Security reports directory

Netz Burgenland GmbH operates as a regional energy network operator in Burgenland, Austria, providing reliable electricity and gas distribution services. The company emphasizes customer service and offers a range of services including smart metering, energy communities, and infrastructure support. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Next.js and React, hosted on AWS infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. While contact information and business legitimacy are clearly established, privacy compliance could be improved by implementing cookie consent mechanisms and publishing security policies. Overall, the site is content-rich and trustworthy but requires urgent security enhancements to protect user data and maintain trust.

AES Hawai‘i is a regional branch of the global AES Corporation, focused on accelerating the transition to renewable and clean energy solutions in Hawai‘i. The company operates multiple renewable energy projects and emphasizes sustainability, community partnerships, and innovation. The website is professionally designed using Drupal 10 and modern web technologies, providing a rich user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, security headers, and a content security policy, though improvements such as enabling full HSTS and OCSP stapling are recommended. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site reflects a mature digital presence aligned with the company's business goals and market position.

Related:aesandes.comaesbulgaria.com

drivebeem is an Austrian company specializing in electric vehicle subscriptions, offering all-inclusive monthly plans that cover vehicle costs, insurance, maintenance, and charging solutions. The company targets both private customers and businesses, providing flexible subscription durations and additional services such as wallbox installations and photovoltaic energy solutions. The website is professionally designed with clear navigation and comprehensive content, including detailed FAQs and legal documentation. Technically, the site uses modern frameworks like Next.js and React, with content managed via a WordPress headless CMS. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are partially implemented, but critical TLS protocols and certificate transparency are missing. Privacy compliance is generally good with a clear privacy policy, though no cookie consent mechanism was detected. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires urgent security improvements to protect user data and build trust.

AES Vietnam operates as a regional branch of The AES Corporation, a global energy company focused on delivering sustainable and clean energy solutions. The website reflects a mature digital presence with comprehensive content in Vietnamese, targeting energy sector stakeholders and community partners. The company emphasizes sustainability, innovation, and community development as core pillars of its business model. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is solid with HTTPS and multiple security headers, though TLS protocols are not enabled, which is a notable gap. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the corporate identity, supporting legitimacy. Overall, the site presents a professional, trustworthy, and well-maintained digital asset for AES Vietnam.

SonnenAbo is a regional energy service provider based in Austria offering local solar power subscriptions through community photovoltaic parks. The business model focuses on enabling residents to access renewable energy without upfront investment, promoting sustainability and energy community membership. The website is professionally designed using modern web technologies such as Next.js and hosted on AWS infrastructure. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical security vulnerability. Additionally, no cookie consent mechanism is present despite the use of Google Tag Manager, indicating partial privacy compliance. Contact information is available primarily as a physical address and contact page, but no direct emails or phone numbers are exposed. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

AES Puerto Rico operates as a regional subsidiary of The AES Corporation, focusing on accelerating the future of energy through sustainable and smart energy solutions. The website demonstrates a strong market position in the energy sector with a clear emphasis on clean energy, community partnerships, and innovation. The company targets energy consumers, businesses, and community stakeholders in Puerto Rico and related AES markets. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities, although some improvements in SSL configuration and security policy transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's global and local energy initiatives.

Fanclub Burgenland Energieunabhängig is a regional energy community initiative based in Burgenland, Austria, focused on promoting renewable energy usage through wind and solar power. The organization offers membership benefits including access to renewable energy at attractive prices, participation in regional energy projects, and digital services to support energy independence. The website is well-designed, content-rich, and targets residents, businesses, and municipalities interested in sustainable energy solutions. Technically, the site uses modern web frameworks such as Next.js and is hosted on AWS infrastructure, but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy and explicit data processing consents in forms. Contact information is clearly provided, enhancing business credibility. However, the lack of cookie consent mechanisms and security headers reduces the overall security posture. Strategic improvements in SSL deployment and security best practices are recommended to enhance trust and compliance.

Related:sonnenabo.at

AES Panama is a regional branch of The AES Corporation, a large multinational energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website targets energy consumers, business clients, investors, and community partners primarily in Panama and other global markets. The company emphasizes community investment, sustainability, and advanced energy technologies. Technically, the website is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support despite security headers and policies being in place. Privacy and cookie policies are present and indicate some GDPR compliance, but no explicit incident response or security policy pages were found. The domain registration data is consistent and trustworthy, with no signs of suspicious activity. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

BE.funkt is a telecommunications service provider offering affordable mobile and internet tariffs primarily targeting consumers in Austria. The business operates as a joint project between Burgenland Energie and A1 Telekom Austria AG, leveraging the A1 network to provide 5G mobile services, eSIM options, and hardware sales such as smartphones and 5G webcubes. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Swiper.js, ensuring good mobile optimization and user experience. However, the absence of a valid SSL/TLS certificate is a critical security flaw, exposing users to insecure connections. The site implements a cookie consent modal indicating some privacy compliance efforts, but lacks a visible privacy policy page and security policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

AES Ohio operates as a regional energy utility under The AES Corporation, providing electricity services and customer support to residential and commercial customers in Ohio. The website offers comprehensive information on energy supply options, billing, outages, safety, and sustainability initiatives. It leverages modern web technologies including Drupal 10 CMS and integrates multiple third-party analytics and marketing tools to enhance user engagement and service delivery. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well-established, indicating a commitment to compliance and user data protection. Overall, the site presents a professional and content-rich experience but requires urgent security improvements to align with best practices.

Related:aes.comaesandes.com

Security assessment incomplete. Successfully analyzed: nis2, emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

AES Indiana is a large regional energy provider operating under The AES Corporation, focused on delivering electric utility services to residential and business customers in Indiana. The website offers comprehensive information on billing, outages, energy saving, and company initiatives, reflecting a mature business model with significant investments in infrastructure and digital transformation. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. While security headers and content security policies are implemented, critical gaps remain in SSL configuration and incident response transparency. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance compliance.

AES El Salvador operates as a major energy provider in El Salvador, offering electricity distribution, generation, and energy solutions. The website reflects a well-established corporate entity with a broad service portfolio and strong community engagement. The technical infrastructure is modern, leveraging Drupal 10 CMS and multiple JavaScript libraries for enhanced user experience and analytics. However, the absence of a valid SSL certificate is a critical security gap, undermining the site's HTTPS security and potentially affecting user trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.

Related:aesandes.comaes.com

Storebrand is a well-established Nordic financial services group specializing in pensions, insurance, and asset management. With a history dating back to 1767 and assets under management exceeding 1,400 billion NOK, it holds a leading market position in Norway and the broader Nordic region. The website reflects a mature business with clear branding, comprehensive service offerings, and a focus on sustainability. Technically, the site uses modern frameworks such as Blazor and integrates with Salesforce and various analytics and marketing tools, indicating a high level of digital maturity. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms in place. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Related:spp.se

AES Dominicana is a regional subsidiary of The AES Corporation, focused on accelerating the future of energy through sustainable and innovative solutions in the Dominican Republic. The website presents a professional corporate image with comprehensive content about their products, sustainability initiatives, community partnerships, and investor relations. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security issue is the absence of a valid SSL certificate and HTTPS, which severely impacts the security posture. The site implements strong security headers and content security policies but lacks advanced SSL/TLS configurations and DNS security features. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is credible and professionally maintained but requires urgent security improvements to protect user data and trust.

Security assessment completed with an overall score of 0/100 (unknown risk). 1 critical issues require immediate attention. Total of 21 security findings identified across all modules.

AES Chile operates as a major energy company focused on accelerating the future of energy through sustainable and innovative solutions. The company emphasizes renewable energy, advanced energy networks, energy storage, and community partnerships. The website reflects a strong corporate presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site presents a professional and trustworthy image but requires urgent security improvements to protect users and data.

AES Bulgaria operates as a regional branch of The AES Corporation, a global energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website presents a professional corporate image emphasizing clean energy, sustainability, community partnerships, and employee engagement. The technical infrastructure is based on Drupal 10 CMS with modern frontend libraries and integrations with multiple analytics and marketing tools, indicating a mature digital presence. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. The site implements strong security headers and content security policies but lacks visible incident response or vulnerability disclosure information. Overall, the domain registration data aligns well with the corporate identity, supporting legitimacy. Strategic improvements in SSL deployment and security practices are recommended to enhance trust and compliance.

Related:aesandes.com

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

MSD Tiergesundheit Österreich operates as a prominent veterinary pharmaceutical provider in Austria, offering a broad range of veterinary medicines and vaccines. The website serves multiple target audiences including veterinarians and animal owners, providing product information, news, and educational resources. The business is part of the global Merck & Co., Inc. group, indicating a strong market position and established brand presence. The site features professional design, consistent branding, and comprehensive content tailored to the veterinary healthcare sector. Technically, the website is built on WordPress VIP with modern SEO and analytics integrations, but suffers from critical SSL/TLS deficiencies that undermine security and trust. Security headers are well implemented, but the absence of a valid SSL certificate and HTTPS support is a major vulnerability. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates good digital maturity but requires urgent security improvements to protect user data and maintain credibility.

Related:msd.at

Abzorba Games is a medium-sized technology company specializing in mobile social casino games, founded in 2011 in Greece. The company offers multiplayer casino titles and B2B partnership opportunities to leverage brand presence in the social gaming market. The website is built on WordPress with Elementor and targets mobile social casino players and industry partners. Technically, the site uses standard web technologies but lacks HTTPS, which is a critical security gap. The cookie consent mechanism is implemented via OneTrust, indicating awareness of privacy compliance. However, no explicit security or incident response policies are present. Overall, the site presents a professional business image but requires urgent security improvements to protect user data and enhance trust.

Compliance Praxis is Austria's largest compliance network providing comprehensive information media, partner networks, and events to support professionals in the expanding field of compliance. The website is professionally designed, content-rich, and targets compliance officers, legal experts, and organizations interested in compliance and ESG topics within Austria. Technically, the site runs on Gentics CMS with nginx server and integrates modern marketing and analytics tools such as Google Tag Manager and Mailchimp. However, the absence of a valid SSL certificate and HTTPS configuration represents a significant security vulnerability. Privacy and cookie policies are well implemented and GDPR compliant. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and trust.

Related:lexisnexis.at

HUMANIC is a well-established shoe retailer and manufacturer with over 150 years of history, operating both physical stores and online shops across multiple Central and Eastern European countries. The company offers a broad range of footwear and accessories targeting consumers seeking quality and variety. Their market position is strong, especially in Austria, with a recognized brand and customer loyalty programs. Technically, the website is built on SAP Commerce (Hybris) platform, leveraging modern marketing and analytics tools such as Google Analytics, Dynamic Yield, and Usercentrics for consent management. The site is hosted behind Cloudflare, ensuring basic security and performance benefits. Security posture is adequate with HTTPS enforced and several security headers present, although TLS protocols are outdated and some security enhancements like HSTS preload and OCSP stapling are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and functional, with room for technical and security improvements.

FluidLife is a German-language SaaS platform focused on corporate mobility and resource management, helping companies achieve sustainability goals through modular tools including routing, ride sharing, CO2 reporting, and employee motivation. The website is professionally designed with comprehensive content and clear navigation, targeting companies, municipalities, and NGOs primarily in Austria and German-speaking regions. Technically, the site is built on WordPress with modern SEO and analytics integrations but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy compliance is well addressed with cookie consent mechanisms and detailed privacy policies. Contact information and business details are clearly presented, enhancing credibility. However, the absence of HTTPS and modern security headers significantly lowers the security posture and overall trust score. Strategic improvements in SSL deployment and security hardening are essential to elevate the site's security and user trust.

Related:fluidtime.com

Boxcar is a regional transportation company specializing in commuter bus services and complementary local services such as grill cleaning, knife sharpening, and auto detailing. The company targets commuters in the New Jersey and New York City metropolitan area, offering reserved seating, Wi-Fi, and other amenities to enhance the commuting experience. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, positioning Boxcar as a trusted local transportation provider. Technically, the website is built on the Webflow platform, leveraging modern frontend technologies including jQuery and Google Fonts, and is hosted behind Cloudflare. While the site is mobile-optimized and well-structured, performance data is missing, and the SSL/TLS configuration is critically deficient, lacking a valid certificate and modern protocol support. This represents a significant security risk. From a security perspective, the absence of HTTPS and TLS protocols severely undermines the site's security posture, exposing users to potential data interception and undermining trust. Although privacy and terms of service policies are present and comprehensive, the lack of a cookie consent mechanism despite active tracking scripts indicates partial privacy compliance. Contact information is clearly provided, supporting business credibility. Overall, Boxcar's website demonstrates good content quality and business credibility but suffers from critical security shortcomings that must be addressed urgently to protect user data and maintain trust. Strategic improvements in SSL/TLS deployment and privacy compliance will significantly enhance the site's security and compliance posture.

Alpinebrands.at is a website representing Alpinebrands, a company focused on marketing and distributing traditional Austrian food and drink brands such as Gasteiner, AUER, Honigmayr, Blaschke, and GOAL. The company emphasizes quality, tradition, and innovation, targeting both national and international consumers interested in authentic Austrian products. The website is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are well implemented, demonstrating GDPR compliance and user consent mechanisms. Contact information is limited to email addresses for domestic and international inquiries, with no phone numbers or physical addresses found. Overall, the site presents a professional image but requires urgent security improvements to protect user data and enhance trust.

Interlink is a medium-sized technology company based in Mauritania, specializing in AI-powered digital solutions for businesses and government institutions. With 15 years of experience, they offer services in e-governance, e-health, software development, messaging, geolocation, and cybersecurity. The website is built on modern technologies like Next.js and React, providing a professional and user-friendly experience. However, technical issues such as missing DNS records and an invalid SSL certificate undermine the security posture. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site demonstrates solid business presence but requires urgent security and technical improvements.

Mediaprint Zeitungs- und Zeitschriftenverlag Gesellschaft m.b.H. & Co KG is a leading Austrian media company operating prominent brands such as Kronen Zeitung and KURIER. The company offers a broad range of media-related services including corporate publishing, printing, logistics, marketing, and subscription management, positioning itself as a market leader in Austria's media sector. The website reflects a professional and consistent brand image targeting both consumers and business clients within Austria. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, FontAwesome Pro, and integrates Google Tag Manager and Didomi for analytics and consent management. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.

RE.COMM operates a professional real estate leaders summit event in Austria, targeting top managers and decision makers in the real estate sector. The website serves as an information and registration platform for the annual summit scheduled for November 2025. The company positions itself as a leading think tank and networking forum within the real estate industry. Technically, the website is built on WordPress with Elementor and several plugins for SEO, multilingual support, and GDPR compliance. However, the site suffers from critical security issues including an invalid or missing SSL certificate and lack of HTTPS enforcement, which significantly impacts user trust and security posture. The DNS configuration appears incomplete or misconfigured, lacking essential A/AAAA records and DNSSEC, which raises concerns about domain management. Privacy and cookie policies are well implemented, and social media presence is active. Overall, the site is professionally designed but requires urgent technical and security improvements to ensure trustworthiness and compliance.

Backslash is a cultural intelligence unit operating within the Omnicom Advertising Group, providing strategic insights through a combination of data, journalism, and cultural analysis. The website serves as a platform to share reports, documentaries, and newsletters targeted primarily at advertising professionals and agencies within the Omnicom ecosystem. Technically, the site is built on WordPress, hosted on WP Engine, and utilizes Cloudflare CDN along with several marketing and analytics tools such as Google Analytics and OneTrust for cookie consent. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Security headers are partially implemented, but the lack of encryption and modern TLS protocols is a major vulnerability. Privacy compliance is basic, with a cookie consent mechanism present but no comprehensive GDPR-aligned privacy policy detected. Business credibility is supported by the affiliation with Omnicom and professional content, but contact information is limited to a newsletter signup form without direct emails or phone numbers. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

TBWA at Cannes is a professionally designed website serving as a showcase for the global TBWA Collective's creative work at the Cannes Lions Festival of Creativity. The site features a broad portfolio of advertising campaigns from various TBWA offices worldwide, targeting advertising professionals and festival attendees. Technically, the site is built on WordPress, hosted on WP Engine with Cloudflare CDN, and uses modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and OneTrust for cookie consent. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly undermines its security posture. Additionally, the lack of DNS records is unusual and may indicate configuration issues. Privacy compliance is partially addressed through cookie consent, but no privacy policy or terms of service pages were found. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.

Related:tbwa.com

RCSRD d.o.o. is a Serbia-based technology company specializing in open-source software solutions, technical support, development, and education. Founded in 2007 through partnerships with industry leaders such as Red Hat and IBM, RCSRD serves a broad Southeast European market with enterprise-grade open-source products and services. The company maintains a medium-sized international team and subsidiaries in Vienna and Katowice, positioning itself as a regional leader in open-source innovation. Technically, the website is built on the Bitrix CMS platform, utilizing modern web technologies including jQuery, Bootstrap, and OwlCarousel. Google Tag Manager is employed for analytics and tracking. The site is mobile-optimized with good navigation and professional design, though accessibility and SEO optimizations are basic. Performance metrics are unavailable. From a security perspective, the website lacks HTTPS and SSL/TLS encryption, representing a critical vulnerability. While some security headers are present, the absence of encryption and modern TLS protocols significantly reduces the security posture. No privacy or cookie policies are found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates solid business credibility and content quality but suffers from critical security and privacy compliance issues. Strategic improvements in SSL implementation, privacy policy publication, and security best practices are recommended to enhance trust and protect user data.

Related:softwareunited.comredhat.com

SLOS is an enterprise software company specializing in open-source based software platforms designed for stability, security, and performance. Their product suite includes enterprise, virtualization, middleware, storage, cloud, application, container, and automation platforms targeting modern business needs. The company operates primarily from Serbia with subsidiaries in Vienna and Katowice. Technically, the website is built on Bitrix Site Manager CMS with common web technologies like jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security gap. Security headers are partially implemented but overall security posture is weak due to missing HTTPS and DNS security features. The website lacks privacy and cookie policies, impacting compliance and user trust. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security and compliance improvements.

Kombi Terminal Schkopau, operated under the HOYER GmbH brand, is a specialized logistics terminal focusing on container handling, hazardous goods storage, and rail transport connections. The website presents a professional and consistent brand image with clear service descriptions targeting logistics and transport businesses. The technical infrastructure is based on TYPO3 CMS running on Apache with Debian, employing modern security headers and HTTPS protocols, though some security configurations like HSTS are not fully enabled. The site uses tracking and consent management tools indicating moderate privacy compliance. No critical security vulnerabilities or blocking mechanisms were detected, but contact information is sparse on the main service page. Overall, the website reflects a medium-sized transportation business with a solid digital presence but could improve in security and privacy transparency.

Related:hoyer-group.com

HOYER GmbH is a well-established international transportation and logistics company celebrating its 75th anniversary. The website serves primarily as a corporate milestone showcase with multimedia content and links to official corporate resources. The technical infrastructure is based on TYPO3 CMS running on an Apache server, with embedded video content and integration of Usercentrics for consent management scripts. However, the website lacks a valid SSL certificate, which critically impacts its security posture. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols significantly reduces the site's security score. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent branding and official social media presence, though direct contact information is missing on the landing page. Overall, the site is functional but requires urgent security improvements to meet modern standards.

The website hoyer-jubilaeum.de currently serves a 404 error page indicating that no site configuration is found, rendering the site inaccessible to users. The site is built on TYPO3 CMS but is not properly configured or published. There is no visible business content, contact information, or legal policies such as privacy or cookie policies. The technical infrastructure shows an Apache server with some security headers implemented; however, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, resulting in a poor security posture. Tracking scripts for Google Analytics and Usercentrics are present but without a consent mechanism, indicating non-compliance with privacy regulations. Overall, the site is non-functional and lacks essential business and security elements, leading to a very low trust and usability score.

cotac group operates as a medium-sized transportation service provider specializing in tank container services including cleaning, heating, repair, modifications, and depot management. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, targeting businesses requiring specialized tank container logistics and maintenance. The website is designed responsively and includes a cookie consent mechanism via Usercentrics, indicating attention to privacy compliance. Technically, the site uses Apache on Debian with a valid SSL certificate, though TLS protocols are outdated and some security headers could be better configured. No direct contact emails or phone numbers are provided, relying on contact forms for communication. The security posture is moderate with room for improvement in TLS support and incident response transparency. Overall, the website reflects a legitimate and professional business with a moderate risk profile and good digital maturity.

The website socotec.de is currently inaccessible due to an Access Denied error page served likely by a Web Application Firewall (WAF) or Content Delivery Network (CDN) protection mechanism. The site lacks valid SSL/TLS certificates and essential DNS records, indicating poor technical configuration or inactive hosting. No business content, metadata, or contact information is available for analysis, severely limiting insight into the company's operations or services. The security posture is weak due to missing HTTPS and DNS security features. Overall, the site presents a high risk of untrustworthiness and lacks transparency and compliance indicators.

duftner.digital group GmbH is a specialized technology service provider based in Tirol, Austria, focusing on digital transformation, content management, recruitment, and software development, including learning applications. The company operates multiple subsidiaries and partner entities, offering a comprehensive portfolio of digital services tailored to businesses seeking innovation and efficiency. Their market position is that of a regional expert with over 15 years of experience, emphasizing customer-centric and resource-efficient solutions. Technically, the website is built on WordPress with modern plugins and multilingual support, but lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS and security headers, although privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional and trustworthy but requires urgent improvements in security infrastructure to protect user data and enhance trust.

Related:micro-training.com

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Betty Barclay operates as a well-established women's fashion brand focused on retail and e-commerce, targeting modern women seeking stylish and quality clothing for various occasions. The website presents a professional and user-friendly shopping experience with clear navigation, comprehensive content, and trust signals such as certifications and social media presence. Technically, the site uses a modern tech stack including Shopware, PHP 8.2, and advanced commerce services, with good mobile optimization and accessibility. However, the absence of HTTPS/SSL and missing DNS records represent critical security and infrastructure weaknesses that significantly impact the site's trustworthiness and security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Pizzeria Uno Corporation operates a well-established restaurant brand known for inventing the Chicago Style Deep Dish Pizza in 1943. The website promotes their core business of pizza restaurants along with catering, group events, cooking classes, and fundraising activities. The brand has a strong market position with a legacy appeal and multiple service offerings targeting pizza enthusiasts and event organizers. Technically, the website uses a modern frontend stack including Bootstrap and jQuery, with embedded analytics and accessibility tools. However, the site lacks a valid SSL certificate and HTTPS configuration, which is a critical security flaw. The absence of cookie consent mechanisms and security headers further reduces the security posture. Overall, the business credibility is high due to consistent branding, clear contact information, and social media presence, but the security and privacy compliance need urgent improvement.

ELEKTROMATERIAL.AT is a business focused on supplying electrical materials, likely targeting professionals and companies in the energy sector within Austria. The website uses modern frontend technologies such as React and Next.js, with Craft CMS indicated as the backend content management system. However, the site lacks critical security features including a valid SSL certificate and HTTPS support, which severely impacts its security posture. No privacy or cookie policies are present, and no contact information is available on the homepage, limiting user trust and compliance with data protection regulations. The site employs Mixpanel for analytics, indicating moderate user tracking without visible consent mechanisms. Overall, the website demonstrates basic digital maturity but requires significant improvements in security and privacy compliance to meet industry standards and user expectations.

Bad & Energie Service GmbH is a specialized service provider based in Austria, focusing on installation and maintenance services in the energy and bathroom furnishing sectors. The company operates primarily on behalf of installers, offering services such as the installation of bathroom furniture, shower partitions, and the commissioning and maintenance of heat pumps, air conditioning systems, and photovoltaic systems. Their market position is that of a niche service provider supporting handcraft businesses and installers, aiming to increase efficiency and capacity for their clients. The website reflects a professional business with clear service offerings and a partnership-oriented business model. Technically, the website is built on WordPress with a modern PHP backend and uses common web technologies including jQuery and FontAwesome. SEO is well implemented with Yoast SEO plugin and structured data. However, the site lacks a valid SSL certificate, which severely impacts security posture and user trust. The absence of HTTPS and security headers exposes the site to risks and reduces its security score. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, but no explicit security or incident response policies are found. Overall, the website is functional and professional but requires urgent improvements in security infrastructure to meet modern standards.

Related:badundenergie.atoeag.at

Pinterest Engineering website serves as a career and culture portal for Pinterest's engineering division, showcasing job opportunities, employee testimonials, and blog content. The company is a large, established technology enterprise with a global footprint. The technical infrastructure uses modern JavaScript libraries and frameworks such as Bootstrap, Swiper, and GSAP, hosted on Fastly CDN, but suffers from critical SSL/TLS misconfiguration that undermines secure access. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. However, the absence of valid HTTPS and security headers significantly weakens the security posture, exposing users to potential risks. Overall, the site is professionally designed and trustworthy but requires urgent security improvements.

Pinterest is a leading visual discovery and social media platform that enables users to explore and save creative ideas across various categories such as recipes, home decor, fashion, and more. The platform serves a broad audience including individual users, content creators, and businesses seeking advertising opportunities. Pinterest operates on an advertising-based business model with integrated e-commerce features, positioning itself as a key player in the technology and social media industry. The website demonstrates a high level of digital maturity with a modern tech stack primarily based on React and extensive use of cloud services and CDNs for content delivery. The design and user experience are professional and optimized for both desktop and mobile users, ensuring accessibility and SEO best practices are followed. Security-wise, the site implements several important HTTP security headers and a comprehensive content security policy, but it currently suffers from an invalid or missing SSL certificate and lacks support for modern TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, Pinterest's website is trustworthy and professional, but immediate attention is required to resolve SSL and TLS issues to enhance security and user trust.

Freyssinet is a well-established global civil engineering company specializing in the construction and repair of infrastructure using advanced technologies such as post-tensioning and cable systems. With over 80 years of experience and a network of 60 subsidiaries worldwide, it serves a broad international market primarily in the energy and transportation sectors. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site is built on WordPress with modern plugins for SEO, performance, and GDPR compliance, hosted on OVHcloud. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Social media integration and detailed case studies enhance business credibility. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Related:vinci.com

Geoquest Group is a globally recognized leader in geotechnical engineering, specializing in reinforced earth structures and soil-structure interaction solutions. With a presence in 80 countries and a history spanning over 60 years, the company offers a broad portfolio of engineering services and products tailored to infrastructure, hydraulic, industrial, and urban development sectors. The website reflects a mature business with comprehensive content, professional design, and a strong international network supported by its parent company, Soletanche Freyssinet. Technically, the website is built on a modern WordPress platform using advanced plugins and frameworks such as Avada Fusion Builder and Slider Revolution. It employs analytics tools like Google Tag Manager and Matomo for user tracking and performance insights. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security-wise, while several HTTP security headers are implemented, the absence of a valid SSL certificate and disabled TLS protocols present critical vulnerabilities. The site does implement GDPR-compliant cookie consent mechanisms and maintains comprehensive privacy and legal policies, indicating good privacy compliance. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to enhance security and trustworthiness. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and enhancing HSTS policies to protect users and improve compliance.

Related:freyssinet.comsoletanchefreyssinet.com