Medium-risk security reports

Unior d.d. is a well-established Slovenian manufacturing company specializing in metal processing, particularly forging and hand tools. Founded in 1919, it holds a strong market position as a global leader in its industry segments, serving automotive and other industrial clients worldwide. The website reflects a professional and consistent brand image, with clear navigation and multilingual support, targeting global buyers and industry partners. Technically, the site uses modern tracking tools such as Google Tag Manager and Google Analytics, with a custom CMS and responsive design ensuring good user experience across devices. Security posture is moderate, with HTTPS implied and cookie consent mechanisms implemented, but lacking explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy likely embedded in legal notices but no explicit GDPR statements or data protection officer contact. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and privacy compliance are recommended.

The website serves as a sign-in and registration portal for Volue Identity, a service likely related to user authentication and access management within the Volue ecosystem. The site supports authentication via Microsoft, Google, and an email-based B2C scheme, indicating integration with OAuth2/OpenID Connect protocols. The content is minimal and focused solely on login functionality without broader business or policy information. Technically, the site uses Bootstrap 4 and jQuery for UI and interaction, with responsive design elements for mobile users. Security practices include the use of modern authentication flows, but no explicit security headers or privacy policies are present in the HTML content. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional but lacks comprehensive compliance and security disclosures.

METRO AG operates as a leading international wholesaler specializing in food service and wholesale for professional customers such as HoReCa and Traders. The company maintains a strong market position with over 30 countries of operation, 623 wholesale stores, 94 delivery depots, and an online marketplace. Their business model focuses on multichannel marketing and tailored services, supported by a portfolio of own brands and subsidiaries. Technically, the website is built on a modern stack including Sitecore CMS, Bootstrap, and integrates analytics tools like Google Analytics and Siteimprove, with good mobile optimization and accessibility. Security posture is solid with cookie consent mechanisms, CSRF protection, and no visible vulnerabilities, though security headers and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for an enterprise-level retail business.

The domain hausmann-johnson.com is currently parked and does not host any active business content. The landing page is a standard GoDaddy parking page offering the domain for sale, with minimal branding and no company-specific information. The page includes a cookie consent mechanism powered by TrustArc and a Trustpilot widget, but lacks any substantive business or contact details. Technically, the site uses modern JavaScript bundles and external services for consent and advertising but does not demonstrate a full-fledged website infrastructure. Security posture is minimal with no HTTPS information available and no security headers detected. Overall, the site presents a low trust profile and is not suitable for business operations in its current state.

Enpulsion GmbH is a technology company specializing in advanced electric propulsion systems for small satellites such as CubeSats and SmallSats. The company is positioned as an innovative leader in the satellite propulsion market, offering modular and scalable thrusters designed to enhance satellite mobility and maneuverability. Their product portfolio includes high-performance propulsion units and a smart mobility interface, supported by proven flight heritage and industrial scale manufacturing capabilities. The website reflects a professional and modern digital presence, leveraging WordPress with advanced forms and interactive elements to engage their target audience of satellite manufacturers and space mission planners. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates high business credibility and technical maturity, supporting Enpulsion's market position as a trusted provider in the space technology sector.

HBLA Pitzelstätten is a specialized vocational higher education institution in Austria focusing on agriculture and nutrition. It holds a unique position as the only school of its kind in Carinthia, offering comprehensive education aligned with modern economic, technical, and environmental demands. The website reflects a strong commitment to sustainability and community engagement through rich content including news, events, and projects. The institution maintains active social media channels and provides clear contact information, enhancing accessibility and trust. Technically, the website is built on a modern stack with HTML5, CSS3, and JavaScript, likely managed via Magnolia CMS. It demonstrates good mobile optimization, accessibility, and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. The site is not blocked by any WAF and is fully accessible, indicating a stable hosting environment. Security posture is moderate with no critical vulnerabilities detected, but the absence of explicit security policies and incident response contacts suggests room for improvement. Privacy compliance is basic with a privacy policy present but lacking cookie consent features. Business credibility is high, supported by consistent branding, certifications like the Austrian Environmental Label, and transparent contact details. Overall, the website is professional, trustworthy, and well-suited for its educational mission, with strategic recommendations focusing on enhancing security and privacy compliance to further strengthen user trust and regulatory adherence.

Vinzenz Harrer GmbH is a well-established Austrian company specializing in wood construction solutions, operating for approximately 30 years. The company offers a comprehensive online shop with a wide range of products including insulation materials, system connectors, adhesives, and tools tailored for wood construction professionals and qualified craftsmen. Their market position is strong within Austria as a leading specialist, supported by a network of partner craftsmen and extensive customer service and training offerings. The website is professionally designed with clear navigation and good content quality, targeting primarily German-speaking users in Austria. Technically, the site uses ASP.NET WebForms with jQuery and modern tracking tools such as Google Analytics and Facebook Pixel, though some outdated libraries present minor security concerns. Security posture is good with HTTPS enforced and cookie consent implemented, but could be improved with updated libraries and additional security headers. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

Xeikon is a well-established manufacturer and provider of digital printing technology, specializing in high-quality dry toner and UV inkjet solutions. With over 30 years of experience and a strong market position as a pioneer in digital printing systems, Xeikon serves a B2B audience primarily in the manufacturing and packaging sectors. The company is a division of Flint Group, which adds corporate credibility and resources. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern frameworks and libraries such as Bootstrap, Livewire, and Font Awesome, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers like Content-Security-Policy could be enhanced. No critical vulnerabilities or WAF blocks were detected, indicating a solid security posture. Overall, Xeikon's online presence is professional, trustworthy, and compliant with privacy regulations, supporting its business credibility and customer engagement.