Austria security reports

H

HABAU

habau.at

27

HABAU is a well-established Austrian construction company with over 110 years of experience, offering a broad range of construction services including high-rise construction, civil engineering, pipeline construction, and precast concrete solutions. It operates as part of the larger HABAU GROUP, which has a significant international presence and a large workforce. The website reflects a professional and content-rich digital presence targeting construction clients, partners, and job seekers. Technically, the site is built on WordPress with common performance and cookie management plugins, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is weak due to missing HTTPS and security headers, exposing the site to risks. Overall, the site is trustworthy and professional but urgently needs to address its SSL and security configuration to protect users and improve trust.

S

SRG IT & Marketing GmbH

leadchamps.co

37

LeadChamps is a small Austrian technology company specializing in sales automation and lead generation services for B2B clients, primarily in the DACH region. Their offerings include intent data lead research, multi-channel campaigns leveraging LinkedIn and email, and a proprietary sales automation platform. The website is built on WordPress with the Divi theme and integrates HubSpot forms for lead capture. While the content is professionally presented and relevant to their target audience, the technical infrastructure lacks a valid SSL certificate and modern TLS protocols, exposing the site to security risks. The absence of cookie consent mechanisms and limited security headers further weaken their privacy and security posture. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

RUBICON IT GmbH is a medium-sized Austrian technology company specializing in digitalization solutions and IT services. Their product portfolio includes leading software such as Nova Find, a prominent lost and found software in Europe, alongside other enterprise solutions like Acta Nova and Document Partner. The company also offers professional services, managed services, and training, targeting business and public sector clients seeking digital transformation. The website is professionally designed, multilingual, and well-structured, reflecting a mature digital presence. Technically, the site is built on WordPress with various plugins and frameworks, including ASP.NET components, but suffers from critical SSL/TLS misconfigurations, lacking a valid certificate and modern protocol support. Security headers are partially implemented but incomplete, and no advanced security mechanisms like OCSP stapling or session resumption are enabled. Privacy compliance is strong, with clear cookie consent and a comprehensive privacy policy. Social media integration and certifications like Kubernetes demonstrate trust and industry alignment. Overall, the site is functional and business-credible but requires urgent security improvements to protect user data and enhance trust.

B

BRAUNEIS RECHTSANWÄLTE GMBH

bkp.at

24

BRAUNEIS RECHTSANWÄLTE GMBH is a professional law firm based in Vienna, Austria, specializing in corporate and commercial law, litigation, and real estate legal services. The firm targets national and international companies, investors, developers, local authorities, law firms, and private individuals. It holds a reputable market position supported by rankings from Chambers Global and Legal 500, and features client testimonials that reinforce its credibility. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website uses Apache server technology, Alpine.js for frontend interactivity, Algolia for search functionality, and Matomo for privacy-conscious analytics. The site is mobile optimized and accessible, but performance metrics are not provided. Hosting appears to be with a1.net DNS and a dedicated IP address. SEO and navigation are well implemented. Security-wise, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical vulnerability. Other security best practices such as HSTS, DMARC, DNSSEC, and CAA records are missing. No explicit security or incident response policies are published. The cookie consent mechanism is implemented and GDPR compliant, indicating good privacy compliance. Overall, the website is trustworthy and professional but requires urgent security improvements, especially enabling HTTPS to protect user data and improve trust. Strategic recommendations include installing a valid SSL certificate, enabling security headers, and publishing security policies to enhance the security posture and compliance.

K

K&K Provitrum GmbH

kkprovitrum.at

39

K&K Provitrum GmbH is a specialized machinery and material dealer serving the glass industry in Central, Eastern, and Southeastern Europe. The company offers a comprehensive portfolio of glass processing machines, tools, and consumables, targeting a range of customers from small workshops to large industrial enterprises. Their website reflects a professional and consistent brand presence with clear business and contact information. Technically, the website is built on an Apache server with custom CMS elements and uses modern web technologies, but suffers from slow performance and lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols exposes the site to risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website scores moderately on content quality and business credibility but is penalized heavily for security shortcomings.

S

Statistik Austria

statistik.at

40

Statistik Austria is the official national statistical agency of Austria, providing independent and comprehensive statistical data to support fact-based decision making. The organization serves a broad audience including government entities, researchers, businesses, and the general public. Their services include data provision, publications, surveys, and various analytical tools. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with privacy-conscious analytics via Matomo, and includes modern web technologies such as FontAwesome and jQuery. However, a critical security weakness is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts the site's security posture. Despite this, the site implements multiple security headers and cookie consent mechanisms, demonstrating good privacy compliance. Overall, the site is trustworthy and authoritative but urgently requires SSL implementation to protect user data and communications.

K

KRAL GmbH

kral.at

24

KRAL GmbH is a medium-sized Austrian company specializing in manufacturing screw pumps and flow measurement solutions primarily serving industrial sectors such as marine, power generation, chemical engineering, mechanical engineering, and oil & gas. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, offering detailed product and service information, supported by a global network of sales and service partners. The website integrates multiple marketing and analytics tools managed through Google Tag Manager and employs a comprehensive cookie consent mechanism to comply with GDPR requirements. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture, exposing users to potential risks and reducing trust. Security headers are partially implemented, but critical improvements are needed to align with best practices. Overall, the business demonstrates strong credibility and market positioning but requires urgent technical security enhancements to protect its digital assets and customer data.

J

JAWA Management Software GmbH

jawa.at

23

JAWA Management Software GmbH is an established Austrian technology company specializing in customized software solutions for process optimization and information management. Their flagship product, the inforum management platform, supports supplier management, quality control, production planning, and AI-enhanced business solutions. With over 25 years of market presence and a medium-sized operation, JAWA serves a broad international clientele with a focus on efficiency and productivity improvements. Technically, the website is built on a modern WordPress CMS infrastructure using popular plugins and frameworks such as WPBakery, WPML, and Woodmart theme. The site is well-structured, mobile-optimized, and SEO-friendly, demonstrating a mature digital presence. However, the hosting environment lacks a valid SSL certificate and proper TLS configuration, which significantly undermines the security posture. Security-wise, the absence of HTTPS and modern TLS protocols is a critical vulnerability, exposing users to potential data interception and trust issues. While no active vulnerabilities or malware are detected, the site misses essential security headers and DNS security configurations. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a professional and credible business front but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL deployment, enabling modern security protocols, and implementing advanced security headers and DNS protections.

C

contextflow GmbH

contextflow.com

25

contextflow GmbH is a small Austrian healthcare technology company specializing in AI-powered computer-aided detection software for chest CT scans. Their flagship product integrates directly into PACS systems, targeting radiologists, PACS providers, and pharmaceutical companies. The website is professionally designed with rich content, including scientific research, testimonials, and partner logos, indicating a strong market position in AI medical imaging. Technically, the site runs on WordPress with modern plugins and uses AWS for hosting. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS support, which is a critical issue. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the site is trustworthy but requires urgent security improvements.

E

EPSIMEC GmbH & Co KG

epsimec.com

28

EPSIMEC GmbH & Co KG is a small Austrian digital agency specializing in social media marketing, newsletter marketing, content management, and web development services. Established in 2012, the company has a mature online presence with a professional website built on WordPress, leveraging modern plugins such as Yoast SEO and WP Rocket for optimization. The website presents a consistent brand image, clear contact information, and client references, positioning EPSIMEC as a credible service provider in the technology sector. Technically, the site uses PHP 8.0.3 on an Apache server hosted by Host Europe, but lacks HTTPS support, which is a significant security concern. The cookie consent mechanism is well implemented, indicating good privacy compliance. However, the absence of SSL/TLS encryption and security headers lowers the overall security posture. No explicit security policies or incident response contacts are published, and no vulnerability disclosure or security.txt files are found. Overall, EPSIMEC demonstrates a solid business and technical foundation but should prioritize securing its website with HTTPS and enhancing security best practices to improve trust and compliance.

W

wunderweiss

wunderweiss.com

40

Wunderweiss is a specialized agency based in Austria focusing on software and design development, with a strong emphasis on AI applications integrated into CMS systems, UI/UX consulting, and corporate branding. The company targets businesses seeking innovative technology and design solutions, positioning itself as an expert in user-oriented design and AI-driven application development. The website presents a professional and consistent brand image with detailed project showcases and clear service offerings. Technically, the website employs modern web technologies including jQuery, Django Framework, and Wagtail CMS, hosted behind Cloudflare. However, the site suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no proper HTTPS support. This significantly impacts the security posture and user trust. Performance metrics are not available, but the site shows good mobile optimization and basic accessibility features. Security-wise, the site implements several important HTTP security headers such as X-Frame-Options and Referrer-Policy, but lacks a valid SSL certificate, OCSP stapling, and session resumption. There is no visible incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the website is professionally designed and credible from a business perspective but requires urgent remediation of its SSL configuration to improve security and trust. Strategic recommendations include fixing HTTPS, implementing cookie consent, and adding security and incident response policies.

D

decide Clinical Software GmbH

decide-clinical.com

26

decide Clinical Software GmbH operates the GlucoTab platform, a specialized clinical decision support system designed to assist healthcare professionals in managing diabetes patients in hospital settings. The company holds important certifications such as ISO 13485 and MDR Class IIa, underscoring its commitment to quality and regulatory compliance. Their product integrates evidence-based insulin dosing algorithms and workflow digitalization, targeting hospitals and clinical staff. The website is professionally designed, multilingual, and content-rich, reflecting a mature digital presence. However, the lack of a valid SSL certificate and HTTPS support significantly undermines the security posture, especially critical in healthcare. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Contact information and trust indicators are clearly presented, enhancing business credibility.

W

Wombats Hostels

wombats-hostels.com

21

Wombat's Hostels is a medium-sized hospitality business operating city hostels in multiple European cities including Vienna, London, Munich, Budapest, and Leipzig. The company targets travelers seeking affordable accommodation with social and event experiences. The website is built on TYPO3 CMS and hosted on Apache servers, with a modern but basic technical infrastructure. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. The site includes privacy and cookie policies with a consent mechanism, but lacks explicit contact information and advanced security policies. Matomo analytics is used with cookie-less tracking, indicating some privacy awareness. Overall, the website is functional and professionally designed but requires urgent security improvements to protect user data and enhance trust.

S

Sanochemia Pharmazeutika GmbH

sanochemia.at

20

Sanochemia Pharmazeutika GmbH is an established Austrian pharmaceutical manufacturer specializing in contrast agents for medical imaging, including MRI and CT products, with a focus on gadolinium-free alternatives to enhance patient safety. The company operates globally with distribution in over 50 countries and offers contract manufacturing and API production services. The website is built on WordPress with modern plugins and multilingual support, providing a professional and content-rich user experience. However, the absence of a valid SSL certificate is a critical security gap, exposing users to potential risks. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. Overall, the business presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to improve security posture.

The website remax-impuls.at appears to represent a small Austrian business, likely in the real estate sector given the domain name, but no explicit business information or content is accessible due to a security challenge page blocking direct access. The site employs a bot detection script and redirects users after a delay, indicating a Web Application Firewall or similar security mechanism is in place. Technically, the site is served by nginx and hosted under the citc.at domain infrastructure, but critically lacks a valid SSL certificate and HTTPS support, exposing it to security risks and reducing user trust. Security headers such as X-XSS-Protection, X-Frame-Options, and X-Content-Type-Options are present, but without HTTPS, these provide limited protection. No privacy, cookie, or terms of service policies are found, and no contact or business details are visible on the landing page. Overall, the site’s security posture is weak, and the lack of accessible content prevents a full business or technical assessment.

ABF Pharmaceutical Services GmbH, part of the GBA Group, specializes in providing comprehensive logistical support for clinical trials, including GMP-certified pharmaceutical services such as kit production, labeling, packaging, storage, and distribution. The company operates internationally with a strong presence in Europe, the USA, and Asia, serving pharmaceutical and biotechnology companies. Their technical infrastructure is modern, leveraging React and Gatsby frameworks hosted on Netlify, with content managed via Storyblok CMS. However, the website lacks a valid SSL/TLS certificate, which significantly impacts its security posture. While security headers are present, the absence of HTTPS and modern TLS protocols exposes the site to risks. Privacy compliance is partially addressed with a cookie consent mechanism but lacks comprehensive GDPR indicators. Overall, the business credibility is strong, supported by clear contact information, certifications, and consistent WHOIS data. Strategic improvements in SSL configuration and security policies are recommended to enhance trust and compliance.

D

Die Wiener Volkshochschulen GmbH

vhs.at

40

Die Wiener Volkshochschulen GmbH operates the largest adult education platform in Vienna, offering a wide range of courses including languages, health, arts, and professional development. The website is well-designed, content-rich, and targets adult learners, families, and seniors in Vienna. It maintains a strong market position as a non-profit educational institution with official certifications and a comprehensive course catalog. Technically, the site uses Apache server technology, JavaScript modules, and integrates Cookiebot for consent management and Matomo for analytics. Accessibility and SEO are well addressed, with responsive design and clear navigation. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which is a critical issue for user trust and data protection. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS security to enhance protection and user confidence.

S

Swimsol GmbH

swimsol.com

28

Swimsol GmbH is a specialized energy company focused on providing floating and rooftop solar photovoltaic (PV) systems primarily for island environments such as the Maldives. The company positions itself as a leader in solar-at-sea technology with over 35 islands operating their systems and a significant installed capacity. Their business model includes system design, installation, operation, maintenance, and financing options, targeting luxury resorts and small businesses in tropical regions. Technically, the website is built on WordPress with a modern tech stack including Fusion Builder and WP Rocket, but lacks a valid SSL certificate, which impacts security and user trust. The site is well-designed, mobile-optimized, and SEO-friendly, with comprehensive content and strong branding. However, the absence of HTTPS and security headers represents a critical security gap. Privacy compliance is addressed with visible policies and consent mechanisms. Overall, Swimsol demonstrates a strong market presence and professional online representation but should prioritize securing their website with HTTPS and enhanced security practices.

H

HTL Braunau

htl-braunau.at

28

HTL Braunau is a well-established higher technical vocational school located in Braunau am Inn, Austria, offering specialized education in electronics, electrical engineering, mechatronics, and information technology. The institution serves approximately 1000 students and emphasizes project-based learning with national and international recognition. The website reflects a professional educational institution with clear communication channels and a focus on student engagement through events and partnerships. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and integrates Google Analytics and Tag Manager for visitor insights. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks and reducing trust. Privacy and cookie policies are present and GDPR compliant, indicating awareness of data protection requirements. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

I

Interfood Lebensmittelgroßhandel Ges.m.b.H.

interfood.at

23

Interfood Lebensmittelgroßhandel Ges.m.b.H. is a medium-sized Austrian wholesaler specializing in international fine foods. The company emphasizes quality, freshness, and supply reliability, supported by certifications such as IFS, MSC, ASC, and organic labels. Their website targets retailers and fine food distributors, showcasing a curated product portfolio and strong logistics capabilities. Technically, the site runs on WordPress with popular plugins and themes but lacks HTTPS, which is a critical security gap. The site includes comprehensive privacy and cookie policies, indicating GDPR compliance. However, the absence of SSL/TLS significantly impacts the security posture and trustworthiness. Overall, the website is professionally designed with good content quality and user experience but requires urgent security improvements.

H

Huppenkothen GmbH

huppenkothen.at

35

Huppenkothen GmbH operates a professional website focused on the sale and rental of mini and compact construction machinery, serving primarily the Austrian construction sector. The company maintains a strong market position with 42 locations and a large inventory of machines and spare parts. The website is well-designed, content-rich, and optimized for SEO and accessibility, targeting construction professionals and businesses. Technically, the site is built on WordPress with modern plugins and frameworks, but lacks HTTPS, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a mature digital presence but requires urgent security improvements to protect user data and trust.

I

ivii GmbH

ivii.eu

40

ivii GmbH is a small Austrian technology company specializing in AI-powered visual intelligence systems designed to optimize quality assurance and logistics processes in industrial manufacturing environments. Their flagship product, ivii iriis, combines artificial intelligence, machine learning, and camera technology to enable error-free production and logistics workflows. The company positions itself as an innovative provider with a strong focus on practical, plug-and-play solutions that empower employees and improve operational efficiency. The website content is professionally crafted, targeting industrial and logistics sectors, and supported by customer testimonials and ISO 27001 certification, enhancing trust and credibility. Technically, the website is built on WordPress with modern SEO and performance plugins such as Yoast SEO Premium and WP Rocket. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Performance is also suboptimal with a high page load time. Privacy compliance is well addressed with comprehensive GDPR-compliant privacy and cookie policies, including a consent mechanism. The company maintains active social media profiles and provides clear contact information. Security-wise, the lack of HTTPS and modern TLS protocols, absence of security headers, and missing DNSSEC and CAA records expose the site to potential risks. While no active vulnerabilities or WAF blocks are detected, these gaps should be addressed promptly to protect user data and maintain trust. Overall, ivii GmbH demonstrates a strong business and content presence but must urgently improve its security infrastructure to align with best practices and industry standards. Strategic recommendations include implementing SSL/TLS, enabling security headers, and optimizing performance to enhance user experience and trust.

C

CADS GmbH

cads-solution.com

40

CADS GmbH is a specialized software development company focused on innovative medical technology solutions, operating primarily in Austria with a strong partnership with the established KLS Martin Group. Their offerings include advanced software platforms such as IPS Gate® for medical case management, LOG Gate for inventory management, and 3D visualization services, targeting healthcare professionals and institutions worldwide. The website reflects a professional and well-branded digital presence with comprehensive content and multimedia resources. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools, but suffers from a critical security weakness due to an invalid SSL certificate, undermining HTTPS security. Privacy compliance is well addressed with clear cookie management and GDPR-aligned privacy policies. Overall, the business credibility is high, supported by certifications and partnerships, though the lack of a terms of service page and explicit security policies is noted.

B

Byte Media GmbH

vbwienbaden.at

34

Byte Media GmbH operates a WordPress-based website providing SEO, domain trading, and digital marketing services, with a focus on banking and insurance information for Baden bei Wien. The site targets private and business customers seeking financial services in the region. The technical infrastructure relies on nginx, WordPress, jQuery, and Bootstrap, hosted on a Plesk Linux environment. While the content is well-structured and SEO-optimized, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Additionally, no cookie consent mechanism or explicit privacy compliance features are implemented, despite the use of Google Analytics and Tag Manager for tracking. Contact information is clearly presented, and social media presence is strong, enhancing business credibility. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect users and comply with privacy regulations.

T

TS-Promotion

ts-promotion.at

23

TS-Promotion is a small Austrian digital marketing company specializing in social media advertising and content creation. The website presents a professional and consistent brand image targeting marketers and content creators. It leverages WordPress with popular plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The company maintains active social media profiles on Facebook, Instagram, TikTok, and Messenger, enhancing its market presence. However, the lack of HTTPS is a critical security gap that undermines user trust and data protection. The website includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good GDPR compliance practices. Contact options include an email address and a contact form, but no phone number or physical address is provided.

M

motion06 gmbh

motion06.at

23

motion06 GmbH is a medium-sized Austrian company specializing in the manufacture and supply of advanced conveyor systems primarily for airport baggage handling, ecommerce logistics, and industrial intralogistics. As a global leader in its niche, motion06 offers customized hardware and software solutions to optimize logistics processes. The company operates under the parent company Duravant, reflecting a strong corporate backing and market presence. The website content is well-structured, professionally designed, and targets logistics and industrial sectors with clear product and service offerings. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and marketing integrations such as Google Analytics and Marketo. However, the site lacks HTTPS encryption, which is a critical security flaw. Performance metrics are missing but inferred to be slow. Mobile optimization and SEO are adequately addressed, though accessibility is basic. From a security perspective, the absence of SSL/TLS and security headers significantly lowers the security posture. While cookie consent and privacy policies are implemented and GDPR compliant, there is no visible security or incident response policy. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional business front but requires urgent security improvements, especially implementing HTTPS and enhancing security headers, to protect user data and improve trust. Strategic recommendations include upgrading security infrastructure, publishing security policies, and improving performance metrics for better user experience.

C

CYLEDGE

cyledge.com

40

CYLEDGE is a consulting firm specializing in collaboration, customer centricity, and incremental innovation to create sustainable value. With over 20 years of market experience, the company offers tailored advisory services including value proposition design, organizational development, customer experience, and coaching. Their client portfolio includes notable companies such as VW, Siemens, and Redbull, indicating a strong market position in the technology and consulting sectors. Technically, the website is built on the Wix Studio platform using modern React 18 technology, with integrated Wix Blog and Forms for content and user engagement. However, the site suffers from slow performance and lacks a valid SSL certificate, which impacts security and user trust. Mobile optimization and accessibility are well addressed, but SEO could be improved. From a security perspective, the site lacks HTTPS and advanced security headers, which is a significant risk. No explicit security or incident response policies are found, and no vulnerabilities are detected in the current analysis. Privacy compliance is adequate with clear privacy and cookie policies, including consent mechanisms. Overall, CYLEDGE presents a professional and trustworthy business with a strong digital presence but should prioritize improving security configurations and website performance to enhance user trust and compliance.

B

BUWOG GROUP GMBH

buwog.at

40

BUWOG Group GmbH operates as a leading full-service provider in the Austrian residential real estate market, offering property search and management services. The website reflects a professional and consistent brand presence, targeting Austrian customers interested in housing solutions. Technically, the site is built on the Ibexa DXP CMS platform, leveraging modern JavaScript libraries and CDN services for content delivery and performance monitoring. However, the critical security weakness is the lack of a valid SSL certificate, resulting in no HTTPS support despite the presence of security headers like HSTS. This exposes users to potential risks and undermines trust. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site is functional and professional but requires urgent remediation of SSL issues to improve security posture and user trust.

Ö

Österreichische Gesundheitskasse

wgkk.at

40

The Österreichische Gesundheitskasse (ÖGK) operates as a major public healthcare insurance provider in Austria, offering a broad range of health-related services and information to insured individuals, employers, and contract partners. The website serves as a comprehensive portal for health facilities, health services, customer support, appointment scheduling, and career opportunities, targeting Austrian residents and stakeholders in the healthcare sector. The organization maintains a consistent and professional online presence with clear branding and trust signals, including official government domain usage and social media engagement. Technically, the website is built on a mature infrastructure utilizing Apache, Jakarta Faces (JSF), jQuery 3.6.0, and Gentics CMS. It integrates advanced features such as a content slider and Piwik PRO analytics for user behavior tracking. However, performance metrics appear incomplete, and the site shows moderate loading characteristics. Accessibility and SEO optimizations are well addressed, with good mobile responsiveness and clear navigation. From a security perspective, the site implements several best practices including a detailed Content-Security-Policy and HttpOnly, Secure cookie flags. Nevertheless, the absence of a valid SSL certificate and HTTPS support is a critical vulnerability, severely impacting the security posture. Other SSL/TLS features such as modern protocol support, OCSP stapling, and session resumption are missing. Privacy compliance is strong, with GDPR-aligned cookie consent mechanisms and clear privacy policies. Overall, the website is trustworthy and professionally managed but requires urgent security improvements to enable HTTPS and strengthen SSL/TLS configurations. Addressing these issues will enhance user trust, data protection, and compliance with modern security standards.

R

Rosenbauer International AG

rosenbauer.com

28

Rosenbauer International AG is a globally recognized leader in firefighting technology, manufacturing a wide range of firefighting vehicles, equipment, and digital solutions. With over 150 years of history, the company serves fire departments, municipal authorities, industrial clients, and airports worldwide. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site is built on TYPO3 CMS with PHP backend and uses Amazon CloudFront CDN for delivery. However, the security posture is weakened by an invalid SSL certificate, which undermines HTTPS protection despite the presence of several security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional and trustworthy but requires urgent SSL remediation to improve security and user trust.

W

WIFI Wien

wifiwien.at

35

WIFI Wien is a prominent educational institution based in Austria, offering a comprehensive range of adult education courses and training programs across multiple sectors including business, health, IT, management, and languages. The website demonstrates a strong market position with extensive course offerings, a user-friendly interface, and integration of modern web technologies. However, the absence of a valid SSL/TLS certificate and lack of HTTPS significantly undermines the site's security posture, exposing users to potential risks. While privacy and cookie policies are well implemented with consent mechanisms, the technical security measures require urgent enhancement to meet modern standards. Overall, WIFI Wien presents a professional and trustworthy educational platform but must prioritize securing its web infrastructure to protect user data and maintain compliance.

G

Graz-Köflacher Bahn und Busbetrieb GmbH

gkb.at

23

Graz-Köflacher Bahn und Busbetrieb GmbH (GKB) is a regional transportation company based in Austria, providing rail and bus services primarily in the West Styria region. The company has a long history dating back to 1935 and focuses on sustainable mobility solutions including electrification of rail lines and regional bus services. Their website serves as an information portal for passengers, offering schedules, fare information, and service updates. The company maintains an active social media presence and provides comprehensive privacy and cookie policies in compliance with GDPR. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS and modern TLS protocols exposes users to potential risks. Despite this, the site is well-structured, mobile-optimized, and provides clear contact information. Overall, the business is credible and well-established, but the website's security posture requires urgent improvement to protect user data and maintain trust.

G

Greiner Bio-One International GmbH

gbo.com

40

Greiner Bio-One International GmbH is a large, globally active company specializing in biotechnology, medical devices, in vitro diagnostics, and research products. The company operates with a strong customer focus and maintains a diversified portfolio with production sites in multiple countries. Their website reflects a mature digital presence with comprehensive product information, news, and resources targeted at healthcare and research professionals. Technically, the site is built on TYPO3 CMS and hosted behind Cloudflare, but suffers from critical security shortcomings including the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. Privacy and legal compliance are well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

M

MedTriX Group

medizin-medien.at

40

MedTriX Group is a specialized medical communication service provider with a strong presence in Austria, Germany, and Switzerland. The company offers unique healthcare professional (HCP) data intelligence and a broad portfolio of services including data targeting, CRM data quality enhancement, telephone communication, medical media publishing, digital newsletters, and educational events. Their market position is reinforced by a strong regional footprint and partnerships with sister companies MTX Schweiz and MTX Deutschland. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS and SEO-friendly infrastructure. However, performance metrics are lacking, and the SSL/TLS configuration is critically flawed with no valid certificate and no TLS protocols enabled, which severely impacts security and trust. Security posture is weak due to the invalid SSL certificate and incomplete TLS support, despite the presence of several security headers. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is comprehensive and professionally presented, enhancing business credibility. Overall, the site is functional and professional but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in security configuration and performance optimization are recommended.

Raiffeisen Landesbank Kärnten is a prominent regional bank in Austria, specializing in comprehensive financial services for private and corporate clients. The website reflects a mature digital presence with extensive service offerings including corporate banking, private banking, investment, insurance, and online banking solutions. The bank emphasizes personalized service and regional economic support, positioning itself as a trusted partner for businesses and individuals in Carinthia. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and includes advanced cookie consent management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. Privacy policies and legal documents are well presented, supporting GDPR compliance. Overall, the site is professional and trustworthy but urgently requires remediation of its SSL/TLS configuration to ensure secure communications and maintain customer trust.

A

acccoi partners GmbH

acccoi.com

27

acccoi partners GmbH is a small technology-focused company based in Austria specializing in enabling corporate business development through startup collaboration, corporate accelerators, and co-innovation programs. Established since 2012, the company targets large corporates and startups seeking innovation partnerships. The website is built on WordPress using Elementor and several plugins for SEO and marketing, but lacks HTTPS which is a critical security shortfall. The site includes standard legal pages and contact mechanisms, including a contact form and social media links. However, Google Analytics is installed but not configured, and performance metrics are unavailable. Security posture is weak due to missing SSL/TLS and security headers, exposing the site to risks. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

H

HICO

hico-ics.com

39

HICO is a specialized provider of Integrated Product Support (IPS) business solutions targeting sectors such as civil and military aviation, security and defence, shipbuilding, rail, and IT solutions. Their offerings include engineering support, maintenance planning, supply support, IPS management, technical documentation, and training services. The company positions itself as a niche player with a focus on maximizing system availability and cost optimization. The website is professionally designed using WordPress CMS with modern plugins and SEO optimizations, though performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, lack of security headers, and missing advanced SSL features. Privacy compliance is adequate with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by detailed service descriptions and consistent branding, but contact information lacks explicit phone numbers or direct emails on the homepage. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

A

ADRESYS Adaptive Regelsysteme Gesellschaft m.b.H.

adresys.com

24

ADRESYS Adaptive Regelsysteme Gesellschaft m.b.H. is a small Austrian company specializing in innovative safety solutions for lone workers, including emergency call systems and smart textile technologies. Operating as a subsidiary of OMICRON electronics GmbH, a global leader in energy technology testing, ADRESYS leverages advanced technology to enhance workplace safety. The website is professionally designed, multilingual, and provides comprehensive information about products and services, targeting industrial safety managers and workers. Technically, the site runs on WordPress with modern plugins for multilingual support, cookie consent, and analytics. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the business presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to improve security posture.

S

Swat.io GmbH

swat.io

40

Swat.io GmbH is a mature technology company based in Austria, specializing in SaaS social media management tools designed for professionals and teams. Their platform offers comprehensive services including publishing, community management, customer service, automation, analytics, and AI-powered assistance. The company has a strong market presence with over 30,000 users and is certified under ISO 27001, reflecting a commitment to information security. The website is professionally designed, content-rich, and well-structured, targeting social media managers, agencies, and marketing teams. Technically, the site is built on WordPress with Elementor and uses modern SEO and marketing tools, though performance metrics indicate room for improvement. Security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which is a critical issue for a SaaS provider. Privacy compliance is well addressed with clear policies and consent mechanisms. WHOIS data confirms the legitimacy and consistency of the business entity. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

C

Collini gruppe

collini.eu

25

Collini gruppe is a well-established European leader in surface technology, specializing in industrial coatings for metals and plastics. With over 125 years of experience, the company offers a broad range of surface treatment processes including anodizing, precious metal coatings, galvanizing, and organic coatings. The website targets industrial clients across sectors such as automotive, medical, and machinery manufacturing, emphasizing customized surface solutions to enhance product success. The business model is B2B with a strong international presence, supported by multiple global locations and a large workforce. The website content is rich, professionally designed, and well-structured, supporting multiple languages and providing detailed service information and contact options.

M

MAN Truck & Bus Vertrieb Österreich GmbH

mantruckandbus.at

36

MAN Truck & Bus Vertrieb Österreich GmbH operates a comprehensive commercial vehicle website targeting the Austrian market, offering trucks, buses, transporters, and related services. The website demonstrates a strong market position with extensive product information, digital services, and customer engagement tools such as configurators and contact forms. The technical infrastructure leverages modern web technologies including AWS CloudFront CDN, Bootstrap, and jQuery, ensuring a responsive and user-friendly experience. However, the absence of HTTPS and a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

K

Kraftwerk Living Technologies GmbH

kraftwerk.at

36

Kraftwerk Living Technologies GmbH is a specialist provider of integrated media technology solutions, delivering innovative and customized concepts for sectors including entertainment, industry, science, museums, exhibitions, corporate, and architectural solutions. The company operates globally with offices in Austria, China, UAE, Saudi Arabia, and South Africa, targeting businesses seeking advanced AV systems integration and media-based attractions. Their website reflects a professional and content-rich digital presence, leveraging WordPress with SEO enhancements and Google Tag Manager for analytics. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of HTTPS, which poses significant risks to user trust and data protection. Privacy policies and GDPR compliance are well addressed, but incident response and security policy disclosures are missing. Overall, the business appears legitimate and well-positioned in its niche, but urgent improvements in security infrastructure are recommended.

P

POLOPLAST GmbH & Co KG

poloplast.com

40

POLOPLAST GmbH & Co KG is a well-established Austrian manufacturer specializing in plastic pipe systems with a strong presence across Europe. The company emphasizes sustainability, innovation, and quality, offering a broad range of products including multilayer pipe systems, building drainage, and wastewater disposal solutions. Their market position is that of a technology leader with a large operational scale and a parent company affiliation with Wietersdorfer. The website reflects a professional business with clear contact information and comprehensive privacy and cookie policies, supporting GDPR compliance. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Bootstrap for responsive design. However, the site suffers from slow performance and lacks HTTPS support, which is a critical security concern. The absence of SSL/TLS encryption and security headers exposes the site to potential risks and undermines user trust. Analytics and tracking tools such as Google Analytics and LeadFeeder are used with appropriate cookie consent mechanisms. Security posture is weak due to the lack of HTTPS and security headers, though no active vulnerabilities or malware were detected. Privacy compliance is strong with clear policies and consent banners. Business credibility is high given the detailed company information and social media presence. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate implementation of a valid SSL certificate, addition of security headers, performance optimization, and enhancement of incident response information to strengthen security culture and compliance.

B

Bank Gutmann

gutmann.at

40

Bank Gutmann is a well-established private banking institution based in Austria, specializing in wealth management, investment advice, and tailored investment solutions since 1922. The website reflects a professional and content-rich digital presence targeting private and institutional banking clients. The technical infrastructure is built on the Liferay CMS platform with modern JavaScript frameworks such as React and Clay UI, indicating a mature digital environment. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture of the website, exposing users to potential risks. Privacy and cookie policies are present and GDPR compliant, with a moderate level of user tracking via Piwik PRO analytics. Overall, the website demonstrates good business credibility and user experience but requires urgent security improvements to protect client data and maintain trust.

A

Austria Center Vienna

acv.at

39

Austria Center Vienna (ACV) is Austria's largest congress center, offering extensive event spaces and modern technology in a central location in Vienna. It serves a wide range of event types including congresses, exhibitions, corporate events, product presentations, galas, and e-sports, targeting both national and international clients. The business is operated by the public company IAKW-AG and holds a strong market position with numerous awards and certifications, emphasizing sustainability and innovation. Technically, the website is built on modern frameworks like Next.js and React, hosted via Cloudflare, and integrates consent management tools such as Usercentrics. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical issue. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to protect user data and enhance trust.

C

Continental Trading GmbH

wetrade4you.at

20

Continental Trading GmbH operates as a specialized retailer of used printing and finishing machines, rooted in Salzburg, Austria, with an international customer base. The website presents basic information about the business and its offerings but lacks comprehensive contact details and legal policies. The technical infrastructure relies on Apache web server with Plesk hosting, AngularJS framework, jQuery, and Bootstrap for frontend, and uses Google Analytics for visitor tracking with IP anonymization enabled. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. No privacy or terms of service policies are present, indicating compliance gaps with GDPR and other regulations. Overall, the website is functional but exhibits outdated technology and security weaknesses that require urgent remediation.

L

Linde Material Handling Austria

linde-mh.at

40

Linde Material Handling Austria is a leading provider of material handling equipment and solutions, including forklifts, automated vehicles, and digital fleet management products. The company targets businesses requiring efficient logistics and warehouse operations, offering new, used, and rental equipment alongside comprehensive service packages. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the site uses JavaScript, jQuery, and tracking tools like etracker and SalesViewer, hosted likely on Microsoft Azure. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Business credibility is strong, supported by certifications and consistent domain registration data. Overall, the site is functional and professional but requires urgent security improvements to protect users and maintain trust.

T

TableConnect GmbH

tableconnect.net

22

TableConnect GmbH is a technology company specializing in the design and manufacture of large-scale interactive touch products such as Multi Touch Tables, Digital Blackboards, and Touchscreen Modules. Their products target enterprises, retail, hospitality, and media sectors, serving notable clients including Fortune 500 companies. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. However, the lack of HTTPS and modern security headers represents a critical security gap. Privacy policies and terms are present, but cookie consent mechanisms are missing. Overall, the company demonstrates a credible market position with strong branding and client trust signals.

A

Active Solution

activesolution.at

36

Active Solution GmbH is a medium-sized Austrian technology and engineering company specializing in IT and engineering consulting, project execution, and recruitment services. With 17 years of experience and a portfolio of reputable clients, the company positions itself as a dedicated and passionate service provider for IT professionals and engineers. The website reflects a professional and consistent brand image targeting IT and engineering talent and clients. Technically, the site is built on TYPO3 CMS and uses modern JavaScript and CSS, but lacks HTTPS, which is a critical security gap. The presence of cookie consent and Google Analytics indicates some privacy awareness, though no explicit security or incident response policies are published. Overall, the company demonstrates moderate digital maturity but requires urgent improvements in security infrastructure to protect user data and enhance trust.

Mindbreeze GmbH is a medium-sized technology company specializing in AI-based enterprise search and knowledge management solutions. Their flagship product, Mindbreeze InSpire, empowers organizations to transform data into actionable insights for critical business decisions. The company is recognized as a leader in the IDC MarketScape and serves a global clientele including major enterprises such as Lufthansa and Daimler AG. The website is professionally designed, mobile-optimized, and rich in relevant content targeting enterprise customers seeking AI-driven knowledge management solutions. Technically, the site runs on Drupal 10 with a modern tech stack but lacks a valid SSL certificate, which critically impacts its security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms and business email validation on forms. Social media presence is strong across major platforms. Overall, the domain registration and website content are consistent and trustworthy, though the absence of HTTPS is a significant security concern.