Security reports directory

Security assessment completed with an overall score of 0/100 (unknown risk). 5 critical issues require immediate attention. Total of 26 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 28 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 27 security findings identified across all modules.

The website amstm.com currently presents only a minimal HTML page with a redirect script and no accessible content, indicating it is either under construction, blocked, or a placeholder. The domain is registered through GoDaddy.com, LLC and has strong domain protection with multiple client prohibitions, but the lack of SSL/TLS certificate and absence of any meaningful content significantly reduce its trustworthiness and usability. Technically, the site lacks modern security configurations such as HTTPS, security headers, and DNSSEC, which are critical for protecting visitors and data integrity. No privacy or cookie policies, contact information, or business details are available, limiting compliance and user trust. Overall, the site is not currently functional as a business or informational platform.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 27 security findings identified across all modules.

StudiosDigital GmbH is a small Austrian technology agency specializing in interactive media and Drupal-based web development. The company targets businesses and organizations in Vienna and Austria seeking professional web presence and digital solutions. Their website reflects a consistent branding and professional content focused on Drupal 7 CMS projects and interactive media services. Technically, the site runs on Drupal 7 with jQuery and nginx but lacks modern security practices such as HTTPS, which is a critical vulnerability. The absence of cookie consent and privacy compliance mechanisms indicates GDPR compliance gaps. Social media integration is present but no advanced analytics or marketing tools are detected. Overall, the website is functional but requires urgent security upgrades and privacy compliance improvements to meet modern standards.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 24 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

The website hollisterco.com appears to represent a large retail brand, Hollister Co., but the actual website content is inaccessible, returning only a minimal 'Bad Request' page. This prevents detailed content and business information extraction. The DNS and email configurations are properly set, indicating legitimate domain management and good email security practices. However, the lack of a valid SSL certificate and absence of HTTPS severely impact the security posture. The site is likely protected by a Web Application Firewall or similar security mechanism that blocks access to the content, further limiting analysis. Overall, the site shows signs of a mature business with enterprise scale but suffers from critical security configuration issues and content accessibility problems.

QCM Holding is a Swiss-based aviation competence center specializing in regulatory and Part-147 training, design approvals, aircraft technical management, and consulting services. With over 25 years of industry presence and recent ownership transition, QCM maintains a strong market position serving aviation professionals and organizations. The website reflects a professional and comprehensive service offering with clear navigation and relevant content. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, but lacks a valid SSL certificate, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business demonstrates credibility and trustworthiness, though the security weaknesses present a risk that should be addressed promptly.

Minimax GmbH is a well-established leader in the fire protection industry with over 120 years of experience. The company offers a broad range of fire detection, suppression, and prevention systems tailored for various industries including energy, manufacturing, and transportation. Their market position is strong, supported by a comprehensive portfolio of products and services, including maintenance and training. The website reflects a professional and consistent brand image targeting industrial and commercial clients seeking reliable fire safety solutions. Technically, the site uses modern JavaScript modules, a CDN for content delivery, and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, leaving the site vulnerable to interception and undermining user trust. Security headers are properly configured, but the lack of HTTPS significantly lowers the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to align with best practices and protect users.

The website yourccc.com is currently inaccessible beyond a Cloudflare Web Application Firewall (WAF) challenge page that requires JavaScript and cookies to proceed. This prevents access to any meaningful content or business information. The domain is registered with Google Domains nameservers and has valid MX records, indicating legitimate registration, but the SSL certificate is invalid and no HTTPS is effectively enabled. The lack of visible privacy, cookie, or terms of service policies, as well as absence of contact information, further limits the ability to assess the business or compliance posture. The technical infrastructure shows use of Cloudflare for security and Google Cloud for hosting, but the SSL/TLS configuration is poor and no modern TLS protocols are enabled. Overall, the website's security posture is weak due to missing SSL and blocked content, and the business credibility cannot be established from the available data.

EOX IT Services GmbH is a specialized technology company focused on Earth observation data services and software solutions. Their offerings include satellite data visualization, cloudless mapping, and data catalog services targeting researchers and professionals in geospatial and environmental fields. The company maintains a professional web presence with a clear focus on open data and cloud-native solutions. Technically, the website is built on VuePress and modern JavaScript frameworks, providing a good user experience and mobile optimization. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security gap. Security headers are partially implemented, but the absence of TLS protocols and cipher suites severely impacts the security posture. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is minimal, with no explicit emails or phone numbers on the site, though social media presence is strong. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Related:esa.int

ETC is a well-established Austrian IT training and certification provider with a strong market position since 1999. The company offers a wide range of IT courses, certifications, and talent acquisition services across multiple locations including Vienna, Graz, and Attnang-Puchheim, as well as online. Their offerings cover major IT domains such as Microsoft, Cisco, Red Hat, VMware, and more, targeting IT professionals and enterprises seeking digital skill enhancement. Technically, the website is built on a modern WordPress platform with WooCommerce integration, leveraging popular libraries like jQuery, Algolia, and Swiper.js for enhanced user experience. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of TLS support, which is a critical risk for user data protection and trust. Privacy and cookie policies are present and supported by a consent management platform, indicating good compliance with GDPR. Overall, the site is professional and content-rich but requires urgent security improvements to ensure safe user interactions and maintain trust.

Related:stripe.com

The website at shfl.com currently serves only a minimal HTML page that immediately redirects visitors to a /lander path, with no substantive content, metadata, or business information available. The domain is registered and has DNS records pointing to Amazon AWS IP addresses, but lacks critical security features such as a valid SSL certificate and HTTPS support. No privacy, cookie, or terms of service policies are present, and no contact or social media information is provided, indicating a very low level of digital maturity and online presence. From a technical perspective, the site is hosted on AWS infrastructure but does not implement modern web security standards or performance optimizations. The absence of TLS protocols and security headers exposes the site to potential risks and undermines user trust. The lack of content and metadata also negatively impacts SEO and user experience. Security posture is weak due to the absence of HTTPS, no HSTS, no DNSSEC, and no security headers. These gaps present significant vulnerabilities and compliance risks, especially if the site were to handle sensitive data. The WHOIS data shows the domain is registered and not vulnerable to subdomain takeover, but the lack of transparency and business information reduces trustworthiness. Overall, the site appears to be either under development or abandoned, with critical security and compliance deficiencies. Strategic recommendations include obtaining and configuring a valid SSL certificate, implementing security headers and DNS security features, developing meaningful website content with clear business information, and establishing privacy and cookie policies to comply with regulations and build user trust.

The website global-consulting.ca presents minimal content, consisting solely of an iframe embedding an external domain (iyfhshsp.com). There is no visible business information, contact details, or policies on the site. The domain is registered since 2019 with privacy protection enabled, hosted on HostGator, but lacks a valid SSL certificate and serves content over HTTP only. The technical infrastructure is basic with no modern security configurations or performance optimizations. Security posture is weak due to lack of HTTPS, missing security headers, and suspicious external content. Overall, the site exhibits low trustworthiness and poor professionalism, raising concerns about legitimacy and security risks. Strategic improvements are needed to establish a credible online presence and secure the website.

Ferrochema GmbH & Co KG is a well-established wholesale company specializing in steel, reinforcement, and civil engineering materials, headquartered in Spittal an der Drau, Austria. It operates as part of the larger Weyland Group, which has multiple locations across Austria and neighboring countries. The company offers a broad range of products including steel sheets, bars, beams, pipes, aluminum, stainless steel, reinforcement steel, and related services such as steel processing and logistics. Their business model focuses on wholesale distribution with value-added services and an online shop targeting commercial and industrial customers in the construction and manufacturing sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Tiny Slider, and uses Matomo for analytics. The hosting is on Microsoft Azure, with moderate performance and good mobile optimization. The site features a comprehensive cookie consent mechanism and clear navigation, but lacks HTTPS due to an invalid or missing SSL certificate, which is a critical security gap. From a security perspective, the site has no HTTPS enabled, no security headers, and lacks DNSSEC and CAA records, which lowers its security posture significantly. However, no known vulnerabilities or malware were detected. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Incident response contact is provided via a whistleblower email. Overall, the site is professional and trustworthy but urgently needs to address its SSL/TLS configuration to improve security and user trust. Strategic recommendations include immediate installation of a valid SSL certificate, enabling security headers and HSTS, and implementing DNS security measures. These steps will enhance the security posture and compliance, thereby improving the overall trust and credibility of the website and business.

Lovely Systems GmbH is a small technology company specializing in building and operating digital platforms, focusing on multi-platform applications and large-scale web services. Their website presents a modern chat interface and highlights their expertise in scalable digital solutions. The company maintains a presence on GitHub and LinkedIn, supporting their credibility and outreach to developers and businesses seeking digital platform services. Technically, the website uses modern JavaScript and CSS features but suffers from slow load times and lacks a content management system. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and missing security headers, which exposes users to potential risks. Privacy compliance is minimal, with no visible privacy or cookie policies, and limited user tracking via GoatCounter analytics. Overall, the site is functional but requires significant improvements in security and privacy to meet industry standards.

Quality Austria is a leading Austrian institution specializing in integrated management systems, quality certification, and training services. The company offers a broad range of certifications including ISO standards, Austria Gütezeichen, and EOQ certificates, positioning itself as a trusted partner for organizations seeking quality assurance and compliance. The website reflects a mature digital presence with comprehensive content, multi-language support, and a professional design tailored to its target audience of businesses and public organizations. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by performance optimizations such as WP Rocket and advanced search via FacetWP. The use of Borlabs Cookie ensures compliance with privacy regulations through effective consent management. However, the absence of a valid SSL certificate is a critical security flaw that undermines user trust and data protection. Security measures include several HTTP security headers and a content security policy restricting frame ancestors, but the invalid SSL certificate and lack of explicit security or incident response policies indicate areas for improvement. Overall, the site demonstrates strong business credibility and privacy compliance but requires urgent attention to its SSL configuration to ensure secure user interactions.

The website akkadia.eu currently serves a standard 404 'Site not found' error page hosted on Netlify, indicating that the site content is inaccessible or not deployed. There is no visible business information, metadata, or structured data to describe the company, its services, or market position. The technical infrastructure is minimal, with DNS records properly configured but lacking a valid SSL certificate and HTTPS support, which significantly impacts security posture. No privacy, cookie, or terms of service policies are present, and no contact or social media information is available. Overall, the site lacks essential elements for trust, security, and user engagement, resulting in a low digital maturity level and poor user experience.

Sclable Business Solutions GmbH is a Vienna-based digital innovation studio founded in 2012, specializing in custom software development, AI-driven digital solutions, and human-centered design. The company serves a diverse B2B clientele across industries such as manufacturing, IoT, healthcare, construction, mobility, financial services, and energy. With over 50 professionals and 120+ live projects, Sclable positions itself as a medium-sized, reputable player in the technology consulting and software development market. The website reflects a professional and consistent brand image with strong client endorsements and comprehensive service descriptions. Technically, the website runs on an Apache server with modern frontend libraries like Swiper and QR code generation scripts. While the site is mobile-optimized and accessible with good SEO practices, it lacks a valid SSL certificate and proper HTTPS configuration, which is a significant security shortfall. Performance metrics are missing, but inferred to be slow. No CMS or major frameworks are detected, indicating a custom-built site. From a security perspective, the site has minimal security headers and no active TLS protocols, exposing it to potential risks. The absence of DMARC, DNSSEC, and CAA records further weakens email and domain security. No incident response or vulnerability disclosure policies are present, limiting transparency in security management. However, privacy and cookie policies with consent mechanisms are well implemented, indicating good GDPR compliance. Overall, while the business and website demonstrate professionalism and trustworthiness, the lack of HTTPS and modern security configurations poses a critical risk. Strategic improvements in SSL deployment, email security, and incident response transparency are recommended to enhance the security posture and maintain client trust.

Helvetia Versicherungen AG is a well-established insurance provider in Austria with over 165 years of experience and a large customer base exceeding 650,000. The company offers a wide range of insurance and pension products tailored to private customers, including accident, vehicle, household, and life insurance. The website is professionally designed, content-rich, and provides comprehensive navigation and contact options, reflecting a mature digital presence. Technically, the site uses Adobe Experience Manager CMS and integrates Adobe DTM for analytics and marketing. However, a critical security gap exists as no valid SSL certificate is detected, resulting in no HTTPS support, which significantly impacts the security posture. Security headers are properly configured, but the lack of HTTPS is a major vulnerability. Privacy and cookie policies are present and comprehensive, indicating good compliance with GDPR. Overall, the website is trustworthy and credible but requires urgent security improvements to protect user data and maintain trust.

Wirtschaftsagentur Wien is a well-established government agency founded in 1982, dedicated to supporting economic development in Vienna. The agency offers a comprehensive range of services including free consulting, funding opportunities, event organization, and networking for startups, established businesses, and international companies. Their market position as the official economic development fund of the City of Vienna is strong, supported by consistent branding and a professional online presence. The website is content-rich, multilingual, and targets a broad audience of entrepreneurs and businesses in Vienna. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes interactive features such as animated content and a service compass tool.

S IMMO AG is a prominent Austrian real estate investment company with a diversified portfolio across several European Union countries. The company focuses on office, retail, hotel, and residential properties, targeting investors and stakeholders interested in European real estate markets. The website provides comprehensive corporate and investor relations information, including news updates and portfolio insights. Technically, the website is built on TYPO3 CMS and hosted on an Apache server with nameservers indicating a German hosting provider. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. The cookie consent mechanism and privacy policy are well implemented, indicating good privacy compliance. Security headers are minimal, and modern TLS protocols are not supported, which lowers the security posture significantly. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure to protect user data and enhance trust.

Shotview is a well-established artist management agency founded in 2002, specializing in representing photographers, stylists, casting professionals, and other creatives in the media and fashion industries. With offices in Berlin, Paris, and Vienna, the company offers strategic guidance, production expertise, and a platform for artists to showcase their work internationally. The website reflects a professional and visually rich portfolio showcasing featured projects and artists. Technically, the site uses modern frameworks such as Vue.js and Nuxt.js, hosted on Heroku and served via Cloudflare CDN. However, the absence of a valid SSL certificate is a critical security flaw, exposing users to risks and undermining trust. Additionally, the lack of privacy, cookie, and security policies indicates compliance gaps that should be addressed to meet GDPR and general best practices. Contact information is clearly provided, including multiple office addresses, emails, and phone numbers, supporting business credibility.

Rechberger Ges.m.b.H. is a well-established Austrian company specializing in gastronomy and hotel supplies, with a strong market position in Austria and Bavaria. The company offers a broad product range including porcelain, glassware, cutlery, and professional kitchen equipment, supported by a large team of specialized consultants and an online shop. The website is professionally designed, content-rich, and targets B2B customers in hospitality and retail sectors. Technically, the site uses the Contao CMS with modern JavaScript libraries and integrates Google Tag Manager for analytics. However, the lack of a valid SSL certificate and HTTPS support significantly weakens the security posture, exposing users to risks. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the business credibility is high, but security improvements are critical.

Gantner Instruments is a medium-sized technology company specializing in modular and scalable data acquisition solutions for industrial testing and monitoring applications across sectors such as energy, aerospace, and mobility. The company offers a comprehensive portfolio of hardware, software, and technical support services, positioning itself as a market leader with a global presence. Technically, the website is built on a modern WordPress CMS with Elementor and optimized for performance and SEO, though it lacks a valid SSL certificate, which is a significant security concern. Security headers are well implemented, but the absence of HTTPS and TLS protocols reduces the overall security posture. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is strong, supported by clear contact information, partner logos, and customer testimonials. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS implementation to enhance security and user trust.

The website comunicative.net is currently inaccessible, serving an HTTP 423 Locked status page with minimal HTML content indicating that the requested resource is locked and requires proper identification or unlocking. Due to this access restriction, no meaningful content, metadata, or business information is available for analysis. The domain is registered with valid DNS records but lacks DNSSEC and CAA configurations. The site does not have an SSL/TLS certificate installed, resulting in no HTTPS support and a poor security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the site. Overall, the website appears to be either under maintenance, restricted by access controls, or improperly configured for public access.

Exmanco is a regional Austrian automotive service provider and retailer specializing in tires, rims, auto parts, and vehicle maintenance services. Operating multiple branches in Austria, the company targets vehicle owners seeking professional and affordable automotive repair and parts. The website is built on WordPress with WooCommerce and uses the Enfold theme, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support represents a significant security risk. The site includes cookie consent mechanisms and structured data for SEO but lacks comprehensive privacy and security policies. Contact information and physical addresses are clearly provided, supporting business credibility.

Ashoka is a globally recognized non-profit organization dedicated to supporting social entrepreneurs and changemakers. The website reflects a mature digital presence with comprehensive content, clear calls to action, and a strong community focus. The technical infrastructure leverages Drupal 10 CMS and Cloudflare for hosting and delivery, ensuring good performance and accessibility. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates high professionalism and business credibility but requires urgent security improvements to meet modern standards.

Salzburg Global Seminar, Inc. is a well-established non-profit organization founded in 1947, dedicated to convening global leaders for breakthrough conversations on pressing global issues. The organization operates internationally with offices in Austria and the USA, providing leadership programs, fellowships, and global convenings. The website is built on TYPO3 CMS and uses standard web technologies including jQuery and Google reCAPTCHA for form security. While the site offers comprehensive content and clear navigation, it lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Privacy and cookie policies are present and include consent mechanisms, reflecting good privacy compliance. Contact information and social media presence are robust, enhancing business credibility. Overall, the site demonstrates a solid business and content foundation but requires urgent improvements in security infrastructure.

Oe24.at is a prominent Austrian online news portal delivering comprehensive news coverage, multimedia content, and subscription services targeting German-speaking audiences interested in Austrian and global events. The website integrates advanced advertising and analytics technologies, including Google Tag Manager, Relevant Digital, and Piano subscription management, reflecting a mature digital infrastructure. However, a critical security deficiency is the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. The site demonstrates strong privacy compliance with detailed GDPR-aligned policies and consent mechanisms. Overall, while content and business credibility are solid, urgent improvements in security posture are necessary to protect user data and maintain trust.

AFEC is a well-established French professional training organization specializing in continuing education and alternance programs. Founded in 1975, it serves job seekers, apprentices, and employees aiming to develop skills or change careers. The website presents a comprehensive portfolio of training services, including certifications, VAE accompaniment, and competency assessments, supported by strong trust signals such as Qualiopi certification and partner endorsements. Technically, the site is built on WordPress with common plugins and tracking tools, but suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with visible GDPR and cookie policies, including consent mechanisms. Overall, the site offers good content quality and user experience but requires urgent security improvements to protect user data and enhance trust.

Verjus-Shop is a specialized e-commerce business based in Austria, founded in 2012, offering natural, additive-free, gluten-free, low histamine, and alcohol-free products including Verjus and non-alcoholic beverages. The website is professionally designed with clear navigation and rich content targeting health-conscious consumers and B2B clients such as retailers and restaurateurs. Technically, the site runs on WordPress with WooCommerce and uses modern marketing and analytics tools, but suffers from a lack of HTTPS due to an invalid or missing SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing user trust. Overall, the business appears legitimate and well-positioned in its niche, but the lack of HTTPS is a critical security concern that should be addressed immediately.

The Muséum national d'Histoire naturelle is a prominent French national institution dedicated to natural history research, education, and public exhibitions. It operates multiple sites across Paris and regions, serving a broad audience including families, scientists, educators, and professionals. The website reflects a well-structured, content-rich platform with excellent design and navigation, supporting its mission to disseminate knowledge and engage the public. Technically, the site is built on Drupal 10 with modern web technologies and uses caching and analytics tools such as Varnish, Matomo, and ContentSquare. Mobile optimization and SEO are well addressed, though performance is moderate. However, the critical security weakness is the absence of a valid SSL certificate and disabled TLS protocols, severely impacting secure communications and user trust. Security headers and policies are implemented, but the lack of HTTPS and modern TLS support is a major vulnerability. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact and legal information. Social media presence is official and consistent, enhancing credibility. Overall, the site is professionally managed with strong business credibility but requires urgent remediation of SSL/TLS issues to improve security posture and user trust. Strategic recommendations include installing valid certificates, enabling modern TLS, and enhancing security policies.

Party and Be Married is a small, specialized event planning and coordination company focused on weddings, lifestyle, and business events primarily serving California and beyond. The company emphasizes a personalized, artistic approach to creating unique client experiences. The website is hosted on Squarespace and uses standard web technologies including JavaScript, FontAwesome, and Google Fonts. While the site design is professional and content is relevant, the technical infrastructure shows weaknesses such as lack of a valid SSL certificate and disabled HTTPS, which severely impacts security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is limited to an email and contact form, with no phone or physical address listed. Social media presence is active, supporting marketing efforts. Overall, the website is functional but requires significant improvements in security and compliance to meet modern standards.

POLYTEC Holding AG is a well-established Austrian manufacturing company specializing in the development and production of high-quality plastic solutions, primarily serving the automotive and non-automotive sectors. Founded in 1986, the company has grown to a large enterprise with approximately 3,900 employees worldwide. Their business model focuses on providing comprehensive plastic solutions from conception to logistics, leveraging strong technological and material expertise. The website reflects a professional and consistent brand image with clear navigation and rich content, targeting industrial clients and partners. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and includes advanced UI components such as sliders and accordions. However, the absence of HTTPS and modern SSL/TLS configurations represents a significant security risk. The company maintains a moderate level of privacy compliance with a clear privacy and cookie policy, and uses analytics and marketing tools responsibly. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

SUNPOR Kunststoff GmbH is a medium-sized Austrian manufacturing company specializing in EPS granulate products used for insulation, packaging, and other applications. The company positions itself as a technological leader in EPS manufacturing with a strong focus on sustainability and circular economy initiatives. The website provides comprehensive product and company information primarily in German, targeting construction and packaging industry professionals. Technically, the website runs on nginx with PHP 7.2 and uses embedded YouTube videos and Google Analytics for tracking. However, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a significant security shortfall. Security headers are missing, and the PHP version is outdated, increasing risk exposure. Privacy compliance is addressed with a cookie consent banner and a detailed privacy policy, but no explicit security or incident response policies are found. Overall, the website is functional and professional but requires urgent improvements in security posture to protect user data and enhance trust.

École polytechnique is a prestigious French engineering school offering a wide range of educational programs including Bachelor, Master, Doctorate, and Executive Education. It is a founding member of the Institut polytechnique de Paris and focuses on research, innovation, and entrepreneurship. The website targets students, researchers, entrepreneurs, alumni, and corporate partners, providing comprehensive information about academic programs, research labs, innovation centers, and community engagement. Technically, the site is built on Drupal CMS with modern frontend technologies but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Social media presence is strong with official accounts on Facebook, YouTube, LinkedIn, and Instagram. Overall, the site is professional and trustworthy but requires urgent security improvements to enable HTTPS and modern TLS protocols.

Related:ip-paris.frpolytechnique.org

ARCOTEL Hotels is a medium-sized hospitality group operating multiple hotels across Austria and Germany, focusing on urban locations and sustainable hospitality practices. The website presents a professional and consistent brand image with comprehensive content about their services, sustainability certifications, and direct booking advantages. Technically, the site uses a mix of legacy and modern technologies, including PHP 5.6.40, Bootstrap 4, and various JavaScript libraries, hosted on Amazon CloudFront CDN. However, the absence of a valid SSL certificate and use of outdated PHP versions represent significant security risks. Privacy and cookie policies are well implemented with consent mechanisms, and analytics usage is moderate with Google services. Overall, the site is functional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

Smaply GmbH operates a professional SaaS platform focused on customer journey mapping and experience management. The company targets enterprise and professional users such as UX designers, product managers, and service designers. Their market position is supported by strong trust indicators including ISO 27001 and SOC-2 certifications, GDPR compliance, and customer testimonials. The website content is rich, well-structured, and professionally designed, reflecting a mature digital presence. Technically, the site is built on Webflow with integrations for analytics and marketing automation, hosted on Cloudflare and AWS infrastructure. However, a critical security gap exists as the site lacks a valid SSL/TLS certificate and serves content over HTTP only, severely impacting security posture and trust. Privacy compliance is well addressed with cookie consent mechanisms and comprehensive policies. Overall, the business appears legitimate and trustworthy, but the lack of HTTPS is a major risk that should be remediated immediately.

Open Knowledge Maps is a well-established non-profit organization founded in 2014, focused on revolutionizing scientific knowledge discovery through AI-based search and visualization tools. Their platform serves researchers and the scientific community by providing an accessible and open infrastructure for literature search and concept identification. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and D3.js, and is hosted on Contabo servers. However, the absence of HTTPS is a critical security gap that undermines user trust and data protection. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms, alongside the use of privacy-respecting analytics (Matomo). Business credibility is supported by testimonials, awards, and open source transparency. Overall, the site is content-rich and professionally designed but requires urgent security improvements.

Applied international informatics GmbH is a German IT service provider specializing in SAP consulting, digital transformation, and managed cloud services targeted primarily at the Mittelstand (small and medium-sized enterprises) in Germany. The company positions itself as a trusted partner offering comprehensive IT solutions including licensing, maintenance, and cloud hosting. Their website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on WordPress with modern frameworks like React and includes SEO optimizations and cookie consent mechanisms compliant with GDPR. However, the website suffers from a critical security deficiency due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Performance is also suboptimal with a slow page load time. Security best practices such as HTTP security headers and modern TLS protocols are missing, which lowers the overall security posture. Despite these issues, the business credibility remains high given the clear certifications and trust signals. Strategic improvements in security infrastructure and performance optimization are recommended to enhance trust and compliance.

PULS 4 is a prominent Austrian media company offering a comprehensive TV broadcasting and streaming platform, integrated with the JOYN service. The website targets German-speaking audiences in Austria with a rich variety of content including live TV, series, news, and entertainment. The business operates under the umbrella of ProSiebenSat.1 Media SE, reflecting a strong market position in the Austrian media landscape. Technically, the site leverages modern web technologies such as Next.js and is hosted on Amazon CloudFront, ensuring scalability and performance. However, the absence of a valid SSL certificate is a significant security concern that undermines user trust and data protection. Privacy and legal compliance are well addressed with comprehensive policies and consent mechanisms. Overall, the site demonstrates a mature digital presence but requires urgent remediation of its SSL/TLS configuration to meet security best practices.

Omya International AG is a leading global producer and distributor of industrial minerals and specialty materials, primarily focusing on calcium carbonate and dolomite-based products. With a strong presence in over 50 countries and 160 plants, Omya serves diverse industries including adhesives, agriculture, building and construction, polymers, and water treatment. The company emphasizes sustainability and innovation, operating 17 dedicated laboratories and holding over 325 patent families. The website is professionally designed, content-rich, and well-structured, targeting industrial customers and partners worldwide. Technically, the site is built on Adobe Experience Manager with modern web technologies and includes consent management for privacy compliance. However, a critical security issue is the absence of a valid SSL certificate and enabled TLS protocols, which significantly impacts the site's security posture. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, Omya's digital presence reflects a mature, credible industrial business but requires urgent security improvements to protect user data and enhance trust.

Storyclash GmbH operates a sophisticated AI-powered influencer marketing platform targeting marketers, brands, and agencies. The platform offers comprehensive services including influencer discovery, market insights, campaign management, and performance tracking across major social media platforms like Instagram, TikTok, and YouTube. The company is positioned as a leading solution in the influencer marketing space with strong brand partnerships and positive customer testimonials. Technically, the website employs modern frameworks such as Bootstrap and integrates multiple analytics and marketing tools including Amplitude, Google Tag Manager, HubSpot, and Intercom, reflecting a mature digital infrastructure. However, the absence of a valid SSL certificate and lack of essential security headers represent significant security vulnerabilities that could impact user trust and data protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent security improvements to enhance its security posture and user trust.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 26 security findings identified across all modules.

The website brucha.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to proceed. This prevents access to any meaningful content or business information. The domain is registered and uses Cloudflare for DNS and hosting, with mail services routed through Microsoft Outlook. However, there is no valid SSL certificate installed, and the site does not serve content over HTTPS, which is a critical security deficiency. No privacy, cookie, or terms of service policies are detectable, and no contact information or social media links are present on the landing page. Overall, the site appears to be in a blocked or protected state, limiting the ability to assess its business or technical maturity.

ESCAT, now part of Kontron AG, provides advanced document management, digitalization, and managed print services primarily targeting Austrian businesses. The website presents a professional and well-structured digital presence built on Drupal 10, with clear navigation and relevant content tailored to its B2B audience. However, the absence of a valid SSL/TLS certificate critically undermines the security posture, exposing users to risks associated with unencrypted communications. While cookie consent and privacy policies are implemented, the site lacks explicit security and incident response disclosures. The technical infrastructure is modern but requires urgent security upgrades to meet industry standards.