Security reports directory

Alexander Hughes is a well-established global executive search and leadership advisory firm with over 60 years of experience and a presence in more than 50 offices across 51 countries. The company specializes in attracting top leadership talent and providing governance, human capital assessment, succession planning, and interim executive services to global firms. Their website reflects a professional and comprehensive business model targeting corporate clients worldwide. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Lightslider, with analytics powered by Matomo. Hosting is provided by Cloudways, and the site employs a strong Content Security Policy and other security headers. However, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, which significantly impacts the security posture. Security-wise, while some best practices like CSP and HSTS are implemented, the lack of valid HTTPS and TLS support is a critical vulnerability. No explicit security or incident response policies are found, and no contact emails or phone numbers are directly listed on the site, which may affect user trust. Privacy and cookie policies are present and appear GDPR compliant. Overall, the site is professionally designed with excellent content quality and user experience but requires urgent remediation of SSL/TLS issues to improve security and trustworthiness.

The website wozabal.com is currently parked or under construction, displaying only a minimal placeholder page indicating it is managed or parked by T-Mobile Austria GmbH. There is no substantive business content, contact information, or policies available on the site. The domain has valid DNS records and mail exchange configured with Outlook services, indicating legitimate domain registration and hosting. However, the lack of SSL/TLS certificate means the site is served over unencrypted HTTP, which is a significant security concern. No security headers or privacy compliance mechanisms are present, and the site performance is slow with minimal resources loaded. Overall, the website lacks essential elements for trust, security, and user engagement, resulting in a low security and compliance posture.

Gesundheitscampus Wesel is a large healthcare organization based in Germany, providing a broad range of medical, nursing, and therapeutic services through an integrated campus model. The website reflects a professional and consistent brand focused on healthcare professionals and patients, emphasizing family-friendly work culture and digital transformation. Technically, the site is built on TYPO3 CMS with modern front-end frameworks and includes social media and analytics integrations. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and privacy policy. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

Related:evkwesel.de

DTM Qatar is a specialized media production company established in 2003, offering a range of video production services including corporate videos, aerial drone filming, and time lapse photography. Positioned as a premium local provider in Qatar and supported by the United Group of Companies, DTM targets businesses seeking high-quality multimedia content with a flexible and client-centric approach. The website reflects this with professional design and rich multimedia content. Technically, the site runs on an outdated PHP version and lacks HTTPS, which significantly impacts its security posture. The absence of SSL/TLS encryption exposes visitors to potential data interception risks. Additionally, no privacy or cookie policies are present, indicating compliance gaps with data protection regulations. The site uses Google Analytics for tracking but does not provide user consent mechanisms. Overall, while the business and content quality are good, the technical and security aspects require urgent improvements to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website akwien.at represents the Kammer für Arbeiter und Angestellte für Wien, a government-related non-profit organization advocating for workers' rights and social services in Vienna, Austria. The site offers comprehensive information and services including legal advice, consumer protection, educational resources, and digitalization funding. It targets employees and workers in Vienna, providing a rich content experience with clear navigation and strong branding. Technically, the site is built on a Gentics Portal CMS with a modern tech stack including jQuery, Bootstrap, Matomo Analytics, and Usercentrics for consent management. Hosting is provided by Anexia. While the site is mobile optimized and accessible, performance metrics indicate slow loading, and the SSL/TLS configuration is currently invalid, which is a critical security concern. Security posture is moderate with several security headers implemented, but the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security score. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism in place. Business credibility is high due to consistent branding, official contact information, and alignment with WHOIS data. Overall, the site is a professional and trustworthy resource for workers in Vienna but requires urgent improvements in SSL/TLS configuration and performance optimization to enhance security and user experience.

Mixed Reality I/O operates a professional and content-rich website focused on augmented reality, virtual reality, 3D modeling, and AI consulting and development services. The company targets businesses seeking spatial computing strategies and innovative digital experiences. Their market position is supported by a history dating back to 2008, international experience, and notable client partnerships. Technically, the website is built on WordPress with a modern plugin ecosystem, supporting multilingual content and interactive 3D models. However, the absence of HTTPS and proper SSL configuration represents a critical security vulnerability, exposing users to risks and undermining trust. Privacy compliance is addressed with cookie consent and a comprehensive privacy policy, but incident response and security policies are not evident. Overall, the website demonstrates strong business credibility and user experience but requires urgent security improvements to meet industry standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Lohmann & Rauscher USA Inc. is a prominent international supplier specializing in medical devices and hygiene products, targeting healthcare professionals and patients. The company offers a broad portfolio including compression therapy, wound care, casting materials, and educational items. Their market position is strong, supported by recent acquisitions such as Unisurge International Ltd. and the teledermatology startup OnlineDoctor, indicating active growth and innovation. The website is professionally designed with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, but performance data is lacking and the site is currently not secured with HTTPS, which is a critical security gap. Security posture is weak due to the absence of a valid SSL certificate and lack of advanced security headers or policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is high given the detailed contact information, structured data, and active corporate communications. Overall, the site requires urgent security improvements to protect user data and enhance trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

IC Group A/S is a retail company specializing in fashion brands such as Tiger of Sweden and By Malene Birger. The company was publicly traded until 2019 when it was fully acquired by Friheden Invest A/S and subsequently delisted. The website serves primarily as a repository for historical financial statements, corporate responsibility reports, and data ethics documentation. The target audience includes investors, stakeholders, and customers interested in the company's brands and corporate governance. Technically, the website is built using the One.com Web Editor CMS and hosted on One.com infrastructure, with Apache and Varnish servers. However, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a significant security concern. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, including emails, phone numbers, and physical addresses for IC Group and its brands. Overall, the website is functional but requires urgent security and privacy improvements to meet modern standards.

Otago Online Consulting GmbH is a well-established Austrian online marketing agency specializing in SEO, SEA, social media marketing, display and video advertising, and data analytics. The company has a strong market position with a clear growth strategy including acquisitions such as Content Cook. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with no advanced headers or incident response information published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but urgently needs to implement HTTPS to improve security and trust.

Agenda Austria is an established independent think tank based in Austria, focusing on economic and socio-political research and analysis. The organization provides a variety of content including publications, graphics, podcasts, and events aimed at policymakers, academics, and the interested public. Their market position as the first independent think tank in Austria specializing in these areas is supported by a consistent and professional online presence. Technically, the website is built on WordPress with a modern tech stack including caching, SEO optimization, and consent management tools. The site is well-structured, mobile-optimized, and offers good user experience with clear navigation and rich content. However, the SSL/TLS configuration is currently inadequate, lacking a valid certificate and modern protocol support, which poses a security risk. Security-wise, the site implements several important HTTP security headers and uses reCAPTCHA for form protection, but the absence of valid HTTPS and modern TLS protocols significantly lowers its security posture. Privacy compliance is strong, with clear privacy and cookie policies and GDPR-compliant consent mechanisms. Overall, the website is trustworthy and professional but requires urgent improvements in SSL/TLS security to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS protocols, and enhancing domain security with DNSSEC and CAA records.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2, dnsHealth. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

HAAI GmbH is a medium-sized Austrian company specializing in providing innovative hardware, software, and IT services primarily targeting enterprises and small to medium businesses. The company positions itself as a trusted partner with exclusive partnerships with major technology brands such as A1, Apple, Microsoft, and Samsung, offering comprehensive device management and telecommunications solutions. Their business model focuses on B2B services including Device as a Service (DaaS), logistics, and IT security solutions. Technically, the website is built on WordPress with modern plugins and uses Cloudflare for CDN and security. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. The site implements GDPR-compliant cookie consent via Usercentrics and uses Google Tag Manager for analytics, reflecting a moderate level of privacy compliance. Overall, the website is professionally designed with good content quality and clear navigation, but the lack of HTTPS is a major risk that should be addressed promptly.

Related:a1.atapple.com

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

B+S Banksysteme AG is a German-based software manufacturer specializing in banking and financial services software solutions. With over 40 years of experience, the company serves a broad range of clients including traditional banks, fintechs, and neobanks primarily in the D-A-CH region. Their offerings include core banking applications, online and mobile banking, banking APIs, and modular banking services underpinned by a ZAG license. The company maintains a medium-sized presence with subsidiaries such as B+S Banksysteme Salzburg GmbH and emphasizes customer-centric service models like Banking as a Service. Technically, the website is built on WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution. While the site is well-structured, SEO optimized, and mobile responsive, it suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. The security headers are well configured, but the lack of TLS protocols and the presence of unsafe inline scripts reduce the overall security posture. From a security perspective, the site demonstrates good header policies and content security policies but critically lacks HTTPS, which exposes users to potential risks. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are present. Contact information is clearly provided, including multiple phone numbers, email addresses, and physical locations, supporting business credibility. Overall, the website presents a professional and trustworthy business front with strong market positioning in banking software. However, the lack of HTTPS significantly undermines security and trustworthiness, necessitating urgent remediation to protect user data and comply with modern security standards.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 17 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website headstart-marketing.de is currently a reserved domain hosted by STRATO, displaying a placeholder page with no business content or services. The domain is registered with German name servers and has no active content or contact information, indicating it is not yet operational. Technically, the site is served over HTTP without a valid SSL certificate, lacking modern security protocols and headers, which poses significant security risks. There are no privacy or cookie policies, no forms, and no analytics or tracking technologies implemented. Overall, the site is in an initial state with minimal digital maturity and poor security posture. Strategic recommendations include obtaining a valid SSL certificate, implementing security headers, and publishing essential compliance documents before launching any business operations.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website profcon.com presents a minimal online presence with only a basic HTML page containing the domain name and no additional content or metadata. The lack of privacy policies, contact information, and business details suggests the site is either under development or abandoned. Technically, the site is served by an Apache server but lacks a valid SSL certificate, resulting in no HTTPS support and a poor security posture. DNS records are configured with basic mail exchange and SPF records but lack advanced security features such as DNSSEC or CAA. Overall, the site demonstrates very low digital maturity and minimal business credibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 18 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website cswg.com is currently inaccessible due to a Web Application Firewall (WAF) protection mechanism implemented by Incapsula, which blocks direct access to the site's content. As a result, no business information, contact details, or user-facing content is available for analysis. The domain is registered with consistent DNS records and mail exchange servers, indicating a legitimate registration, but the lack of SSL/TLS certificate and HTTPS support significantly reduces the site's security posture. The absence of privacy policies, cookie consent mechanisms, and terms of service further indicates a lack of compliance with common web standards and regulations. Overall, the site appears to be in a protected but inaccessible state, limiting the ability to assess its business operations or technical maturity.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The website at gvk.com currently serves as a minimal redirect page using a frameset to https://www.gvk.com, with no substantive content or metadata present. The lack of HTTPS and security headers indicates a weak security posture, and no privacy or cookie policies are available, which raises compliance concerns. The DNS configuration shows multiple A records and Microsoft Outlook-based email services, but no DNSSEC or CAA records are enabled, reducing DNS security. The site includes a third-party tracking script from rumjs.rumito.net, indicating minimal analytics usage. Overall, the website lacks professional content, contact information, and security best practices, resulting in a low trust and credibility profile.

FinTech Connector is a US-based fintech community platform that connects financial services professionals, organizations, and fintech entrepreneurs globally to collaborate and innovate in financial services. The platform offers matchmaking, collaboration marketplaces, funding portals, and hosts fintech events to foster innovation and impact. The website is professionally designed and hosted on Squarespace, leveraging modern web technologies and social media integration to engage its target audience effectively. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Privacy and cookie policies are present but lack a full consent mechanism, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and trust.

Altstoff Recycling Austria (ARA) is a leading non-profit organization in Austria specializing in circular economy and recycling services, particularly for packaging, electrical devices, and batteries. The website presents comprehensive information about their services, target audiences (businesses and consumers), and their role as a market leader in Austria. The technical infrastructure uses modern web technologies such as nginx, htmx, and lazy loading, hosted on Azure DNS. However, the site lacks HTTPS, which is a critical security deficiency. Security headers are well configured, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to enable HTTPS and enhance user trust.