Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
94,001–94,050 of 99,069
CHANELchanel.com
Retail
55Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
CHANEL is a globally recognized luxury brand specializing in fashion, accessories, beauty products, and fine jewelry. The website serves a worldwide audience with extensive localization and multilingual support, reflecting its enterprise-scale operations and market leadership in the retail luxury sector. The site content is professionally presented with good SEO practices and consistent branding. Technically, the website leverages modern JavaScript, Google Tag Manager for analytics, and OneTrust for cookie consent management, hosted on Akamai's CDN infrastructure. However, the critical absence of a valid SSL certificate and disabled TLS protocols severely undermine the security posture, exposing users to risks and potentially impacting trust. While security headers are implemented, the lack of HTTPS is a major vulnerability. Privacy compliance is partially addressed through cookie consent mechanisms, but no explicit privacy policy or terms of service were detected in the provided content. Overall, the website demonstrates strong business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to meet security best practices and regulatory compliance.
Germany
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Zyngazynga.com
Media · United States
58Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Zynga is a leading global interactive entertainment company specializing in mobile and online games with a broad portfolio of popular franchises. As a wholly-owned subsidiary of Take-Two Interactive Software, Zynga has a strong market position with billions of downloads worldwide. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting mobile and online gamers globally. Technically, the site is built on WordPress with SEO optimizations and uses Amazon CloudFront for hosting and CDN services. However, the absence of a valid SSL certificate and disabled modern TLS protocols represent significant security gaps. Security headers are partially implemented but require tightening to mitigate risks such as cross-site scripting. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Zynga's website demonstrates strong business credibility and digital maturity but needs urgent improvements in SSL/TLS security to protect user data and maintain trust.
Doppler LLCfromdoppler.com
Technology · Argentina
54Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Doppler LLC operates a comprehensive marketing automation platform primarily targeting Spanish-speaking businesses in Latin America and Spain. Their website offers a wide range of services including email marketing, push notifications, SMS marketing, WhatsApp marketing, chatbots, landing pages, and data intelligence. The company positions itself as a leading SaaS provider in the marketing technology sector with a strong brand presence and extensive client testimonials. Technically, the website is built on WordPress and leverages modern marketing and analytics tools such as Google Tag Manager, OneTrust for cookie consent, and Zendesk for customer support. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue that undermines user trust and data protection. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance is evident. Overall, the site is professional, content-rich, and user-friendly but requires urgent security improvements to meet modern standards.
MEGA Internationalmega.com
Technology
58Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
MEGA International is an established enterprise SaaS solutions provider specializing in enterprise architecture, business process management, governance, risk and compliance, and data governance. The company holds a strong market position as a leader in enterprise architecture tools, recognized by Gartner for 16 consecutive years. Their HOPEX platform offers collaborative, AI-driven capabilities to accelerate digital transformation for large enterprises. Technically, the website is built on Drupal 10 with modern front-end frameworks and integrates multiple marketing and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate, undermining HTTPS security. While security headers are well configured, the lack of TLS support poses a significant risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.
- Motorola Mobility LLC
motorola.com
Technology · Finland
59Medium
NIS2 0 · GDPR —
NIS2 0 · GDPR —
Motorola.com is the official Finnish website for Motorola Mobility LLC, a subsidiary of Lenovo, offering Android smartphones and accessories. The site targets Finnish consumers with localized content and product families such as moto razr, moto edge, moto g, and moto e. The technical infrastructure leverages Akamai CDN, OpenResty web server, and modern JavaScript frameworks, with integrations for Google Tag Manager and Adobe DTM for marketing and analytics. However, the site currently lacks a valid SSL certificate, which is a critical security vulnerability. Security headers are well implemented, but absence of cookie consent mechanisms may impact GDPR compliance. The website demonstrates good business credibility and professional design but requires improvements in security and privacy compliance to enhance trust and user safety.
- Gelateria Romana - La Romana Srl
romanagroup.com
Retail · Italy
50Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Gelateria Romana - La Romana Srl is a well-established Italian gelateria business founded in 1947, specializing in traditional gelato and pastry products with a franchising business model. The company targets entrepreneurs interested in franchising opportunities and consumers seeking quality artisanal gelato. The website reflects a consistent brand with good content quality and clear business information. Technically, the site uses a proprietary CMS (TITANKA!) with older JavaScript libraries and Bootstrap 3.2.0, indicating moderate digital maturity. However, the lack of HTTPS and modern TLS protocols is a critical security gap. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.
F-Secure Corporationf-secure.com
Technology · Finland
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
F-Secure Corporation is a well-established Finnish cybersecurity company with over 35 years of experience and a global user base exceeding 30 million. The company offers a comprehensive suite of cybersecurity products including antivirus, VPN, identity protection, and scam protection, targeting both consumers and service providers. Their business model is subscription-based, emphasizing digital security and privacy. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and is hosted on Netlify, with good mobile optimization and SEO practices. However, the current SSL/TLS configuration is invalid or missing, which is a critical security concern that needs immediate remediation. Security headers are properly set, but the lack of valid HTTPS reduces the overall security posture. The site complies with GDPR and provides comprehensive privacy and cookie policies. Overall, the domain registration and WHOIS data align well with the company's identity, supporting high legitimacy and trust. Strategic recommendations include renewing SSL certificates, enabling modern TLS protocols, and enhancing security best practices to improve trust and compliance.
Related:vodafone.comvirginmedia.com
TOPPAN Digital Language GmbHmeinrad.cc
Technology · Austria
56Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
TOPPAN Digital Language GmbH is a medium-sized, ISO-certified translation and localization service provider based in Austria, serving leading companies primarily in the DACH region. The company offers a comprehensive suite of services including documentation translation, marketing translations, software and website localization, and outsourcing solutions, supported by consulting and workflow optimization. The website reflects a professional and well-branded digital presence, leveraging WordPress with Elementor and integrating multiple marketing and analytics tools such as HubSpot and Google Analytics. Despite strong content quality and privacy compliance, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. The domain registration and DNS configurations are consistent and trustworthy, with no signs of privacy protection or suspicious patterns. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.
- MMerck
merckgroup.com
Healthcare · Germany
69Medium
NIS2 0 · GDPR —
NIS2 0 · GDPR —
Merck KGaA, Darmstadt, Germany operates a comprehensive corporate website showcasing its leadership in science and technology across Healthcare, Life Science, and Electronics sectors. The website targets a global audience including customers, partners, investors, and job seekers, providing detailed information about company strategy, products, research, and sustainability efforts. The digital infrastructure is built on Adobe Experience Manager CMS, leveraging Akamai CDN and modern JavaScript libraries, ensuring a professional and accessible user experience. However, performance metrics are not available, indicating potential monitoring gaps. Security posture is weakened by an invalid or missing SSL certificate and lack of TLS protocol support, which are critical issues that must be addressed to protect user data and maintain trust. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR. The website maintains a high level of business credibility with consistent branding, structured data, and active social media presence. Strategic recommendations include immediate SSL certificate remediation, enabling modern TLS protocols, and enhancing security headers and incident response disclosures to improve overall security and compliance.
Avnet Embeddedmsc-technologies.eu
Technology
64Medium
NIS2 5 · GDPR —
NIS2 5 · GDPR —
Avnet Embedded is a division of Avnet, Inc., specializing in embedded computing, display, and software solutions for OEMs and businesses aiming to accelerate product time-to-market. The company positions itself as a world leader in embedded technology, offering a broad range of services including design, manufacturing, assembly, and software consultancy. Their business model leverages a strong partner ecosystem and in-house capabilities to deliver comprehensive embedded solutions. The website content is rich, professionally designed, and targets a global audience in the technology and manufacturing sectors. Technically, the website is built on WordPress with WooCommerce and several modern plugins such as Smart Slider 3 and Ultimate Member. The site uses Google Analytics and Google Tag Manager for tracking and marketing purposes. While the design and content quality are excellent, performance is slow, and there is a notable lack of valid SSL/TLS configuration, which impacts security and user trust. From a security perspective, the site implements several important HTTP security headers and cookie flags, but the absence of a valid SSL certificate and disabled TLS protocols represent critical vulnerabilities. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place, indicating good GDPR adherence. However, no explicit incident response or vulnerability disclosure policies were found. Overall, the site demonstrates a mature business presence with strong content and privacy practices but suffers from critical security configuration issues that should be addressed promptly to improve trust and protect users.
—
56Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Jebsen & Co. Ltd.jebsen.com
Transportation · Hong Kong
52Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Jebsen & Co. Ltd. is a well-established company founded in 1895, specializing in marketing, distribution, and investment of premium brands primarily in Greater China. The company operates across diversified sectors including Motors, Beverage, Consumer, and Capital investments, positioning itself as a bridge between Eastern and Western markets. The website reflects a mature digital presence with comprehensive business information, multilingual support, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and user experience features, though performance metrics are unavailable. Security posture is currently weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is partially met with a privacy policy and incident response contact, but lacks cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to align with best practices.
Other
50Medium
NIS2 5 · GDPR —
NIS2 5 · GDPR —
The website sixsentix.com is currently inaccessible, serving only a 404 Not Found error page with minimal HTML content. There is no visible business information, metadata, or content to analyze. The domain is registered but lacks DNS records and SSL configuration, indicating either abandonment or misconfiguration. The absence of HTTPS and security headers exposes the site to significant security risks. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are available. Overall, the website's digital maturity is very low, with poor technical infrastructure and no evidence of active business operations or security posture.
net4com GmbHnet4com.at
Technology · Austria
59Medium
NIS2 0 · GDPR —
NIS2 0 · GDPR —
net4com GmbH is a specialized company focusing on trading IT and telecommunications hardware, asset recovery, recycling, consulting, and engineering services primarily targeting the Central and Eastern European markets. With over 25 years of industry experience and local presence in Austria, Bulgaria, and the UK, the company leverages a trusted network of partners and OEM vendors to provide integrated and personalized solutions. Their business model includes managed service contracts for asset management and compliance with environmental regulations, supporting clients' corporate responsibility programs. Technically, the website is built on WordPress using common plugins and themes, served by an Apache server on CentOS with PHP 7.4.29. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security and trust concern. The site shows basic mobile optimization and accessibility but has slow performance and limited SEO optimization. From a security perspective, the absence of HTTPS, lack of security headers, and missing advanced security policies reduce the overall security posture. No incident response or vulnerability disclosure policies are present. Privacy and cookie policies exist but lack active consent mechanisms. Contact information is comprehensive and professionally presented, enhancing business credibility. Overall, while the business appears legitimate and professionally presented, the website's security shortcomings, especially the lack of HTTPS, pose risks to user trust and data protection. Strategic improvements in security infrastructure and privacy compliance are recommended to enhance the company's digital maturity and trustworthiness.
- PPloier + Hörmann
p-h.at
Energy · Austria
59Medium
NIS2 0 · GDPR —
NIS2 0 · GDPR —
Ploier + Hörmann is a medium-sized Austrian construction company specializing in energy and telecommunications infrastructure, with over 50 years of experience. The company operates as part of the larger Unternehmensgruppe LEYRER + GRAF, which strengthens its market position and resource base. Their website is professionally designed using TYPO3 CMS, providing clear navigation and relevant content targeted at clients in the construction and infrastructure sectors. However, the absence of a valid SSL certificate and HTTPS severely impacts their security posture and user trust. While cookie consent and privacy policies are implemented, there is a lack of explicit security policies or incident response information. The company maintains active social media channels and links to sister companies, indicating a well-connected business ecosystem.
Paradigma Digitalparadigmadigital.com
Technology · Spain
64Medium
NIS2 5 · GDPR —
NIS2 5 · GDPR —
Paradigma Digital is a Spanish technology consulting firm specializing in digital transformation through strategy, technology, and talent experience. Established in 2007, it positions itself as a boutique with a strong focus on cloud native, strategic design, data intelligence, and digital DNA services. The company maintains partnerships with major technology providers such as Google Cloud, Red Hat, AWS, and Microsoft, enhancing its market credibility. Technically, the website uses Apache hosting on Google Cloud infrastructure, modern JavaScript, and SVG graphics, but lacks a valid SSL certificate, which is a critical security gap. Privacy and cookie policies are well implemented with consent mechanisms, reflecting GDPR compliance. The site features extensive social media integration and marketing tools like Google Tag Manager and HubSpot forms, indicating moderate user tracking. Overall, the website is professionally designed with excellent content quality and user experience but requires urgent security improvements to enable HTTPS and modern TLS protocols.
Kplerjbcenergy.com
Energy · Belgium
50Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Kpler is a medium-sized, Belgium-based data and analytics company specializing in commodity and energy markets. It provides proprietary data, market analysis, forecasts, and maritime tracking services to a professional B2B audience including traders, analysts, and logistics managers. The company has strengthened its market position through acquisitions such as JBC Energy and ClipperData, consolidating its leadership in commodity data analytics. Technically, the website is built on Webflow CMS, hosted via Cloudflare, and employs modern JavaScript libraries and marketing tools. However, the site suffers from a critical security issue due to an invalid SSL certificate and lack of TLS protocol support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.
- Primagaz
primagaz.fr
Energy · France
50Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Primagaz is a well-established French energy supplier specializing in propane, butane, GPL, and biopropane gas products and services. Founded in 1938, the company targets both residential and professional customers, including those in remote areas not connected to natural gas networks. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. However, the technical infrastructure shows weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Marketing and analytics tools such as Google Tag Manager, Visual Website Optimizer, and Cludo search are integrated, indicating a focus on user experience and conversion optimization. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and comply with modern web standards.
Media
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Presstv.com appears to be a media-related website, likely focused on news content. However, the current website content is extremely minimal, consisting only of a single image reference with no textual content, metadata, or interactive elements. The technical infrastructure is based on Amazon S3 and CloudFront CDN, but the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the website's security posture is weak, with no advanced security headers or mechanisms implemented. The domain registration is consistent and legitimate, but the lack of content and security features significantly reduces trust and usability.
Other · Australia
53Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website rosch.com.au presents minimal accessible content, primarily consisting of embedded tracking and advertising scripts from external domains. There is no visible business information, contact details, or user-facing content, which severely limits the ability to assess the company's operations or market position. The domain is registered but lacks DNS A and MX records, and no valid SSL certificate is configured, resulting in no HTTPS support. This technical immaturity and lack of content suggest the website is either inactive, misconfigured, or potentially used for tracking or advertising purposes rather than legitimate business engagement. Security headers are partially implemented but insufficient without HTTPS, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the site exhibits a low trustworthiness profile with significant security and compliance gaps.
DCCS GmbHdccs.at
Technology · Austria
55Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
DCCS GmbH is a large Austrian IT company specializing in business IT solutions, digital transformation, and AI applications primarily serving industrial and energy sectors. The company operates multiple offices across Austria, Germany, and Bosnia and Herzegovina, employing over 330 professionals. Their website reflects a mature digital presence with comprehensive service offerings and strong branding. Technically, the site uses modern frameworks such as Liferay and React, with integrated analytics and captcha services. However, a critical security gap exists due to the lack of a valid SSL certificate and proper HTTPS configuration, which undermines user trust and data security. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent remediation of its SSL/TLS configuration to meet security best practices.
Montanwerke Brixlegg AGmontanwerke-brixlegg.com
Manufacturing · Austria
51Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Montanwerke Brixlegg AG is a mature manufacturing company specializing in copper recycling and upcycling solutions, with a strong emphasis on sustainability. The company operates primarily in Austria and targets industrial customers requiring high-quality copper products such as cathodes and round bolts. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with common plugins like Yoast SEO and Borlabs Cookie, but suffers from a lack of a valid SSL certificate, resulting in no HTTPS support and weak security posture. Security headers are partially implemented, but critical TLS protocols and cipher suites are missing, exposing the site to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, the site scores moderately due to security shortcomings and technical performance issues.
TAL Aviation Grouptalaviation.com
Transportation
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
TAL Aviation Group is a well-established airline representation and travel services company with a global presence and a history dating back to 1987. The company offers a broad range of services including passenger and cargo GSA, airline distribution, destination marketing, tourism services, and digital marketing solutions. Their website reflects a professional and consistent brand image targeting airlines, tourism boards, and travel technology companies worldwide. Technically, the website uses a custom CMS with legacy jQuery libraries and integrates common marketing and analytics tools such as Google Analytics and Outbrain. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are implemented but cannot compensate for the lack of encryption. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, indicating awareness of GDPR requirements. Overall, the website is functional and credible but requires urgent security improvements to meet modern standards.
- USU GmbH
usu.de
Technology · Germany
54Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
USU GmbH is a well-established enterprise technology company headquartered in Germany, specializing in IT service management, software asset management, knowledge management, cloud management, and digital consulting solutions. The company targets large enterprises and organizations seeking to optimize their IT landscapes and customer service experiences through AI-powered tools and services. USU maintains a strong market position supported by a comprehensive product portfolio, global customer base, and industry recognitions. Technically, the website is built on Drupal 10 with a modern tech stack including jQuery and various marketing and analytics integrations. The site is well-optimized for mobile and SEO, providing excellent user experience and navigation. However, a critical security gap exists due to the absence of a valid SSL certificate and lack of TLS support, which significantly impacts the security posture. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting the company's commitment to data protection. Overall, USU demonstrates high business credibility and professionalism but must urgently address its SSL/TLS configuration to ensure secure communications and maintain trust.
- ATMOSA Petrochemie GmbH
atmosa.at
Energy · Austria
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
ATMOSA Petrochemie GmbH is a medium-sized Austrian company specializing in the production and supply of Phthalic Anhydride, a key petrochemical product. Established in 1995, it has positioned itself as a major European producer with a focus on reliability and long-term supply to chemical producers globally. The website reflects a professional business presence with clear company information, product details, and contact options targeting industrial clients and partners. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and analytics tools, hosted on infrastructure linked to hostprofis.com. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to risks and undermining trust. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.
- Brick & Patel LLP
brickpatel.com
Real Estate
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Brick & Patel LLP is a small legal services firm specializing in trust and estate planning and administration, serving clients primarily in several US states including New York and Florida. The website provides basic information about the firm's services and geographic focus but lacks detailed contact information and modern web features. Technically, the site is built on an Apache server using older JavaScript libraries and Cloudfront CDN for some assets. However, the site lacks a valid SSL certificate, resulting in no HTTPS support despite security headers indicating HSTS, which undermines user trust and security. Privacy compliance is minimal with no cookie consent mechanism and only a basic privacy policy present. Business credibility is supported by a mature domain and consistent WHOIS data, but the overall digital maturity is low. Security posture is weak due to missing SSL and outdated libraries, posing risks to visitors and the firm's reputation. Strategic improvements should focus on securing the site with valid SSL, updating technology stack, and enhancing privacy and security policies to meet modern standards.
Australia
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Pittel+Brausewetter Holding GmbHpittel.at
Other · Austria
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Pittel+Brausewetter Holding GmbH is a well-established Austrian family-owned construction company with over 150 years of experience. They specialize in a broad range of construction services including road, civil, industrial, structural, bridge, and sports facility construction. The company maintains a strong market position with multiple reference projects and a consistent brand presence. Technically, the website is built on WordPress using common plugins and themes, with moderate performance and good mobile optimization. However, a critical security weakness is the lack of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Contact information and social media presence are clearly provided, enhancing business credibility.
—
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 13 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Allea Groupalleagroup.com
Real Estate · Cyprus
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Allea Group is a medium-sized real estate investment and development holding company based in Cyprus, specializing in exclusive European residential and commercial property projects. The website presents a professional and well-structured digital presence targeting investors and clients interested in high-end real estate opportunities. The technical infrastructure is built on WordPress with popular plugins and is hosted behind Cloudflare CDN, but critically lacks a valid SSL certificate, resulting in no HTTPS availability which severely impacts security posture. Privacy and cookie policies are comprehensive and GDPR compliant, indicating good privacy awareness. However, the absence of terms of service, security policy, and vulnerability disclosure reduces transparency. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.
Energy · Austria
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
CANBERRA PACKARD Central Europe GmbH is a well-established company specializing in the sales, installation, and servicing of nuclear and environmental radiation detection and measurement equipment, as well as medical radiation diagnostic and therapy equipment. Founded in 1987 in Austria, the company has grown to become the largest supplier in Central and Eastern Europe, serving a diverse clientele including government organizations, nuclear power plants, research centers, and international bodies. The website reflects a professional corporate presence with relevant content and clear contact information, targeting industry professionals and institutional customers. Technically, the website is built on WordPress 6.8.1 running PHP 8.2.28 and hosted on DigitalOcean infrastructure. While the site demonstrates good mobile optimization and accessibility, performance metrics are lacking, and SEO optimization is basic. The absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks and undermining trust. Security headers are minimal, and no advanced security frameworks or incident response policies are evident. From a security perspective, the site’s posture is weak due to the lack of HTTPS, no cookie or privacy policies, and no vulnerability disclosure mechanisms. The SPF record is valid, and DNS configurations are consistent with the business location, but the SSL/TLS configuration is non-existent, which is a major vulnerability. No WAF or blocking mechanisms are detected, indicating open accessibility but also potential exposure. Overall, the site is functional and professional in content but requires urgent improvements in security and privacy compliance to meet modern standards. Strategic recommendations include implementing HTTPS with a valid certificate, publishing privacy and cookie policies, and enhancing security headers and incident response readiness to improve trust and compliance.
Retail · Austria
56Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Tenne Export-Import Handelsgesellschaft m.b.H. is a well-established Austrian retail company specializing in bathroom products and complete bathroom systems. With over 40 years of industry experience, the company operates multiple showrooms across Austria and offers an online shop, targeting both end consumers and business clients. Their product range includes bathroom furniture, fittings, tiles, showers, and accessories, supported by services such as online bathroom planning and mobile consultation. The company holds reputable certifications and awards, reinforcing its strong market position as a leading bathroom retailer in Austria. Technically, the website is built on WordPress with a variety of plugins including Yoast SEO, Borlabs Cookie for consent management, and Contact Form 7 for user interactions. The site uses Apache hosting likely provided by Telekom Austria. While the site is rich in content, well-structured, and optimized for SEO and mobile devices, it suffers from a critical security shortfall: the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Security-wise, the site lacks modern TLS protocols, HSTS headers, and email security measures such as DMARC and DNSSEC. However, it employs reCAPTCHA on forms and avoids known SSL vulnerabilities. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms in place. Contact information is abundant and clearly presented, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy from a business perspective but requires urgent improvements in SSL/TLS configuration and security headers to protect user data and improve trustworthiness. Addressing these issues will elevate the site's security score and user confidence.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
54Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
55Medium
NIS2 0 · GDPR —
NIS2 0 · GDPR —
Security assessment incomplete. Successfully analyzed: securityHeaders, nis2, emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: gdpr. 26 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
- GGHO Sydney: Brand Experience Agency
ghosydney.com
—
51Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 23 security findings identified across all modules.
- JJung von Matt
jvm.de
—
50Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 26 security findings identified across all modules.
Triton - Building Better Businessestriton-partners.com
—
55Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 22 security findings identified across all modules.
—
58Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 26 security findings identified across all modules.
- CCruelty-Free Skincare Beauty Products | The Body Shop
thebodyshop.com
—
51Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 25 security findings identified across all modules.
—
63Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 23 security findings identified across all modules.
HAINZL Industriesysteme GmbHhainzl.at
Manufacturing · Austria
52Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
HAINZL Industriesysteme GmbH is a well-established Austrian industrial technology company specializing in system technology, testing technology, hydrogen technologies, process automation, embedded systems, and electrical engineering. With a history dating back to 1965, it holds a leading position in the European market, supported by multiple subsidiaries across Europe. The company targets industrial clients in machinery, vehicle manufacturing, metal industry, and construction sectors, offering comprehensive technological solutions and services. The website reflects a mature digital presence with professional design, multilingual support, and strong SEO practices. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and disabled TLS protocols, which severely impact the security posture. While security headers are properly configured, the lack of HTTPS undermines trust and data protection. Privacy policies are present and GDPR compliant, but no explicit cookie consent mechanism is implemented. Overall, the site is professional and credible but requires urgent security improvements to align with best practices and protect user data.
celix Solutions GmbHcelix.at
Technology · Austria
50Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
celix Solutions GmbH is an Austrian technology company specializing in consulting and implementation services for Atlassian products. As an Atlassian Platinum Solution Partner and part of the Communardo Group, celix offers a comprehensive portfolio including consulting, deployment, migration, integration, custom development, training, support, and licensing. The company targets teams and enterprises seeking agile and efficient work processes, positioning itself as a trusted partner in the Atlassian ecosystem with a strong client base and partner network. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and integrates marketing and analytics tools like Google Analytics and Mailchimp, with privacy compliance mechanisms in place. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS enforcement, which is a critical vulnerability. No modern TLS protocols are enabled, and HSTS is not properly configured, exposing users to potential risks. Despite these issues, other security headers and best practices are partially implemented. Overall, celix Solutions GmbH presents a professional and trustworthy business with strong market positioning and comprehensive service offerings. Immediate attention to SSL/TLS configuration is recommended to enhance security and trustworthiness.
Retail
57Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website freywille.com is currently inaccessible due to a Cloudflare security challenge page that blocks content unless JavaScript and cookies are enabled. This prevents direct analysis of the website's content, metadata, and business information. The domain itself is mature, registered since 2005, with strong domain protection and consistent WHOIS data indicating a legitimate business presence. However, the lack of a valid SSL certificate and absence of HTTPS severely impacts the security posture. Security headers are present but insufficient without proper TLS encryption. No privacy, cookie, or terms of service policies are detectable in the accessible content, and no contact information or forms are visible. Overall, the website's technical infrastructure relies on Cloudflare for DNS and security, but the current configuration results in blocked content and poor user experience.
- LLandis+Gyr
landisgyr.com
Energy · Switzerland
60Medium
NIS2 0 · GDPR —
NIS2 0 · GDPR —
Landis+Gyr is a global leader in smart metering and grid edge intelligence technologies, providing advanced energy management solutions to utilities and energy providers. The company offers a broad portfolio including smart meters, analytics, consumer engagement, and managed services, positioning itself as a key enabler of the modern digital energy grid. Their website reflects a mature enterprise with comprehensive content, strong branding, and active communication channels including news, blogs, and social media. Technically, the site is built on WordPress with a robust set of plugins and integrations for analytics, marketing, and multilingual support. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine user trust and data protection. Security headers are partially implemented, and cookie consent mechanisms comply with GDPR standards. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of its SSL/TLS configuration to meet modern security expectations.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
50Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Website security analysis completed with a risk score of 40/100.