Security reports directory
150,190 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
143,601–143,650 of 150,190
Transportation · Austria
28High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Graz-Köflacher Bahn und Busbetrieb GmbH (GKB) is a regional transportation company based in Austria, providing rail and bus services primarily in the West Styria region. The company has a long history dating back to 1935 and focuses on sustainable mobility solutions including electrification of rail lines and regional bus services. Their website serves as an information portal for passengers, offering schedules, fare information, and service updates. The company maintains an active social media presence and provides comprehensive privacy and cookie policies in compliance with GDPR. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, but lacks a valid SSL certificate, which is a critical security shortfall. The absence of HTTPS and modern TLS protocols exposes users to potential risks. Despite this, the site is well-structured, mobile-optimized, and provides clear contact information. Overall, the business is credible and well-established, but the website's security posture requires urgent improvement to protect user data and maintain trust.
Real Estate · Germany
43High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
ECE Projektmanagement G.m.b.H. und Co. KG operates a professional and comprehensive website focused on real estate development and management, particularly shopping centers, work & live spaces, and residential projects. The company positions itself as a large player in the German real estate market with a strong portfolio and innovative projects. The website is built on TYPO3 CMS and includes rich content, a contact form, social media integration, and a cookie consent mechanism compliant with GDPR. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security flaw. Security headers are partially implemented but the SSL/TLS configuration is severely lacking, exposing the site to risks. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registrations. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and enhance trust.
Healthcare · Austria
49High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Greiner Bio-One International GmbH is a large, globally active company specializing in biotechnology, medical devices, in vitro diagnostics, and research products. The company operates with a strong customer focus and maintains a diversified portfolio with production sites in multiple countries. Their website reflects a mature digital presence with comprehensive product information, news, and resources targeted at healthcare and research professionals. Technically, the site is built on TYPO3 CMS and hosted behind Cloudflare, but suffers from critical security shortcomings including the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. Privacy and legal compliance are well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.
Vapiano Franchising s.r.o.vapiano.com
Hospitality · Czech Republic
44High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Vapiano is an established international hospitality brand specializing in fresh handmade pasta, pizza, and salads served in a casual dining environment. Founded in 2002, the company operates a franchise business model with over 155 global restaurants. The website reflects a professional brand presence with consistent design and clear navigation targeting consumers seeking quality Italian cuisine in a relaxed setting. Technically, the site is built on WordPress hosted on WP Engine and protected by Cloudflare, utilizing common web technologies such as jQuery, Google Tag Manager, and Google Maps API. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility but requires urgent security improvements to meet modern standards.
MedTriX Groupmedizin-medien.at
Healthcare · Austria
53Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
MedTriX Group is a specialized medical communication service provider with a strong presence in Austria, Germany, and Switzerland. The company offers unique healthcare professional (HCP) data intelligence and a broad portfolio of services including data targeting, CRM data quality enhancement, telephone communication, medical media publishing, digital newsletters, and educational events. Their market position is reinforced by a strong regional footprint and partnerships with sister companies MTX Schweiz and MTX Deutschland. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS and SEO-friendly infrastructure. However, performance metrics are lacking, and the SSL/TLS configuration is critically flawed with no valid certificate and no TLS protocols enabled, which severely impacts security and trust. Security posture is weak due to the invalid SSL certificate and incomplete TLS support, despite the presence of several security headers. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is comprehensive and professionally presented, enhancing business credibility. Overall, the site is functional and professional but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic improvements in security configuration and performance optimization are recommended.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
- UUrban Retreats
urban-retreats.com
Real Estate · United States
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Urban Retreats is a small landscaping design and consultation business focused on creating urban retreats in the Seattle area and nearby neighborhoods. The website presents basic information about the company, its philosophy, design process, and contact details, targeting homeowners interested in landscaping services. The business operates primarily through personalized service offerings and consultation engagements. Technically, the website is built on WordPress with an outdated PHP version 5.6.31 and uses older JavaScript libraries such as jQuery 1.4.4. The site lacks HTTPS support, serving content over HTTP only, which significantly undermines its security posture. Performance metrics are unavailable, but the site appears slow and not optimized for mobile devices. SEO and accessibility features are minimal. From a security perspective, the absence of a valid SSL certificate and modern TLS protocols is a critical vulnerability. No security headers or advanced security practices are implemented. The site does not provide privacy, cookie, or terms of service policies, indicating poor privacy compliance. Contact information is clearly provided, but no incident response or security policies are visible. Overall, the website presents moderate business credibility but suffers from critical security and privacy shortcomings. Strategic improvements in security infrastructure, privacy compliance, and technical modernization are essential to enhance trustworthiness and protect user data.
- RRaiffeisen Landesbank Kärnten
rlb-bank.at
Finance · Austria
47High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Raiffeisen Landesbank Kärnten is a prominent regional bank in Austria, specializing in comprehensive financial services for private and corporate clients. The website reflects a mature digital presence with extensive service offerings including corporate banking, private banking, investment, insurance, and online banking solutions. The bank emphasizes personalized service and regional economic support, positioning itself as a trusted partner for businesses and individuals in Carinthia. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and includes advanced cookie consent management. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. Privacy policies and legal documents are well presented, supporting GDPR compliance. Overall, the site is professional and trustworthy but urgently requires remediation of its SSL/TLS configuration to ensure secure communications and maintain customer trust.
- Ssideshoreonline.nl - sideshoreonline Lähteet ja tiedot.
sideshoreonline.nl
Other
43High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website sideshoreonline.nl is currently a parked domain page managed by Sedo Domain Parking service, with no active business content or services offered. The site primarily displays advertisements and related search links, targeting general internet users seeking information. The domain appears recently registered and lacks any identifiable company or organizational presence. Technically, the site uses basic HTML and JavaScript with Sedo and Google Adsense scripts but lacks modern CMS or frameworks. Performance is slow, and mobile optimization is minimal. Security posture is weak due to the absence of HTTPS and critical security headers, exposing visitors to potential risks. Privacy compliance is minimal with only a basic cookie consent banner and a generic privacy policy hosted externally by Sedo. Overall, the site lacks trust indicators, contact information, and business legitimacy, resulting in a low credibility and security score.
acccoi partners GmbHacccoi.com
Technology · Austria
34High
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
acccoi partners GmbH is a small technology-focused company based in Austria specializing in enabling corporate business development through startup collaboration, corporate accelerators, and co-innovation programs. Established since 2012, the company targets large corporates and startups seeking innovation partnerships. The website is built on WordPress using Elementor and several plugins for SEO and marketing, but lacks HTTPS which is a critical security shortfall. The site includes standard legal pages and contact mechanisms, including a contact form and social media links. However, Google Analytics is installed but not configured, and performance metrics are unavailable. Security posture is weak due to missing SSL/TLS and security headers, exposing the site to risks. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.
Bit Incbit-inc.net
Technology · United States
48High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Bit Inc is a small technology integration company based in the United States, specializing in network system integration services including copper and fiber cabling, WiFi systems, surveillance, access control, and distributed audio/video solutions. The company positions itself as a reliable service provider with a focus on quality and customer service, partnering with reputable vendors and offering warranties. The website is built on the Wix platform, utilizing modern web technologies such as React and various Wix apps for enhanced user experience. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security vulnerability. Additionally, no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, supporting business credibility. Overall, the site demonstrates good content quality and business professionalism but requires urgent security and compliance improvements.
Fair Financefairfinance.org.uk
Finance · United Kingdom
42High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Fair Finance is a UK-based direct lender specializing in affordable personal loans up to £3000, targeting individuals including those with bad credit or on benefits. The company emphasizes social impact and financial advice, operating with FCA authorization. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as Google Analytics, Tag Manager, Hotjar, and Trustpilot for reputation management. Despite a professional design and clear business information, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy and terms of service pages are present and comprehensive, but no cookie consent mechanism is implemented despite tracking scripts being active. Contact information including phone and physical address is clearly provided, enhancing business credibility.
HICOhico-ics.com
Technology · Austria
45High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
HICO is a specialized provider of Integrated Product Support (IPS) business solutions targeting sectors such as civil and military aviation, security and defence, shipbuilding, rail, and IT solutions. Their offerings include engineering support, maintenance planning, supply support, IPS management, technical documentation, and training services. The company positions itself as a niche player with a focus on maximizing system availability and cost optimization. The website is professionally designed using WordPress CMS with modern plugins and SEO optimizations, though performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, lack of security headers, and missing advanced SSL features. Privacy compliance is adequate with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by detailed service descriptions and consistent branding, but contact information lacks explicit phone numbers or direct emails on the homepage. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.
Energy · Austria
31High
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
ADRESYS Adaptive Regelsysteme Gesellschaft m.b.H. is a small Austrian company specializing in innovative safety solutions for lone workers, including emergency call systems and smart textile technologies. Operating as a subsidiary of OMICRON electronics GmbH, a global leader in energy technology testing, ADRESYS leverages advanced technology to enhance workplace safety. The website is professionally designed, multilingual, and provides comprehensive information about products and services, targeting industrial safety managers and workers. Technically, the site runs on WordPress with modern plugins for multilingual support, cookie consent, and analytics. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the business presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to improve security posture.
- MMicrosoft Corporation
movere.io
Technology · United States
56Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website analyzed is a Microsoft Learn documentation page dedicated to Azure Migrate, a cloud migration service by Microsoft. It provides detailed, up-to-date information about new features, updates, and capabilities of Azure Migrate, targeting IT professionals and enterprises planning cloud migration. The site is part of the Microsoft Learn platform, reflecting a mature and well-established business with a strong market position in cloud services. Technically, the site leverages Microsoft Azure hosting and content delivery networks, uses modern JavaScript libraries, and integrates analytics and marketing tools such as Azure Monitor and Adobe Target. The content is well-structured, accessible, and optimized for SEO and mobile devices, providing an excellent user experience. However, a critical security issue is present: the SSL/TLS certificate is invalid or missing, and no TLS protocols are enabled, despite the presence of strict security headers like HSTS. This significantly undermines the security posture and trustworthiness of the site. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, consistent with Microsoft's standards. Overall, the site demonstrates high business credibility and technical maturity but requires urgent remediation of SSL/TLS configuration to ensure secure communications and maintain trust.
Swat.io GmbHswat.io
Technology · Austria
50Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Swat.io GmbH is a mature technology company based in Austria, specializing in SaaS social media management tools designed for professionals and teams. Their platform offers comprehensive services including publishing, community management, customer service, automation, analytics, and AI-powered assistance. The company has a strong market presence with over 30,000 users and is certified under ISO 27001, reflecting a commitment to information security. The website is professionally designed, content-rich, and well-structured, targeting social media managers, agencies, and marketing teams. Technically, the site is built on WordPress with Elementor and uses modern SEO and marketing tools, though performance metrics indicate room for improvement. Security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which is a critical issue for a SaaS provider. Privacy compliance is well addressed with clear policies and consent mechanisms. WHOIS data confirms the legitimacy and consistency of the business entity. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.
- AAvnet
avnet.com
Technology · United States
51Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website avnet.com is currently inaccessible due to a security challenge page that blocks direct access to its content. Avnet is a well-known global technology solutions provider specializing in electronic components distribution and supply chain services. The domain registration data confirms the legitimacy and consistency of the domain with the business entity. However, the lack of a valid SSL certificate and the presence of a security challenge page severely limit the ability to analyze the website's content, security posture, and compliance. The technical infrastructure indicates use of Akamai CDN services, but no modern TLS protocols or strong cipher suites are enabled, resulting in a basic and insecure SSL configuration. Overall, the website's security posture is weak due to missing HTTPS and blocked content, and no privacy or cookie policies are detectable on the landing page.
Collini gruppecollini.eu
Manufacturing · Austria
35High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Collini gruppe is a well-established European leader in surface technology, specializing in industrial coatings for metals and plastics. With over 125 years of experience, the company offers a broad range of surface treatment processes including anodizing, precious metal coatings, galvanizing, and organic coatings. The website targets industrial clients across sectors such as automotive, medical, and machinery manufacturing, emphasizing customized surface solutions to enhance product success. The business model is B2B with a strong international presence, supported by multiple global locations and a large workforce. The website content is rich, professionally designed, and well-structured, supporting multiple languages and providing detailed service information and contact options.
—
54Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
EVOLUXERevoluxer.com
Other · Spain
22Critical
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
EVOLUXER is a Spanish consultancy company specializing in the comprehensive management of international tenders. The company targets businesses and public/private entities seeking to expand their international presence and develop new projects globally. Their services include advisory, administrative, and financial management throughout the project lifecycle, with experience working alongside major multilateral organizations such as EuropaAid, the World Bank, and the Inter-American Development Bank. The website reflects a professional and consistent brand image with clear contact information and relevant business content. Technically, the site is built on WordPress using Elementor and related plugins, but suffers from slow load times and lacks modern security configurations such as HTTPS and security headers. The absence of a valid SSL certificate and security policies represents a significant security risk. Privacy compliance is basic, with privacy and cookie policies present but lacking consent mechanisms. Overall, the website demonstrates moderate business credibility but requires urgent improvements in security and technical performance to enhance trust and user experience.
MAN Truck & Bus Vertrieb Österreich GmbHmantruckandbus.at
Transportation · Austria
45High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
MAN Truck & Bus Vertrieb Österreich GmbH operates a comprehensive commercial vehicle website targeting the Austrian market, offering trucks, buses, transporters, and related services. The website demonstrates a strong market position with extensive product information, digital services, and customer engagement tools such as configurators and contact forms. The technical infrastructure leverages modern web technologies including AWS CloudFront CDN, Bootstrap, and jQuery, ensuring a responsive and user-friendly experience. However, the absence of HTTPS and a valid SSL certificate significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.
Nussbaumernussbaumer.be
Energy · Belgium
37High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Nussbaumer is a Belgian-based company specializing in electrical materials for low, medium, and high voltage applications. The company operates a B2B e-commerce platform powered by Sana Commerce, offering a wide range of products and training services targeted at electrical installers and industrial clients. The website is professionally designed with clear navigation and multilingual support, primarily in Dutch and French. Technically, the site runs on Microsoft IIS 10.0 and integrates Google Tag Manager for analytics and marketing purposes. However, the absence of a valid SSL certificate and HTTPS implementation significantly weakens the security posture. While security headers are partially implemented, critical SSL/TLS configurations are missing, exposing the site to potential risks. Privacy compliance is addressed with GDPR and cookie policies, including a consent mechanism. Overall, the site demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.
Kraftwerk Living Technologies GmbHkraftwerk.at
Technology · Austria
43High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Kraftwerk Living Technologies GmbH is a specialist provider of integrated media technology solutions, delivering innovative and customized concepts for sectors including entertainment, industry, science, museums, exhibitions, corporate, and architectural solutions. The company operates globally with offices in Austria, China, UAE, Saudi Arabia, and South Africa, targeting businesses seeking advanced AV systems integration and media-based attractions. Their website reflects a professional and content-rich digital presence, leveraging WordPress with SEO enhancements and Google Tag Manager for analytics. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of HTTPS, which poses significant risks to user trust and data protection. Privacy policies and GDPR compliance are well addressed, but incident response and security policy disclosures are missing. Overall, the business appears legitimate and well-positioned in its niche, but urgent improvements in security infrastructure are recommended.
- POLOPLAST GmbH & Co KG
poloplast.com
Manufacturing · Austria
55Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
POLOPLAST GmbH & Co KG is a well-established Austrian manufacturer specializing in plastic pipe systems with a strong presence across Europe. The company emphasizes sustainability, innovation, and quality, offering a broad range of products including multilayer pipe systems, building drainage, and wastewater disposal solutions. Their market position is that of a technology leader with a large operational scale and a parent company affiliation with Wietersdorfer. The website reflects a professional business with clear contact information and comprehensive privacy and cookie policies, supporting GDPR compliance. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Bootstrap for responsive design. However, the site suffers from slow performance and lacks HTTPS support, which is a critical security concern. The absence of SSL/TLS encryption and security headers exposes the site to potential risks and undermines user trust. Analytics and tracking tools such as Google Analytics and LeadFeeder are used with appropriate cookie consent mechanisms. Security posture is weak due to the lack of HTTPS and security headers, though no active vulnerabilities or malware were detected. Privacy compliance is strong with clear policies and consent banners. Business credibility is high given the detailed company information and social media presence. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include immediate implementation of a valid SSL certificate, addition of security headers, performance optimization, and enhancement of incident response information to strengthen security culture and compliance.
- Bank Gutmann
gutmann.at
Finance · Austria
51Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Bank Gutmann is a well-established private banking institution based in Austria, specializing in wealth management, investment advice, and tailored investment solutions since 1922. The website reflects a professional and content-rich digital presence targeting private and institutional banking clients. The technical infrastructure is built on the Liferay CMS platform with modern JavaScript frameworks such as React and Clay UI, indicating a mature digital environment. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture of the website, exposing users to potential risks. Privacy and cookie policies are present and GDPR compliant, with a moderate level of user tracking via Piwik PRO analytics. Overall, the website demonstrates good business credibility and user experience but requires urgent security improvements to protect client data and maintain trust.
Austria Center Viennaacv.at
Hospitality · Austria
45High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Austria Center Vienna (ACV) is Austria's largest congress center, offering extensive event spaces and modern technology in a central location in Vienna. It serves a wide range of event types including congresses, exhibitions, corporate events, product presentations, galas, and e-sports, targeting both national and international clients. The business is operated by the public company IAKW-AG and holds a strong market position with numerous awards and certifications, emphasizing sustainability and innovation. Technically, the website is built on modern frameworks like Next.js and React, hosted via Cloudflare, and integrates consent management tools such as Usercentrics. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical issue. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to protect user data and enhance trust.
Suntory Global Spiritsbeamsuntory.com
Manufacturing · United States
55Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Suntory Global Spirits is a leading global manufacturer and marketer of premium spirits, including whiskey, tequila, vodka, and gin. The company emphasizes quality craftsmanship, sustainability, and cultural heritage, targeting a global audience of premium spirit consumers and industry professionals. The website is professionally designed, content-rich, and consistent with the brand's market position and values. Technically, the site uses Drupal 10 CMS with modern JavaScript libraries and Google Tag Manager for analytics and marketing. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.
Continental Trading GmbHwetrade4you.at
Manufacturing · Austria
25Critical
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Continental Trading GmbH operates as a specialized retailer of used printing and finishing machines, rooted in Salzburg, Austria, with an international customer base. The website presents basic information about the business and its offerings but lacks comprehensive contact details and legal policies. The technical infrastructure relies on Apache web server with Plesk hosting, AngularJS framework, jQuery, and Bootstrap for frontend, and uses Google Analytics for visitor tracking with IP anonymization enabled. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. No privacy or terms of service policies are present, indicating compliance gaps with GDPR and other regulations. Overall, the website is functional but exhibits outdated technology and security weaknesses that require urgent remediation.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
BE-ternaterna.com
Technology
54Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
BE-terna is a medium-sized technology solutions provider specializing in modern business software solutions including ERP, CRM, business intelligence, AI, and automation. The company partners with leading global technology providers such as Microsoft, Infor, Qlik, and UiPath, positioning itself as a trusted partner for digital transformation across multiple industries including manufacturing, retail, energy, and financial services. The website reflects a professional and comprehensive digital presence with strong branding and customer trust signals. Technically, the site uses modern JavaScript libraries and CMS technologies but suffers from an invalid SSL certificate which impacts its security posture. Security headers are well configured but the lack of a valid HTTPS setup and cookie consent mechanism are notable gaps. The site does not expose contact emails or phone numbers explicitly but provides contact forms and social media channels for engagement. Overall, the business appears legitimate and well-established with a consistent domain registration and partnership ecosystem.
Other · Turkey
47High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website atlas.net.tr is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page, which blocks direct access to the site's content. This prevents a full assessment of the business, its services, and compliance posture. The domain is registered in Turkey and uses Cloudflare for DNS and protection, but lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. No privacy, cookie, or terms of service policies are detectable, and no contact information is available on the landing page. The technical infrastructure relies on Cloudflare, but the absence of modern TLS protocols and security best practices reduces the security posture significantly. Overall, the site exhibits minimal content and poor user experience due to the blocking mechanism.
- Linde Material Handling Austria
linde-mh.at
Transportation · Austria
49High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Linde Material Handling Austria is a leading provider of material handling equipment and solutions, including forklifts, automated vehicles, and digital fleet management products. The company targets businesses requiring efficient logistics and warehouse operations, offering new, used, and rental equipment alongside comprehensive service packages. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the site uses JavaScript, jQuery, and tracking tools like etracker and SalesViewer, hosted likely on Microsoft Azure. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Business credibility is strong, supported by certifications and consistent domain registration data. Overall, the site is functional and professional but requires urgent security improvements to protect users and maintain trust.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
OVIVO Inc.ovivowater.com
Energy
54Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Ovivo Inc. is a well-established global leader in sustainable water treatment solutions with over 150 years of expertise. The company provides a comprehensive portfolio of equipment, technology, and services targeting industrial, municipal, and electronics sectors. The website reflects a mature digital presence with multilingual support and rich content tailored for B2B audiences. Technically, the site is built on WordPress with modern SEO and analytics tools, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, Ovivo demonstrates strong business credibility and professionalism but must urgently address its SSL/TLS configuration to improve security posture and user trust.
Clariant Ltd.clariant.com
Energy · Switzerland
56Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Clariant Ltd. is a leading global specialty chemicals company focused on delivering innovative and sustainable chemical solutions across multiple industries including energy, manufacturing, and plastics. The website reflects a mature enterprise with comprehensive content, strong branding, and a clear business model targeting industrial customers, investors, and job seekers. Technically, the site is built on a modern CMS platform (Sitecore) and integrates multiple marketing and analytics tools, demonstrating a high level of digital maturity. However, the absence of a valid SSL/TLS certificate and disabled TLS protocols represent a critical security weakness that undermines user trust and data protection. While security headers and privacy policies are well implemented, the lack of HTTPS significantly lowers the overall security posture. Strategic improvements in SSL deployment and enhanced incident response documentation would strengthen the site’s security and compliance standing.
Other
47High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website cognosec.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of the actual site content. This prevents any meaningful analysis of the business or its services. The domain is mature, registered since 2009 with GoDaddy, and shows strong domain protection measures. However, the lack of a valid SSL certificate and HTTPS support is a critical security deficiency. The technical infrastructure relies on Cloudflare for DNS and security services, but the absence of TLS protocols and security best practices reduces the site's security posture significantly. Overall, the site is not accessible to users, resulting in a very low AI score and limited insights into business operations or compliance.
Le Domaine Forget de Charlevoixdomaineforget.com
Hospitality · Canada
42High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Le Domaine Forget de Charlevoix is a well-established international academy and festival specializing in music and dance, located in Quebec, Canada. The organization offers a variety of cultural and educational services including intensive training stages, a renowned summer festival, concerts, and accommodation facilities. Their target audience includes musicians, dancers, cultural tourists, and donors. The website reflects a professional and consistent brand with good content quality and clear navigation, primarily in French with English options. Technically, the site uses ASP.NET MVC framework hosted likely on Microsoft Azure, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. However, the site lacks a valid SSL certificate, which is a critical security flaw, and does not implement advanced security headers or DNS security features. Privacy compliance is basic with cookie consent mechanisms but lacks explicit GDPR compliance indicators or a data protection officer contact. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.
TableConnect GmbHtableconnect.net
Technology · Austria
28High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
TableConnect GmbH is a technology company specializing in the design and manufacture of large-scale interactive touch products such as Multi Touch Tables, Digital Blackboards, and Touchscreen Modules. Their products target enterprises, retail, hospitality, and media sectors, serving notable clients including Fortune 500 companies. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. However, the lack of HTTPS and modern security headers represents a critical security gap. Privacy policies and terms are present, but cookie consent mechanisms are missing. Overall, the company demonstrates a credible market position with strong branding and client trust signals.
Active Solutionactivesolution.at
Technology · Austria
43High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Active Solution GmbH is a medium-sized Austrian technology and engineering company specializing in IT and engineering consulting, project execution, and recruitment services. With 17 years of experience and a portfolio of reputable clients, the company positions itself as a dedicated and passionate service provider for IT professionals and engineers. The website reflects a professional and consistent brand image targeting IT and engineering talent and clients. Technically, the site is built on TYPO3 CMS and uses modern JavaScript and CSS, but lacks HTTPS, which is a critical security gap. The presence of cookie consent and Google Analytics indicates some privacy awareness, though no explicit security or incident response policies are published. Overall, the company demonstrates moderate digital maturity but requires urgent improvements in security infrastructure to protect user data and enhance trust.
- MMindbreeze GmbH
mindbreeze.com
Technology · Austria
51Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Mindbreeze GmbH is a medium-sized technology company specializing in AI-based enterprise search and knowledge management solutions. Their flagship product, Mindbreeze InSpire, empowers organizations to transform data into actionable insights for critical business decisions. The company is recognized as a leader in the IDC MarketScape and serves a global clientele including major enterprises such as Lufthansa and Daimler AG. The website is professionally designed, mobile-optimized, and rich in relevant content targeting enterprise customers seeking AI-driven knowledge management solutions. Technically, the site runs on Drupal 10 with a modern tech stack but lacks a valid SSL certificate, which critically impacts its security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms and business email validation on forms. Social media presence is strong across major platforms. Overall, the domain registration and website content are consistent and trustworthy, though the absence of HTTPS is a significant security concern.
Related:fabasoft.com
Speed U Up GmbHspeed-u-up.at
Technology · Austria
29High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Speed U Up GmbH is a specialized digital marketing agency focused on Alpine tourism, offering a broad range of services including content marketing, social media campaigns, voice platform development, and digital transformation consulting. The company operates across Austria, Switzerland, and Germany with a medium-sized team and a strong regional presence. Technically, the website is built on WordPress with modern plugins and technologies, but suffers from critical security shortcomings such as the absence of a valid SSL certificate and HTTPS, which significantly impacts its security posture. The privacy policy and terms of service are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the business is credible and professional, but the lack of HTTPS is a major risk that should be addressed immediately.
Other
31High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website uberlabs.com presents minimal content consisting solely of an embedded Flash object, indicating an outdated and poorly maintained web presence. There is no visible business information, contact details, or privacy and cookie policies, which significantly limits user trust and engagement. The domain is hosted on DreamHost with valid DNS records but lacks a valid SSL certificate, resulting in no HTTPS support and poor security posture. The technical infrastructure is basic, relying on deprecated technologies such as Flash, and lacks modern web standards and optimizations. Security headers are minimal, and no advanced security frameworks or incident response mechanisms are evident. Overall, the site exhibits critical security and compliance gaps, making it unsuitable for professional or commercial use without significant modernization and remediation.
- AAlbert Berner Deutschland GmbH
berner.eu
Retail · Germany
49High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Albert Berner Deutschland GmbH operates a comprehensive B2B e-commerce platform specializing in professional tools, chemicals, and related products primarily serving the automotive and industrial sectors in Germany. The company is well-established with a strong market position and a broad product catalog supported by detailed categorization and user-friendly navigation. Technically, the website employs modern JavaScript libraries, consent management tools, and extensive marketing and analytics integrations, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Despite this, the site maintains good privacy compliance with clear policies and consent mechanisms. Overall, the business is credible and professional, but urgent remediation of the SSL/TLS issue is recommended to enhance security and trust.
Ricoh USA, Inc.ricoh-usa.com
Technology · United States
51Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Ricoh USA, Inc. is a leading enterprise providing digital business services and printing solutions primarily targeting businesses, government agencies, and educational institutions in the United States. The company offers a comprehensive portfolio including managed print services, cloud and IT infrastructure, cybersecurity, and business process automation. Their market position is reinforced by industry recognitions such as being named a leader in cloud print services by Quocirca and IDC MarketScape. Technically, the website is built on modern frameworks like React and Next.js, managed via Contentful CMS, and hosted with Cloudflare DNS services. However, the site suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy and cookie policies are well implemented with consent mechanisms, and contact information is readily available through multiple channels. Overall, the website demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.
- DYWIDAG Dyckerhoff & Widmann GmbH
dywidag.at
Real Estate · Austria
28High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
DYWIDAG Dyckerhoff & Widmann GmbH is a well-established construction company operating primarily in Austria and Southern Bavaria, specializing in general contracting and complex construction projects. The company holds multiple recognized certifications such as ISO 9001, ISO 45001, and compliance management certifications, underscoring its commitment to quality and safety. Their website reflects a professional business with a clear focus on construction services, career opportunities, and regional presence through multiple offices. The target audience includes construction clients and partners within the real estate and building sectors in Austria. Technically, the website is built on WordPress with common plugins and frameworks, including Visual Composer and Slider Revolution, and integrates Google Analytics and marketing pixels for user tracking. However, the site suffers from slow performance and outdated SSL/TLS configuration, lacking a valid HTTPS certificate, which is a critical security concern. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Contact information is clearly provided with multiple channels and locations. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.
- esarom gmbh
esarom.com
Manufacturing · Austria
51Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
esarom gmbh is a medium-sized manufacturing company based in Austria specializing in the development of compounds, flavours, extracts, and ingredients for the beverage and food industries. The company positions itself as a global partner in taste, serving a broad international market with a strong export rate exceeding 80%. Their business model focuses on B2B partnerships, providing tailored flavour solutions and full-service support to manufacturers worldwide. The website reflects a professional and well-branded presence with multilingual support and detailed partner network information. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, multilingual support, and user experience enhancements. However, the site suffers from a critical security misconfiguration: it lacks a valid SSL certificate and does not properly support HTTPS, which significantly undermines its security posture. Despite this, the site implements several security headers and content policies that indicate an awareness of security best practices. From a security perspective, the absence of HTTPS and TLS protocols is a major vulnerability, exposing users to potential interception and undermining trust. The site lacks explicit incident response or vulnerability disclosure policies, and no cookie consent mechanism was detected, which may impact privacy compliance. The presence of certifications such as halal, kosher, and organic, along with transparent contact information and a global partner network, enhance business credibility. Overall, while the business and content quality are strong, the technical and security shortcomings, especially the missing SSL certificate, pose significant risks. Strategic improvements in SSL deployment, privacy mechanisms, and incident response transparency are recommended to elevate the site's trustworthiness and compliance.
- TicketLens GmbH
ulmon.com
Media · Austria
45High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
TicketLens GmbH operates a travel-focused media and ticket comparison platform primarily targeting travelers seeking tickets, tours, and activities worldwide. The website provides travel app reviews and curated travel content to support its audience. The business model centers on affiliate marketing and price comparison, positioning TicketLens as a niche player in the travel media sector. Technically, the site is built on WordPress with common SEO and performance plugins, hosted on WP Engine, and uses privacy-conscious analytics via Plausible. However, the absence of a valid SSL certificate and HTTPS support represents a critical security gap, exposing users to potential risks. Privacy compliance is basic, with privacy and terms pages present but lacking explicit GDPR compliance indicators or cookie consent mechanisms. Contact information is limited to email and social media, with no phone or physical address provided. Overall, the website is functional and content-rich but requires urgent security improvements to protect user data and enhance trust.
Other
44High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website jjwhotels.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content. This prevents any meaningful analysis of the business, its services, or its digital presence. The domain is registered and has DNS records configured with multiple A and MX records, indicating some level of operational setup. However, the absence of a valid SSL certificate and the lack of HTTPS severely impact the security posture and trustworthiness of the site. No privacy, cookie, or terms of service policies are detectable, and no contact or business information is available from the site content. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trust.
Manufacturing · Austria
46High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
WFL Millturn Technologies GmbH & Co.KG is a specialized manufacturer focused exclusively on multifunctional turning, drilling, and milling centers, positioning itself as a global leader in this niche. The company offers a comprehensive portfolio including advanced machinery, software solutions like CrashGuard and iControl, and extensive customer services such as repair, maintenance, and training. Their market position is reinforced by a consistent brand presence and a professional, multilingual website targeting manufacturing industry professionals worldwide. Technically, the website is built on TYPO3 CMS with a modern tech stack including Apache and PHP, and employs professional design standards with good mobile optimization and accessibility. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines the site's security posture. The site uses several marketing and analytics tools transparently, including Google Analytics and Pardot, with appropriate privacy and cookie policies in place. From a security perspective, while some security headers are present, the lack of HTTPS and modern TLS protocols significantly lowers the security score. No WAF or blocking mechanisms are detected, and WHOIS data aligns well with the business identity, indicating legitimacy. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements. Strategic recommendations include immediate deployment of a valid SSL certificate, enabling HTTPS and modern TLS protocols, and enhancing security headers and session management. These steps will improve user trust, compliance, and overall security posture.
Autohaus Birngruberbirngruber.at
Transportation · Austria
47High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Autohaus Birngruber is a medium-sized automotive dealership based in Austria, representing major brands such as Volkswagen, Audi, Seat, Skoda, and Cupra. The company offers new and used car sales, vehicle servicing, financing, and insurance services, targeting car buyers and service customers in the Austrian market. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on the Plone CMS platform using Python and Zope, with Cloudflare as CDN and security proxy. However, the security posture is weak due to an invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the overall security score. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The business credibility is supported by extensive customer reviews and social media presence. Overall, the site is functional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.