Medium-risk security reports

FHV - Vorarlberg University of Applied Sciences is a medium-sized educational institution based in Austria, offering a wide range of Bachelor and Master programs across technical, economic, design, and social-health disciplines. The institution emphasizes applied research and international cooperation, positioning itself as a leading university of applied sciences in the Bodenseeraum region. The website is professionally designed, content-rich, and well-structured, targeting prospective students, researchers, and academic partners. Technically, the site uses modern CMS Pimcore and Vue.js frontend framework, with Google Tag Manager for analytics and Cookiebot for consent management. However, a critical security gap exists as the site lacks a valid SSL certificate and HTTPS support, despite having security headers and HSTS configured. This exposes users to potential risks and undermines trust. Contact information is clearly provided, and privacy policies comply with GDPR standards. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to improve security posture and user trust.

Frequentis is a well-established company specializing in safety-critical communication and information solutions with over 75 years of market presence. The company serves key sectors including civil aviation, defence, public safety, maritime, and public transportation, positioning itself as a leader with a strong focus on innovation and user-centric design. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to government agencies and large organizations. Technically, the site is built on Drupal 10 with modern libraries and integrates multiple marketing and analytics tools. However, the absence of a valid SSL/TLS certificate and HTTPS support is a significant security gap, impacting the overall security posture. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high business credibility but requires urgent security improvements to align with best practices.

The International Commission on Missing Persons (ICMP) is a globally recognized non-profit organization dedicated to addressing the issue of missing persons resulting from conflicts, disasters, and other causes. The organization collaborates with governments, civil society, and international bodies to provide expertise, data systems, and forensic services. Their website reflects a mature digital presence with comprehensive content, multilingual support, and clear navigation tailored to a diverse audience including families of missing persons and governmental agencies. Technically, the site is built on WordPress with modern plugins and Cloudflare CDN protection, but it suffers from a critical lack of a valid SSL certificate and proper TLS configuration, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent improvements in SSL/TLS security to protect user data and maintain credibility.

The website sappi.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires JavaScript and cookies to proceed. This prevents access to any meaningful content, metadata, or business information. The visible page is a security checkpoint rather than the actual website content. The DNS records indicate a legitimate domain with multiple mail servers and name servers under the sappi.com domain, suggesting a corporate entity. However, the SSL/TLS configuration is poor with no valid certificate and no HTTPS protocols enabled, which is a critical security issue. Security headers are present but cannot compensate for the lack of proper SSL. No privacy, cookie, or terms of service policies are accessible, and no contact information or forms are visible. Overall, the site’s security posture is weak due to missing SSL and blocked content, and the technical and content quality cannot be properly assessed due to the WAF challenge.

Ottobock is a well-established enterprise in the healthcare sector specializing in orthotics, prosthetics, and related mobility solutions. The company offers a broad range of products and services including prosthetics, orthotics, exoskeletons, adaptive sports programs, and veteran support. Their market position is strong, supported by a comprehensive digital presence and a global footprint. Technically, the website leverages modern frameworks such as Next.js and React, integrated with Contentful CMS and various analytics and marketing tools, indicating a mature digital infrastructure. However, a critical security issue is the absence of a valid SSL/TLS certificate, which undermines the security posture and user trust. Privacy compliance is robust with clear policies and consent management mechanisms in place. Overall, the website is professional, content-rich, and user-friendly but requires urgent attention to its SSL configuration to ensure secure communications.

cargo-partner is a midsized logistics and transportation company specializing in integrated supply chain solutions including air, sea, rail, and road freight, as well as warehousing and SCM services. The company targets businesses requiring comprehensive logistics support and operates with a pan-European and global presence. The website reflects a professional business with consistent branding and a clear service offering. Technically, the site is built on TYPO3 CMS with PHP backend and uses modern web technologies including Friendly Captcha and Cookiebot for privacy compliance. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks. Security headers are partially implemented but lack a proper Content-Security-Policy. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism. Overall, the website is functional but requires urgent security improvements to protect user data and enhance trust.

Oberbank AG is a well-established regional bank operating primarily in Austria and neighboring countries, offering a broad range of financial services including retail banking, corporate banking, savings, investments, financing, and online/mobile payment solutions. The website reflects a mature digital presence with comprehensive content tailored to private and corporate customers, supported by a modern technology stack based on Liferay and JavaServer Faces. The site demonstrates strong privacy compliance with detailed cookie consent mechanisms and GDPR-aligned privacy policies. However, the security posture is weakened by an invalid or missing SSL certificate and lack of TLS protocol support, which poses significant risks to secure communications. No explicit security or incident response policies are published, indicating room for improvement in transparency and readiness. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.

Global LT is a medium-sized education company specializing in instructor-led language and cultural training services targeted at corporations and governments worldwide. The company offers a comprehensive suite of services including language training, translation, interpretation, and destination services, supported by a technology-driven platform. The website is professionally designed, well-branded, and provides clear navigation and rich content relevant to its business domain. Technically, the site is built on HubSpot CMS and integrates Google Analytics and Tag Manager for marketing and analytics purposes. However, the absence of a valid SSL certificate and HTTPS support is a significant security concern. Security headers are partially implemented, but critical TLS protocols and certificate transparency are missing, exposing the site to potential risks. Privacy compliance is moderate, with a privacy policy present but lacking a cookie consent mechanism despite tracking scripts. Contact information is clearly provided, enhancing business credibility. Overall, the site demonstrates strong business presence and digital maturity but requires urgent security improvements to protect user data and enhance trust.

Jaroona is a small technology company specializing in AI and Machine Learning solutions aimed at transforming raw data into actionable business intelligence. Their offerings include predictive analytics, natural language processing, computer vision, reinforcement learning, anomaly detection, and custom AI model development. The company targets businesses seeking to leverage AI for automation, fraud detection, and personalized customer experiences. The website is professionally designed using the Contao CMS and hosted by IONOS SE, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. While security headers are implemented, the lack of TLS protocols and proper SSL configuration significantly lowers the security posture. Privacy and cookie policies exist but are basic, and no explicit terms of service or incident response policies are present. Contact information is limited to a contact form with no direct emails or phone numbers provided. Overall, the domain registration is mature and consistent with the business claims, supporting legitimacy. Strategic improvements in SSL/TLS deployment and enhanced privacy compliance are recommended to improve trust and security.

Coface is a global leader in trade credit insurance, debt collection, and business information services, supporting over 100,000 clients across approximately 200 countries. Founded in 1946 and headquartered in France, the company offers comprehensive solutions to help businesses manage credit risks and optimize credit management. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience of businesses seeking credit risk solutions. Technically, the site uses modern web technologies including a CDN (CloudFront), a CMS (Ibexa), and integrates advanced consent management and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which is a critical issue that must be addressed to ensure secure communications. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Coface's website demonstrates high business credibility and professionalism but requires urgent SSL/TLS remediation to improve security and trust.

Austro Control GmbH is the Austrian national air navigation service provider responsible for ensuring aviation safety, air traffic control, and aeronautical information management. The company serves a broad audience including pilots, airlines, airports, and government agencies, positioning itself as a key player in the transportation and government sectors. Their services include air traffic control, pilot licensing, flight weather services, and drone regulation. The website reflects a professional and comprehensive digital presence with strong branding and trust signals such as industry awards and certifications. Technically, the site uses modern web technologies like Bootstrap and jQuery but suffers from critical security shortcomings due to the absence of a valid SSL certificate and lack of TLS protocol support, which undermines secure communications. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and authoritative but requires urgent improvements in SSL/TLS security to protect users and maintain credibility.

CRIF S.p.A. is a globally recognized enterprise specializing in credit bureau reporting, business information systems, analytics, and outsourcing services. The company operates in 37 countries with over 85 subsidiaries, serving both businesses and consumers with advanced digital solutions including open banking and ESG analytics. The website reflects a mature business with comprehensive service offerings and a strong market position in the finance sector. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Swiper.js, and is hosted on a CDN network (Akamai), ensuring good performance and mobile optimization. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the website is professional and trustworthy but requires urgent remediation of its SSL/TLS configuration to protect user data and maintain trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Spencer Stuart is a globally recognized executive search and leadership consulting firm specializing in senior executive and board-level placements. The website reflects a mature, professional services business with a strong market position and comprehensive service offerings tailored to corporate clients. Technically, the site uses a custom ASP.NET CMS hosted on AWS CloudFront, integrating modern analytics and consent management tools. However, the absence of a valid SSL certificate and disabled modern TLS protocols represent significant security gaps. The site employs good security headers and cookie management but lacks advanced email security measures such as DMARC and DNSSEC. Overall, the website is content-rich and professionally designed but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

Raiffeisen Bank International AG is a leading business bank headquartered in Austria, serving Austria and Central and Eastern Europe. The website presents comprehensive information about the bank's services, sustainability efforts, investor relations, and career opportunities, targeting investors, corporate clients, institutions, and private customers. The technical infrastructure leverages modern web technologies including Vue.js, Adobe Experience Manager CMS, and Cloudflare hosting, with integrations for analytics and marketing such as Mouseflow, Leadfeeder, and Google Tag Manager. Security headers are well implemented; however, the absence of a valid SSL certificate and disabled TLS protocols represent critical vulnerabilities that undermine the site's security posture. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. Overall, the website is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Plansee SE is a globally recognized manufacturer specializing in refractory metals such as molybdenum, tungsten, and tantalum, serving high-tech industries including electronics, aerospace, and energy. With a century of experience and multiple production sites worldwide, Plansee positions itself as a leader in high-performance materials and sustainable manufacturing solutions. The website reflects a mature digital presence built on Adobe Experience Manager and Next.js, leveraging Akamai CDN and Google Tag Manager for performance and analytics. However, the current lack of a valid SSL certificate and disabled TLS protocols represent critical security vulnerabilities that undermine user trust and data protection. Despite these issues, the site maintains comprehensive privacy and cookie policies aligned with GDPR, and showcases certifications like EcoVadis Gold and ASML Sustainability Excellence Award, reinforcing its market credibility. Strategic improvements in SSL/TLS deployment and enhanced security configurations are recommended to elevate the overall security posture and user confidence.

HOERBIGER is a large industrial company specializing in emissions solutions and performance-defining components across sectors such as energy, automotive, and hydrogen industries. The company holds a strong market position as a world leader in compression and rotary unions, providing innovative products and services aimed at increasing efficiency, safety, and sustainability. The website reflects a professional and well-branded digital presence, leveraging modern technologies such as Neos CMS and Flow Framework, with multimedia content and clear navigation tailored for industrial clients and partners. Technically, the website employs advanced content security policies, privacy compliance tools like Cookiebot, and analytics via Matomo, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts the site's security posture and user trust. Other security headers are well implemented, but the lack of encryption exposes users to potential risks. Overall, the security posture is weak due to missing HTTPS, but privacy compliance and business credibility are strong. The site is accessible without WAF or blocking mechanisms, allowing full content analysis. Strategic improvements in SSL deployment and enhanced security practices are essential to elevate the site's trustworthiness and compliance. The risk assessment highlights the urgent need for SSL certificate installation and enabling HTTPS to protect data integrity and confidentiality. The company should also consider publishing vulnerability disclosure policies and incident response contacts to further strengthen security culture and transparency.

Erste Digital GmbH operates as the digital and IT service arm of Erste Group, the largest banking group in Central and Eastern Europe. The company focuses on delivering IT solutions and digital transformation services to support banking operations across the region. The website reflects a professional and consistent brand image aligned with Erste Group, targeting banking customers, IT professionals, and potential employees. Technically, the site uses modern frameworks and CDNs but suffers from a critical lack of SSL/TLS configuration, which severely impacts its security posture. Privacy and cookie policies are well implemented, indicating GDPR compliance. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust.

The website tyrolit.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to be enabled. This prevents access to any meaningful content or business information. The domain is protected by Cloudflare, but the SSL/TLS configuration is severely lacking, with no valid certificate detected and no HTTPS support. Security headers are present but cannot compensate for the lack of encryption. No privacy, cookie, or terms of service policies are found, and no contact or business information is accessible. The DNS records and WHOIS data indicate a legitimate domain registration without privacy protection, but the lack of accessible content limits further analysis. Overall, the site’s digital maturity and security posture are poor due to the blocking mechanism and missing SSL.

Julius Meinl am Graben is a historic gourmet food retailer based in Austria, specializing in fine foods and delicatessen products with a legacy dating back to 1862. The website meinlamgraben.at serves primarily as a redirect to the main domain meinlamgraben.eu, indicating a consolidated online presence. The business targets consumers interested in high-quality culinary specialties and operates within the retail sector. Technically, the site is built on TYPO3 CMS and hosted on Microsoft IIS, but the current domain lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts security and user trust. Security headers are present, but the absence of HTTPS and modern TLS protocols is a critical vulnerability. Privacy and cookie policies are not found on this domain, and no contact forms or detailed business contact information are provided here, limiting direct user engagement. Overall, the site exhibits basic content quality and technical implementation but requires urgent security improvements to meet modern standards.

Vizrt is a leading media technology company specializing in live broadcast and video storytelling solutions. Their website showcases a comprehensive portfolio of products and services designed to empower content creators across various sectors including broadcasting, sports, corporate, government, education, and house of worship. The company positions itself as a pioneer in real-time graphics, virtual sets, production automation, and cloud-based production workflows, reaching a global audience of over 4.5 billion people daily. Technically, the website is built on WordPress with modern frameworks and technologies such as Kadence Blocks, Gravity Forms, and Slider Revolution. It leverages Cloudflare for CDN and security, integrates Vimeo for video content, and uses advanced analytics and marketing tools like Google Tag Manager and Facebook Pixel. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a professional and engaging user experience. From a security perspective, the site implements several important HTTP security headers and restricts permissions for sensitive APIs. However, the SSL certificate is currently invalid or missing, and TLS 1.2 or higher is not enabled, which are critical issues that reduce the overall security posture. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, Vizrt's website reflects a mature and professional digital presence with strong business credibility and technical implementation. Addressing the SSL and TLS issues would significantly enhance their security posture and trustworthiness. Strategic recommendations include updating SSL certificates, increasing HSTS duration, enabling modern TLS protocols, and maintaining rigorous security best practices.

T-Mobile US is a leading telecommunications company providing wireless phone plans, devices, and home internet services primarily in the United States and Puerto Rico. The website reflects a mature digital presence with comprehensive product offerings, promotional deals, and customer benefits. It targets both consumer and business segments with a strong emphasis on 5G technology and competitive pricing. The company is a subsidiary of Deutsche Telekom and maintains consistent branding and messaging across its digital assets. Technically, the website leverages modern web technologies including Adobe Experience Manager, Alpine.js, and various third-party SDKs for analytics, marketing, and payment processing. The site is hosted on Akamai CDN, ensuring global content delivery. While the site is mobile-optimized and accessible, performance metrics are not provided, but the design and navigation are professional and user-friendly. From a security perspective, the site implements essential security headers and HSTS with preload, but the SSL certificate is currently invalid or missing, which is a critical issue impacting the overall security posture. No major vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, consent mechanisms, and GDPR indicators. Overall, the website is trustworthy and professional but requires immediate attention to SSL certificate management and TLS protocol support to enhance security and user trust. Strategic recommendations include updating SSL certificates, enabling modern TLS protocols, and continuous monitoring of security headers and compliance frameworks.

Allianz Elementar Versicherungs AG operates a comprehensive insurance website targeting private customers in Austria, offering a wide range of insurance and financial products including vehicle, health, accident, and life insurance. The website demonstrates strong market positioning with extensive content, professional design, and consistent branding. Technically, the site is built on Adobe Experience Manager, leveraging Cloudflare for hosting and CDN services, and integrates modern marketing and analytics tools such as Adobe Analytics and OneTrust for GDPR compliance. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, significantly impacting the security posture. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. Overall, the site is trustworthy and professional but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

DXC Technology is a leading global IT services and consulting company that helps enterprises and public sector organizations modernize their IT infrastructure, optimize data architectures, and enhance security across cloud environments. The company offers a broad portfolio of services including cloud and infrastructure, consulting and engineering, insurance software and business process services, modern workplace solutions, and security services. The website reflects a mature enterprise with consistent branding, comprehensive content, and a global reach with multiple language and regional versions. Technically, the site is built on Adobe Experience Manager with modern marketing and analytics tools integrated, providing a good user experience and accessibility. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses a risk to secure communications. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and professionalism but requires urgent remediation of SSL/TLS issues to improve security and trust.

Erste Asset Management operates as an international asset management company serving both institutional and private investors, primarily based in Austria. The website presents a professional and well-structured digital presence targeting these investor groups with clear navigation and relevant content. Technically, the site leverages a modular GEM framework hosted on AWS CloudFront CDN, ensuring scalability and modern web practices. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, despite the presence of several security headers and a strict DMARC policy. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, while the business credibility and content quality are strong, the critical lack of HTTPS is a major risk that needs immediate remediation.

Henkel Corporation operates a mature and comprehensive corporate website representing its North American business segment. The company is a global leader in manufacturing adhesives, sealants, and consumer brands such as laundry detergents and hair care products. The website reflects a strong brand presence with detailed business unit descriptions, sustainability initiatives, and career opportunities. Technically, the site uses modern JavaScript libraries and frameworks, integrates analytics and cookie consent tools, and provides a good user experience with mobile optimization and accessibility features. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The United Nations Office on Drugs and Crime (UNODC) operates as a key intergovernmental agency focused on combating illicit drugs, crime, corruption, and terrorism globally. It provides extensive research, policy guidance, and technical assistance to member states and partners, positioning itself as a leading authority in its domain. The website reflects a mature, well-branded digital presence with comprehensive content and multi-language support targeting governments, NGOs, researchers, and the public. Technically, the site uses a modern tech stack including Apache, AngularJS, Bootstrap, and Google Tag Manager, hosted on UN Vienna infrastructure. While the site is moderately performant and mobile-optimized, it lacks a valid SSL certificate and modern TLS support, which critically undermines its security posture. Security headers are well implemented, but the absence of HTTPS and session security features are significant vulnerabilities. From a security perspective, the site demonstrates good header policies but fails to provide encrypted transport, OCSP stapling, or session resumption. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Business credibility is high given the official UN affiliation and consistent WHOIS data. Overall, the site is authoritative and professional but requires urgent security improvements, especially SSL deployment, to ensure trust and compliance. Strategic recommendations include obtaining valid HTTPS certificates, enabling modern TLS protocols, implementing cookie consent, and enhancing incident response visibility.

OMV Aktiengesellschaft operates as a large enterprise in the energy and chemicals sectors, focusing on sustainable energy, mobility, and lifestyle solutions. The company emphasizes innovation and circular economy principles, offering services in sustainable base chemicals, renewable fuels, and low carbon energy solutions. The website reflects a professional and consistent brand image targeting investors, partners, and customers interested in sustainability. Technically, the site uses modern frameworks such as Next.js and is hosted on Microsoft Azure, but performance is currently slow and SSL configuration is inadequate, posing security risks. Security headers are well implemented, but the lack of a valid SSL certificate and cookie consent mechanism are notable gaps. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is content-rich and professionally designed but requires urgent security improvements to enhance trust and compliance.

TransPerfect is a leading global provider of translation and localization services, serving a wide range of industries including technology, healthcare, finance, retail, and media. The company operates an enterprise-grade website built on Drupal 10, featuring extensive content, client case studies, and multiple subsidiary domains. The technical infrastructure includes modern web technologies and CDN services, ensuring good performance and mobile optimization. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses a critical risk to secure communications. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, professional enterprise with strong business credibility but requires urgent remediation of SSL/TLS issues to improve security and trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

NOVOMATIC AG is a leading global gaming technology company headquartered in Austria, founded in 1980. It operates as a full-service provider in the gaming industry, offering a broad portfolio including gaming cabinets, games, platforms, and additional products. The company has a strong market position as one of the largest gaming technology corporations worldwide and the clear market leader in Europe. The website reflects a professional corporate presence targeting industry partners, casino operators, and job seekers, with comprehensive contact information and multilingual support. Technically, the website is built on Drupal 10 CMS and leverages modern JavaScript libraries and analytics tools such as Matomo. It is hosted behind Sucuri Cloudproxy WAF, ensuring some level of protection. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that significantly lowers the security posture. The site implements security headers and content security policies but must urgently address SSL/TLS configuration to protect user data and maintain trust. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies, including a consent mechanism. The company demonstrates business credibility through detailed contact information, licensing by the UK Gambling Commission, and consistent WHOIS data. Overall, the site is content-rich, professionally designed, and trustworthy but requires immediate security improvements regarding SSL/TLS. Strategic recommendations include obtaining and properly configuring SSL certificates, enabling modern TLS protocols, enhancing OCSP stapling and session resumption, and maintaining strong security header policies. These steps will improve security, user trust, and compliance with industry standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Fischer Sports is a well-established Austrian manufacturer and retailer specializing in premium alpine and nordic ski equipment as well as hockey sticks. The company has a strong market presence with a comprehensive product range targeting both professional athletes and recreational users. Their website demonstrates a high level of digital maturity, utilizing modern frameworks such as Nuxt.js and Shopware CMS, supported by Cloudflare for hosting and security. Despite the rich content and professional design, the absence of a valid SSL certificate and lack of HTTPS support represent significant security concerns. The site includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good privacy compliance. However, direct contact information such as company emails or phone numbers is not prominently available, relying mainly on contact forms. Overall, the business appears legitimate and trustworthy, but urgent improvements in security infrastructure are recommended.

Related:mollie.comgls-group.eu

Projekt Kraft is a European general contractor and project management company specializing in retail, hospitality, office, and e-mobility sectors. They provide comprehensive services including planning, design, construction, and facility management with a multilingual team and multiple office locations in Austria, Germany, and Italy. The website is professionally designed with rich content and clear navigation, targeting B2B clients seeking turnkey project solutions. Technically, the site runs on WordPress with modern plugins and tracking tools but suffers from a critical security issue due to the lack of a valid SSL certificate, impacting its security posture significantly. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the business demonstrates strong credibility and market presence but should urgently address SSL and TLS configuration to improve security and trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

pbbr | Sociedade de Advogados RL, Lda. is a small full service law firm based in Lisbon, Portugal, established in 2006. The firm offers comprehensive legal advice and assistance with a national and international client base. Their website reflects a professional and consistent brand image, targeting clients seeking high-quality legal services. The firm maintains a presence on LinkedIn and provides newsletter subscriptions to engage clients and partners. Technically, the website uses a modern tech stack including nginx, PHP, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile optimized and SEO friendly, though performance metrics are unavailable. Hosting is managed via host-redirect.com DNS servers. However, the website lacks a valid SSL certificate, resulting in no proper HTTPS support, which is a significant security concern. Security posture is moderate with good use of security headers and content security policies, but the absence of valid SSL/TLS and modern TLS protocols severely undermines security. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Contact information is limited to forms, with no explicit emails or phone numbers displayed. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trustworthiness. Strategic improvements in security and contact transparency will enhance the firm's digital maturity and client confidence.

Netural GmbH is a mature and reputable digital services provider based in Austria, specializing in digital transformation, web and mobile app development, augmented reality, and eCommerce solutions primarily for B2B clients. The company has a strong market position supported by multiple industry awards and a professional online presence. Technically, the website uses modern web technologies and a CMS (Storyblok), with content optimized for mobile and SEO. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, indicating good GDPR compliance. Overall, the business credibility is high, but urgent security improvements are needed to protect data and enhance trust.

Haimer GmbH is a well-established German manufacturing company specializing in precision tool holding products and related services for the machining industry. With over 23 years of domain presence and a global workforce exceeding 800 employees, Haimer offers comprehensive solutions including tool management, calibration, and training. The website reflects a mature digital presence with extensive product catalogs, service offerings, and customer engagement channels. Technically, the site uses modern technologies such as Pimcore CMS, Google Analytics, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. However, the absence of a valid SSL/TLS certificate significantly impacts the security posture, exposing users to risks and limiting trust. Security headers are properly configured, but the lack of HTTPS is a critical issue. Overall, the business credibility and privacy compliance are strong, but immediate remediation of SSL issues is recommended to enhance security and user trust.

Unisys is a global technology solutions provider specializing in cloud, AI, digital workplace, logistics, and enterprise computing services. The company targets businesses and governments seeking advanced technology solutions to drive innovation and operational efficiency. Their website reflects a mature enterprise with consistent branding and a broad portfolio of services, including consulting and AI-driven transformation. Technically, the site uses modern marketing and analytics tools such as Google Tag Manager, Azure Application Insights, and Optimizely, hosted primarily on AWS infrastructure. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Additionally, no privacy or cookie policies were detected, indicating potential compliance gaps. Performance is suboptimal with a high load time, though the site is mobile-optimized and well-structured. Overall, the website demonstrates good business credibility but requires urgent security and privacy improvements to meet modern standards.

The website for parkhyattvienna.com represents a luxury hospitality business under the Hyatt Hotels Corporation umbrella, targeting affluent travelers seeking premium accommodation and services in Vienna, Austria. However, the website content is extremely minimal, lacking essential information such as privacy policies, contact details, and business descriptions. The technical infrastructure shows use of JavaScript and hosting via Amazon CloudFront, but no modern CMS or frameworks are detected. Performance and SEO optimization are poor due to the lack of content and metadata. From a security perspective, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical vulnerability for any modern website, especially in hospitality where customer trust is paramount. Security headers are minimal, and no advanced security practices are implemented. There is no evidence of GDPR compliance or cookie consent mechanisms, which could expose the business to regulatory risks. Overall, the website presents a high risk due to its poor security posture, lack of compliance documentation, and minimal content quality. Strategic improvements are necessary to enhance trust, security, and user experience to align with the expectations of a luxury hospitality brand.

Renesas Electronics Corporation is a global leader in microcontrollers, analog, power, and SoC products, delivering embedded design innovation for a wide range of industries. The company targets embedded systems developers and technology companies with a comprehensive portfolio of semiconductor products and design resources. The website reflects a mature, enterprise-level business with a strong market position and extensive product offerings. Technically, the website is built on Drupal 10, hosted behind Cloudflare, and utilizes modern web technologies including Google Tag Manager and New Relic for monitoring. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. However, the absence of a valid SSL certificate and incomplete security configurations represent significant security concerns. From a security perspective, while several security headers are implemented, the lack of HTTPS and TLS support critically undermines the site's security posture. No explicit incident response or security policy pages were found, and cookie consent mechanisms are absent despite GDPR compliance indications. The domain is mature and registered with a reputable registrar, consistent with the company's profile. Overall, the site is professionally maintained with strong business credibility but requires urgent improvements in SSL/TLS deployment and privacy compliance mechanisms to enhance security and user trust.

Capri-Sun is a well-established global beverage brand with a multilingual website targeting consumers across many countries. The website provides localized content but lacks visible privacy, cookie, or terms of service policies on the homepage. Technically, the site uses Cloudflare for hosting and CDN services and implements Google Tag Manager for analytics and marketing. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a significant security concern. Security headers are partially implemented but HSTS is disabled, and no advanced TLS protocols are enabled. No contact information or forms are present on the homepage, limiting direct user engagement and transparency. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance to meet modern standards.

Casinos Austria AG operates a comprehensive network of casinos across Austria, providing a wide range of gaming options including poker, slot machines, and table games, complemented by hospitality services such as restaurants and event locations. The website serves as the official digital presence, targeting casino visitors and players with detailed information on locations, events, membership benefits, and promotional packages. The company holds a strong market position as a leading casino operator in Austria, supported by consistent branding and trust indicators such as recognized certifications and responsible gaming initiatives. Technically, the website is built on TYPO3 CMS and employs modern web technologies including JavaScript and SVG graphics. It integrates multiple analytics and marketing tools with user consent mechanisms, ensuring good digital maturity. The site is mobile-optimized and accessible, with good SEO practices and clear navigation enhancing user experience. From a security perspective, while the site implements several important security headers and content security policies, it currently lacks a valid SSL certificate and does not support modern TLS protocols, significantly weakening its security posture. This exposes the site to risks related to unencrypted traffic and potential interception. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The presence of a responsible disclosure page indicates a proactive approach to vulnerability management. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to secure user data and maintain trust. Strategic recommendations include obtaining a valid SSL certificate, enabling TLS 1.2 or higher, and fully activating HSTS. These steps will enhance security, compliance, and user confidence, supporting the company’s strong market presence and digital strategy.

Continental AG is a well-established multinational technology and manufacturing company specializing in sustainable and connected mobility solutions. Founded in 1871 and headquartered in Germany, the company offers a broad portfolio including automotive technologies, tires, and ContiTech products. The website reflects a mature digital presence with comprehensive corporate, investor, and sustainability information targeting investors, job seekers, and business partners. Technically, the site is built on TYPO3 CMS and hosted likely on AWS infrastructure, with modern JavaScript and CSS usage. However, a critical security weakness is the lack of a valid SSL certificate and disabled TLS protocols, which severely impacts the security posture. Security headers are mostly present but some, like X-XSS-Protection, are disabled. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but urgently needs to address HTTPS and SSL issues to ensure secure user interactions.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Efumo is a Latvian-based IT services company specializing in the development and maintenance of internet shops, websites, mobile applications, and IT systems. The company targets businesses seeking modern, responsive, and integrated digital solutions. Their market position is that of a small but established regional player with a portfolio of notable clients and a professional online presence. Technically, the website is built on WordPress with Yoast SEO, uses modern web technologies, and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS, secure cookies, and several security headers, but lacks full HSTS enforcement and email security measures like DMARC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security policy transparency.

Santa.lv is the largest lifestyle portal in Latvia, offering a wide range of content including health, entertainment, culture, and personal stories. The website supports a subscription model (Santa+) alongside advertising revenue, targeting Latvian-speaking audiences interested in lifestyle topics. The business is well-established with consistent domain registration and a strong market position in the Latvian media sector. Technically, the website employs modern tracking and advertising technologies such as Google Tag Manager, Facebook SDK, and Gemius analytics, hosted behind Cloudflare DNS services. However, the site suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts user trust and security posture. Security-wise, the lack of HTTPS, missing security headers, and no DNSSEC or domain protection locks expose the site to potential risks. Privacy and cookie policies are present and appear GDPR compliant, reflecting a good level of privacy awareness. The site is accessible without WAF or blocking mechanisms, but performance is slow with a large page size and long load times. Overall, Santa.lv is a reputable media portal with excellent content quality and business credibility but requires urgent improvements in security infrastructure to protect users and enhance trust. Strategic focus should be on implementing HTTPS, improving page performance, and adopting security best practices.

The website donuts.co serves as a login portal for Identity Digital's registrar services, primarily targeting domain registrars and customers managing domain registrations. The business operates in the technology sector with a mature domain age of 14 years, indicating an established presence. The portal provides essential domain management services but lacks publicly accessible privacy, cookie, or terms of service policies on the login page. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and is built on ASP.NET Core MVC framework. However, performance data is missing, and mobile optimization is basic. Security headers are well implemented, but the absence of a valid SSL certificate and HTTPS configuration is a critical vulnerability. Additionally, a subdomain takeover risk exists on api.donuts.co, which could be exploited by attackers. The WHOIS data shows privacy protection via Domains By Proxy, LLC, which is typical for this business type but slightly reduces transparency. Overall, the site demonstrates moderate business credibility but requires urgent security improvements.

Freshworks operates the freshemail.io domain as part of its email infrastructure supporting its suite of CX, ITSM, and CRM products. The domain is used primarily for SPF, DKIM, bounce email processing, and tracking email interactions. The website content is minimal, serving as an informational page with a clear abuse contact email. Technically, the site is hosted on AWS infrastructure using Amazon S3 and CloudFront but lacks a valid SSL certificate and modern TLS protocols, resulting in an insecure HTTP-only configuration. Security headers are minimal, and no advanced security or privacy policies are published on the site. The DNS and MX records align with legitimate email handling practices, and no subdomain takeover or DNSSEC issues are present. Overall, the site demonstrates basic technical infrastructure but lacks critical security and privacy compliance features.