Security Directory

S

Stieglbrauerei zu Salzburg GmbH

stiegl.at

40

Stiegl Privatbrauerei is Austria's leading private brewery with a rich heritage dating back to 1492. The company offers a broad portfolio of beer specialties, operates an online shop, and provides B2B distribution and technical services. The website reflects a mature digital presence with professional design, comprehensive content, and active marketing integrations. However, the absence of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. The site implements GDPR-compliant privacy and cookie policies with consent mechanisms, indicating good privacy awareness. Overall, the business is well-established and credible, but urgent improvements in security infrastructure are recommended.

P

Peek & Cloppenburg B.V. & Co. KG

peek-cloppenburg.com

40

Peek & Cloppenburg B.V. & Co. KG is a well-established European fashion retailer with a strong presence in physical stores and online platforms. The company offers a curated selection of international and exclusive brands, targeting fashion-conscious consumers across multiple countries. Their business model focuses on multi-brand retailing with a significant footprint in Europe, supported by a comprehensive loyalty program and customer service infrastructure. Technically, the website is built on modern frameworks like Next.js and Magnolia CMS, leveraging Cloudflare for hosting and CDN services. The site is well-optimized for mobile and SEO, with good accessibility features. However, the security posture is weakened by an invalid SSL certificate and lack of enabled TLS protocols, which critically impacts secure communications and user trust. Privacy compliance is robust, with clear policies and consent mechanisms implemented. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

A

Addiko Bank AG

addiko.com

40

Addiko Bank AG operates as a regional digital bank serving multiple European countries with a focus on online banking products such as savings accounts and loans. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting retail and corporate banking customers. Technically, the site is built on WordPress with modern plugins and integrates multiple analytics and marketing tools. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which is critical for a financial institution. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, while the business and technical aspects are solid, the security deficiencies pose a significant risk that must be remediated promptly.

Scheidt & Bachmann GmbH is a globally recognized provider of innovative system solutions in the transportation and energy retail sectors. Their offerings include parking management, rail signalling, fare collection systems, and energy retail solutions, serving a broad range of mobility providers worldwide. The company positions itself as a market leader with a strong focus on integrated modular solutions and sustainability. Technically, the website is built on TYPO3 CMS with a professional design and good navigation, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, while the business credibility and content quality are strong, the security posture requires urgent improvement to protect user data and enhance trust.

G

GrECo

greco.services

40

GrECo is a well-established insurance and risk management specialist with a strong presence in Central and Eastern Europe, operating since 1925. The company offers a broad range of services including risk consulting, cyber insurance, health and benefits, and international insurance programs. The website reflects a mature digital presence with professional design, multilingual support, and structured data for SEO. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and lack of HTTPS support, which undermines user trust and data security. Privacy policies are present and GDPR compliant, but cookie consent mechanisms are minimal. Overall, the site is content-rich and credible but requires urgent security improvements to align with best practices.

L

Lexogen GmbH

lexogen.com

26

Lexogen GmbH is a specialized biotechnology company based in Vienna, Austria, focused on next generation sequencing (NGS) and transcriptomics solutions. The company offers a comprehensive portfolio of RNA analysis products, including RNA-Seq sample preparation kits, RNA spike-in controls, and bioinformatics data analysis services. Their target audience includes researchers, pharmaceutical companies, and academic institutions seeking innovative RNA sequencing and analysis solutions. Lexogen positions itself as a niche leader with ISO 9001 and ISO 13485 certifications, underscoring its commitment to quality and regulatory compliance. Technically, the website is built on WordPress using Elementor and WooCommerce, hosted on Cloudpit infrastructure. The site integrates modern web technologies such as Google Tag Manager and reCAPTCHA for analytics and security. While the site is mobile optimized and SEO friendly with good content quality and navigation, performance metrics are unavailable. The absence of a valid SSL/TLS certificate is a critical security gap, exposing users to insecure HTTP connections. From a security perspective, the site lacks HTTPS, HSTS, and other essential security headers, resulting in a low security posture score. No explicit security or incident response policies are published. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact information is detailed and trustworthy, including multiple phone numbers, emails, and physical addresses in Austria and the USA. Overall, Lexogen's website demonstrates strong business credibility and content quality but suffers from a critical security deficiency due to missing HTTPS. Strategic improvements in SSL implementation and security headers are essential to enhance user trust and data protection. The company’s digital maturity is moderate, with opportunities to improve technical infrastructure and security practices to better support its specialized biotech market presence.

C

C-TEC

c-tec.co.uk

19

The website c-tec.co.uk serves primarily as a minimal landing page that redirects visitors to the main corporate website c-tec.com. It lacks substantive content about the business, its services, or contact information. The site is built on WordPress using the Divi theme and includes jQuery libraries. However, it suffers from significant security and compliance shortcomings, including the absence of an SSL certificate, no privacy or cookie policies, and no visible contact or security incident response information. Performance is slow, and SEO and accessibility features are minimal. Overall, the site appears to be a placeholder rather than a fully developed business portal. From a technical perspective, the site is hosted on Google Cloud infrastructure and uses standard WordPress technologies. The lack of HTTPS and security headers exposes it to potential risks and undermines user trust. No analytics or tracking tools are detected, indicating minimal user data collection. The DNS configuration is standard but lacks advanced security features like DNSSEC or DMARC. Security posture is weak due to missing HTTPS, lack of security headers, and no visible security or incident response policies. The absence of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. No vulnerability disclosure or security.txt files are present to guide security researchers. The domain registration data is consistent with the UK presence and business identity, supporting legitimacy, but the website itself lacks professionalism and trust signals. Strategically, the site should prioritize implementing HTTPS, adding comprehensive privacy and cookie policies, and providing clear contact and security incident response information. Improving site performance, SEO, and accessibility would also enhance user experience and trust. These steps are critical to align the website with modern security and compliance standards and to support the business's digital credibility.

H

Handwerkskammer Aachen

hwk-aachen.de

39

Handwerkskammer Aachen is a regional chamber of crafts in Germany representing approximately 17,400 member businesses. The organization provides a broad range of services including vocational training, further education, consulting, business start-up support, and expert services. The website reflects a well-established institution with a strong market position in the education and government sectors, targeting apprentices, craftsmen, business founders, and companies within the Aachen region. The content is rich, professionally presented, and highly relevant to its audience. Technically, the site is built on the ODAV CMS platform, utilizing modern JavaScript libraries and frameworks, but suffers from poor SSL/TLS implementation, lacking a valid certificate and modern encryption protocols. This significantly impacts the security posture of the website. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Contact information is complete and transparent, enhancing business credibility. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain trust.

M

MIC Datenverarbeitung GmbH

mic-cust.com

29

MIC Datenverarbeitung GmbH operates as a leading global provider of customs and trade compliance cloud software solutions, serving over 1000 customers across more than 55 countries. Their SaaS offerings focus on integrated customs compliance and trade compliance systems, supported by a consistent global service organization. The website reflects a mature digital presence built on TYPO3 CMS, with professional design, clear navigation, and extensive product and service information. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks. Security headers are well implemented, but the lack of TLS and HSTS reduces overall security posture. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy, though explicit GDPR compliance indicators could be enhanced. Business credibility is strong, supported by consistent WHOIS data, partner logos, and social media presence. Strategic improvements in SSL deployment and security practices are recommended to elevate trust and compliance.

Ecolab Inc. is a global enterprise specializing in water, hygiene, and infection prevention solutions and services. The company serves a broad range of industries including manufacturing, healthcare, hospitality, food and beverage processing, and energy. With a strong market position as a leader in sustainability and operational efficiency, Ecolab offers science-based solutions and data-driven insights to help customers improve safety, reduce environmental impact, and optimize operations. The website reflects a mature digital presence with comprehensive content, clear navigation, and multi-channel contact options. Technically, the website is built on the Sitecore CMS platform, leveraging modern technologies such as Coveo for search, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is hosted via Akamai CDN and integrates multiple third-party marketing and analytics tools, indicating a sophisticated digital marketing strategy. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site implements strong HTTP security headers and content security policies. However, a critical issue is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly undermines the security posture. This gap exposes the site to risks and should be addressed promptly. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, Ecolab's website demonstrates high business credibility and professionalism but requires urgent remediation of SSL/TLS issues to ensure secure communications and maintain trust. Strategic recommendations include fixing the SSL certificate, enabling modern TLS protocols, enhancing HSTS policies, and continuing to maintain strong privacy and security practices.

B

Base-IT GmbH

baseit.at

22

Base-IT GmbH is an Austrian IT service provider specializing in consulting, planning, installation, and maintenance of IT systems, with a strong focus on cybersecurity and managed services for small and medium enterprises (KMU). The company holds recognized ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications, underscoring its commitment to information security and data privacy. Their market position is supported by a portfolio of diverse IT services and a visible client base, including references and social media presence. Technically, the website is built on a SilverStripe CMS platform with modern JavaScript libraries such as jQuery, MDBootstrap, Owl Carousel, and Swiper. The hosting appears to be provided by Hetzner. While the site is mobile-optimized and well-structured with good SEO practices, performance data is lacking, and accessibility is basic. The site uses a cookie consent mechanism compliant with GDPR and integrates Google Analytics for performance and user tracking. From a security perspective, the absence of HTTPS and a valid SSL/TLS certificate is a critical vulnerability, severely impacting the overall security posture. Other security best practices such as HSTS, OCSP stapling, and security headers are missing. The company demonstrates good security governance through certifications but lacks visible incident response or vulnerability disclosure policies on the website. Overall, the website is professional and content-rich but requires urgent security improvements to enable HTTPS and enhance security headers. Strategic recommendations include implementing SSL/TLS, publishing incident response policies, and enhancing security controls to improve trust and compliance.

P

pcode

pcode.at

37

pcode is a small Austrian software agency specializing in the development and design of digital products, online shops, and custom software solutions. With approximately 8 years of experience, the company positions itself as a provider of human-centered digital experiences, emphasizing clean code, accessibility, and UX design. Their market presence is supported by client case studies and a professional online presence including social media channels. Technically, the website is built using modern technologies such as React, Nest.js, TypeScript, and Docker, hosted likely on AWS infrastructure, and developed with the Framer platform. However, a critical security weakness is the lack of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Other security headers are present but insufficient to compensate for the missing encryption. Privacy compliance is basic, with a privacy policy found but no cookie consent mechanism or GDPR compliance indicators. Contact information is clearly provided via phone, address, and a contact form, enhancing business credibility. Overall, the website is professionally designed and functional but requires urgent security improvements to protect user data and build trust.

P

PHINIA Inc.

delphi.com

40

PHINIA Inc. is a mature, large-scale business specializing in premium fuel systems, electrical systems, and aftermarket automotive products with a strong emphasis on sustainability and innovation. The company positions itself as a market leader advancing clean transportation technologies and alternative fuels. The website reflects a professional and consistent brand image with comprehensive corporate governance and investor relations information. Technically, the site uses Sitefinity CMS, Cloudflare hosting, and integrates multiple marketing and analytics tools such as Google Analytics and HubSpot. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS support, which poses a critical risk to user trust and data security. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is content-rich and professionally maintained but requires urgent remediation of SSL/TLS issues to ensure secure communications.

C

Chemetall GmbH

chemetall.com

34

Chemetall GmbH is a well-established global leader in surface treatment chemical solutions, operating as a subsidiary of BASF. The company serves industrial clients across multiple sectors including aerospace, automotive, and manufacturing, providing advanced chemical technologies and laboratory services. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting B2B industrial customers. Technically, the site uses legacy JavaScript libraries and lacks modern performance optimizations, with slow loading times and basic mobile responsiveness. Security posture is weak due to the absence of HTTPS and minimal security headers, exposing users to potential risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data confirms a mature and legitimate domain with consistent registration details. Overall, the site demonstrates solid business credibility but requires urgent improvements in security and privacy to meet modern standards.

The domain fmt.biz is registered to Christof Industries GmbH, an Austrian company with a mature domain age of 23 years. However, the website currently hosts only a default Plesk server placeholder page indicating no active web presence or business content. The technical infrastructure is minimal, running on an nginx server with no valid SSL certificate, resulting in no HTTPS support. Security headers are partially implemented but limited by the lack of HTTPS. There are no privacy, cookie, or terms of service policies, nor any contact information or forms on the site. DNSSEC and CAA records are not enabled, reducing domain security. Overall, the website lacks professional content, security maturity, and privacy compliance, resulting in a low trustworthiness score.

J

Jugend am Werk Steiermark GmbH

jaw.or.at

40

Jugend am Werk Steiermark GmbH is a leading non-profit organization in Austria's Steiermark region, providing a broad range of social services including support for people with disabilities, youth, families, and adults with mental health challenges. Their offerings encompass housing, employment, education, and community integration, positioning them as a key social service provider with a strong regional presence and multiple certifications and awards that underscore their credibility and commitment to quality. The website is built on TYPO3 CMS, hosted on a provider associated with the domain's DNS records, and employs modern web technologies such as Swiper.js and Matomo analytics. While the site is rich in content, well-structured, and accessible, it suffers from a critical security shortfall due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly impacts the security posture score. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism in place. Contact information is prominently displayed and verified, enhancing business credibility. Overall, the site demonstrates strong business and content quality but requires urgent security improvements to protect user data and maintain trust.

KPMG Austria GmbH operates a comprehensive and professionally designed website representing its global network of audit, tax, advisory, and legal services. The website targets clients and potential clients primarily in Austria and German-speaking regions, offering detailed insights into their services, industries, and career opportunities. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript frameworks like Vue.js and React, and integrates marketing and analytics tools such as Adobe Analytics, Demandbase, Gigya, and OneTrust for privacy compliance. Despite a strong content and business presence, the website suffers from critical security shortcomings, notably an invalid SSL certificate and lack of TLS protocol support, which significantly impacts its security posture. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

A

AT&S Austria Technologie & Systemtechnik AG

ats.net

33

AT&S Austria Technologie & Systemtechnik AG is a globally recognized leader in high-end printed circuit boards and IC substrates, serving key industries such as aerospace, automotive, communication, and medical technology. The company demonstrates a strong market position with a comprehensive digital presence, including investor relations, career opportunities, and sustainability initiatives. Technically, the website is built on WordPress with modern tools and plugins, offering good SEO and accessibility, though performance is moderate. Security posture is weakened by the absence of a valid SSL/TLS certificate and disabled TLS protocols, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business is credible and trustworthy, but urgent improvements in SSL/TLS configuration are recommended to enhance security and user trust.

V

Vossen

vossen.com

40

Vossen is a well-established European textile company specializing in high-quality towels, bathrobes, and bath mats, with a strong emphasis on sustainability and color variety. The website is a professionally designed e-commerce platform built on Shopify, featuring comprehensive product offerings, customer reviews, and multilingual support. The technical infrastructure leverages modern web technologies and integrates multiple third-party apps for enhanced functionality. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which are critical for secure online transactions and user trust. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the site presents a credible and professional business presence but requires urgent security improvements to ensure safe user interactions.

S

Software Daten Service Gesellschaft m.b.H.

sds.at

40

Software Daten Service Gesellschaft m.b.H. (SDS) is a medium-sized Austrian company specializing in software and services for the international financial industry, with additional focus on telecommunications and digital entertainment sectors. The company offers a comprehensive portfolio including securities processing, regulatory reporting, compliance, consulting, managed services, and professional testing. SDS benefits from a strong market position supported by its 50 years of history and affiliation with the Deutsche Telekom Group. The website reflects a professional and consistent brand image targeting financial institutions and related industries globally. Technically, the site is built on WordPress with modern plugins and SEO optimizations, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and lack of HTTPS support. Security headers are present but insufficient to compensate for the missing encryption. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is content-rich and professionally maintained but urgently requires SSL/TLS remediation to improve security posture and trust.

F

feibra GmbH

feibra.at

40

feibra GmbH is a well-established Austrian company specializing in direct marketing and mailing services, including unaddressed and addressed mailings, campaign planning, and geomarketing. The company benefits from over 60 years of experience and is a subsidiary of the Österreichische Post Aktiengesellschaft, positioning it strongly in the Austrian media and marketing sector. The website targets businesses and marketing professionals seeking effective direct marketing solutions across Austria. Technically, the website is built on WordPress with a modern plugin ecosystem and SEO optimization, but lacks a valid SSL certificate, which is a critical security gap. The security posture is basic with some security headers present but no active TLS protocols or certificate transparency compliance. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

B

Bombardier Recreational Products

brp.com

40

Bombardier Recreational Products (BRP) is a global leader in the manufacturing and retail of recreational vehicles including snowmobiles, all-terrain vehicles, 3-wheel motorcycles, and personal watercraft. The company maintains a strong market position with multiple well-known brands such as Ski-Doo, Lynx, Sea-Doo, and Can-Am. The website reflects a professional and comprehensive digital presence targeting consumers and enthusiasts in the powersports industry. Technically, the site leverages modern technologies including Adobe Experience Manager, Google Tag Manager, and Dynatrace monitoring, indicating a mature digital infrastructure. However, a critical security weakness is the absence of a valid SSL certificate, which undermines the security posture and user trust. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site is content-rich and professionally designed but requires urgent remediation of SSL issues to ensure secure user interactions.

The website at fci.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that blocks content unless JavaScript and cookies are enabled. This prevents any meaningful extraction of business or content data. The domain is registered and DNS records indicate active email routing through Mimecast, suggesting legitimate business use. However, the lack of a valid SSL certificate and HTTPS configuration is a critical security weakness. No privacy, cookie, or terms of service policies are present, and no contact information or business descriptions are available on the accessible page. The site relies on Cloudflare for security and hosting, but the absence of modern TLS protocols and HSTS reduces its security posture. Overall, the site appears to be protected by Cloudflare but is not currently accessible for detailed analysis.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

The domain hexa.at currently serves as a simple redirect to an external corporate website (nagarro.com). There is no substantive content on the landing page, no privacy or cookie policies, and no contact information provided. The technical infrastructure is minimal, running on an Apache server without HTTPS enabled, which presents significant security risks. DNS and mail configurations indicate use of Microsoft Outlook protection services, and the domain is registered via a reputable Austrian registrar. However, the lack of SSL/TLS and security headers severely impacts the security posture. Overall, the site functions only as a redirect with no direct business presence or user engagement on this domain.

B

Broken Rules

brokenrul.es

35

Broken Rules is an independent game development studio established in 2009, specializing in designing, developing, and publishing original digital games. The website showcases multiple award-winning titles, targeting gamers and digital entertainment audiences. The business model focuses on creative game production and distribution across multiple platforms including Apple Arcade, Nintendo Switch, Steam, and itch.io. The company maintains a consistent and professional brand presence with high-quality content and clear navigation. Technically, the website is hosted on an Apache server with basic HTML5 and CSS3 technologies. However, it lacks modern security implementations such as HTTPS, HSTS, and security headers, which significantly impacts its security posture. Performance data is unavailable, but the site appears to have basic mobile optimization and accessibility features. SEO is reasonably well implemented with proper meta tags and Open Graph data. From a security perspective, the absence of SSL/TLS encryption is a critical vulnerability, exposing users to potential data interception risks. No security policies, incident response contacts, or vulnerability disclosure mechanisms are publicly available, indicating a low maturity in security governance. The DNS configuration lacks DNSSEC and CAA records, further reducing domain security assurance. Overall, the website is functional and professional in content and design but requires urgent security improvements to protect users and enhance trust. Strategic recommendations include enabling HTTPS, implementing security headers, and establishing clear privacy and incident response policies.

G

GE Capital

gecapital.com

36

GE Capital operates as the financial services arm aligned with General Electric's industrial businesses, providing leasing, lending, retail credit, real estate financing, and mortgage services globally. The website reflects a professional and consistent brand presence with clear business descriptions and multiple regional contact points, targeting industrial customers seeking financial solutions. Technically, the site is built on Drupal 10 with Bootstrap and hosted behind Cloudflare, indicating a modern infrastructure. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine secure communications. Privacy and cookie policies are well linked to official GE domains, showing good compliance posture, but no explicit security or incident response policies are found. Overall, the site is professional and credible but requires urgent security improvements to meet enterprise standards.

F

Fusonic GmbH

fusonic.net

40

Fusonic GmbH is a medium-sized technology company based in Austria, specializing in software development and UX design with a strong regional presence in Vorarlberg. The company offers a broad range of digital services including software modernization, MVP development, service and process optimization, digital strategy consulting, data analysis, and artificial intelligence solutions. Their market position is supported by over 100 successful projects and long-term partnerships, targeting a wide audience including various industries. The website content is professionally presented with excellent design, clear navigation, and relevant business information. Technically, the site uses modern frameworks such as Symfony and Angular, and is hosted behind Amazon CloudFront CDN, but suffers from a critical lack of valid SSL/TLS configuration, which severely impacts security posture. Security headers are partially implemented, but the absence of HTTPS and TLS protocols is a major vulnerability. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, and the use of Matomo analytics reflects privacy-conscious tracking. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and maintain credibility.

E

Expeditors International of Washington, Inc.

expeditors.com

40

Expeditors International of Washington, Inc. is a global logistics company specializing in freight forwarding, customs brokerage, and supply chain management services. The company operates a comprehensive worldwide network and offers technology-enabled solutions to optimize logistics operations. The website reflects a professional and consistent brand presence targeting businesses requiring global transportation and supply chain services. Technically, the site uses ASP.NET and is hosted behind Cloudflare with integrations such as Google Tag Manager and HubSpot for marketing and analytics. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which is a critical vulnerability. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site is functional and credible but requires urgent improvements in SSL/TLS security to protect user data and maintain trust.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 27 security findings identified across all modules.

M

Miba AG

miba.com

31

Miba AG is a large Austrian industrial company specializing in the development and production of critical components for the energy value chain and transportation sectors. Their product portfolio includes sintered parts, sliding bearings, friction linings, power electronics components, coatings, and eMobility solutions. The company maintains a strong global presence with multiple locations and a focus on sustainable and efficient energy applications. Technically, the website is built on TYPO3 CMS and uses modern JavaScript libraries, but suffers from a critical lack of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. The site includes comprehensive corporate information, social media integration, and cookie consent mechanisms, indicating good privacy compliance. However, no explicit security or incident response policies are published. Overall, the website is professional and content-rich but requires urgent security improvements to protect users and business operations.

epunkt GmbH is an established Austrian employment agency specializing in job placement and career coaching services. With a domain age of 22 years and a strong presence in Austria, the company targets job seekers and employers, offering personalized career advice and access to a broad range of job opportunities. The website is professionally designed, content-rich, and provides clear navigation and contact information, supporting a positive user experience and trustworthiness. Technically, the site uses nginx as the server and integrates NewRelic for performance monitoring. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the business is credible and well-positioned in its market, but immediate remediation of security issues is essential.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

P

Pierre Fabre Laboratories

pierre-fabre.com

40

Pierre Fabre Laboratories is a well-established French pharmaceutical and dermocosmetics group with a global presence and a strong portfolio of brands. The company focuses on developing innovative healthcare and beauty solutions inspired by patients and consumers. Their website reflects a mature digital presence with comprehensive content, multilingual support, and clear business information. However, the technical infrastructure shows weaknesses, particularly in security, as the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical issue for user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via OneTrust. Overall, the website is professional and trustworthy but requires urgent security improvements to meet modern standards.

Austrian Airlines AG operates a comprehensive and professional airline website targeting global travelers seeking flights and related travel services. The site offers extensive booking options, flight management, and loyalty program integration, reflecting a mature digital presence consistent with a major European airline and Lufthansa Group member. The technical infrastructure leverages modern web technologies including Apache server, Adobe Helix, and Maui Design System, with content delivery optimized via Akamai CDN. However, performance metrics indicate slow loading times, suggesting room for optimization. Security posture reveals critical gaps, notably the absence of a valid SSL certificate and disabled TLS protocols, which significantly undermine user trust and data protection. While security headers and content policies are well implemented, the lack of HTTPS is a major concern. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are not clearly detected. Overall, the website is highly professional and credible but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and compliance with modern security standards.

KTM AG is a well-established Austrian motorcycle manufacturer with a strong market presence and a focus on transparent communication with investors and the public. The website reflects a professional corporate image with clear navigation and relevant business content. Technically, the site is built on WordPress using the Divi theme and integrates modern marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. However, the absence of a valid SSL certificate and HTTPS significantly undermines the site's security posture, exposing visitors to potential risks. No explicit security or incident response policies are published, which could be a concern for stakeholders. Overall, while the business credibility and content quality are good, the technical and security aspects require urgent improvement to meet modern standards.

L

Lam Research

lamresearch.com

40

Lam Research Corporation is a leading enterprise in the semiconductor manufacturing technology sector, providing advanced equipment and solutions that enable chipmakers to innovate at the atomic scale. The website reflects a mature, well-structured corporate presence with comprehensive information on products, customer support, careers, investors, and environmental, social, and governance (ESG) initiatives. The company targets semiconductor industry professionals, investors, and potential employees globally, with multilingual support and dedicated portals. Technically, the website is built on WordPress CMS hosted on WP Engine and utilizes Cloudflare CDN for delivery. It incorporates modern JavaScript frameworks such as React and libraries like GSAP and amCharts for interactive content. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Despite this, the site implements several security headers and a cookie consent mechanism, indicating attention to privacy compliance. Security posture is weakened by the absence of HTTPS and TLS protocols, exposing users to potential risks. No critical vulnerabilities or exposed sensitive data were detected in the content. The domain registration and DNS configurations align with a legitimate enterprise, with no suspicious patterns. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements. Strategic recommendations include immediate deployment of a valid SSL certificate, enabling modern TLS protocols, and enhancing security configurations to protect user data and improve trust. The company should also continue to maintain comprehensive privacy and security policies to comply with global regulations and foster user confidence.

Waagner Biro is a large, established company specializing in bridge systems, stage systems, steel and glass constructions, and bridge services, primarily targeting industrial and infrastructure sectors. The website acts mainly as a portal linking to specialized subsidiaries, reflecting a segmented business model focused on engineering and manufacturing. Technically, the site is basic with minimal content and limited modern web features. It uses Apache server technology but lacks HTTPS, which is a critical security deficiency. The absence of privacy and cookie policies on the main domain, as well as no contact information, reduces user trust and compliance posture. Security posture is weak due to missing SSL/TLS, lack of security headers, and incomplete DNS/email security configurations. Overall, the site is functional but requires significant improvements in security and privacy compliance to meet modern standards.

Ö

ÖAMTC - Österreichischer Automobil-, Motorrad- und Touring Club

oeamtc.at

40

ÖAMTC is a large, well-established Austrian automobile and touring club serving over 2 million members. The organization provides a wide range of services including roadside assistance, insurance, travel planning, and member benefits. The website reflects a strong brand presence with comprehensive content and multimedia offerings targeting motorists and travelers in Austria. Technically, the site uses modern technologies such as nginx, RequireJS, JW Player, and integrates with multiple third-party services for analytics and advertising. However, a critical security issue is the lack of a valid SSL certificate and absence of HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent management platform in place. Overall, the site is professional and trustworthy but requires urgent remediation of its SSL configuration to ensure secure user interactions.

BMW.at is the official website for BMW Austria, providing comprehensive information on premium vehicles, including electric and hybrid models, leasing and financing options, and after-sales services. The site targets automotive customers in Austria, emphasizing BMW's premium brand positioning and extensive product offerings. The website is built on a robust technical infrastructure leveraging Adobe Experience Manager and Akamai CDN, ensuring a modern and responsive user experience. Despite the advanced infrastructure, the site currently suffers from an invalid SSL certificate, which undermines its security posture. Security headers are partially implemented, but improvements are needed to fully secure user interactions and data. Privacy and cookie policies are well-presented and GDPR compliant, reflecting BMW's commitment to data protection. Overall, the site demonstrates high professionalism and trustworthiness, with strong brand consistency and extensive content relevant to its audience.

Accenture's SAP Customer Experience website presents a comprehensive and professional digital presence showcasing their partnership with SAP and their extensive capabilities in delivering customer experience solutions. The site targets global enterprises seeking advanced SAP commerce and customer data management services. Technically, the site leverages Adobe Experience Manager, integrates multiple analytics and marketing tools, and is hosted on AWS CloudFront. However, a critical security concern is the invalid or missing SSL certificate and lack of modern TLS protocol support, which significantly impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a mature business with strong market positioning but requires urgent remediation of SSL and TLS issues to ensure secure user interactions.

E

EV Group (EVG)

evgroup.com

39

EV Group (EVG) is a well-established company specializing in semiconductor manufacturing equipment and process solutions, including wafer bonding, lithography, and metrology. The company targets semiconductor manufacturers and related industries, positioning itself as a leading supplier with a global presence. The website reflects a professional and comprehensive digital presence with multilingual support and detailed product and technology information. Technically, the site is built on TYPO3 CMS and uses modern tools like Cookiebot and Google Tag Manager, but lacks a valid SSL certificate, which is a significant security concern. Security headers are partially implemented, but the absence of HTTPS and TLS protocols severely impacts the security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and credible but requires urgent security improvements to protect user data and maintain trust.

F

FH Technikum Wien

technikum-wien.at

40

FH Technikum Wien is Austria's only purely technical university of applied sciences, offering a broad and practice-oriented range of study programs. The institution holds a leading market position in Austria's technical education sector, evidenced by its top ranking in the Industriemagazin and multiple certifications including sustainability and quality management awards. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good SEO, accessibility, and user experience. However, the absence of a valid SSL certificate is a critical security gap that undermines trust and secure communications. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the institution demonstrates strong business credibility and digital maturity but must urgently address its SSL/TLS configuration to improve security posture.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

I

IL – Ingenieurbüro Laabmayr & Partner ZT GesmbH.

laabmayr.at

23

Ingenieurbüro Laabmayr & Partner ZT GesmbH. is a specialized engineering consultancy based in Salzburg, Austria, with a focus on tunnel construction and civil engineering projects. Founded in 1975, the company has established a solid reputation for reliable and punctual project delivery, serving both alpine and urban tunnel projects internationally. Their key services include tunnel construction, comprehensive project services under 'Tunnel Plus', engineering construction, and rock/ground construction. The website reflects a professional business presence with clear service offerings and contact information.

V

voestalpine AG

voestalpine.com

40

voestalpine AG is a globally leading steel and technology group with a strong market position in manufacturing and industrial sectors such as automotive, aerospace, energy, and railway systems. The company operates worldwide with a large enterprise footprint and emphasizes sustainability and innovation through initiatives like the greentec steel program. The website reflects a mature digital presence with multilingual support, comprehensive corporate and investor information, and active social media engagement. Technically, the site uses modern tools including Usercentrics for consent management and JW Player for media, hosted on AWS CloudFront CDN. However, a critical security weakness is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is clearly provided, though no direct company emails are visible. Overall, the site is professional and trustworthy but requires urgent SSL and TLS remediation to ensure secure user interactions.

W

WeAreDevelopers

wearedevelopers.com

36

WeAreDevelopers operates as Europe’s leading developer community platform, providing a comprehensive ecosystem for developers and companies to connect through job boards, events, and educational content. The platform hosts major events such as the WeAreDevelopers World Congress and offers extensive resources including tech talks and salary calculators. Their market position is strong within the European technology sector, targeting developers and tech companies with a large and active user base. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted via Cloudflare with Imgix for image delivery, and integrates video content hosted on Vimeo. The site demonstrates good design quality, mobile responsiveness, and SEO practices, although performance metrics are unavailable. Accessibility is basic but present. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability impacting user trust and data security. Other security headers are partially implemented but insufficient. Privacy and cookie policies are present and indicate GDPR compliance, supporting responsible data handling. Overall, the platform is professionally managed with strong business credibility and content quality but requires urgent improvements in security infrastructure to protect users and maintain trust. Strategic recommendations include immediate SSL deployment, enabling HTTPS, and enhancing security headers and practices.

M

MED-EL Medical Electronics

medel.com

40

MED-EL Medical Electronics is a mature and globally recognized healthcare company specializing in hearing implants and solutions. Their website provides comprehensive information about cochlear implants, middle ear implants, bone conduction systems, and related accessories, targeting individuals with hearing loss and healthcare professionals. The company maintains a strong market position as a leading hearing implant provider with a large operational scale and a well-established brand since 1996. The website content is professionally curated, with clear navigation and multilingual support, reflecting a high level of digital maturity.