Security reports directory

The website alt-lichtenberg.de appears to represent a small local or community-oriented entity based in Germany, as indicated by the German language and domain registration details. The site is built on WordPress 5.2.3 with an Apache server running PHP 7.2.34, which is outdated and may pose security risks. The content is minimal with no visible business description, contact information, or terms of service, limiting its professional appeal and user engagement. A cookie consent banner is present, indicating some awareness of privacy compliance, but the privacy policy is only linked and not detailed on the homepage. The site lacks HTTPS, which is a critical security deficiency, exposing visitors to potential risks. Social media presence is limited to a Facebook page link. Overall, the digital maturity of the site is low, with basic mobile optimization and minimal SEO or accessibility features.

Paris Lodron Universität Salzburg is a large, well-established public university in Austria, founded in 1622. It offers a broad range of academic programs across six faculties and serves approximately 18,000 students. The university maintains a strong regional and international research presence and provides extensive student services and community engagement. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with common web technologies such as jQuery and CSS. However, the absence of a valid SSL certificate and HTTPS support is a significant security shortfall, exposing users to potential risks. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The university demonstrates trustworthiness through certifications and active social media engagement.

Informa Connect Australia is a leading event organiser specializing in conferences, exhibitions, and corporate training services primarily targeting business professionals in Australia. As part of the global Informa PLC group, it holds a strong market position with a large-scale operational footprint. The website reflects a professional business model focused on event management and corporate learning, supported by a consistent brand presence and trust indicators such as testimonials and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and frameworks, although performance metrics are unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS support, despite the presence of some security headers and Cloudflare protection. Privacy compliance is moderate with clear privacy and cookie policies and consent mechanisms, but lacks explicit GDPR compliance indicators or security policies. Overall, the site is functional and credible but requires urgent improvements in security infrastructure to protect user data and enhance trust.

KAUN GmbH is a medium-sized carpentry business based in St.Florian, Upper Austria, specializing in manufacturing and installation of windows, doors, furniture, sun protection, and window renovation services. The company targets residential and commercial customers within the region, emphasizing quality craftsmanship and sustainability. The website is built on Joomla CMS using the Helix Ultimate framework and incorporates modern frontend technologies such as Bootstrap and jQuery. However, the site lacks HTTPS, which is a critical security deficiency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Social media presence on Instagram and Facebook supports customer engagement. Overall, the business presents a professional image but must urgently address security gaps to protect user data and improve trust.

Freiform Werkzeugbau GmbH is a small manufacturing company specializing in tooling, plastic, aluminum, and graphite electrode products, serving clients primarily in Austria, Switzerland, and Germany. The website is built on WordPress with a modern tech stack including PHP 8, Yoast SEO, and GDPR-compliant cookie management. However, the site lacks a valid SSL certificate, exposing it to security risks and reducing trustworthiness. Legal and privacy documentation is comprehensive and GDPR compliant, with a cookie consent mechanism in place. The site uses Matomo for analytics, indicating a moderate level of user tracking with privacy considerations. Overall, the business presents a professional image but must urgently address its lack of HTTPS to improve security and user trust.

Anaplan Inc operates a mature, enterprise-grade AI-infused scenario planning and connected planning platform targeting large organizations across multiple industries including finance, supply chain, sales, marketing, and HR. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses Adobe Experience Manager CMS with modern marketing and analytics tools such as Marketo and OneTrust for privacy compliance. However, a critical security issue is the invalid or missing SSL certificate and lack of TLS protocol support, which significantly impacts the security posture score. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by analyst recognitions and a large customer base. Overall, the site is trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 28 security findings identified across all modules.

Swissport International AG operates as a global leader in airport ground services and air cargo handling, serving 286 airports worldwide. The company offers a broad portfolio of services including passenger services, ramp handling, air cargo services, airport hospitality, and executive aviation. Swissport targets airlines, airport operators, and cargo handlers, positioning itself as a market leader with a comprehensive service offering and a strong global network. The website reflects a professional and consistent brand image with extensive content and media releases supporting its market presence. Technically, the site leverages modern technologies such as Cloudflare CDN, Cookiebot for consent management, Google Tag Manager, and social media integrations, hosted on a CMS platform identified as Ibexa DXP. However, the website's SSL certificate is invalid or missing, which is a critical security concern that impacts the overall security posture. Security headers are well configured, but the lack of valid HTTPS and TLS protocols reduces the security score significantly. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by trust indicators such as ISO 27001 certification and official social media presence. Overall, the website is functional and professional but requires urgent remediation of SSL/TLS issues to improve security and trust.

Ascent is a UK-based design-led technology company specializing in data, AI, software, and cloud solutions. With a large team of over 530 professionals, they serve a broad client base across multiple industries including insurance, healthcare, retail, and technology. Their service offerings include data strategy, software engineering, cloud migration, and AI-driven innovation. The website reflects a mature and professional digital presence with comprehensive content, client case studies, and certifications, positioning Ascent as a credible player in the technology consulting market. Technically, the website uses modern frameworks such as Vue.js and Bootstrap and is hosted on Microsoft Azure, but suffers from a critical lack of HTTPS and valid SSL certificates, which significantly impacts security posture. Security headers are partially implemented, but the absence of TLS protocols and SSL undermines trust and user safety. Privacy compliance is moderate with a privacy policy present but no cookie consent mechanism detected. Overall, the site is content-rich and professionally designed but requires urgent security improvements to meet modern standards.

Borouge is a prominent petrochemical company specializing in the production and supply of innovative polyethylene and polypropylene solutions across multiple sectors including energy, infrastructure, healthcare, and agriculture. The company leverages advanced Borealis Borstar® technology to deliver tailored polymer products that meet specific customer needs, emphasizing sustainability and innovation. The website reflects a well-structured digital presence with comprehensive investor relations, media updates, and e-services, targeting industrial clients and stakeholders in the petrochemical industry. Technically, the site is built on Microsoft SharePoint, incorporating modern web technologies and basic mobile optimization. However, a critical security concern is the invalid or missing SSL certificate, which undermines the security posture despite the presence of multiple security headers and policies. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website demonstrates a solid business and digital foundation but requires urgent remediation of SSL issues to improve security and trust.

Opus Marketing GmbH is a German branding agency specializing in transforming visions and ideas into impactful brands with a focus on strategic branding, digital transformation, and sustainability. The company targets businesses seeking creative and strategic brand development and positions itself as a medium-sized agency with a consistent and professional brand presence. Technically, the website is built on WordPress using WPBakery and integrates modern marketing and analytics tools such as Usercentrics for cookie consent, Google Tag Manager, and Facebook Pixel. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of security headers, which significantly impacts its security posture. Performance is also suboptimal with a slow load time and large page size. Overall, the business credibility and content quality are high, but technical and security improvements are necessary to enhance trust and compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Sun Chemical is a globally recognized enterprise manufacturing inks, pigments, and advanced materials serving diverse industrial sectors including packaging, graphics, automotive, electronics, and healthcare. As a member of the DIC Group with over 22,000 employees and a legacy spanning over 200 years, the company holds a strong market position supported by extensive patents and sustainability initiatives. The website reflects a mature digital presence with comprehensive content, professional design, and good SEO practices. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the security posture, exposing users to risks and reducing trust. Security headers are partially implemented but insufficient without proper TLS. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit security or incident response policies are found. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect data and user trust.

Pörner Ingenieurgesellschaft mbH is a well-established independent engineering company specializing in process engineering plant construction, headquartered in Vienna, Austria. With approximately 550 engineers across 10 European locations, the company serves industrial sectors including refineries, petrochemical, chemical, energy, gas, and pharmaceuticals. Pörner is recognized globally for its Biturox® bitumen oxidation technology, having licensed and built over 60 plants worldwide. The website reflects a professional business presence with comprehensive service descriptions and active news updates. Technically, the site is built on TYPO3 CMS with common JavaScript libraries, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is weak due to missing HTTPS, lack of security headers, and no advanced SSL features. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and enhance trust.

The website 'mmmmm.org.uk' represents a small personal or artistic portfolio associated with Adrian Fisher and Luna Montenegro under the name 'montenegrofisher'. It primarily showcases artistic works, films, and CV information, targeting art enthusiasts and collaborators. The business model is portfolio-based with a niche market presence in the UK. Technically, the site is basic, built with static HTML, CSS, and JavaScript, hosted by Pickaweb, and uses Google Analytics for visitor tracking. However, the site suffers from slow load times and lacks mobile optimization and accessibility features. Security posture is weak due to the absence of HTTPS, no security headers, and no advanced security configurations. Privacy compliance is poor with no privacy or cookie policies present. WHOIS data indicates a legitimate UK registration consistent with the website's nature. Overall, the site is functional but requires significant improvements in security, privacy, and technical performance to enhance trust and professionalism.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

KABEG is a major healthcare provider managing five hospitals in the Kärnten region of Austria, employing approximately 8,000 staff. The organization focuses on delivering professional healthcare services with an emphasis on patient well-being and humaneness. The website serves multiple audiences including patients, healthcare professionals, job seekers, and suppliers. Technically, the site is built on TYPO3 CMS with common web technologies such as jQuery and Bootstrap, hosted likely by A1.net. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support, exposing visitors to potential risks. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Business credibility is strong with clear contact information, certifications, and consistent branding.

Wiener Messe und Congress GmbH operates the VIECON – Vienna Congress & Convention Center, a leading event venue in Vienna offering flexible spaces for congresses, exhibitions, and corporate events. The website presents a professional image with comprehensive information about the venue, services, and sustainability initiatives. Technically, the site is built on WordPress with modern plugins and SEO optimizations, but lacks a valid SSL certificate, resulting in an insecure HTTP-only connection. Security headers are present but insufficient without HTTPS. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is credible and well-structured but requires urgent SSL implementation to improve security and trust.

Greater Europe Mission is a well-established Christian missions non-profit organization focused on disciple-making and evangelism throughout Europe. The organization has a mature online presence with a professionally designed WordPress website that clearly communicates its mission, values, and ministry areas. The website targets Christian communities, churches, missionaries, and donors interested in European missions. It offers resources, contact options, and donation capabilities to support its mission. Technically, the site uses modern web technologies including WordPress, Beaver Builder, and integrates Google Analytics and Tag Manager for tracking. However, the site lacks a valid SSL certificate and HTTPS support, which is a significant security concern. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is credible and trustworthy but requires urgent security improvements to protect user data and enhance trust.

SoftwareOne Österreich GmbH is a leading enterprise software and cloud solutions provider with a strong global presence and local expertise in Austria. The company offers a broad range of services including cloud migration, application modernization, IT asset management, software sourcing, and customer training. Their business model focuses on B2B services, supporting digital transformation initiatives for enterprises across multiple industries. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates advanced cookie consent and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses a significant risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and business credibility but requires urgent improvements in SSL/TLS configuration to enhance security.

dwarfs and Giants eG is a small Austrian cooperative consultancy specializing in organizational development and new work methodologies. Their website, built on Drupal 10, offers comprehensive content including workshops, client stories, and toolboxes aimed at helping organizations improve work culture and self-organization. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. However, the technical infrastructure lacks a valid SSL certificate and does not support modern TLS protocols, significantly weakening the security posture. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Overall, the business presents itself as credible and trustworthy, but the lack of HTTPS is a critical security gap that must be addressed.

Innocent Drinks, operated by Fresh Trading Limited and owned by The Coca-Cola Company, is a well-established UK-based beverage company specializing in natural and sustainable drinks such as smoothies, juices, and shots. The company positions itself strongly in the retail sector with a focus on sustainability, social responsibility, and B Corp certification, appealing to environmentally and socially conscious consumers. The website reflects this ethos with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on Adobe Experience Manager and hosted on AWS CloudFront, leveraging modern cloud infrastructure and Adobe's marketing and consent management tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS, which significantly impacts the site's security posture. Privacy and legal policies are well documented and accessible, indicating good compliance practices. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Related:coca-cola.com

Baschnegger Ammann Partner is a well-established creative agency based in Dornbirn, Austria, specializing in branding, design, communication, and digital marketing services. With over 40 years of experience, the agency targets small to large companies primarily in the Bodensee region and surrounding economic areas. Their market position is strong within western Austria, supported by a professional website showcasing client references and a consistent brand image. Technically, the website is built on WordPress with a modern tech stack including PHP 8.4.8 and various JavaScript libraries, optimized for mobile and SEO. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. The site implements GDPR-compliant cookie consent mechanisms and uses reputable analytics and marketing tools such as Google Analytics and HubSpot. Overall, the business demonstrates high professionalism and trustworthiness but must address its SSL deficiency to improve security posture and user trust.

HEROLD Business Data GmbH operates a professional career portal focused on online media and marketing services for Austrian businesses. The company is well positioned as a leading website producer and Google Premium Partner with a strong employer brand. The website content is rich, professionally designed, and targets job seekers and SMEs in Austria. Technically, the site uses Mono CMS and integrates modern tracking and consent management tools but lacks HTTPS, which is a critical security gap. The security posture is weak due to the absence of SSL/TLS encryption and missing security headers. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy but requires urgent security improvements to protect user data and enhance trust.

Related:herold.at

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Seven Refractories operates as a niche industrial supplier specializing in refractory materials for high temperature and aggressive industrial environments such as steel, iron, and cement production. The website currently serves as a placeholder indicating a forthcoming revised site, with minimal content and no direct contact or policy information. The technical infrastructure is based on WordPress with common plugins and hosted behind Cloudflare, but lacks a valid SSL certificate, which severely impacts security posture. Security headers and best practices are largely absent, exposing the site to potential risks. The absence of privacy and cookie policies, as well as contact details, further reduces trust and compliance standing. Overall, the site is in an early or transitional stage of digital maturity and requires significant improvements in security, content, and compliance to meet industry standards.

diego5 studios is a medium-sized influencer marketing agency and video content production company based in Austria, founded in 2015. It operates the largest influencer community in Austria and offers comprehensive services including influencer marketing, branded entertainment, workshops, and live events. The company targets brands seeking to engage audiences through digital video content and influencer collaborations. The website reflects a professional and consistent brand presence with good content quality and clear navigation, optimized for mobile users. Technically, the site is built on WordPress using common plugins and jQuery libraries, hosted on servers managed by world4you.at. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. The business demonstrates legitimacy through client logos and active social media channels.

The United Nations Office for Outer Space Affairs (UNOOSA) operates as a key UN entity facilitating international cooperation in peaceful space activities, space law, and capacity building. It serves a global audience including member states, space agencies, academia, and industry. The website reflects a mature and consistent brand aligned with UN standards, offering comprehensive information on space policy, events, and programs. Technically, the site uses a legacy tech stack with Apache, jQuery, and Bootstrap, but suffers from slow performance and basic mobile optimization. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, exposing users to risks. Privacy compliance is minimal, lacking cookie consent mechanisms and GDPR indicators. Contact information and social media presence are well established, enhancing business credibility. Overall, the site is authoritative but requires urgent security and privacy improvements.

Ulrike Lahrs Steuerberatungskanzlei is a small, local tax consultancy firm based in Twistringen, Germany, specializing in tax advisory, accounting, payroll, and tax declaration services. The website presents a professional and clear business description targeting individuals and businesses seeking tax-related services in the region. The technical infrastructure is based on the IONOS MyWebsite platform, utilizing Apache server and common JavaScript libraries such as jQuery and Cookiebot for cookie consent management. However, the website lacks HTTPS support, which significantly undermines its security posture. Security headers are partially implemented, but the Content Security Policy is in report-only mode and permits unsafe script execution, increasing risk. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy, but no terms of service or explicit security policies are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Atlas Concorde is a well-established Italian manufacturer specializing in ceramic and porcelain tiles for floors, walls, outdoor spaces, furniture, and related products. The company has a mature market presence with 25 years of experience and offers a comprehensive product system including various collections and innovative technologies. The website demonstrates a high level of digital maturity with a modern tech stack based on Next.js and Vercel hosting, providing a professional and user-friendly experience across multiple languages. Security measures are in place with several HTTP security headers configured; however, the absence of a valid SSL certificate and lack of advanced SSL features like OCSP stapling reduce the overall security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website reflects a credible and professional business with a solid online presence.

Data Technology Limited is a UK-based technology consultancy specializing in data strategy, data platforms, analytics, prediction as a service, and cloud modernisation. The company targets organizations seeking to leverage data for business insights and outcomes, positioning itself as a trusted partner with recognized certifications such as Cyber Essentials and ISO QAR. Their website reflects a professional and consistent brand with clear service offerings and client endorsements. Technically, the website is built on the HubSpot CMS platform, hosted via Cloudflare, and employs modern web technologies including Google Analytics 4 and Splide.js for interactive content. The site is mobile-optimized and SEO-friendly, though performance is moderate. Accessibility features are basic but present. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a significant vulnerability. While some security headers are implemented, critical improvements are needed to secure communications and protect user data. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website demonstrates a credible business presence with good content and marketing practices but requires urgent remediation of SSL/TLS issues to enhance security posture and trustworthiness.

Coca-Cola Europacific Partners is a leading enterprise in the manufacturing and distribution of beverages across 31 markets, offering globally recognized brands such as Coca-Cola, Sprite, Fanta, and Monster. The company emphasizes sustainability and value creation for customers and consumers. The website reflects a mature digital presence with comprehensive content, investor relations, and sustainability initiatives. Technically, the site uses modern tools like Google Tag Manager and Cloudflare but lacks a valid SSL certificate and HTTPS, which is a critical security flaw. Security headers are well configured, but the absence of TLS protocols and HSTS reduces the security posture significantly. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but urgently needs to address SSL/TLS issues to improve security and user trust.

Capgemini Invent is a prominent management consultancy brand under the Capgemini group, specializing in innovative consulting services that combine strategy, technology, data science, and design to help businesses transform and grow. The website reflects a mature, enterprise-level digital presence with comprehensive content, strong branding, and a wide range of services targeting C-level executives and large enterprises. Technically, the site is built on WordPress with modern frameworks like React and Bootstrap, indicating a contemporary and scalable infrastructure. However, a critical security issue is the lack of a valid SSL certificate, which undermines the site's security posture despite the presence of several security headers. Privacy and cookie policies are well implemented, showing good compliance with GDPR and related regulations. Overall, the site is professional and trustworthy but requires immediate attention to SSL configuration to enhance security and user trust.

The website pcrbio.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to proceed. This prevents access to any meaningful content or business information on the site. The domain is mature, registered since 2011, and shows consistent WHOIS registration data without privacy protection. However, the lack of a valid SSL certificate and absence of TLS protocols severely impact the security posture of the site. Security headers are present and well configured, but the missing HTTPS is a critical issue. No privacy, cookie, or terms of service policies are detectable, and no contact or business information is available on the accessible page. Overall, the site’s digital maturity and trustworthiness cannot be fully assessed due to the blocking mechanism.

ISOVOLTA AG is an international leader in manufacturing electrical insulation materials, technical laminates, and composite materials, serving over 20 industries including electronics, aviation, and machinery. The company operates globally with multiple production and sales locations across Europe, Asia, and the Americas. Their business model focuses on B2B manufacturing with strong emphasis on innovation and customer-specific product development. The website reflects a professional and consistent brand presence with comprehensive business and contact information.

HABAU is a well-established Austrian construction company with over 110 years of experience, offering a broad range of construction services including high-rise construction, civil engineering, pipeline construction, and precast concrete solutions. It operates as part of the larger HABAU GROUP, which has a significant international presence and a large workforce. The website reflects a professional and content-rich digital presence targeting construction clients, partners, and job seekers. Technically, the site is built on WordPress with common performance and cookie management plugins, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is weak due to missing HTTPS and security headers, exposing the site to risks. Overall, the site is trustworthy and professional but urgently needs to address its SSL and security configuration to protect users and improve trust.

LeadChamps is a small Austrian technology company specializing in sales automation and lead generation services for B2B clients, primarily in the DACH region. Their offerings include intent data lead research, multi-channel campaigns leveraging LinkedIn and email, and a proprietary sales automation platform. The website is built on WordPress with the Divi theme and integrates HubSpot forms for lead capture. While the content is professionally presented and relevant to their target audience, the technical infrastructure lacks a valid SSL certificate and modern TLS protocols, exposing the site to security risks. The absence of cookie consent mechanisms and limited security headers further weaken their privacy and security posture. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

RUBICON IT GmbH is a medium-sized Austrian technology company specializing in digitalization solutions and IT services. Their product portfolio includes leading software such as Nova Find, a prominent lost and found software in Europe, alongside other enterprise solutions like Acta Nova and Document Partner. The company also offers professional services, managed services, and training, targeting business and public sector clients seeking digital transformation. The website is professionally designed, multilingual, and well-structured, reflecting a mature digital presence. Technically, the site is built on WordPress with various plugins and frameworks, including ASP.NET components, but suffers from critical SSL/TLS misconfigurations, lacking a valid certificate and modern protocol support. Security headers are partially implemented but incomplete, and no advanced security mechanisms like OCSP stapling or session resumption are enabled. Privacy compliance is strong, with clear cookie consent and a comprehensive privacy policy. Social media integration and certifications like Kubernetes demonstrate trust and industry alignment. Overall, the site is functional and business-credible but requires urgent security improvements to protect user data and enhance trust.

BRAUNEIS RECHTSANWÄLTE GMBH is a professional law firm based in Vienna, Austria, specializing in corporate and commercial law, litigation, and real estate legal services. The firm targets national and international companies, investors, developers, local authorities, law firms, and private individuals. It holds a reputable market position supported by rankings from Chambers Global and Legal 500, and features client testimonials that reinforce its credibility. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website uses Apache server technology, Alpine.js for frontend interactivity, Algolia for search functionality, and Matomo for privacy-conscious analytics. The site is mobile optimized and accessible, but performance metrics are not provided. Hosting appears to be with a1.net DNS and a dedicated IP address. SEO and navigation are well implemented. Security-wise, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical vulnerability. Other security best practices such as HSTS, DMARC, DNSSEC, and CAA records are missing. No explicit security or incident response policies are published. The cookie consent mechanism is implemented and GDPR compliant, indicating good privacy compliance. Overall, the website is trustworthy and professional but requires urgent security improvements, especially enabling HTTPS to protect user data and improve trust. Strategic recommendations include installing a valid SSL certificate, enabling security headers, and publishing security policies to enhance the security posture and compliance.

K&K Provitrum GmbH is a specialized machinery and material dealer serving the glass industry in Central, Eastern, and Southeastern Europe. The company offers a comprehensive portfolio of glass processing machines, tools, and consumables, targeting a range of customers from small workshops to large industrial enterprises. Their website reflects a professional and consistent brand presence with clear business and contact information. Technically, the website is built on an Apache server with custom CMS elements and uses modern web technologies, but suffers from slow performance and lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols exposes the site to risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website scores moderately on content quality and business credibility but is penalized heavily for security shortcomings.

Statistik Austria is the official national statistical agency of Austria, providing independent and comprehensive statistical data to support fact-based decision making. The organization serves a broad audience including government entities, researchers, businesses, and the general public. Their services include data provision, publications, surveys, and various analytical tools. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with privacy-conscious analytics via Matomo, and includes modern web technologies such as FontAwesome and jQuery. However, a critical security weakness is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts the site's security posture. Despite this, the site implements multiple security headers and cookie consent mechanisms, demonstrating good privacy compliance. Overall, the site is trustworthy and authoritative but urgently requires SSL implementation to protect user data and communications.

SIGAL UNIQA is a leading regional insurance group operating primarily in Albania, Kosovo, and North Macedonia, offering a comprehensive portfolio of insurance products including life, health, property, automobile, and marine insurance. The company is well-established since 1999 and is part of the larger UNIQA Insurance Group, which enhances its market credibility and operational scale. The website reflects a professional and well-branded digital presence with clear navigation and extensive content tailored to its target audience of individuals and businesses seeking insurance solutions. Technically, the site is built on WordPress with modern plugins and integrations, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and lack of HTTPS support, which poses risks to user data confidentiality and trust. The company demonstrates commitment to security governance through ISO 27001:2022 certification and implements privacy and cookie policies compliant with GDPR standards. Marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp are actively used, indicating a mature digital marketing strategy. Overall, while the business and content aspects are strong, urgent improvements in SSL/TLS configuration are necessary to enhance security posture and user trust.

Akaryon is a mature small-sized company founded in 1999, specializing in software development with a focus on environmental informatics and sustainability tools. Their offerings include websites, webshops, CSR reporting tools, CO2 calculators, and support for funding applications. The company targets organizations, companies, and municipalities aiming to digitalize sustainability management. Technically, the website is built on WordPress with a variety of plugins for SEO, forms, and cookie management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

KRAL GmbH is a medium-sized Austrian company specializing in manufacturing screw pumps and flow measurement solutions primarily serving industrial sectors such as marine, power generation, chemical engineering, mechanical engineering, and oil & gas. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS, offering detailed product and service information, supported by a global network of sales and service partners. The website integrates multiple marketing and analytics tools managed through Google Tag Manager and employs a comprehensive cookie consent mechanism to comply with GDPR requirements. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture, exposing users to potential risks and reducing trust. Security headers are partially implemented, but critical improvements are needed to align with best practices. Overall, the business demonstrates strong credibility and market positioning but requires urgent technical security enhancements to protect its digital assets and customer data.

JAWA Management Software GmbH is an established Austrian technology company specializing in customized software solutions for process optimization and information management. Their flagship product, the inforum management platform, supports supplier management, quality control, production planning, and AI-enhanced business solutions. With over 25 years of market presence and a medium-sized operation, JAWA serves a broad international clientele with a focus on efficiency and productivity improvements. Technically, the website is built on a modern WordPress CMS infrastructure using popular plugins and frameworks such as WPBakery, WPML, and Woodmart theme. The site is well-structured, mobile-optimized, and SEO-friendly, demonstrating a mature digital presence. However, the hosting environment lacks a valid SSL certificate and proper TLS configuration, which significantly undermines the security posture. Security-wise, the absence of HTTPS and modern TLS protocols is a critical vulnerability, exposing users to potential data interception and trust issues. While no active vulnerabilities or malware are detected, the site misses essential security headers and DNS security configurations. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a professional and credible business front but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate SSL deployment, enabling modern security protocols, and implementing advanced security headers and DNS protections.

The website noack-vision.com is currently a placeholder page hosted by united-domains AG, indicating that the domain has been newly registered but not yet configured with any business content or services. The page serves solely to confirm domain registration and availability, providing links to the registrar's main site for domain management and related services. There is no direct business presence or operational content on this domain at this time. From a technical perspective, the site is minimalistic, using basic HTML and CSS without any advanced frameworks or CMS. It is hosted on united-domains' webspace platform but lacks HTTPS support, security headers, and performance optimizations. No analytics, tracking, or advertising technologies are present, reflecting the placeholder nature of the site. Security posture is weak due to the absence of SSL/TLS encryption and security headers, exposing visitors to potential risks if sensitive data were to be transmitted. However, since the site contains no forms or user inputs, the immediate risk is low. Privacy compliance is minimal, with no cookie consent or privacy policy hosted on the domain itself, only links to the registrar's policies. Overall, the domain is legitimate and consistent with a newly registered domain awaiting configuration. The lack of content and security features results in a low AI score and indicates no active business operations or risk factors beyond the absence of HTTPS. Strategic recommendations include securing the domain with SSL, deploying actual business content, and implementing privacy and security best practices before going live.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Egon Zehnder International Ltd. operates a global organizational consulting and leadership advisory website offering a wide range of executive search and leadership development services. The company is positioned as a global leader with extensive geographic reach and a comprehensive service portfolio targeting large enterprises and organizations seeking leadership solutions. Technically, the website uses modern web technologies including Vue.js and integrates multiple analytics and marketing tools, but suffers from a critical security flaw due to the absence of a valid SSL certificate and HTTPS support. Security headers and content security policies are well implemented, but the lack of HTTPS severely impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professionally designed and trustworthy, but the critical SSL issue poses a significant risk that should be remediated immediately.

contextflow GmbH is a small Austrian healthcare technology company specializing in AI-powered computer-aided detection software for chest CT scans. Their flagship product integrates directly into PACS systems, targeting radiologists, PACS providers, and pharmaceutical companies. The website is professionally designed with rich content, including scientific research, testimonials, and partner logos, indicating a strong market position in AI medical imaging. Technically, the site runs on WordPress with modern plugins and uses AWS for hosting. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS support, which is a critical issue. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the site is trustworthy but requires urgent security improvements.

EPSIMEC GmbH & Co KG is a small Austrian digital agency specializing in social media marketing, newsletter marketing, content management, and web development services. Established in 2012, the company has a mature online presence with a professional website built on WordPress, leveraging modern plugins such as Yoast SEO and WP Rocket for optimization. The website presents a consistent brand image, clear contact information, and client references, positioning EPSIMEC as a credible service provider in the technology sector. Technically, the site uses PHP 8.0.3 on an Apache server hosted by Host Europe, but lacks HTTPS support, which is a significant security concern. The cookie consent mechanism is well implemented, indicating good privacy compliance. However, the absence of SSL/TLS encryption and security headers lowers the overall security posture. No explicit security policies or incident response contacts are published, and no vulnerability disclosure or security.txt files are found. Overall, EPSIMEC demonstrates a solid business and technical foundation but should prioritize securing its website with HTTPS and enhancing security best practices to improve trust and compliance.