Austria security reports

O

Online-Shop Gegenbauer Essig

gegenbauer.at

7

Online-Shop Gegenbauer Essig is a small Austrian artisanal business specializing in vinegar and gourmet products with a rich history dating back to 1929. The company operates an e-commerce platform built on Joomla CMS with VirtueMart, offering a diverse product range including over 70 vinegar varieties, oils, fruit juices, and coffee. The website is well-structured, mobile-optimized, and uses modern web technologies such as Uikit and jQuery. Structured data is implemented for SEO benefits. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a login and contact form, with no direct emails or phone numbers visible. Overall, the site is professional and trustworthy, though improvements in security transparency and privacy compliance are recommended.

E

ENPULSION GmbH

enpulsion.com

16

Enpulsion GmbH is a technology company specializing in advanced electric propulsion systems for small satellites such as CubeSats and SmallSats. The company is positioned as an innovative leader in the satellite propulsion market, offering modular and scalable thrusters designed to enhance satellite mobility and maneuverability. Their product portfolio includes high-performance propulsion units and a smart mobility interface, supported by proven flight heritage and industrial scale manufacturing capabilities. The website reflects a professional and modern digital presence, leveraging WordPress with advanced forms and interactive elements to engage their target audience of satellite manufacturers and space mission planners. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates high business credibility and technical maturity, supporting Enpulsion's market position as a trusted provider in the space technology sector.

H

Höhere Bundeslehranstalt für Landwirtschaft und Ernährung Pitzelstätten

pitzelstaetten.at

19

HBLA Pitzelstätten is a specialized vocational higher education institution in Austria focusing on agriculture and nutrition. It holds a unique position as the only school of its kind in Carinthia, offering comprehensive education aligned with modern economic, technical, and environmental demands. The website reflects a strong commitment to sustainability and community engagement through rich content including news, events, and projects. The institution maintains active social media channels and provides clear contact information, enhancing accessibility and trust. Technically, the website is built on a modern stack with HTML5, CSS3, and JavaScript, likely managed via Magnolia CMS. It demonstrates good mobile optimization, accessibility, and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. The site is not blocked by any WAF and is fully accessible, indicating a stable hosting environment. Security posture is moderate with no critical vulnerabilities detected, but the absence of explicit security policies and incident response contacts suggests room for improvement. Privacy compliance is basic with a privacy policy present but lacking cookie consent features. Business credibility is high, supported by consistent branding, certifications like the Austrian Environmental Label, and transparent contact details. Overall, the website is professional, trustworthy, and well-suited for its educational mission, with strategic recommendations focusing on enhancing security and privacy compliance to further strengthen user trust and regulatory adherence.

Palmers Immobilien is a small real estate business operating primarily in Austria with some references to other European cities. The website is minimalistic, providing very limited information about the company, its services, or contact details. The technical infrastructure relies on Bootstrap 4 and common JavaScript libraries served from reputable CDNs, indicating a basic but modern front-end setup. However, the absence of HTTPS and security headers, along with missing privacy and cookie policies, reflects a low security posture and poor compliance with data protection regulations. The lack of contact information and business details further reduces trustworthiness and business credibility. Overall, the website presents a basic online presence with significant room for improvement in security, compliance, and content richness.

V

Vinzenz Harrer GmbH

harrer.at

11

Vinzenz Harrer GmbH is a well-established Austrian company specializing in wood construction solutions, operating for approximately 30 years. The company offers a comprehensive online shop with a wide range of products including insulation materials, system connectors, adhesives, and tools tailored for wood construction professionals and qualified craftsmen. Their market position is strong within Austria as a leading specialist, supported by a network of partner craftsmen and extensive customer service and training offerings. The website is professionally designed with clear navigation and good content quality, targeting primarily German-speaking users in Austria. Technically, the site uses ASP.NET WebForms with jQuery and modern tracking tools such as Google Analytics and Facebook Pixel, though some outdated libraries present minor security concerns. Security posture is good with HTTPS enforced and cookie consent implemented, but could be improved with updated libraries and additional security headers. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

G

gwc

gwc.at

32

gwc is a consulting firm specializing in business development, innovation management, and corporate finance with a focus on sectors such as energy, telecommunications, craftsmanship, and digitalization. The company supports clients in developing strategies, managing innovation portfolios, and securing public funding. The website is professionally designed using WordPress with modern plugins and offers a clear navigation structure and GDPR-compliant cookie consent. However, the site lacks HTTPS which is a significant security concern. No direct contact emails or phone numbers are provided, only a contact form. Security policies and incident response information are not published, indicating room for improvement in transparency and security posture.

S

Stucon: Auf der Suche nach den besten Online Casinos in Österreich

stucon.at

12

Stucon.at is a German-language website focused on providing information and reviews about online casinos in Austria, including popular games such as roulette and slots. The site targets Austrian online gamblers seeking trustworthy casino recommendations and gaming guides. The business model appears to be content publishing with potential affiliate marketing through casino referrals. The website uses WordPress with common plugins like Yoast SEO and CAPTCHA for forms, but employs outdated JavaScript libraries which may pose security risks. The site is moderately optimized for SEO and mobile devices but lacks advanced security headers and cookie consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. No social media presence or advertising scripts were detected in the provided content.

B

bevmat e.U.

bevmat.eu

20

bevmat e.U. is a small Austrian company specializing in control cabinet components, energy distribution, and measurement technology. The company targets businesses in the energy sector and operates through a network of European partners. The website reflects a basic online presence with limited content and indicates it is undergoing a relaunch. Technically, the site uses the cm4all CMS platform with older JavaScript libraries and lacks HTTPS, which impacts security and trust. The cookie consent mechanism is implemented, but privacy and terms policies are missing. Security posture is weak due to outdated libraries and missing HTTPS, exposing the site to potential risks. Overall, the site is functional but requires significant improvements in security, privacy compliance, and content quality to enhance business credibility and user trust.

S

STAMAG Stadlauer Malzfabrik GesmbH

stamag.at

7

STAMAG Stadlauer Malzfabrik GesmbH is a well-established Austrian company specializing in the production and supply of high-quality malt and baking ingredients, with a tradition spanning over 140 years. The company serves primarily B2B customers in the baking and brewing industries, offering a broad portfolio including base and specialty malts, baking ingredients for bread, fine bakery, and sweets, as well as sourdoughs. STAMAG is part of the IREKS Group, enhancing its market position and operational capabilities. The website reflects a professional and consistent brand image, targeting German-speaking markets with comprehensive product and company information. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Slick Slider for interactive elements. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses Matomo analytics for privacy-respecting visitor tracking. However, explicit security headers could be more visible or documented, and no dedicated security or incident response policies are published. Overall, the website and business demonstrate a mature digital presence with strong compliance and trust indicators. There are no signs of blocking or WAF interference, and the domain registration details align well with the company's identity and history, supporting legitimacy. The company maintains active social media channels and provides clear contact information, enhancing user trust and engagement.

REXEL Austria GmbH is a leading wholesale distributor of electrical installation materials and devices in Austria, with over 25 years of market presence. The company focuses on sustainable and innovative products and services in automation, technology, and energy management, serving industrial, trade, and commercial sectors. Their business model includes comprehensive logistics, building automation, and facility management solutions, supported by two strong sales networks, SCHÄCKE and REGRO. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audiences. Technically, the site is built on the Neos CMS platform using PHP and JavaScript frameworks, hosted with Google Cloud services, and optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

B

BANDEX

bandex.com

8

BANDEX is a well-established Austrian manufacturing company specializing in curtain and decorative bands, with a history dating back to 1955. The company offers a range of textile products including curtain tapes and technical textiles, supported by an online shop and innovative digital tools such as configurators and a virtual showroom. Their target audience includes retail customers, interior decorators, and textile professionals. The website is primarily in German and reflects a medium-sized enterprise with consistent branding and a good level of content quality. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, with additional tools for user interaction and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, some technical details such as hosting provider and CMS are not explicitly identified. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. While no explicit security policies or incident response contacts are found, the site does not exhibit obvious vulnerabilities or exposed sensitive data. The use of third-party tracking services is moderate, and privacy compliance appears adequate. Security headers and advanced security practices could be improved. Overall, BANDEX presents a trustworthy and professional online presence with moderate risk. Strategic improvements in security policy transparency, incident response readiness, and security header implementation would enhance their security posture and compliance standing.

D

dotsandlines GmbH

dotsandlines.io

21

dotsandlines GmbH is a Vienna-based digital creative agency specializing in UI/UX design, branding, web development, and motion design. The company positions itself as an agile and fresh design agency with a strong portfolio of projects and partnerships, targeting businesses seeking comprehensive digital creative services. The website reflects a mature digital infrastructure with modern technologies such as SVG, Lottie animations, and video content, supported by Craft CMS and enhanced user experience frameworks like Barba.js and Swiper.js. Security posture is solid with HTTPS enforced, CSRF protection on forms, and no visible vulnerabilities, though additional security headers could improve defenses. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site demonstrates high professionalism, trustworthiness, and technical competence, supporting the company's market position as a reputable creative agency.