Security reports directory

Genuine Parts Company is a well-established global leader in the distribution of automotive and industrial replacement parts, founded in 1928. The company operates extensively across North America, Europe, and Australasia with a large workforce and numerous locations. Their business model focuses on providing quality parts and value-added solutions through a network of subsidiaries and partner brands such as NAPA and Motion. The website reflects a mature corporate presence with investor relations, sustainability reporting, and career opportunities prominently featured. Technically, the site is built on WordPress with common libraries and frameworks, and is hosted behind Cloudflare. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy compliance is addressed through a OneTrust cookie consent mechanism and a comprehensive privacy policy, but no explicit terms of service or security policies are found. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

The Österreichische Gesundheitskasse (ÖGK) operates as a major public health insurance provider in Austria, delivering comprehensive health insurance services and support to insured individuals, employers, and contract partners. The website serves as an official portal offering information, appointment scheduling, customer service, and career opportunities, targeting Austrian residents and stakeholders in the healthcare sector. The digital presence is supported by a modern technology stack including Apache, Jakarta Faces, and jQuery, managed via a Gentics CMS platform, and hosted within the Austrian social insurance infrastructure. Despite a professional and content-rich website, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. The site implements a strong Content Security Policy and cookie consent mechanisms, reflecting good privacy compliance, but the lack of HTTPS and TLS protocols is a critical vulnerability. Social media integration and clear contact information enhance trust and user engagement. Overall, the website is functional and credible but requires urgent security improvements to protect user data and comply with modern standards.

Dorotheum GmbH & Co KG operates the largest auction house in Central Europe, specializing in art, antiques, jewelry, and collectibles with over 300 years of experience. The company holds numerous auctions annually, both online and in physical salerooms, and offers additional services such as private sales and expert consultations. The website is professionally designed, content-rich, and targets collectors, buyers, and sellers in the art and luxury goods market primarily in Austria and surrounding regions. Technically, the site is built on TYPO3 CMS with modern frontend libraries and integrates analytics and marketing tools like Google Tag Manager and Facebook Pixel. However, the absence of a valid SSL certificate and lack of security headers represent significant security weaknesses. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent improvements in security posture to protect user data and enhance trust.

Bühler Group is a well-established enterprise specializing in manufacturing and technology solutions primarily for the food processing and advanced materials industries. The company offers a broad portfolio of industrial solutions, including extrusion, milling, and process technologies, supported by global services such as maintenance, expert consulting, and training centers. Their website reflects a mature digital presence with consistent branding and comprehensive corporate governance information. Technically, the site is built on Adobe Experience Manager and hosted on AWS infrastructure with CloudFront CDN, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms on forms. Overall, Bühler Group's website demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

Irish Bank Resolution Corporation Limited (IBRC) is a financial institution currently in special liquidation, managing the orderly conclusion of its liquidation process. The website serves primarily as an informational portal to communicate the status of the liquidation, provide contact details, and notify stakeholders about deadlines for deeds of release and edischarges. The business operates under the supervision of the Central Bank of Ireland and is a successor to Irish Nationwide Building Society and Anglo Irish Bank Corporation Limited. The target audience includes creditors, impacted customers, and parties requiring documentation related to the liquidation. Technically, the website is built on Microsoft IIS with ASP.NET and uses Google Analytics for tracking. The hosting IP suggests Amazon AWS infrastructure. However, the site lacks a valid SSL/TLS certificate, serving content over HTTP only, which significantly impacts security posture. The site has basic design and content quality, reflecting its winding-down status, with limited interactivity and no forms. SEO and accessibility features are minimal. From a security perspective, the absence of HTTPS and security headers, lack of DNSSEC and CAA records, and no vulnerability disclosure policy indicate a low security maturity level. While no active vulnerabilities or malware were detected, the site is exposed to risks due to missing encryption and security best practices. Privacy compliance is partial, with a data protection notice available but no cookie consent mechanism despite use of Google Analytics. Overall, the website presents moderate business credibility but suffers from critical security shortcomings. Strategic improvements in SSL implementation, security headers, and privacy compliance are recommended to enhance trust and protect visitors. Given the nature of the business in liquidation, the website's limited functionality and content are understandable but should still meet basic security standards.

Amiblu Group operates as the world's largest producer and technology partner for GRP (glass-fiber reinforced plastics) pipe systems, focusing on sustainable water infrastructure solutions. The company targets urban and rural communities, industries, and infrastructure planners, offering a broad portfolio of pipe products, technical documentation, and reference databases. Their market position is strong, supported by certifications such as EcoVadis and partnerships like the UNESCO World Engineering Day 2025. The website reflects a mature, well-established business with a professional and consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including caching and multilingual support. However, performance is moderate and accessibility is basic. The site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. Security headers are minimal, and no advanced security policies are implemented. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing users to potential risks. No incident response or security policy information is publicly available. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

Wiener Privatbank is a medium-sized Austrian private bank specializing in wealth and asset management, capital market investments, and real estate. The bank emphasizes personalized service, crisis-proof investment strategies, and trusted FATCA solutions. The website is built on a modern CMS platform (Craft CMS) with SEOmatic for SEO optimization and includes rich content and clear navigation targeting private banking clients and investors. However, the absence of a valid SSL certificate and HTTPS support is a critical security vulnerability that undermines user trust and data protection. While privacy policies are present and GDPR compliance appears addressed, no cookie consent mechanism or terms of service were found. Social media presence on Facebook, LinkedIn, and YouTube supports brand visibility. Overall, the website demonstrates good business credibility and content quality but requires urgent security improvements to protect users and enhance trust.

TeCoB GmbH's website is currently under construction and provides minimal information about the company or its services. The site uses WordPress with an under construction plugin and basic frontend technologies such as Bootstrap and Font Awesome. The domain is registered in Austria and DNS records are properly configured, including MX records pointing to Outlook mail protection. However, the website lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security and trust. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available, limiting user engagement and compliance with data protection regulations. Performance is poor with a very slow load time, and no analytics or tracking technologies are detected.

The website proz.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to proceed. This prevents access to any substantive content, including business information, policies, or contact details. The domain is registered and uses Cloudflare for DNS and security, with email services routed through Google and marketing integrations via HubSpot and SendGrid. However, the SSL/TLS configuration is invalid or missing, which is a critical security concern. No privacy or cookie policies are detectable, and no contact information is available on the challenge page. Overall, the site’s security posture is limited by the lack of valid HTTPS and the blocking of content by the WAF, resulting in a low trust and usability score.

Werner Mertz Professional is a medium-sized manufacturing company specializing in high-performance hygiene solutions for professional cleaning markets. With over 50 years of history and a strong commitment to sustainability, the company operates under well-known brands such as Green Care Professional and Tana Professional. The website reflects a mature digital presence with comprehensive content, professional design, and strong SEO practices. However, the lack of a valid SSL certificate and proper HTTPS configuration represents a significant security risk that undermines user trust and data protection. The company has implemented cookie consent mechanisms and privacy policies compliant with GDPR, indicating awareness of privacy regulations. Overall, the business is credible and well-positioned in its sector but must urgently address its security posture to meet modern standards.

The website for airberlin.com currently serves as a minimal placeholder 'Coming Soon' page referencing insolvency information for AirBerlin PLC & Co. Luftverkehrs KG, a former airline company. The site lacks substantive business content, contact information, and user engagement features, reflecting the company's insolvency status and inactive operations. Technically, the site uses Tailwind CSS for styling and is hosted on Hetzner infrastructure, but suffers from poor performance with a high load time and lacks modern web optimizations. Critically, the site does not have a valid SSL certificate and is served over HTTP only, exposing users to security risks. No privacy, cookie, or terms of service policies are present, and no contact or social media links are provided, limiting transparency and user trust. Overall, the website's security posture is weak, with no HTTPS, no security headers, and no advanced DNS security features enabled.

Rosenfelt & West Engineering A/S is a Danish engineering company specializing in railway safety systems, including automatic secured level crossings and marshalling yard safety installations. The company offers comprehensive services such as equipment renovation, training courses, and career opportunities within the railway safety sector. Their market position is supported by certifications in environmental management, quality management, and railway safety standards, reflecting a commitment to reliability and compliance. Technically, the website is built on WordPress with common plugins and hosted on a LiteSpeed server, but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS and related security headers exposes the site and its visitors to potential risks. Privacy compliance is partial, with a privacy policy present but no cookie policy or consent mechanism detected. Contact information is limited to a phone number and contact page link, with no email addresses or social media profiles found. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and enhance trust.

Stefanel is a European retail and e-commerce brand specializing in women's fashion, operating a multi-country website with localized country selectors. The business targets European consumers seeking stylish women's clothing. The website is built on the Salesforce Commerce Cloud (Demandware) platform and uses various marketing and analytics tools including Google Tag Manager, CQuotient, and LiveStory. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security flaw. Privacy compliance is partially addressed with a OneTrust cookie consent mechanism, but no privacy policy or terms of service are found on the splash page. Contact information is also absent, limiting user trust and support options.

The website kainhofer.eu is currently inaccessible due to an HTTP 403 Forbidden error, indicating that access to the content is denied. The domain is registered with IONOS SE, a reputable registrar and hosting provider, and DNS records are properly configured. However, the lack of a valid SSL/TLS certificate and absence of HTTPS support significantly reduce the security posture of the site. No business or contact information, privacy policies, or terms of service are available on the site, limiting the ability to assess the company's operations or compliance status. The website performance is poor with a very slow load time despite minimal content, and no modern web technologies or analytics tools are detected.

Stellantis NV operates a comprehensive global website representing one of the world's largest automotive groups with a portfolio of 14 iconic brands and mobility services. The site targets industry stakeholders, investors, customers, and the general public, providing rich content including press releases, investor relations, sustainability initiatives, and innovation highlights. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries like jQuery, and performance monitoring tools such as Boomerang, hosted on Microsoft Azure with Akamai CDN integration. While the website demonstrates excellent design quality, mobile optimization, and SEO practices, it critically lacks a valid SSL certificate and HTTPS support, severely impacting its security posture. Security headers are partially implemented but insufficient without TLS encryption. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is strong with consistent branding and comprehensive content. Overall, the site scores moderately due to the critical absence of HTTPS, which should be prioritized to protect user data and maintain trust.

HAKOM Time Series GmbH is a medium-sized Austrian company specializing in time series management software and cloud services for the energy sector. The company positions itself as a technology leader with over 30 years of experience, offering both on-premises and cloud-based solutions under the PowerTSM® brand. Their website reflects a professional and comprehensive digital presence, targeting energy industry professionals and IT developers with detailed product information, news, webinars, and customer success stories. The company maintains active engagement through social media and newsletter subscriptions. Technically, the website is built on TYPO3 CMS and uses modern web technologies including jQuery and Swiper.js for interactive content. The hosting provider is identified as Web-Crossing. While the site is mobile-optimized and SEO-friendly with proper metadata and structured data, performance metrics are not explicitly available. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy in German. From a security perspective, the site lacks a valid SSL/TLS certificate and does not support modern TLS protocols, which is a critical vulnerability impacting user trust and data security. Security headers such as HSTS and CSP are present but cannot compensate for the missing HTTPS encryption. No explicit security policy or incident response information is found, which could be improved to enhance transparency and trust. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to meet modern security standards and protect user data effectively. Strategic recommendations include obtaining a valid SSL certificate, enabling TLS 1.2/1.3, and enhancing security policies and incident response disclosures.

BFI Salzburg BildungsGmbH is a prominent educational institution in Salzburg, Austria, offering a wide range of courses, certifications, and educational services targeting individuals and companies seeking professional development. The website demonstrates a comprehensive and well-structured presentation of their offerings, including course programs, school qualifications, health and nursing professions, and corporate services. The digital infrastructure is built on Pimcore CMS and served via nginx, with Matomo analytics implemented for privacy-conscious user tracking. However, the absence of a valid SSL/TLS certificate and HTTPS significantly undermines the site's security posture, exposing users to potential risks. Privacy policies and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements.

NGS Global is a partner-led executive search and leadership advisory firm with a global presence spanning the Americas, Europe, Asia Pacific, Africa, and the Middle East. The company offers personalized executive search services leveraging a mid-sized platform that combines the resources of major global firms with high-touch client service. Their key services include executive search, leadership consulting, and industry-specific expertise across multiple sectors. Technically, the website is built on Joomla CMS with modern JavaScript libraries and frameworks such as jQuery and Bootstrap, but suffers from a lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security posture. The site implements cookie consent via Cookiebot and uses Google Analytics and ZoomInfo for tracking, indicating moderate digital maturity. Security headers are partially implemented, but critical vulnerabilities exist due to the absence of SSL/TLS encryption. Overall, the website presents professional content and a clear business model but requires urgent security improvements to protect user data and enhance trust.

TEUFELBERGER Ges.m.b.H. is a family-owned, international manufacturing group specializing in fiber ropes, steel wire ropes, and strapping solutions. The company serves industrial sectors including construction, marine, mining, forestry, and safety equipment, positioning itself as a diversified leader in rope manufacturing. Their website reflects a comprehensive product catalog and detailed service offerings, targeting industrial clients globally. Technically, the website is built on Magento Commerce with modern JavaScript libraries and marketing tools such as Google Tag Manager and MailerLite, indicating a mature digital infrastructure. However, performance metrics are lacking, and the site currently lacks a valid SSL certificate, which is a critical security deficiency. Security headers are present but the absence of HTTPS and modern TLS protocols significantly weakens the security posture. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators are evident. Contact information is transparent and includes physical address, phone numbers, and company emails, enhancing business credibility. Overall, while the business and content quality are strong, urgent improvements in SSL/TLS configuration and security practices are recommended to protect user data and improve trust.

Heidelberger Druckmaschinen AG (HEIDELBERG) is a globally recognized leader in the manufacturing and supply of printing and packaging solutions, including offset and digital printing technologies, post-press packaging machines, and related software and services. The company targets commercial, packaging, and label printing companies worldwide, positioning itself as a market leader with a comprehensive product and service portfolio. The website reflects a mature digital presence with rich content, clear navigation, and strong branding, supporting its enterprise-level stature. Technically, the site uses modern web technologies and tracking tools but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security gap. Security headers are present but ineffective without SSL, and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism despite tracking scripts. WHOIS data confirms domain legitimacy and consistency with the company’s identity. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

BBMRI-ERIC is a European research infrastructure focused on biobanking and biomolecular resources, supporting researchers in health and life sciences to find new treatments. Established in 2013 and headquartered in Graz, Austria, it provides a range of services including a directory of biobank metadata, federated platforms for privacy-preserving data queries, and quality management. The website reflects a mature organization with consistent branding and professional content aimed at the scientific community. Technically, the site is built on WordPress with a variety of plugins supporting SEO, newsletter management, and social media integration. However, the site lacks HTTPS and a valid SSL certificate, which is a critical security vulnerability. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy but requires urgent security improvements to protect user data and maintain credibility.

Microlife AG is a well-established Swiss company specializing in the development and production of medical diagnostic devices such as blood pressure monitors, thermometers, and respiratory therapy equipment. The company holds a strong market position as a world leader in healthcare technology, targeting both home users and healthcare institutions. Their website reflects a professional and consistent brand image with multilingual support and a comprehensive product portfolio. Technically, the website uses modern JavaScript and tracking tools but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS undermines user trust and exposes data to interception risks. Privacy compliance is well addressed with a cookie consent mechanism and clear privacy policies. However, no explicit security or incident response policies are publicly available. Overall, the site is functional and informative but requires urgent security improvements to align with best practices and user expectations.

KATZBECK FensterGmbH Austria is a well-established manufacturer specializing in high-quality, custom windows and doors produced exclusively in Austria since 1950. The company emphasizes sustainability, regional production, and premium craftsmanship, targeting both end consumers and professional partners within Austria. Their website reflects a mature digital presence built on WordPress with the Divi theme, incorporating modern web technologies and user-friendly design. However, a critical security gap exists due to the absence of an SSL/TLS certificate, exposing users to potential risks. The site implements GDPR-compliant privacy and cookie policies, with clear contact channels and a professional content structure. To enhance trust and security, immediate implementation of HTTPS and additional security headers is recommended.

The website raye7.com currently serves as a minimal placeholder with no substantive content beyond a client-side redirect to a /lander path. There is no visible business information, metadata, or user-facing content to analyze. The domain is registered and active but lacks a valid SSL certificate, resulting in no HTTPS support and a poor security posture. DNS records are basic with no DNSSEC or CAA records, and MX records point to smtp.google.com, which may be a misconfiguration. Overall, the site appears to be under development or inactive. From a technical perspective, the infrastructure is minimal with hosting likely on Amazon AWS based on IP addresses. No modern web technologies, frameworks, or CMS platforms are detected. Performance metrics are unavailable due to lack of content. Security best practices are not implemented, with no security headers, no HSTS, and no certificate transparency compliance. Security posture is weak, with critical issues including lack of HTTPS and absence of security policies or headers. No privacy or cookie policies are present, indicating non-compliance with GDPR or other privacy regulations. No contact or business information is available, limiting trust and credibility. Given these factors, the overall risk is elevated due to lack of security controls and transparency. Strategic recommendations include immediate implementation of HTTPS, deployment of security headers, addition of privacy and cookie policies, and publication of business and contact information to improve trust and compliance.

Hair & Makeup by Lois Poulsen is a small Australian business specializing in professional hair and makeup services primarily for weddings, formals, special events, and photo shoots in the Brisbane and Gold Coast regions. The website presents a clear business focus with detailed service descriptions and customer testimonials, targeting individuals seeking mobile and venue-based beauty services. The technical infrastructure is based on Joomla CMS with modern frontend libraries such as Bootstrap and jQuery, hosted on a LiteSpeed server. However, the website lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security and trustworthiness. Security headers are minimal, and no advanced security or privacy policies are present. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Overall, the site is functional and professionally presented but requires urgent security and compliance improvements.

HANRO is a well-established luxury brand specializing in premium underwear, nightwear, and loungewear for both women and men, with a history dating back to 1884. The company operates a global retail and e-commerce presence, offering high-quality products certified by OEKO-TEX standards and emphasizing sustainable European production. Technically, the website is built on Magento 2 and uses modern marketing and consent management tools, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security flaw. Privacy compliance is strong with clear policies and consent mechanisms. Security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Overall, the site is professional and trustworthy but urgently needs to address its SSL and security header deficiencies to improve user trust and security.

Englisch Dekor is a well-established Austrian company specializing in the manufacturing and supply of flame-retardant furniture fabrics, curtains, and decorative textiles primarily for the hospitality, gastronomy, and healthcare sectors. With a history dating back to 1866, the company holds a leading position in the European market, offering a wide range of functional and sustainable textile solutions. Their business model focuses on B2B sales supported by a comprehensive global network of sales representatives and an online webshop. Technically, the website is built on TYPO3 CMS and hosted on Apache servers managed by internex.at. The site features modern interactive elements such as global contact maps and language selection, with good mobile optimization and accessibility. However, performance metrics indicate slow loading times, which could be improved. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability. While several security headers are present, the absence of HTTPS significantly impacts the overall security posture. The site implements a cookie consent mechanism with detailed cookie information, indicating good privacy compliance. Contact information is comprehensive and includes multiple regional sales contacts. Overall, the website is professionally designed and content-rich, reflecting a mature business with strong market presence. However, the lack of proper SSL/TLS configuration poses a significant risk that should be addressed promptly to ensure secure communications and maintain trust.

Melitta is a well-established company specializing in coffee products and related services, operating a professional website that serves both consumers and B2B partners. The site provides comprehensive information about the company, its sustainability initiatives, and customer service options, supported by a consistent brand presence and active social media engagement. The technical infrastructure leverages modern JavaScript libraries, Google Analytics, and Cloudflare CDN services, with good mobile optimization and accessibility features implemented via a third-party widget. However, the website's security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is functional and professional but requires urgent remediation of SSL and TLS issues to improve security and trustworthiness.

The American Austrian Foundation is a well-established non-profit organization dedicated to fostering knowledge transfer and experience exchange in medicine, culture, and media through fellowship programs and bilateral exchanges. The website reflects a professional and consistent brand with clear program offerings and international reach. Technically, the site is built on WordPress with Elementor and uses modern web technologies, but suffers from a critical lack of HTTPS, which undermines security and user trust. The security posture is weak due to the absence of a valid SSL certificate and missing security headers, although no major vulnerabilities were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is strong, supported by trust badges and consistent WHOIS data. Overall, the site is functional and informative but requires urgent security improvements to protect users and enhance trust.

Research Industrial Systems Engineering (RISE) is a well-established independent IT service provider and system integrator based in Austria, with a strong European presence and multiple offices across Europe. The company specializes in planning and implementing large-scale IT systems, offering a broad range of engineering, operational, and research services. Their key markets include energy, transportation, banking, healthcare, telecommunications, and government sectors. RISE emphasizes 100% European value creation and maintains a large team of highly qualified technical experts. Technically, the website uses modern frameworks and libraries such as Bootstrap, jQuery, GSAP, Swiper, and Lottie Player, and employs Matomo for analytics, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines the overall security posture. Security headers are present but cannot compensate for the lack of encryption. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich but requires urgent improvements in security to protect users and data.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Julius Meinl is a well-established premium coffee and tea company with a rich heritage dating back to 1862. The company operates globally, targeting both business customers such as coffee houses, hotels, and restaurants, as well as home consumers. Their offerings include high-quality coffee and tea products, professional equipment, and tailored services including training. The website reflects a strong brand identity consistent with their market position as a premium hospitality supplier. Technically, the site is built on Microsoft IIS with ASP.NET and Kentico CMS, hosted on Azure, and integrates modern analytics and marketing tools. However, the site suffers from a critical security issue due to an invalid SSL certificate, resulting in no HTTPS availability, which significantly impacts user trust and security posture. Privacy compliance is partial, with no visible cookie consent mechanism despite tracking scripts. Contact information is primarily via forms and social media, with no explicit emails or phone numbers published. Overall, the site is professional and content-rich but requires urgent security improvements.

Virtual Identity AG is a well-established digital agency founded in 1999, specializing in AI integration, UX design, software engineering, and digital marketing services. The company targets businesses aiming for digital transformation and human-centered business growth. Their market position is strong, supported by a reputable client portfolio and consistent branding. Technically, the website is built on WordPress, hosted on AWS CloudFront, and uses modern JavaScript libraries and SEO tools, though performance is moderate. Security posture is currently weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses risks to data confidentiality and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent security improvements to meet modern standards.

Breitenfeld Edelstahl AG is a well-established Austrian manufacturer specializing in high-quality stainless steel and forged products, serving metal processing companies primarily in the manufacturing, energy, and transportation sectors. The company emphasizes environmentally friendly steel production using electric steelmaking processes and holds recognized certifications such as EN 9100, ISO 9001, and ISO 14001. Their digital presence is built on the HubSpot CMS platform, leveraging Cloudflare for hosting and content delivery. While the website is professionally designed with good content quality and navigation, there is a critical security gap due to the absence of a valid SSL certificate and HTTPS enforcement, which poses risks to user data confidentiality and trust. Privacy compliance is basic, with no visible cookie consent mechanisms or detailed privacy policies on the main site. Overall, the business credibility is high, supported by certifications and a consistent brand presence, but technical and security improvements are necessary to enhance trust and compliance.

AirPlus operates as a global enterprise specializing in corporate travel payment and expense management solutions. The company targets business travelers and corporate clients worldwide, offering localized website versions for multiple countries and languages. The business model focuses on B2B services within the transportation sector, positioning AirPlus as an established player in the corporate travel payment industry. Technically, the website is hosted on an Apache server with Akamai CDN support, utilizing JavaScript and Bootstrap frameworks for frontend presentation. While the site offers multilingual support and country-specific content, performance metrics are not provided, and the site shows basic mobile optimization and accessibility features. The technical stack is modern but lacks advanced CMS or platform indicators. From a security perspective, the website lacks a valid SSL certificate and does not enable any TLS protocols, which is a critical vulnerability. Although several security headers are present, some important protections like X-XSS-Protection are disabled, and HSTS is not fully configured. The site uses multiple external tracking and advertising services, leading to extensive user tracking without visible privacy or cookie policies, indicating poor privacy compliance. Overall, the website demonstrates moderate business credibility but suffers from significant security and privacy shortcomings. Strategic improvements in SSL/TLS configuration, privacy policy implementation, and security header enhancements are essential to reduce risk and improve trustworthiness.

Watts LLC is a well-established enterprise manufacturing and supplying plumbing, heating, water quality, drainage, and HVAC solutions globally. Founded in 1874 and headquartered in North Andover, Massachusetts, the company operates a broad portfolio of subsidiary brands and targets professionals and businesses in water technology sectors. The website reflects a mature digital presence with comprehensive content, strong branding consistency, and clear navigation tailored for a professional audience. Technically, the site leverages Sitecore CMS, Cloudflare hosting, and modern JavaScript libraries to deliver a good user experience with mobile optimization and accessibility features. However, the security posture is notably weak due to the absence of a valid SSL certificate and HTTPS support, which poses significant risks to user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but requires urgent security improvements to align with best practices.

Merkur.si is a large Slovenian retail company specializing in home improvement, construction, gardening, personal care, and energy solutions. The company operates both physical stores and an extensive e-commerce platform, offering a wide range of products and services including financing options and expert consultations. The website is well-designed, user-friendly, and rich in content, targeting Slovenian consumers and businesses. Technically, the site is built on Magento with modern JavaScript frameworks and integrates multiple third-party marketing and analytics tools. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing users to potential risks. The site implements several security headers and privacy policies with consent mechanisms, indicating good privacy compliance. Overall, the business is legitimate and well-established, but urgent improvements in SSL/TLS implementation are recommended to enhance security and trust.

The website daqri.com is currently inaccessible beyond a minimal HTML page that immediately redirects to /lander, with no further content available for analysis. The domain is registered and resolves to IP addresses likely hosted on Amazon AWS, but the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. No metadata, business information, contact details, or privacy and cookie policies are present, indicating a very low digital maturity level. The absence of security headers and DNS security features further weakens the security posture. Overall, the site appears to be either under maintenance, improperly configured, or protected by a security mechanism that blocks content access. This results in a low trust and credibility score and significant risk from a security and compliance perspective.

Intemann GmbH is a medium-sized Austrian company specializing in technical building services across multiple sectors including energy, industrial plants, commercial and residential construction, and hospitality. The company offers comprehensive services such as planning, prefabrication, ventilation technology, and maintenance. Their market position is that of an established regional player with international project reach, supported by a consistent brand presence and certifications. Technically, the website is built on TYPO3 CMS with a modern JavaScript stack but lacks HTTPS, which is a critical security shortfall. The site includes cookie consent mechanisms and clear contact information, supporting GDPR compliance. However, the absence of SSL/TLS and security policies reduces the overall security posture. Strategic improvements in security infrastructure and incident response readiness are recommended to enhance trust and compliance.

elektrabregenz.com is the official website of a large Austrian household appliance brand, part of the Beko corporate group. The site offers a comprehensive product catalog including cooling, cooking, dishwashing, and laundry appliances, targeting both consumers and retailers in Austria and German-speaking regions. The business is positioned as a major player in the European white goods market with a strong parent company backing and a wide product range. Technically, the website is built on Adobe Experience Manager and delivered via Akamai CDN, with modern marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the absence of a valid SSL/TLS certificate is a critical security gap, exposing users to potential risks and undermining trust. Privacy policies and cookie consent mechanisms are present and well-implemented, supporting GDPR compliance. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to enable HTTPS and modern TLS protocols.

Foggia Città Aperta is a local news media website providing news, videos, blogs, and event information focused on the Foggia province in Italy. Established in 2012, it serves a regional audience with content spanning politics, sports, culture, and society. The website demonstrates a consistent brand presence and active social media engagement. Technically, the site uses a variety of JavaScript libraries and frameworks such as jQuery and Bootstrap, hosted on Aruba infrastructure. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Cookie consent is implemented, but privacy policies are basic and lack comprehensive GDPR compliance indicators. No explicit security or incident response policies are found. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and enhance trust.

automate-it is an Austrian software and services company specializing in datacenter automation and hybrid cloud management through its LEON platform. The company has established a solid market presence with active customers in EMEA and partnerships with notable firms such as BMC Software. The website reflects a professional business focus with comprehensive content describing their automation and SecOps solutions. Technically, the website is built on WordPress with modern plugins and SEO optimizations but lacks HTTPS support, which is a critical security deficiency. Security headers are well configured, but the absence of SSL/TLS and HSTS significantly lowers the security posture. Privacy and cookie policies are present and GDPR compliant, though no explicit security or incident response policies are published. Overall, the website is functional and professional but requires urgent security improvements to enhance trust and compliance.

Trenkwalder Group AG is a large, established HR services provider operating across multiple European countries. The company offers a range of services including HR service, outsourcing, and technology solutions, targeting both job seekers and corporate clients. Their digital presence is supported by modern web technologies such as Next.js and Storyblok CMS, hosted likely on Microsoft Azure infrastructure. The website is professionally designed with good content quality and clear navigation, supporting multiple languages and country-specific domains. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Security headers are well implemented but cannot compensate for the lack of encryption. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service detected. The company maintains a strong social media presence and provides clear contact information, enhancing business credibility. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to meet modern standards.

Modehaus Kutsam is a well-established family-owned fashion retailer based in Austria with a history spanning over 65 years. The company operates multiple physical stores and offers a broad range of fashion products for men and women, including personal shopping services and a customer club app. Their website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Analytics and PushOwl for marketing and analytics. The site is well-designed, mobile-optimized, and provides comprehensive product and brand information, reflecting a mature digital presence. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses risks to user data confidentiality and trust. Privacy policies and cookie consent mechanisms are in place, indicating good compliance with GDPR requirements. Overall, the business demonstrates strong credibility and professionalism, but should prioritize fixing SSL issues to enhance security and user trust.

Theater Phönix is a cultural non-profit theater organization based in Linz, Austria, offering a diverse range of stage performances with a focus on contemporary and socially relevant works. The website presents a professional and well-structured digital presence with clear navigation, social media integration, and community engagement features such as newsletters and surveys. However, the technical infrastructure shows critical security gaps, notably the absence of HTTPS and a valid SSL certificate, which significantly impacts the site's security posture. The lack of published security policies and incident response information further highlights areas for improvement. Overall, the business appears legitimate and consistent with its domain registration, but urgent security enhancements are recommended to protect user data and improve trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

DS AUTOMOTION GmbH is a medium-sized Austrian company specializing in the development and manufacture of driverless transport systems and autonomous mobile robotics, with nearly 40 years of experience. The company operates internationally and is part of the SSI Schaefer Group, enhancing its market position. Their key offerings include automated guided vehicles (AGVs), autonomous mobile robots (AMRs), fleet management software (NAVIOS), and custom vehicle solutions tailored to various industries such as manufacturing and intralogistics. The website reflects a professional and modern digital presence built on TYPO3 CMS, featuring responsive design and good SEO practices. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture.

rmDATA GmbH is a well-established technology company specializing in intelligent software and customized services for geomatics, surveying, information systems, data management, and reality capturing. With a history spanning over 40 years, rmDATA serves clients primarily in Austria, Germany, and Switzerland, offering comprehensive solutions for infrastructure and land management. The company operates a professional website powered by TYPO3 CMS, featuring rich content, clear navigation, and strong branding consistency. Their digital presence includes active social media channels and detailed business information, supporting a medium-sized enterprise profile. Technically, the website employs modern web technologies such as jQuery, Slick Carousel, and FontAwesome, integrated with marketing and analytics tools including Microsoft Dynamics 365 and Google Analytics Tag Manager. Despite these strengths, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts its security posture. Security headers are well configured, but the absence of encryption and TLS protocols is a critical vulnerability. From a security and compliance perspective, rmDATA demonstrates good privacy practices with comprehensive privacy and cookie policies, including a consent mechanism aligned with GDPR requirements. However, there is no visible security policy, incident response information, or vulnerability disclosure page. The WHOIS data confirms domain legitimacy and consistency with the company's business claims, enhancing trustworthiness. Overall, rmDATA's website is professional and content-rich but requires urgent security improvements, particularly implementing HTTPS to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing security transparency to align with best practices and regulatory expectations.

Studio Snap is a small photography service business with a website built on the GoDaddy Website Builder platform. The site presents a simple business description emphasizing timeless photography and friendly service, targeting local photography clients. The technical infrastructure relies on GoDaddy hosting and includes Google reCAPTCHA for form protection. However, the website lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. No privacy policy or terms of service pages are present, and contact information is limited to a contact form without direct emails or phone numbers. The site performance is slow, and security headers are absent, indicating a basic security posture. Overall, the business appears legitimate but is in an early stage with room for significant improvements in security and compliance.

RAG Austria AG is Austria's largest energy storage company and a leading technical storage operator in Europe, specializing in the storage, conversion, and conditioning of gaseous energy carriers with a strong focus on renewable gases such as hydrogen. The company has a well-established market position with a history spanning over 90 years and operates multiple subsidiaries and partnerships in the energy sector. Technically, the website is built on TYPO3 CMS and uses modern tools like Usercentrics for cookie consent and Matomo for analytics, reflecting a moderate digital maturity. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS, which significantly impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the company presents a professional and trustworthy online presence but must urgently address its SSL/TLS configuration to improve security and trust.