Security reports directory

Fenergo is a medium-sized SaaS financial technology company founded in 2009, specializing in client lifecycle management (CLM) and regulatory compliance solutions for banking and financial institutions. The company offers a comprehensive suite of services including KYC, client onboarding, transaction monitoring, and regulatory compliance, supported by AI-powered technologies such as FinCrime OS and Agentic AI. Fenergo is recognized as a market leader in its sector, with strong client endorsements and multiple industry awards. Technically, the website is built on Webflow and leverages modern JavaScript libraries and Cloudflare CDN for delivery, with good mobile optimization and SEO practices. However, the site currently lacks a valid SSL certificate and modern TLS support, which is a critical security concern. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Overall, the business demonstrates strong credibility and trustworthiness, but the security posture requires urgent improvement to protect user data and maintain compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

M3 Outlet is a retail outlet shopping center located in Polgár, Hungary, offering over 100 fashion brands with discounts ranging from 30% to 70%. The website targets regional shoppers interested in branded fashion products and provides multilingual support including Hungarian, English, Romanian, and Slovak. Key services include retail shopping, promotions, customer amenities such as free wifi, and tourism-related offerings like tax-free shopping. The business operates under M3 PARK SERVICE Kft., positioning itself as a significant regional outlet center with a medium-sized footprint. Technically, the website is built on Concrete CMS 9.3.2 and utilizes modern frontend technologies such as jQuery, Bootstrap 5, and Owl Carousel. Google Tag Manager is used for analytics and marketing tracking. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. Performance data is missing, but inferred to be slow. Mobile optimization and SEO are good, but accessibility is basic. Security posture is weak due to the absence of HTTPS, lack of HSTS, and missing advanced security headers. No explicit privacy or cookie consent mechanisms are implemented, and no security or incident response policies are visible. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professionally designed but requires urgent security improvements, especially SSL/TLS configuration, to protect user data and improve trust. Implementing privacy compliance features and enhancing security headers would further strengthen the security posture.

Malmö Designer Village is a premium retail outlet project positioned as the largest outlet in Scandinavia and the first premium outlet village serving the Greater Copenhagen region. The business model focuses on offering discounted fashion and lifestyle brands to residents and tourists in the Malmö and Copenhagen area. The website is built on the Squarespace platform, featuring professional design and clear navigation but lacks a valid SSL certificate, resulting in no HTTPS support. This is a critical security shortfall. The site includes a contact form for inquiries but does not provide explicit email addresses or phone numbers. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanism. Social media presence is limited to LinkedIn. Overall, the site demonstrates moderate digital maturity but requires significant security improvements to protect user data and build trust.

Designer Outlet Luxembourg operates a retail outlet shopping center featuring over 60 major brands offering discounts year-round. The website presents a professional and consistent brand image targeting shoppers in Luxembourg and nearby regions. The technical infrastructure is based on TYPO3 CMS hosted on Apache servers with integration of modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. Security posture is adequate with a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information and social media presence enhance business credibility. Overall, the website is functional, secure, and compliant with relevant regulations, supporting the business's retail operations effectively.

PEIQ is a medium-sized German company specializing in cloud-based publishing software solutions tailored for the DACH region's media industry. Their product portfolio includes automated newspaper production (PEIQ PRINT), a digital editor for multi-channel content creation (PEIQ CREATE), and a proprietary CMS platform (PEIQ PORTAL). The company holds a strong market position, serving major newspapers and media groups, with a significant share of newspaper circulation produced using their systems. Technically, the website employs modern JavaScript frameworks and responsive design, but lacks a valid SSL certificate, which is a critical security concern. The site includes cookie consent mechanisms and basic privacy compliance but lacks visible security policies or incident response contacts. Overall, the business demonstrates professionalism and trustworthiness, though the absence of HTTPS significantly impacts security posture and user trust.

ConSol* Consulting & Solutions Software Poland Sp. z o.o. is a reputable IT service provider specializing in custom IT solutions, software architecture, web application development, and managed services. The company serves a diverse range of industries with a focus on digital transformation and technological excellence. Their market position is reinforced by notable clients and an ISO 27001 certification, indicating a strong commitment to information security. Technically, the website is built on TYPO3 CMS with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security measures include robust HTTP headers, valid SSL certificates, and no detected vulnerabilities, although enabling OCSP stapling and enhancing HSTS settings could improve security further. Privacy compliance is well addressed with comprehensive privacy and cookie policies, consent mechanisms, and moderate user tracking via Matomo analytics. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting the company's credibility and business goals.

Related:consol.deconsol-software.at

Nice Software B.V. operates the paranice.nl website, providing specialized software solutions for paramedical care, medical specialist rehabilitation, and geriatric rehabilitation in the Netherlands. Their offerings include electronic patient dossiers (EPD), planning, declaration management, and mobile applications tailored to healthcare providers. The company targets healthcare institutions such as hospitals, rehabilitation centers, and care organizations, positioning itself as an established player with a mature domain and active partnerships. The website content is professional, well-structured, and provides clear contact channels, supporting a positive business image. Technically, the website uses a traditional web stack with jQuery, Bootstrap, and several JavaScript libraries. Hosting and domain registration are managed by Claranet Benelux B.V., a reputable provider. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a significant security and trust concern. The site implements Google Analytics and Google reCAPTCHA v3 for analytics and bot protection, and it includes GDPR-compliant privacy and cookie policies with consent mechanisms. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the security posture. Minimal security headers and lack of DNSSEC or domain protection locks further reduce security confidence. While forms use reCAPTCHA and secure cookies, the overall security configuration is basic and requires urgent improvement to protect user data and maintain trust. Overall, the website is functional and business-appropriate but suffers from critical security shortcomings. Addressing SSL/TLS issues and enhancing security headers would significantly improve the security posture and user trust. The business appears legitimate and established, but the security gaps present risks that should be prioritized.

The website consol-software.at currently presents only a minimal placeholder page with the title 'HTTP only' and the text 'HTTP only. Redirect?'. There is no meaningful content, metadata, or business information available on the site. The domain is registered but lacks any DNS records, including A, AAAA, MX, or NS records, which indicates the domain is not properly configured for web or email services. The SSL/TLS configuration is absent or invalid, with no supported TLS protocols and no valid certificate, resulting in no HTTPS support despite the presence of an HSTS header. This severely impacts the security posture and trustworthiness of the site. Technically, the site is hosted on an Apache server but lacks modern web technologies, frameworks, or CMS platforms. Performance data is unavailable, and the site is not optimized for mobile or accessibility. No analytics, advertising, or tracking technologies are detected. Security headers are partially present but ineffective due to the lack of HTTPS. No privacy, cookie, or terms of service policies are found, and no contact or business information is provided. From a security perspective, the absence of HTTPS and DNS records, combined with minimal content, suggests the site is either inactive, under development, or abandoned. There are no indications of WAF or security challenge blocking access. The overall risk is high due to poor security configuration and lack of transparency. Strategic recommendations include obtaining a valid SSL certificate, properly configuring DNS records, and publishing meaningful content and policies to improve trust and compliance.

Quli.nl is a Dutch digital health platform offering a Personal Health Environment (PGO) that centralizes users' healthcare data, enabling better management and communication with healthcare providers. The platform targets patients, caregivers, healthcare organizations, and patient groups, positioning itself as a leader in digital accessibility and personal health data management in the Netherlands. The website is built on WordPress with modern web technologies and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Security headers are properly configured; however, the absence of a valid SSL certificate and HTTPS implementation is a critical vulnerability that significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are well implemented and GDPR compliant. Overall, the site demonstrates good content quality and business credibility but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.

ConSol Consulting & Solutions Software GmbH is a medium-sized, owner-managed IT service provider founded in 1984 in Germany. The company specializes in delivering customized IT solutions, supporting clients throughout the entire software lifecycle with a focus on agility, innovation, and technical excellence. Their offerings include IT consulting, software engineering, cloud and platform engineering, AI, automation, and product solutions based on open-source technologies. The company maintains strong partnerships with industry leaders such as Red Hat, AWS, SUSE, and others, reinforcing its market position. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and utilizes various JavaScript libraries for enhanced user experience. Analytics are implemented via Matomo and Google Tag Manager, with a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks modern TLS protocol support and full HSTS implementation. Security headers are present but could be enhanced. No critical vulnerabilities or exposures were detected. The company demonstrates compliance with data protection regulations, supported by ISO 9001 and ISO 27001 certifications. Overall, ConSol presents a professional, trustworthy, and technically mature online presence with strong business credibility and a good security posture. Strategic improvements in SSL/TLS configuration and security header enhancements are recommended to further strengthen their security stance.

Related:redhat.comamazon.com

Miami Valley Lighting, a division of The AES Corporation, specializes in providing comprehensive outdoor lighting solutions including street lighting, parking lot and security lighting, decorative lighting, and customized solutions primarily serving West Central Ohio. The company positions itself as a regional leader with a focus on safety, security, energy savings, and responsive maintenance services. The website is built on Drupal 10 with modern front-end technologies and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant security vulnerabilities that undermine user trust and data protection. Privacy and cookie policies are present but basic, and no explicit security or incident response policies are published. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.

Netz Burgenland GmbH operates as a regional energy network operator in Burgenland, Austria, providing reliable electricity and gas distribution services. The company emphasizes customer service and offers a range of services including smart metering, energy communities, and infrastructure support. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Next.js and React, hosted on AWS infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. While contact information and business legitimacy are clearly established, privacy compliance could be improved by implementing cookie consent mechanisms and publishing security policies. Overall, the site is content-rich and trustworthy but requires urgent security enhancements to protect user data and maintain trust.

AES Hawai‘i is a regional branch of the global AES Corporation, focused on accelerating the transition to renewable and clean energy solutions in Hawai‘i. The company operates multiple renewable energy projects and emphasizes sustainability, community partnerships, and innovation. The website is professionally designed using Drupal 10 and modern web technologies, providing a rich user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, security headers, and a content security policy, though improvements such as enabling full HSTS and OCSP stapling are recommended. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site reflects a mature digital presence aligned with the company's business goals and market position.

Related:aesandes.comaesbulgaria.com

drivebeem is an Austrian company specializing in electric vehicle subscriptions, offering all-inclusive monthly plans that cover vehicle costs, insurance, maintenance, and charging solutions. The company targets both private customers and businesses, providing flexible subscription durations and additional services such as wallbox installations and photovoltaic energy solutions. The website is professionally designed with clear navigation and comprehensive content, including detailed FAQs and legal documentation. Technically, the site uses modern frameworks like Next.js and React, with content managed via a WordPress headless CMS. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are partially implemented, but critical TLS protocols and certificate transparency are missing. Privacy compliance is generally good with a clear privacy policy, though no cookie consent mechanism was detected. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires urgent security improvements to protect user data and build trust.

AES Vietnam operates as a regional branch of The AES Corporation, a global energy company focused on delivering sustainable and clean energy solutions. The website reflects a mature digital presence with comprehensive content in Vietnamese, targeting energy sector stakeholders and community partners. The company emphasizes sustainability, innovation, and community development as core pillars of its business model. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is solid with HTTPS and multiple security headers, though TLS protocols are not enabled, which is a notable gap. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the corporate identity, supporting legitimacy. Overall, the site presents a professional, trustworthy, and well-maintained digital asset for AES Vietnam.

SonnenAbo is a regional energy service provider based in Austria offering local solar power subscriptions through community photovoltaic parks. The business model focuses on enabling residents to access renewable energy without upfront investment, promoting sustainability and energy community membership. The website is professionally designed using modern web technologies such as Next.js and hosted on AWS infrastructure. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical security vulnerability. Additionally, no cookie consent mechanism is present despite the use of Google Tag Manager, indicating partial privacy compliance. Contact information is available primarily as a physical address and contact page, but no direct emails or phone numbers are exposed. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

AES Puerto Rico operates as a regional subsidiary of The AES Corporation, focusing on accelerating the future of energy through sustainable and smart energy solutions. The website demonstrates a strong market position in the energy sector with a clear emphasis on clean energy, community partnerships, and innovation. The company targets energy consumers, businesses, and community stakeholders in Puerto Rico and related AES markets. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities, although some improvements in SSL configuration and security policy transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's global and local energy initiatives.

Fanclub Burgenland Energieunabhängig is a regional energy community initiative based in Burgenland, Austria, focused on promoting renewable energy usage through wind and solar power. The organization offers membership benefits including access to renewable energy at attractive prices, participation in regional energy projects, and digital services to support energy independence. The website is well-designed, content-rich, and targets residents, businesses, and municipalities interested in sustainable energy solutions. Technically, the site uses modern web frameworks such as Next.js and is hosted on AWS infrastructure, but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy and explicit data processing consents in forms. Contact information is clearly provided, enhancing business credibility. However, the lack of cookie consent mechanisms and security headers reduces the overall security posture. Strategic improvements in SSL deployment and security best practices are recommended to enhance trust and compliance.

Related:sonnenabo.at

AES Panama is a regional branch of The AES Corporation, a large multinational energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website targets energy consumers, business clients, investors, and community partners primarily in Panama and other global markets. The company emphasizes community investment, sustainability, and advanced energy technologies. Technically, the website is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support despite security headers and policies being in place. Privacy and cookie policies are present and indicate some GDPR compliance, but no explicit incident response or security policy pages were found. The domain registration data is consistent and trustworthy, with no signs of suspicious activity. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

BE.funkt is a telecommunications service provider offering affordable mobile and internet tariffs primarily targeting consumers in Austria. The business operates as a joint project between Burgenland Energie and A1 Telekom Austria AG, leveraging the A1 network to provide 5G mobile services, eSIM options, and hardware sales such as smartphones and 5G webcubes. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Swiper.js, ensuring good mobile optimization and user experience. However, the absence of a valid SSL/TLS certificate is a critical security flaw, exposing users to insecure connections. The site implements a cookie consent modal indicating some privacy compliance efforts, but lacks a visible privacy policy page and security policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

AES Ohio operates as a regional energy utility under The AES Corporation, providing electricity services and customer support to residential and commercial customers in Ohio. The website offers comprehensive information on energy supply options, billing, outages, safety, and sustainability initiatives. It leverages modern web technologies including Drupal 10 CMS and integrates multiple third-party analytics and marketing tools to enhance user engagement and service delivery. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well-established, indicating a commitment to compliance and user data protection. Overall, the site presents a professional and content-rich experience but requires urgent security improvements to align with best practices.

Related:aes.comaesandes.com

Security assessment incomplete. Successfully analyzed: nis2, emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

AES Indiana is a large regional energy provider operating under The AES Corporation, focused on delivering electric utility services to residential and business customers in Indiana. The website offers comprehensive information on billing, outages, energy saving, and company initiatives, reflecting a mature business model with significant investments in infrastructure and digital transformation. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. While security headers and content security policies are implemented, critical gaps remain in SSL configuration and incident response transparency. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance compliance.

AES El Salvador operates as a major energy provider in El Salvador, offering electricity distribution, generation, and energy solutions. The website reflects a well-established corporate entity with a broad service portfolio and strong community engagement. The technical infrastructure is modern, leveraging Drupal 10 CMS and multiple JavaScript libraries for enhanced user experience and analytics. However, the absence of a valid SSL certificate is a critical security gap, undermining the site's HTTPS security and potentially affecting user trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

Related:aesandes.comaes.com

Storebrand is a well-established Nordic financial services group specializing in pensions, insurance, and asset management. With a history dating back to 1767 and assets under management exceeding 1,400 billion NOK, it holds a leading market position in Norway and the broader Nordic region. The website reflects a mature business with clear branding, comprehensive service offerings, and a focus on sustainability. Technically, the site uses modern frameworks such as Blazor and integrates with Salesforce and various analytics and marketing tools, indicating a high level of digital maturity. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms in place. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Related:spp.se

AES Dominicana is a regional subsidiary of The AES Corporation, focused on accelerating the future of energy through sustainable and innovative solutions in the Dominican Republic. The website presents a professional corporate image with comprehensive content about their products, sustainability initiatives, community partnerships, and investor relations. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security issue is the absence of a valid SSL certificate and HTTPS, which severely impacts the security posture. The site implements strong security headers and content security policies but lacks advanced SSL/TLS configurations and DNS security features. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is credible and professionally maintained but requires urgent security improvements to protect user data and trust.

Security assessment completed with an overall score of 0/100 (unknown risk). 1 critical issues require immediate attention. Total of 21 security findings identified across all modules.

AES Chile operates as a major energy company focused on accelerating the future of energy through sustainable and innovative solutions. The company emphasizes renewable energy, advanced energy networks, energy storage, and community partnerships. The website reflects a strong corporate presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site presents a professional and trustworthy image but requires urgent security improvements to protect users and data.

AES Bulgaria operates as a regional branch of The AES Corporation, a global energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website presents a professional corporate image emphasizing clean energy, sustainability, community partnerships, and employee engagement. The technical infrastructure is based on Drupal 10 CMS with modern frontend libraries and integrations with multiple analytics and marketing tools, indicating a mature digital presence. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. The site implements strong security headers and content security policies but lacks visible incident response or vulnerability disclosure information. Overall, the domain registration data aligns well with the corporate identity, supporting legitimacy. Strategic improvements in SSL deployment and security practices are recommended to enhance trust and compliance.

Related:aesandes.com

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

MSD Tiergesundheit Österreich operates as a prominent veterinary pharmaceutical provider in Austria, offering a broad range of veterinary medicines and vaccines. The website serves multiple target audiences including veterinarians and animal owners, providing product information, news, and educational resources. The business is part of the global Merck & Co., Inc. group, indicating a strong market position and established brand presence. The site features professional design, consistent branding, and comprehensive content tailored to the veterinary healthcare sector. Technically, the website is built on WordPress VIP with modern SEO and analytics integrations, but suffers from critical SSL/TLS deficiencies that undermine security and trust. Security headers are well implemented, but the absence of a valid SSL certificate and HTTPS support is a major vulnerability. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates good digital maturity but requires urgent security improvements to protect user data and maintain credibility.

Related:msd.at

Abzorba Games is a medium-sized technology company specializing in mobile social casino games, founded in 2011 in Greece. The company offers multiplayer casino titles and B2B partnership opportunities to leverage brand presence in the social gaming market. The website is built on WordPress with Elementor and targets mobile social casino players and industry partners. Technically, the site uses standard web technologies but lacks HTTPS, which is a critical security gap. The cookie consent mechanism is implemented via OneTrust, indicating awareness of privacy compliance. However, no explicit security or incident response policies are present. Overall, the site presents a professional business image but requires urgent security improvements to protect user data and enhance trust.

Compliance Praxis is Austria's largest compliance network providing comprehensive information media, partner networks, and events to support professionals in the expanding field of compliance. The website is professionally designed, content-rich, and targets compliance officers, legal experts, and organizations interested in compliance and ESG topics within Austria. Technically, the site runs on Gentics CMS with nginx server and integrates modern marketing and analytics tools such as Google Tag Manager and Mailchimp. However, the absence of a valid SSL certificate and HTTPS configuration represents a significant security vulnerability. Privacy and cookie policies are well implemented and GDPR compliant. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and trust.

Related:lexisnexis.at

HUMANIC is a well-established shoe retailer and manufacturer with over 150 years of history, operating both physical stores and online shops across multiple Central and Eastern European countries. The company offers a broad range of footwear and accessories targeting consumers seeking quality and variety. Their market position is strong, especially in Austria, with a recognized brand and customer loyalty programs. Technically, the website is built on SAP Commerce (Hybris) platform, leveraging modern marketing and analytics tools such as Google Analytics, Dynamic Yield, and Usercentrics for consent management. The site is hosted behind Cloudflare, ensuring basic security and performance benefits. Security posture is adequate with HTTPS enforced and several security headers present, although TLS protocols are outdated and some security enhancements like HSTS preload and OCSP stapling are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and functional, with room for technical and security improvements.

FluidLife is a German-language SaaS platform focused on corporate mobility and resource management, helping companies achieve sustainability goals through modular tools including routing, ride sharing, CO2 reporting, and employee motivation. The website is professionally designed with comprehensive content and clear navigation, targeting companies, municipalities, and NGOs primarily in Austria and German-speaking regions. Technically, the site is built on WordPress with modern SEO and analytics integrations but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy compliance is well addressed with cookie consent mechanisms and detailed privacy policies. Contact information and business details are clearly presented, enhancing credibility. However, the absence of HTTPS and modern security headers significantly lowers the security posture and overall trust score. Strategic improvements in SSL deployment and security hardening are essential to elevate the site's security and user trust.

Related:fluidtime.com

Boxcar is a regional transportation company specializing in commuter bus services and complementary local services such as grill cleaning, knife sharpening, and auto detailing. The company targets commuters in the New Jersey and New York City metropolitan area, offering reserved seating, Wi-Fi, and other amenities to enhance the commuting experience. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, positioning Boxcar as a trusted local transportation provider. Technically, the website is built on the Webflow platform, leveraging modern frontend technologies including jQuery and Google Fonts, and is hosted behind Cloudflare. While the site is mobile-optimized and well-structured, performance data is missing, and the SSL/TLS configuration is critically deficient, lacking a valid certificate and modern protocol support. This represents a significant security risk. From a security perspective, the absence of HTTPS and TLS protocols severely undermines the site's security posture, exposing users to potential data interception and undermining trust. Although privacy and terms of service policies are present and comprehensive, the lack of a cookie consent mechanism despite active tracking scripts indicates partial privacy compliance. Contact information is clearly provided, supporting business credibility. Overall, Boxcar's website demonstrates good content quality and business credibility but suffers from critical security shortcomings that must be addressed urgently to protect user data and maintain trust. Strategic improvements in SSL/TLS deployment and privacy compliance will significantly enhance the site's security and compliance posture.

Alpinebrands.at is a website representing Alpinebrands, a company focused on marketing and distributing traditional Austrian food and drink brands such as Gasteiner, AUER, Honigmayr, Blaschke, and GOAL. The company emphasizes quality, tradition, and innovation, targeting both national and international consumers interested in authentic Austrian products. The website is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are well implemented, demonstrating GDPR compliance and user consent mechanisms. Contact information is limited to email addresses for domestic and international inquiries, with no phone numbers or physical addresses found. Overall, the site presents a professional image but requires urgent security improvements to protect user data and enhance trust.

Interlink is a medium-sized technology company based in Mauritania, specializing in AI-powered digital solutions for businesses and government institutions. With 15 years of experience, they offer services in e-governance, e-health, software development, messaging, geolocation, and cybersecurity. The website is built on modern technologies like Next.js and React, providing a professional and user-friendly experience. However, technical issues such as missing DNS records and an invalid SSL certificate undermine the security posture. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site demonstrates solid business presence but requires urgent security and technical improvements.

Mediaprint Zeitungs- und Zeitschriftenverlag Gesellschaft m.b.H. & Co KG is a leading Austrian media company operating prominent brands such as Kronen Zeitung and KURIER. The company offers a broad range of media-related services including corporate publishing, printing, logistics, marketing, and subscription management, positioning itself as a market leader in Austria's media sector. The website reflects a professional and consistent brand image targeting both consumers and business clients within Austria. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, FontAwesome Pro, and integrates Google Tag Manager and Didomi for analytics and consent management. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.

RE.COMM operates a professional real estate leaders summit event in Austria, targeting top managers and decision makers in the real estate sector. The website serves as an information and registration platform for the annual summit scheduled for November 2025. The company positions itself as a leading think tank and networking forum within the real estate industry. Technically, the website is built on WordPress with Elementor and several plugins for SEO, multilingual support, and GDPR compliance. However, the site suffers from critical security issues including an invalid or missing SSL certificate and lack of HTTPS enforcement, which significantly impacts user trust and security posture. The DNS configuration appears incomplete or misconfigured, lacking essential A/AAAA records and DNSSEC, which raises concerns about domain management. Privacy and cookie policies are well implemented, and social media presence is active. Overall, the site is professionally designed but requires urgent technical and security improvements to ensure trustworthiness and compliance.

Backslash is a cultural intelligence unit operating within the Omnicom Advertising Group, providing strategic insights through a combination of data, journalism, and cultural analysis. The website serves as a platform to share reports, documentaries, and newsletters targeted primarily at advertising professionals and agencies within the Omnicom ecosystem. Technically, the site is built on WordPress, hosted on WP Engine, and utilizes Cloudflare CDN along with several marketing and analytics tools such as Google Analytics and OneTrust for cookie consent. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Security headers are partially implemented, but the lack of encryption and modern TLS protocols is a major vulnerability. Privacy compliance is basic, with a cookie consent mechanism present but no comprehensive GDPR-aligned privacy policy detected. Business credibility is supported by the affiliation with Omnicom and professional content, but contact information is limited to a newsletter signup form without direct emails or phone numbers. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

TBWA at Cannes is a professionally designed website serving as a showcase for the global TBWA Collective's creative work at the Cannes Lions Festival of Creativity. The site features a broad portfolio of advertising campaigns from various TBWA offices worldwide, targeting advertising professionals and festival attendees. Technically, the site is built on WordPress, hosted on WP Engine with Cloudflare CDN, and uses modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and OneTrust for cookie consent. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly undermines its security posture. Additionally, the lack of DNS records is unusual and may indicate configuration issues. Privacy compliance is partially addressed through cookie consent, but no privacy policy or terms of service pages were found. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.

Related:tbwa.com

RCSRD d.o.o. is a Serbia-based technology company specializing in open-source software solutions, technical support, development, and education. Founded in 2007 through partnerships with industry leaders such as Red Hat and IBM, RCSRD serves a broad Southeast European market with enterprise-grade open-source products and services. The company maintains a medium-sized international team and subsidiaries in Vienna and Katowice, positioning itself as a regional leader in open-source innovation. Technically, the website is built on the Bitrix CMS platform, utilizing modern web technologies including jQuery, Bootstrap, and OwlCarousel. Google Tag Manager is employed for analytics and tracking. The site is mobile-optimized with good navigation and professional design, though accessibility and SEO optimizations are basic. Performance metrics are unavailable. From a security perspective, the website lacks HTTPS and SSL/TLS encryption, representing a critical vulnerability. While some security headers are present, the absence of encryption and modern TLS protocols significantly reduces the security posture. No privacy or cookie policies are found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates solid business credibility and content quality but suffers from critical security and privacy compliance issues. Strategic improvements in SSL implementation, privacy policy publication, and security best practices are recommended to enhance trust and protect user data.

Related:softwareunited.comredhat.com

SLOS is an enterprise software company specializing in open-source based software platforms designed for stability, security, and performance. Their product suite includes enterprise, virtualization, middleware, storage, cloud, application, container, and automation platforms targeting modern business needs. The company operates primarily from Serbia with subsidiaries in Vienna and Katowice. Technically, the website is built on Bitrix Site Manager CMS with common web technologies like jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented but overall security posture is weak due to missing HTTPS and DNS security features. The website lacks privacy and cookie policies, impacting compliance and user trust. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security and compliance improvements.

Kombi Terminal Schkopau, operated under the HOYER GmbH brand, is a specialized logistics terminal focusing on container handling, hazardous goods storage, and rail transport connections. The website presents a professional and consistent brand image with clear service descriptions targeting logistics and transport businesses. The technical infrastructure is based on TYPO3 CMS running on Apache with Debian, employing modern security headers and HTTPS protocols, though some security configurations like HSTS are not fully enabled. The site uses tracking and consent management tools indicating moderate privacy compliance. No critical security vulnerabilities or blocking mechanisms were detected, but contact information is sparse on the main service page. Overall, the website reflects a medium-sized transportation business with a solid digital presence but could improve in security and privacy transparency.

Related:hoyer-group.com

HOYER GmbH is a well-established international transportation and logistics company celebrating its 75th anniversary. The website serves primarily as a corporate milestone showcase with multimedia content and links to official corporate resources. The technical infrastructure is based on TYPO3 CMS running on an Apache server, with embedded video content and integration of Usercentrics for consent management scripts. However, the website lacks a valid SSL certificate, which critically impacts its security posture. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly reduces the site's security score. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent branding and official social media presence, though direct contact information is missing on the landing page. Overall, the site is functional but requires urgent security improvements to meet modern standards.

The website hoyer-jubilaeum.de currently serves a 404 error page indicating that no site configuration is found, rendering the site inaccessible to users. The site is built on TYPO3 CMS but is not properly configured or published. There is no visible business content, contact information, or legal policies such as privacy or cookie policies. The technical infrastructure shows an Apache server with some security headers implemented; however, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, resulting in a poor security posture. Tracking scripts for Google Analytics and Usercentrics are present but without a consent mechanism, indicating non-compliance with privacy regulations. Overall, the site is non-functional and lacks essential business and security elements, leading to a very low trust and usability score.

cotac group operates as a medium-sized transportation service provider specializing in tank container services including cleaning, heating, repair, modifications, and depot management. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, targeting businesses requiring specialized tank container logistics and maintenance. The website is designed responsively and includes a cookie consent mechanism via Usercentrics, indicating attention to privacy compliance. Technically, the site uses Apache on Debian with a valid SSL certificate, though TLS protocols are outdated and some security headers could be better configured. No direct contact emails or phone numbers are provided, relying on contact forms for communication. The security posture is moderate with room for improvement in TLS support and incident response transparency. Overall, the website reflects a legitimate and professional business with a moderate risk profile and good digital maturity.