, uses modern web fonts, Google Tag Manager, and is hosted via Cloudflare and Azure services. While the site is well-designed, mobile-optimized, and rich in content, it suffers from critical security issues including an invalid SSL certificate and a subdomain takeover vulnerability. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

The website sappi.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires JavaScript and cookies to proceed. This prevents access to any meaningful content, metadata, or business information. The visible page is a security checkpoint rather than the actual website content. The DNS records indicate a legitimate domain with multiple mail servers and name servers under the sappi.com domain, suggesting a corporate entity. However, the SSL/TLS configuration is poor with no valid certificate and no HTTPS protocols enabled, which is a critical security issue. Security headers are present but cannot compensate for the lack of proper SSL. No privacy, cookie, or terms of service policies are accessible, and no contact information or forms are visible. Overall, the site’s security posture is weak due to missing SSL and blocked content, and the technical and content quality cannot be properly assessed due to the WAF challenge.

Ottobock is a well-established enterprise in the healthcare sector specializing in orthotics, prosthetics, and related mobility solutions. The company offers a broad range of products and services including prosthetics, orthotics, exoskeletons, adaptive sports programs, and veteran support. Their market position is strong, supported by a comprehensive digital presence and a global footprint. Technically, the website leverages modern frameworks such as Next.js and React, integrated with Contentful CMS and various analytics and marketing tools, indicating a mature digital infrastructure. However, a critical security issue is the absence of a valid SSL/TLS certificate, which undermines the security posture and user trust. Privacy compliance is robust with clear policies and consent management mechanisms in place. Overall, the website is professional, content-rich, and user-friendly but requires urgent attention to its SSL configuration to ensure secure communications.

J

Jung von Matt

jvm.at

0

Jung von Matt is a well-established independent global creative agency specializing in marketing communications and branding services. The company targets brands and businesses seeking innovative and culturally impactful marketing solutions. Their website reflects a strong market position with a professional design, consistent branding, and comprehensive content showcasing their key services and projects. The technical infrastructure leverages modern technologies such as Netlify hosting, Contentful CMS, Matomo analytics, and Usercentrics for consent management, indicating a mature digital presence. However, the website currently suffers from an invalid SSL certificate, which undermines the security posture and user trust. While privacy and cookie policies are well implemented and GDPR compliant, the absence of explicit security policies and incident response information suggests room for improvement in security transparency. Overall, the site is professional and trustworthy but should prioritize fixing SSL issues and enhancing security disclosures to improve its risk profile.

S

SOPREMA

soprema.com

0

SOPREMA is a well-established global manufacturer specializing in waterproofing, insulation, and roofing products with a broad international footprint. The company operates through numerous subsidiaries and sales offices worldwide, targeting construction professionals and distributors. The website reflects a multinational business model with a focus on manufacturing and distribution. Technically, the website runs on Apache with PHP backend and Magento CMS, integrating Google Maps for location display. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS, which severely impacts its security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is comprehensive and professional, supporting business credibility. Overall, the site requires urgent security improvements to protect user data and enhance trust.

F

FACC AG

facc.com

0

FACC AG is a mature and leading aerospace company specializing in the design, production, and maintenance of advanced lightweight components and systems for the global aviation industry. The company maintains strong partnerships with major aerospace manufacturers such as Airbus, Boeing, and Embraer, and offers a broad portfolio including aerostructures, engines, nacelles, cabin interiors, and MRO services. The website reflects a professional and well-branded digital presence targeting industry partners, investors, suppliers, and job seekers. Technically, the site is built on WordPress with modern JavaScript frameworks like Vue.js and uses Amazon CloudFront CDN for hosting. However, performance metrics are missing, and the site appears to load slowly. Security posture is a significant concern due to the absence of a valid SSL certificate and lack of TLS protocol support, which critically undermines secure communications. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is credible and professional but requires urgent security improvements to protect user data and maintain trust.

A

AVL Cultural Foundation GmbH

avlcf.com

0

AVL Cultural Foundation GmbH is a small, Austria-based cultural foundation dedicated to fostering the intersection of art and science through innovative projects, artistic installations, and interdisciplinary discussions. The organization targets artists, scientists, and cultural enthusiasts, positioning itself as a niche player in the cultural foundation sector. The website is built on Drupal 10 and hosted likely on AWS infrastructure, demonstrating a moderate level of digital maturity with good mobile optimization and accessibility. However, the absence of HTTPS/SSL is a critical security flaw that severely impacts the site's security posture. Privacy and cookie policies are well implemented with a consent mechanism via Cookiebot, reflecting good privacy compliance. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is professional but requires urgent security improvements.