Medium-risk security reports

The website orthomol.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of the actual site content. This prevents extraction of meaningful business, privacy, or contact information. The domain is registered and DNS records indicate standard email routing via Microsoft Outlook, suggesting legitimate business use. The SSL certificate is valid but lacks support for modern TLS protocols, and security headers are minimal. Due to the WAF block, the website's content quality, privacy compliance, and business credibility cannot be assessed accurately. The overall security posture shows basic protections but requires improvements in TLS support and security headers. The site lacks visible privacy or cookie policies and contact information in the accessible content.

Auxality is a specialized SaaS provider focused on automating operational workflows and financial data management for asset managers. Their platform aims to simplify complex regulatory and reporting challenges in the financial industry. The company targets asset managers and financial institutions, offering automated reporting, platform transformation, data visualization, and advisory services. Technically, the website is built on a modern stack using Next.js and React, hosted on AWS infrastructure. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks. Privacy and cookie policies are well documented, and contact mechanisms are available via email and form, but no phone or physical address is provided. Overall, the site is professional and content-rich but requires urgent security improvements.

The Storebrand Group is a well-established financial services company operating primarily in the Nordic region, specializing in long-term savings, insurance, asset management, and occupational pensions. With a domain age of over 28 years and a strong market position as Norway's largest asset manager, the company demonstrates maturity and trustworthiness. The website content is professionally presented, targeting both private and corporate customers with clear navigation and relevant business information. Technically, the site uses modern web technologies including Apache, jQuery, and Google Tag Manager, hosted on Google Cloud infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced, appropriate security headers, and a valid SSL certificate covering multiple related domains. Privacy compliance is evident with a comprehensive privacy and cookie policy and consent mechanisms in place. Overall, the site reflects a high level of digital maturity and business credibility.

The Innsbrucker Zentrumsverein is a non-profit organization dedicated to promoting the historic city center of Innsbruck, Austria. It focuses on enhancing the shopping experience, organizing events and markets, and supporting local businesses and cultural initiatives. The website reflects a well-structured and professionally designed platform targeting both locals and tourists interested in the Innsbruck city center. Technically, the site runs on Microsoft IIS with modern JavaScript libraries and integrates third-party services such as Google Analytics and Usercentrics for cookie consent management. The SSL configuration is adequate but could be improved by enabling full HSTS and OCSP stapling. Security headers are present, and no critical vulnerabilities were detected. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the site demonstrates a good balance of business credibility, technical implementation, and security posture.

Related:inn-taler.tirol

Innsbruck Marketing GmbH is a regional marketing organization dedicated to promoting the city of Innsbruck and its surrounding region. The company focuses on event promotion, regional networking, and marketing services to enhance the visibility and attractiveness of Innsbruck as a destination. The website reflects a strong government affiliation, consistent branding, and a clear focus on local events and community engagement. Technically, the site uses modern web technologies including TLS 1.2/1.3, a custom CMS framework, and integrates analytics and social media tools effectively. Security posture is good with HTTPS, multiple security headers, and a content security policy, though some improvements like full HSTS and OCSP stapling could be made. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

k0smotron.io is a professionally designed website representing an open source Kubernetes operator project focused on managing k0s control planes and clusters. The project is affiliated with Mirantis, a recognized company in the cloud native and Kubernetes ecosystem. The website provides comprehensive technical content, documentation links, and community resources targeting Kubernetes operators and enterprises managing multi-cluster environments. Technically, the site is hosted on GitHub Pages, uses modern web technologies including Bootstrap and FontAwesome, and integrates privacy-respecting analytics via Plausible. Security posture is adequate with HTTPS and OCSP stapling enabled, but lacks some best practices such as HSTS and explicit security policies. Privacy compliance is good with a comprehensive privacy policy linked from Mirantis, though no cookie consent mechanism is present. Overall, the site is trustworthy, professional, and well-aligned with its business purpose.

Lens, operated by Mirantis, is a leading Kubernetes IDE designed for developers and DevOps engineers to manage and troubleshoot Kubernetes clusters efficiently. With over 1 million users globally, Lens holds a strong market position as the most popular Kubernetes IDE, offering a comprehensive and intuitive context-aware UI. The website reflects a professional and enterprise-grade product with strong trust indicators such as ISO 27001 and SOC2 Type 1 certifications and testimonials from reputable organizations. Technically, the site is built on modern frameworks like Next.js and React, hosted on AWS infrastructure with CDN support, ensuring good performance and mobile optimization. However, a critical security concern is the invalid or missing SSL certificate, which undermines the security posture despite the presence of HSTS and other security headers. Privacy compliance is generally good with a comprehensive privacy policy and GDPR indicators, though no explicit cookie consent mechanism was detected. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, Lens demonstrates strong business credibility and technical maturity but must address SSL issues to enhance trust and security.

k0rdent.io is a professionally designed website representing an open-source Kubernetes-native distributed container management platform developed and originated by Mirantis. The platform targets platform engineering teams and enterprises managing multi-cloud, hybrid, and edge environments, focusing on modern workloads such as AI and ML. The website provides comprehensive content, including detailed descriptions, use cases, videos, and community engagement channels, reflecting a mature and well-positioned technology offering. Technically, the site is hosted on GitHub Pages, uses modern web technologies like Bootstrap and jQuery, and integrates Plausible Analytics for minimal user tracking. However, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security deficiency. Security headers are partially implemented, but the absence of HTTPS significantly lowers the security posture. Privacy compliance is basic, with a privacy policy linked but no cookie consent mechanism despite analytics usage. Business credibility is strong due to clear branding, parent company association, and open-source transparency. Overall, the site is trustworthy and professional but requires urgent security improvements.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 13 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Spinoco is a technology company offering a SaaS platform that integrates customer care and teamwork functionalities into a single application. Their solution automates task allocation based on workload and language skills, supports chatbot and voice bot automation for routine queries, and targets businesses such as e-shops, front desks, and logistics companies. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow, Google Tag Manager, and LinkedIn Insight Tag. Hosting is provided via Cloudflare with HTTPS enforced and several security headers implemented, though some security enhancements are recommended. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism. No direct company emails or phone numbers are publicly listed; contact is primarily through a web form. Overall, the site presents a trustworthy and professional business presence with a good security posture and moderate user tracking.

Oktalite Lichttechnik GmbH is a German-based company specializing in the development and implementation of customized LED lighting concepts and systems for modern retail environments such as stores, shops, and showrooms. The company operates as a medium-sized B2B supplier and service provider within the retail lighting sector and is a member of the TRILUX group, which enhances its market position and brand credibility. The website content is rich, professionally designed, and well-structured, targeting retail businesses and lighting professionals. Technically, the website is built on TYPO3 CMS and hosted on an Apache server, with integrations such as Google Tag Manager and OneTrust for analytics and cookie consent management. However, a critical security shortfall is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. The site includes comprehensive contact information, legal pages, and social media presence, supporting business credibility and privacy compliance. Overall, while the business and content quality are strong, the lack of HTTPS is a major vulnerability that needs urgent remediation.

Related:trilux.com

Education Group GmbH is a well-established full-service educational agency based in Linz, Austria, specializing in providing pedagogical, media, and technological solutions for schools and educational institutions. The company offers a broad portfolio including products, services, projects, seminars, and helpdesk support, targeting educators, municipalities, and educational authorities. Their market position is strong within the Upper Austria region, supported by a professional and content-rich website that clearly communicates their offerings and expertise. Technically, the website is built on TYPO3 CMS with a modern tech stack including PHP 8.2, OpenResty server, and uses advanced front-end libraries like Swiper.js and Font Awesome. The site is fast, mobile-optimized, and accessible, with good SEO practices and structured data enhancing discoverability and trust. Analytics are handled via Matomo, reflecting a privacy-conscious approach. Security posture is solid with HTTPS enabled, strict Content-Security-Policy headers, and a strict DMARC policy for email protection. However, there is room for improvement by enabling HSTS, OCSP stapling, and refining CAA records. No critical vulnerabilities or WAF blocking were detected, indicating a secure and reliable online presence. Overall, the website and business demonstrate high professionalism, compliance with GDPR, and strong trust indicators. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing HTTPS security headers and adding a vulnerability disclosure policy to further strengthen security and trust.

ChurnZero is a US-based technology company specializing in AI-powered customer success software designed to help businesses reduce churn, increase customer engagement, and drive revenue growth. Their platform offers advanced features such as Customer Success AI™, health scoring, customer journeys, and automation tools, positioning them as a top-rated solution in the customer success software market. The website is professionally designed, well-branded, and targets customer success teams and executives in SaaS and subscription businesses. Technically, the site is built on WordPress with modern optimization tools like FlyingPress and integrates multiple marketing and analytics platforms including HubSpot and ZoomInfo. Security posture is solid with HTTPS enforced and several security headers present, though improvements like enabling HSTS and OCSP stapling are recommended. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms via Osano CMP. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness. The site is accessible without WAF blocking, enabling a full analysis.

Schlüsselbauer Technology GmbH & Co KG is an Austrian-based medium-sized manufacturing company specializing in special machine construction for the concrete industry, sustainable building materials production, and environmental technology consumables. The company holds a strong international market position as a leading complete provider in its sector, targeting B2B customers in construction and environmental industries. Their website reflects a professional and consistent brand image with clear contact channels and social media presence. Technically, the website is built on an Apache server with a CMS likely to be Redaxo, using standard web technologies and Bootstrap for responsive design. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. Security headers are minimal, and no advanced security policies or incident response information is publicly available. Privacy compliance is supported by a cookie consent mechanism and a comprehensive privacy policy hosted on a related corporate domain. Overall, the website is functional and professional but requires urgent improvements in SSL implementation and security best practices to enhance trust and compliance.

Related:sbm.atgeomaterials.eu

FirstWave operates a cybersecurity-as-a-service platform called CyberCision™, targeting service providers and MSPs to deliver integrated email, web, and firewall security services via a cloud portal. The company positions itself as a leader in network monitoring and cybersecurity services with a global reach, leveraging partnerships with recognized technology providers such as Cisco and Microsoft. The website is professionally designed, content-rich, and optimized for user experience and SEO, supporting multiple languages and integrating modern marketing and analytics tools. Technically, the site runs on WordPress hosted on AWS infrastructure with a valid SSL certificate, though it lacks modern TLS protocol support and some security headers. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence with room for security enhancements.

Interlaced is a well-established Italian communication and marketing agency with offices in Udine and Milan, founded in 2000. The company offers a comprehensive suite of services including marketing consulting, digital strategy, graphic design, web development, SEO, social media management, and marketing automation tools. The website reflects a mature and professional business with a strong market presence in the media sector, targeting businesses seeking integrated communication solutions in Italy. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses advanced SEO and analytics tools like Yoast SEO and Google Tag Manager. Security posture is solid with HTTPS enabled, no vulnerable cipher suites, and use of Google reCAPTCHA, although improvements like HSTS and additional security headers could enhance protection. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, good technical implementation, and trustworthy business credibility.

Envases Öhringen GmbH is a well-established German manufacturer specializing in metal and plastic packaging solutions, serving industries such as paints, chemicals, food, and beverages. The company holds a strong market position, notably as a world leader in 5-liter party kegs for breweries, and emphasizes sustainability and innovation in its product offerings. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive business information. Technically, the site is built on the Jimdo Creator platform, leveraging modern web standards including HTTPS with strong TLS protocols and OCSP stapling, ensuring secure and performant user experiences. Security posture is solid with appropriate headers and no detected vulnerabilities, though improvements in DNS security and incident response transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high trustworthiness and business credibility, supporting Envases Öhringen GmbH's reputation as a global packaging leader.

Related:minikeg.blog

Kimsufi.com is a website representing the Kimsufi brand, which offers low-cost dedicated servers and hosting solutions. The brand is now integrated into the OVHcloud Eco range, reflecting a strategic consolidation under the OVHcloud umbrella. The website provides information about the migration of Kimsufi services to OVHcloud, emphasizing cost-effective and sustainable server offerings. The target audience includes cost-conscious customers seeking affordable dedicated servers and hosting services. The business operates within the technology sector, with OVH SAS as the parent company. The website is professionally designed, mobile-optimized, and uses Drupal CMS with modern web technologies. However, a critical security issue is the lack of a valid SSL certificate and HTTPS support, which significantly impacts the security posture score. Privacy and cookie policies are comprehensive and GDPR compliant. Social media presence is strong across major platforms, enhancing trust and engagement.

Related:ovhcloud.comovh.com

The website cmdesign.hu is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page, which blocks access to actual business content. The domain is mature, registered since 2008, and uses Cloudflare for DNS and security services. The SSL certificate is valid but lacks modern TLS protocol support, and HSTS is not enabled, indicating room for security improvements. No privacy, cookie, or terms of service policies are present, nor is there any visible contact or business information on the accessible page. This severely limits the ability to assess the company's business model, services, or compliance posture. The presence of Cloudflare Insights indicates minimal analytics tracking, but no marketing or advertising tools are detected. Overall, the site’s security posture is moderate due to valid HTTPS and security headers, but the lack of accessible content and compliance information is a significant concern.

MSD Tiergesundheit Deutschland is a well-established veterinary pharmaceutical company operating in Germany, providing a range of animal health products including vaccines and pharmaceuticals targeted primarily at veterinarians. The company is part of the global Merck & Co., Inc. group, which lends it strong market credibility and resources. The website reflects a professional and consistent brand presence with comprehensive content tailored to its target audience, including educational resources and an online shop. Technically, the site is built on WordPress VIP, leveraging modern web technologies and SEO best practices, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, strong security headers, and cookie consent mechanisms in place, although some improvements like OCSP stapling and updated TLS protocol support could enhance security further. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website represents a mature digital presence with good business credibility and technical implementation.

Burgenland Energie is a regional energy provider based in Austria, specializing in renewable energy solutions such as photovoltaic systems, battery storage, heat pumps, and e-mobility services. The company targets private customers and municipalities within the Burgenland region, emphasizing energy independence and sustainability. Their market position is that of a trusted regional leader in renewable energy, supported by a comprehensive portfolio of products and services tailored to modern energy needs. Technically, the website is built on modern frameworks including React and Next.js, hosted on AWS infrastructure with Amazon S3 and CloudFront for content delivery. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good SEO practices. Integration with marketing and analytics tools like Google Tag Manager and Zoho CRM is implemented with user privacy in mind, including cookie consent mechanisms. From a security perspective, the site enforces HTTPS with a valid SSL certificate and uses AWS KMS for server-side encryption. OCSP stapling is enabled, but HTTP security headers like HSTS are not fully implemented, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's business objectives. Strategic recommendations include enhancing HTTP security headers, continuous monitoring of third-party scripts, and maintaining strong privacy compliance to further strengthen user trust and security posture.

Related:befunkt.atfcbe.at

Inn-Taler GmbH operates a local gift voucher system for Innsbruck, Austria, offering both physical and digital vouchers redeemable at a network of local retail and hospitality partners. The website is professionally designed with clear navigation and content targeting local consumers and businesses. The technical infrastructure is based on WordPress with modern plugins and PHP 8.1.7, though SSL/TLS configuration could be improved for stronger security. The site implements GDPR-compliant privacy and cookie policies with user consent mechanisms and uses Google Analytics with IP anonymization. Security posture is adequate but could benefit from enhanced headers and modern TLS protocols. No direct contact emails or phone numbers are publicly listed, which may affect immediate customer support access. Overall, the site is trustworthy and well-positioned in its local market niche.

Related:duftner.digital

Hyland Software, Inc. operates the Alfresco platform, an open, modern, and secure content, process, and governance management system designed to accelerate business workflows. The company is positioned as an enterprise software provider with a strong market presence, offering a comprehensive suite of services including content management, process automation, governance, and enterprise collaboration. The website reflects a mature digital infrastructure leveraging Sitecore CMS, Cloudflare hosting, and modern analytics tools such as Segment and Google Tag Manager. Security posture is solid with HTTPS enforced and multiple security headers implemented, though improvements are recommended in TLS protocol support and HSTS enforcement. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Frauenthal Handel Gruppe AG is Austria's leading wholesaler in the sectors of sanitary, heating, installation technology, and electrical materials. The company operates multiple subsidiary brands including SHT, ÖAG, Kontinentale, and Elektromaterial.at, serving a broad target audience of installers, builders, architects, and municipalities. The website is professionally designed, content-rich, and well-branded, reflecting a mature digital presence. Technically, the site is built on WordPress with a modern PHP and Apache backend, but performance is moderate and security headers are minimal. SSL is enabled with TLS 1.2 and 1.3 support, though improvements such as HSTS and OCSP stapling are recommended. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site demonstrates a solid business credibility and digital maturity, though security posture can be enhanced to reduce risk.

The website wkoecg.at serves as an official business directory for Austrian companies, operated by the Wirtschaftskammer Österreich (WKO), the Austrian Chamber of Commerce. It provides a comprehensive and up-to-date listing of over 600,000 Austrian businesses, targeting business users and the general public seeking company information. The platform offers additional services such as ECG compliance support and eServices, positioning itself as a central hub for business-related information in Austria. Technically, the site is built on an ASP.NET WebForms framework with modern JavaScript enhancements, including Google Tag Manager and a consent management platform to comply with privacy regulations. The site demonstrates good accessibility and SEO practices, with structured navigation and mobile optimization. However, performance metrics are unavailable, and the hosting provider is not explicitly identified. From a security perspective, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS availability, which is a critical vulnerability exposing users to potential data interception. While security headers such as HSTS, X-Frame-Options, and secure cookie flags are implemented, the absence of HTTPS severely undermines the overall security posture. Privacy policies and cookie consent mechanisms are present and appear comprehensive, supporting GDPR compliance. Overall, the site is a credible and authoritative business resource with strong content and privacy compliance but suffers from a critical security flaw due to missing valid HTTPS. Addressing this issue is paramount to protect user data and maintain trust. Strategic improvements in SSL deployment and ongoing security audits are recommended to elevate the site's security and user confidence.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

IntegrityCounts operates a confidential and anonymous ethics reporting system aimed at organizations requiring secure ethics reporting solutions. The website is minimalistic, built using React and hosted on Microsoft Azure, indicating a modern but basic technical infrastructure. The site lacks visible content beyond the root container and does not provide privacy, cookie, or terms of service policies, nor contact information, which limits user engagement and trust. From a security perspective, the website enforces HTTPS with a valid SSL certificate and implements several important security headers such as Content-Security-Policy and X-Frame-Options. However, the absence of enabled HSTS, support for deprecated TLS 1.1, and lack of OCSP stapling reduce the overall security posture. No vulnerabilities or exposed sensitive data were detected, but the security configuration could be improved to meet best practices. Overall, the website presents a moderate risk profile due to limited content, lack of compliance documentation, and partial security best practices. The domain registration and DNS setup are consistent with a legitimate business presence, but the absence of contact details and policies impacts credibility and privacy compliance. Strategic improvements in transparency, security hardening, and user engagement are recommended to enhance trust and compliance.

Mirantis is an established enterprise technology company specializing in AI infrastructure management and Kubernetes-based solutions. The company offers a comprehensive suite of products and services designed to manage AI workloads across cloud, on-premises, hybrid, and edge environments. Recognized as a leader and challenger in the container management space by Gartner and Omdia, Mirantis targets MLOps professionals, platform engineers, and enterprise customers seeking scalable, secure, and flexible AI infrastructure solutions. The website reflects a mature digital presence with strong branding, clear navigation, and extensive content tailored to its target audience. Technically, the website leverages modern frameworks such as Nuxt.js and Bootstrap, with a headless CMS (Storyblok) for content management. It is hosted on a Fastly CDN, ensuring fast load times and global availability. The site is mobile-optimized and includes accessibility features, contributing to a positive user experience. SEO practices are well implemented with comprehensive meta tags and structured data. From a security perspective, the site employs HTTPS with a valid SSL certificate supporting modern TLS protocols. Security headers like X-Frame-Options and HSTS (though not fully enabled) are present, and no vulnerable cipher suites or subdomain takeover risks were detected. However, improvements such as enabling HSTS fully and implementing OCSP stapling could enhance security further. Privacy compliance is supported by a comprehensive privacy policy, though explicit cookie consent mechanisms are not evident. Overall, Mirantis demonstrates a strong security posture, professional business credibility, and a well-executed technical infrastructure. The risk level is low, with recommendations focusing on enhancing security headers and privacy mechanisms to maintain compliance and trust.

Sovos Compliance, LLC operates a comprehensive global tax compliance platform, offering scalable software solutions that automate VAT, sales and use tax, information reporting, and specialty compliance needs. The company targets enterprise clients worldwide, including half of the Fortune 500, positioning itself as a leader in the tax compliance SaaS market. Their platform integrates with numerous ERP, accounting, eCommerce, and consulting systems, reflecting a mature and extensible technical infrastructure. The website is built on WordPress with Elementor, leveraging modern JavaScript libraries and marketing tools such as Google Tag Manager and Crazy Egg for analytics and user engagement. Security posture is strong with HTTPS enforced, robust security headers, and a well-defined content security policy, though some improvements like OCSP stapling and enhanced CSP could be made. Privacy compliance is well addressed with a comprehensive privacy policy and terms of service, though a cookie consent mechanism is absent. Overall, Sovos presents a professional, trustworthy, and technically sound online presence aligned with its enterprise business model.

TCG GreenChem, Inc. is a US-based subsidiary of TCG Lifesciences Pvt. Ltd., specializing in contract research and manufacturing services for the pharmaceutical industry, focusing on drug discovery, development, and commercialization. The company offers a broad range of CMC development services including process research, analytical R&D, and cGMP API manufacturing, supported by US FDA approved facilities. Their leadership team comprises experienced pharmaceutical executives with extensive industry backgrounds. Technically, the website is built on WordPress with modern libraries and SEO optimizations, hosted behind Cloudflare for performance and security. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the business credibility is strong, but security posture requires urgent improvement.

Related:tcgls.com

i5invest corporate development is a corporate development and M&A advisory firm specializing in supporting innovative technology founders. The company leverages a vast network of over 150,000 executives and has completed more than 250 transactions globally. Their services include corporate development, capital provision, advisory board mentoring, and cross-border M&A processes. The firm operates internationally with offices in Austria, the United States, and additional locations in Berlin, Madrid, and Seattle. The website presents a professional and comprehensive portfolio of success stories and partner companies, reflecting a strong market position in the technology sector. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS and SEO optimization. However, a critical security gap is the absence of a valid SSL certificate and HTTPS, which significantly impacts the security posture. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, including physical addresses and a contact form. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

OTTO Market operates as a prominent German online marketplace platform enabling sellers to register and sell products on otto.de. The platform emphasizes quality, transparency, and partnership with sellers, offering a comprehensive suite of services including onboarding, marketing, product management, shipping, payment processing, and reporting. The website is professionally designed with excellent content quality and clear navigation, targeting German merchants seeking a reputable e-commerce channel. Technically, the site is built on Neos CMS and Flow Framework, integrating modern marketing and analytics tools such as Google Tag Manager and LinkedIn Insight Tag. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to risks and reducing trust. Security headers are partially implemented, but critical TLS configurations are missing. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the business credibility is high, supported by clear company information and partner testimonials, but the technical security gaps require urgent remediation.

Related:otto.de

Leitbetriebe Austria operates as a certification and excellence platform for leading Austrian companies, promoting exemplary businesses across various sectors including energy, transportation, manufacturing, and finance. The platform offers certification services, news dissemination, educational initiatives, and partnerships with industry and government entities. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to Austrian business stakeholders. Technically, the site is built on WordPress with modern plugins and optimizations, hosted on a reputable provider, and demonstrates good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforcement, multiple security headers, and no detected vulnerabilities, though some CSP relaxations and missing OCSP stapling suggest room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site presents a trustworthy and professional business front with active content updates and strong branding consistency.

C-Loans.com operates a specialized commercial loan portal connecting borrowers, brokers, and lenders across the United States. The platform offers a streamlined application process to 750 commercial lenders, enabling users to submit loan requests and receive competitive offers efficiently. The website also provides extensive training resources and tools for mortgage brokers and real estate professionals, positioning itself as a comprehensive service provider in the commercial finance sector. Technically, the site is built on WordPress with Elementor and leverages modern plugins and a Sucuri WAF for protection. However, the absence of a valid SSL certificate is a critical security gap that undermines user trust and data protection. Security headers are implemented, but the lack of HTTPS and cookie consent mechanisms indicates compliance and security posture weaknesses. Business credibility is supported by clear licensing information, contact details, and client testimonials, though privacy compliance could be improved. Overall, the site is functional and content-rich but requires urgent security enhancements to meet modern standards.

Related:blackburneandsons.com

The KAEFER FOUNDATION is a small non-profit charitable organization established in 2010, focusing on providing support in areas such as disease prevention, education, science, environmental protection, and disaster relief. The foundation maintains a professional online presence with clear mission statements and calls to action for involvement. Technically, the website is built on WordPress with a modern plugin ecosystem including multilingual support and cookie consent management, hosted on a reputable provider. Security posture is solid with HTTPS enforced and multiple security headers, though some improvements in SSL/TLS configuration and HSTS enforcement are recommended. Privacy compliance is well addressed with cookie consent and a privacy policy in place. Overall, the website reflects a trustworthy and credible organization with good digital maturity.

Related:kaefer.com

CANAL+ Austria operates as a subscription-based streaming service offering a wide range of TV channels, movies, series, and live sports events targeted at Austrian consumers. The website is professionally designed with consistent branding and clear navigation, supporting multiple platforms including smart TVs and mobile devices. The technical infrastructure leverages ASP.NET, Umbraco CMS, Vue.js, and integrates third-party services such as Algolia for search and Google Analytics for tracking. The site is hosted behind Cloudflare with a valid Extended Validation SSL certificate, ensuring encrypted communications. However, the absence of modern TLS protocols and incomplete security header configurations represent areas for improvement. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. Business credibility is strong with transparent domain registration and clear contact information. Overall, the site presents a solid digital presence with room to enhance security and privacy practices.

Related:a1.net

The Kverneland Group's website at kvgportal.com currently serves as a simple notification page informing partners that the partner portal has moved to a new URL. The content is minimal and primarily targeted at existing partners, providing multilingual links and instructions to update bookmarks. The business is positioned as a manufacturing entity with a partner network, but the website itself does not provide detailed business information or services beyond portal access guidance. Technically, the site is hosted on an Apache server with basic DNS configuration but lacks a valid SSL certificate and modern TLS support, resulting in an insecure HTTP-only connection. Security headers are partially implemented but insufficient to ensure robust security. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the site. Overall, the website's digital maturity is low, with poor SEO, accessibility, and performance characteristics. The security posture is weak due to missing HTTPS and lack of DNSSEC. The domain registration appears consistent and legitimate, but the absence of critical security controls and policies poses risks. Strategic improvements in SSL deployment, security headers, and privacy compliance are recommended to enhance trust and security.

Detekt, operated by EnliteAI GmbH, is a specialized technology company focused on AI-driven road asset management using mobile mapping data. The platform offers advanced AI algorithms to detect and classify road infrastructure elements such as signs, markings, defects, and surfaces. Positioned as a trusted partner to leading industry players like TomTom and Leica Geosystems, Detekt targets transportation authorities and infrastructure managers seeking efficient and scalable road inspection solutions. The business model centers on providing a SaaS platform with data hosting, visualization, and export capabilities, enabling clients to optimize maintenance and safety planning. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries and hosted via Cloudflare CDN, ensuring fast performance and mobile optimization. Analytics are handled via Matomo, respecting privacy compliance with cookie consent mechanisms in place. Security posture is solid with HTTPS, security headers, and secure cookies, though improvements like full HSTS enablement and OCSP stapling are recommended. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness. The site demonstrates a high level of professionalism, content quality, and compliance, making it a reliable digital presence for the company.

Related:leica-geosystems.comtrimble.com

4DESIGN is an established Australian industrial design studio with over 50 years of experience, specializing in product development, 3D CAD engineering, prototyping, and manufacturing services. The company targets businesses and startups requiring comprehensive industrial design and engineering solutions. Their market position is strong within the Australian design industry, supported by awards and a professional online presence. Technically, the website is built on WordPress, hosted on WP Engine with Cloudflare CDN, and uses modern web technologies including Google Analytics and Instagram integration. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap. The security posture is basic, lacking modern TLS protocols, HSTS, and other security headers. Privacy compliance is minimal, with a basic privacy policy but no cookie consent mechanism or GDPR indicators. Overall, the business credibility is solid, but security improvements are urgently needed to protect user data and enhance trust.

Related:4design.co

LKW WALTER is a well-established European transport organization specializing in full truck load logistics across Europe and neighboring regions such as Russia, Central Asia, the Middle East, and North Africa. The company operates under the WALTER GROUP umbrella and targets businesses requiring reliable and extensive transport services. The website reflects a professional and consistent brand presence with multilingual support for various countries, indicating a broad international market reach. Technically, the website employs modern JavaScript modules, integrates Google Tag Manager, OneTrust for cookie consent, and is hosted on Cloudflare, ensuring fast performance and good mobile optimization. The site uses multiple analytics and marketing tools, including Google Analytics, Hotjar, and Smartsupp chat, with a clear consent mechanism in place, supporting GDPR compliance. From a security perspective, the site enforces HTTPS with a valid GeoTrust certificate and implements several security headers such as Content-Security-Policy and X-Frame-Options. However, it lacks support for modern TLS protocols (TLS 1.2/1.3), OCSP stapling, and full HSTS enforcement, which are recommended to enhance transport security. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in SSL/TLS configuration and enhanced security policies would further strengthen the security posture and trustworthiness.

Law in Austria is a Vienna-based legal services provider specializing in multimedia, digital, and interdisciplinary legal advice. The firm positions itself as a client-oriented partner offering precise and timely legal solutions. The website reflects a professional and consistent brand image targeting clients seeking legal expertise in Austria. Technically, the site is built on the Webflow CMS platform, leveraging modern web fonts and JavaScript libraries such as jQuery and Finsweet Cookie Consent for privacy compliance. Hosting appears to be via Cloudflare CDN, enhancing content delivery performance. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of HTTPS enforcement, exposing visitors to potential risks. The site implements a cookie consent banner with opt-in capabilities, aligning with GDPR requirements, but lacks explicit contact information and terms of service pages, which could affect user trust and compliance completeness. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to meet industry standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Orchestrade is a specialized software provider offering a comprehensive cross-asset front-to-back trading and risk management platform primarily targeting investment banks, hedge funds, asset managers, and energy companies. The company positions itself as a market leader with a strong portfolio of industry awards and a broad client base. Technically, the website is built on WordPress with modern plugins and integrations, hosted on WP Engine with Cloudflare protection, and employs multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and HTTPS support, which is a critical vulnerability. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates professionalism and trustworthiness but requires urgent security improvements to protect user data and maintain credibility.

Related:atlassian.net

Murex is a leading provider of capital markets technology solutions, offering an integrated platform (MX.3) that supports trading, treasury, risk, and post-trade operations. The company serves a broad range of financial services clients globally, including banks, investment managers, and corporates. Their business model focuses on enterprise software and managed services, with a strong emphasis on regulatory compliance and risk management. The website reflects a mature digital presence with comprehensive content, strong branding, and extensive use of modern marketing and analytics technologies. However, a critical security gap exists due to the absence of HTTPS, which undermines the security posture despite well-implemented security headers. Privacy policies and cookie consent mechanisms are present and GDPR compliant. Overall, the site demonstrates high professionalism and trustworthiness but urgently requires SSL/TLS implementation to secure user data and communications.

Moody's Analytics is a well-established enterprise providing financial intelligence and risk management solutions primarily targeting financial institutions and business leaders. The company operates under the parent company Moody's Corporation and holds a strong market position in the finance sector. However, the website content is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block triggered by an ASN restriction, which prevents direct content analysis. The technical infrastructure includes Cloudflare for security and performance, but the SSL configuration lacks modern TLS protocol support and some security best practices such as HSTS and OCSP stapling are not enabled. Security headers are partially implemented, providing a basic security posture. The WHOIS data confirms the domain's legitimacy and consistency with the corporate identity. Overall, the website's security posture is basic but could be improved, and the lack of accessible content limits the ability to assess privacy compliance and user experience.

ITRS Group is a leading provider of AI-powered real-time monitoring and observability solutions tailored for demanding and regulated industries such as finance and investment banking. The company is recognized as a visionary in the digital experience monitoring space, serving top-tier investment banks and thousands of customers worldwide. Their platform focuses on preventing system outages, enhancing performance, and enabling continuous innovation through intelligent observability and digital experience monitoring. Technically, the website is built on Drupal 10 and leverages a modern technology stack including Google Tag Manager, Zendesk, Uptrends, and Cloudflare, hosted on AWS infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance metrics indicate moderate speed. Security headers are well implemented, but the SSL configuration is currently invalid, lacking proper TLS protocol support and OCSP stapling, which poses a significant security risk. From a security perspective, while the site employs several best practices such as Content Security Policy and X-Frame-Options, the absence of a valid SSL certificate and disabled TLS protocols significantly reduce the security posture. No critical vulnerabilities like exposed credentials or malware were detected, but improvements in SSL configuration and session management are recommended. Overall, the website presents a professional and trustworthy image with comprehensive privacy and cookie policies, clear contact information, and strong business credibility. The domain registration details align with the company's UK-based operations, supporting its legitimacy. Strategic recommendations include immediate SSL renewal and configuration, enhanced security monitoring, and continued compliance with privacy regulations.

Related:mimecast.comzendesk.com

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Malmö Designer Village is a premium retail outlet project positioned as the largest outlet in Scandinavia and the first premium outlet village serving the Greater Copenhagen region. The business model focuses on offering discounted fashion and lifestyle brands to residents and tourists in the Malmö and Copenhagen area. The website is built on the Squarespace platform, featuring professional design and clear navigation but lacks a valid SSL certificate, resulting in no HTTPS support. This is a critical security shortfall. The site includes a contact form for inquiries but does not provide explicit email addresses or phone numbers. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanism. Social media presence is limited to LinkedIn. Overall, the site demonstrates moderate digital maturity but requires significant security improvements to protect user data and build trust.