Security reports directory

Amt Büchen is a regional government administration serving 15 municipalities in the Herzogtum Lauenburg district of Schleswig-Holstein, Germany. The website provides citizens with access to public services, administrative information, announcements, and digital portals such as appointment booking and citizen services. The site targets local residents and stakeholders, offering a comprehensive overview of the Amt's functions and community resources. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, hosted by Hetzner. While the site is well-structured and mobile-optimized, it suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no HTTPS support. This severely impacts the security posture and trustworthiness of the site. Other security best practices such as security headers, DMARC, and HSTS are also missing. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, but no terms of service or security policy pages are found. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

HydroHub is a specialized consulting and engineering center focused on hydrogen technology and infrastructure, operating as an initiative within the TÜV NORD GROUP. The website presents a professional and comprehensive overview of their services, targeting manufacturers, grid and storage operators, industrial users, public sector entities, and investors. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries and includes cookie consent and tracking mechanisms. However, the site lacks HTTPS encryption, which is a critical security deficiency. The security posture is weak due to missing SSL, security headers, and DNSSEC, exposing the site to potential risks. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the site is professionally designed and trustworthy but requires urgent security improvements to protect user data and enhance trust.

Related:tuev-nord-group.comtuv-nord.com

Brussels Airlines is an enterprise-level transportation company operating primarily in Belgium and is part of the Lufthansa Group. The website is currently inaccessible due to a Web Application Firewall or security mechanism, resulting in an Access Denied page served by AkamaiGHost. This prevents access to any meaningful content, metadata, or business information on the site. The technical infrastructure includes Akamai CDN and Barracuda Networks for email security, with SPF and DMARC records properly configured. However, the SSL/TLS configuration is severely lacking, with no valid certificate or modern TLS protocols enabled, exposing the site to significant security risks. Security headers are minimal, and no privacy or cookie policies are detectable on the landing page. Overall, the site’s security posture is weak, and the lack of accessible content limits the ability to assess business credibility or compliance. The site is heavily tracked by multiple advertising and analytics services as indicated by the content security policy, but these cannot be verified due to the blocked content.

Bonterra is a leading provider of nonprofit software solutions focused on social impact, offering products for fundraising, case management, corporate social responsibility, and grant management. The company is positioned as the second-largest social good software provider globally, targeting nonprofits, foundations, corporations, and government agencies. Their SaaS business model integrates multiple acquired products to serve a broad social good ecosystem. Technically, the website is built on WordPress hosted on WP Engine with Cloudflare CDN, leveraging modern JavaScript frameworks like React and animation libraries such as GSAP. SEO and accessibility are well implemented, with comprehensive metadata and structured data. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Related:everyaction.comgivegab.com

Bonterra is a purpose-built software company specializing in corporate social responsibility (CSR) solutions that empower organizations to enhance their philanthropic programs. Founded in 2021, Bonterra has quickly established itself as the second-largest social good software company globally, serving nonprofits, foundations, corporations, and government entities. Their key offerings include grant management, employee engagement, volunteer management, and fundraising software, all designed to maximize social impact and streamline administrative workflows. Technically, the website is built on a WordPress CMS platform with a modern tech stack including React, Bootstrap, and GSAP for animations. The site integrates multiple marketing and analytics tools such as Marketo, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, reflecting a mature digital marketing strategy. However, performance is currently slow, and while mobile optimization and accessibility are good, there is room for improvement in loading speed. From a security perspective, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical vulnerability. Other security best practices like HSTS, OCSP stapling, and modern TLS protocols are missing, significantly lowering the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Contact information is limited to a physical address without explicit phone or email contacts publicly visible. Overall, Bonterra's website demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling HTTPS and modern TLS protocols, and implementing additional security headers and mechanisms to improve the security score and user confidence.

Related:givegab.com

Bonterra is a leading provider of nonprofit software solutions focused on social impact, offering products for fundraising, case management, corporate giving, and grant management. Founded in 2021, it has quickly established itself as the second-largest social good software company globally, serving nonprofits, foundations, corporations, and government agencies. The company emphasizes a 'better together' approach, integrating multiple social good platforms under its brand. Technically, the website is built on WordPress with modern JavaScript frameworks like React and GSAP, and integrates numerous marketing and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which significantly impacts the site's security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and the site demonstrates strong SEO and accessibility practices. Overall, Bonterra's digital presence is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

Related:everyaction.com

Bonterra LLC operates Network for Good, a leading fundraising software platform tailored for small to medium-sized nonprofits. The company has a strong market position as the second-largest social good software provider globally, offering a comprehensive suite of tools including donor and volunteer management, peer-to-peer fundraising, and coaching services. Bonterra's business model focuses on SaaS solutions for nonprofit organizations, foundations, corporations, and government entities, supported by a robust ecosystem of subsidiaries and partner products. The website content is professionally crafted, targeting nonprofit organizations seeking efficient fundraising and engagement solutions. Technically, the website is built on WordPress hosted on WP Engine with Cloudflare CDN, utilizing modern JavaScript frameworks like React and libraries such as GSAP and Splide.js for UI enhancements. SEO and accessibility are well implemented, with extensive use of structured data and meta tags. However, performance metrics are not explicitly provided, though mobile optimization and user experience appear strong. From a security perspective, while the site employs several security headers and policies, it suffers from a critical issue: the SSL certificate is invalid or missing, and no modern TLS protocols are enabled. This severely impacts the security posture and user trust. Other security best practices like CSP and permissions policies are in place, but the lack of proper SSL/TLS undermines these efforts. Overall, the site is content-rich, professionally designed, and business credible but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and compliance with modern security standards.

Related:cybergrants.comgivegab.com

The website sparkphotonics.org is currently inaccessible due to an HTTP 429 error indicating rate limiting or blocking, resulting in an error page with minimal content. No business-related content, metadata, or contact information is available for analysis. The site is hosted on Wix infrastructure with a valid SSL certificate supporting modern TLS protocols but lacks advanced security features such as HSTS, OCSP stapling, and DMARC records. No privacy, cookie, or terms of service policies are present, and no analytics or advertising technologies are detected. Overall, the site exhibits poor content quality, limited technical implementation, and weak security posture due to missing security headers and policies. The lack of accessible content and contact details severely limits the ability to assess business credibility or compliance.

Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 27 security findings identified across all modules.

Europakonsument.at is the official website of the European Consumer Centre Austria, operated by the Verein für Konsumenteninformation (VKI). It provides free advice and assistance to consumers facing cross-border issues within the EU, UK, Norway, and Iceland. The site offers complaint forms, consumer rights information, and updates on relevant topics such as travel, online shopping, and warnings. The organization is government-backed and co-funded by the EU, positioning it as a trusted non-profit consumer advocacy entity in Austria. Technically, the site is built on Drupal CMS, hosted on AWS infrastructure, and uses Matomo for analytics. While the site is content-rich and well-structured with good mobile optimization and accessibility, it suffers from a lack of a valid SSL certificate, resulting in a basic security posture. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is professional and trustworthy but requires urgent improvements in SSL and security headers to enhance user trust and security.

Related:vki.ateuropa.eu

The website Verbraucherrecht.at is operated by the Verein für Konsumenteninformation (VKI), a prominent Austrian non-profit organization focused on consumer rights and legal information. It provides comprehensive resources including news, legal judgments, collective actions, and educational offerings targeted at Austrian consumers. The site is well-branded, consistent, and supported by the Austrian Ministry of Social Affairs, reinforcing its authoritative position in the consumer protection sector. Technically, the site is built on Drupal CMS, hosted on AWS infrastructure, and uses modern web technologies including Matomo for analytics. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of HTTPS enforcement, which significantly undermines user trust and security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site offers valuable content and services but requires urgent security improvements to meet modern standards.

Related:vki.at

The Verein für Konsumenteninformation (VKI) is a well-established Austrian non-profit organization dedicated to consumer protection through product testing, advice, and information dissemination. The website serves as a comprehensive portal for consumers, offering access to product recalls, educational seminars, and greenwashing checks, targeting Austrian consumers primarily. Technically, the site is built on Drupal CMS and hosted on Amazon AWS infrastructure, utilizing Matomo analytics with a clear cookie consent mechanism, reflecting a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. While privacy policies and GDPR compliance are well addressed, the lack of security headers and modern TLS protocols indicates room for significant security improvements. Overall, the site provides excellent content quality and user experience but requires urgent security enhancements to align with best practices and regulatory requirements.

Related:konsument.at

RollWorks is a B2B marketing technology company specializing in account-based marketing (ABM) and account-based advertising solutions. Positioned as a leading ABM platform, RollWorks offers AI-driven targeting and engagement tools designed to help marketers grow revenue by focusing on high-value accounts. The company operates as a division of NextRoll, Inc., serving primarily enterprise clients in the technology and business services sectors. Their platform integrates multiple marketing and analytics technologies, including Marketo, Google Tag Manager, and AdRoll, to provide comprehensive marketing automation and measurement capabilities. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, hosted behind Cloudflare CDN. The site demonstrates good SEO optimization, mobile responsiveness, and professional design quality. However, the SSL/TLS configuration is currently invalid or missing, which is a critical security vulnerability that undermines user trust and data protection. The site uses multiple third-party marketing and tracking tools, indicating extensive user tracking and data collection practices. From a security perspective, while some best practices like SPF and DMARC email policies are in place, the lack of a valid SSL certificate and disabled TLS protocols represent significant risks. The site also lacks advanced security headers and mechanisms such as OCSP stapling and session resumption. Privacy policies and terms of service are hosted on the parent company domain, and while privacy compliance is generally good, no explicit cookie consent mechanism was detected on the homepage. Overall, RollWorks presents a professional and trustworthy business front with strong market positioning and comprehensive marketing solutions. However, the critical SSL/TLS issues must be addressed immediately to ensure secure communications and maintain compliance with industry standards. Strategic improvements in security posture and privacy transparency will enhance trust and reduce risk exposure.

Related:adroll.com

The website studieren-in-bayern.de currently serves a 404 Page Not Found error, indicating that the requested content is unavailable or inaccessible. There is no substantive business content, metadata, or contact information present on the page. The site is powered by TYPO3 CMS as evidenced by the error page branding, but no further technical or business details are available. The DNS configuration lacks DNSSEC and CAA records, and the SSL certificate is invalid or missing, resulting in no HTTPS support. This severely impacts the security posture and trustworthiness of the site. Overall, the website is non-functional from a user and business perspective, with no privacy or compliance policies detected.

The website research-in-bavaria.de currently serves only a 404 Page Not Found error, indicating that the requested content is unavailable or the page does not exist. There is no accessible business information, contact details, or privacy and security policies on the site. The site is built on TYPO3 CMS as evidenced by the error page branding, but no active content or services are presented. Technically, the site lacks a valid SSL certificate and does not support HTTPS, exposing visitors to insecure connections. Performance is poor with a very slow load time despite minimal content. Security posture is weak due to missing HTTPS, lack of security headers, and absence of DNSSEC or CAA records. Overall, the site is not operational for end users and presents significant security and compliance gaps.

DMT GROUP is a well-established global engineering services and consulting company with a history dating back to 1737. It operates primarily in the energy, infrastructure, mining, and engineering sectors, offering a broad range of services including engineering, consulting, geotechnics, exploration, and critical infrastructure protection. The company is part of the TÜV NORD GROUP, which enhances its market credibility and access to resources. The website reflects a professional and comprehensive digital presence with clear business information, structured data, and rich content targeting industrial clients worldwide. Technically, the website is built on TYPO3 CMS and uses common web technologies such as Apache server, Google Analytics, and LinkedIn Insight Tag for analytics and marketing. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. The absence of modern TLS protocols and security headers further weakens its security posture. Performance is rated slow due to missing SSL and possibly other optimizations. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Security-wise, the site has configured SPF and DMARC records for email security and shows no signs of common vulnerabilities like Heartbleed or POODLE. However, the lack of HTTPS and security headers significantly reduces the overall security score. There is no explicit incident response or vulnerability disclosure information available on the site. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure, especially SSL/TLS implementation, to protect user data and enhance trust. Privacy compliance could also be improved by adding cookie consent mechanisms. Strategic recommendations include implementing HTTPS, enhancing security headers, and improving privacy transparency.

Related:tuev-nord.detuv-nord.com

The website medigate.de is currently a parked domain landing page primarily serving advertisements and indicating the domain is for sale. There is no substantive business content, contact information, or service offerings present. The technical infrastructure relies on parking nameservers and third-party ad networks, with no valid SSL certificate, resulting in an insecure HTTP-only site. Performance is poor with a very slow load time. Security posture is weak due to lack of HTTPS, security headers, and privacy compliance mechanisms. Overall, the site does not present a credible or professional business presence and lacks essential security and privacy features.

The UKE-Stiftung website represents a medium-sized non-profit foundation focused on advancing healthcare through funding medical research, education, and patient care. The organization holds a strong market position within the German healthcare and research sector, emphasizing innovation and excellence. Technically, the website is built on a modern WordPress CMS with Elementor and several supporting plugins, delivering a professional and responsive user experience. Security posture is adequate with HTTPS and valid SSL certificates but lacks advanced features such as HSTS, DNSSEC, and OCSP stapling, which could enhance protection. Privacy compliance is addressed with a privacy policy and cookie information, though no explicit consent mechanism is observed. Overall, the site is trustworthy and professionally maintained, but improvements in security hardening and incident response transparency are recommended.

freenet AG is a leading independent telecommunications provider in Germany, specializing in mobile voice and data services. The company maintains a strong market position with a large subscriber base and transparent investor relations. The website provides comprehensive corporate and investor information, career opportunities, and press releases, targeting investors, customers, and job seekers primarily in the German market. Technically, the website is hosted behind Cloudflare and uses modern web technologies including Vimeo for video content and Google Tag Manager for analytics. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. While security headers and content security policies are implemented, the lack of encryption exposes users to risks. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

Volkswagen Finland operates a comprehensive automotive website offering a wide range of passenger and commercial vehicles, including hybrids and electric models. The site targets Finnish consumers and businesses, providing detailed product information, financing options, and after-sales services. The company enjoys a strong market presence, celebrating 75 years in Finland, and is part of the global Volkswagen AG group. Technically, the website uses modern frameworks like React and Adobe Experience Manager, but suffers from slow load times and lacks a valid SSL/TLS certificate, impacting security and user trust. While privacy and legal compliance are well addressed with comprehensive policies and consent mechanisms, the absence of HTTPS and security headers poses significant risks. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

The website wien.info serves as the official online travel guide for the City of Vienna, operated by the Vienna Tourist Board. It provides comprehensive information on attractions, events, accommodations, and visitor services, targeting tourists and visitors globally with multilingual support. The site positions itself as the authoritative source for Vienna tourism, offering key services such as event search, city card sales, and a dedicated travel guide app. Technically, the site employs modern JavaScript libraries, integrates with multiple marketing and analytics platforms, and uses a custom or proprietary CMS hosted on xaas.systems DNS infrastructure. However, the site lacks a valid SSL certificate and does not support modern TLS protocols, which significantly impacts its security posture. Despite this, it implements several security headers and a strict content security policy. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Business contact information is clearly presented, enhancing credibility.

Related:vienna.info

The website medcel.com.br is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of actual content. This prevents any meaningful extraction of business, privacy, or security policies and limits the ability to assess the website's digital maturity or business model. The DNS configuration shows use of Cloudflare for DNS and protection, and Microsoft Outlook for email services, with proper SPF and DMARC records indicating good email security practices. However, the SSL/TLS configuration is critically lacking, with no valid certificate and no TLS protocols enabled, resulting in a poor security posture. Performance metrics indicate very slow load times and minimal resource delivery, likely due to the block page. Overall, the website's security posture is weak due to missing HTTPS and the presence of a blocking WAF, and the content quality and business credibility cannot be assessed due to lack of access.

Medical Harbour is a Brazilian technology company specializing in medical imaging solutions, including software for radiology, teleradiology, and medical education. Their product portfolio includes advanced DICOM viewers, cloud PACS solutions, and educational tools such as virtual cadaver and anatomical atlases. The company targets hospitals, clinics, radiologists, and medical educators, positioning itself as a niche specialist in healthcare technology. The website is professionally designed, multilingual, and integrates modern marketing and analytics tools, although it suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Despite strong email security policies like SPF and DMARC, the absence of HTTPS and modern TLS protocols significantly weakens the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Medical Harbour demonstrates a solid business presence with room for improvement in technical and security infrastructure.

Unikontor is the official online shop of Universität Hamburg, providing a diverse range of high-quality, sustainable merchandising products such as hoodies, T-shirts, bags, and conference materials. The website targets students, staff, tourists, and supporters of the university, positioning itself as a trusted provider of university-branded merchandise with a strong emphasis on sustainability and fair production practices. Technically, the site is built on the Shopware CMS platform, running on modern PHP and Apache servers, with good performance and mobile optimization. Security measures include HTTPS with strong TLS protocols, essential security headers, and OCSP stapling, though improvements like DNSSEC and CAA records could enhance security further. Privacy compliance is addressed with a visible cookie consent mechanism and a privacy policy, although some areas could be more comprehensive. Overall, the site demonstrates a good balance of business credibility, technical implementation, and security posture, making it a reliable and professional e-commerce platform for university merchandise.

Digibiz24 is a German-based SaaS platform offering an all-in-one solution for building websites, sales funnels, and membership areas, primarily targeting online entrepreneurs and coaches. The platform integrates with Digistore24 for sales automation and affiliate marketing, providing a seamless experience for users to create and monetize their online businesses. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and strong SEO practices. Security is well addressed with HTTPS, GDPR compliance, and secure hosting on reliable infrastructure. While some improvements in SSL configuration and security headers are recommended, the overall security posture is solid. The platform's business credibility is reinforced by testimonials, clear contact information, and transparent policies.

Related:digistore24.com

Universität Hamburg is a large, well-established public university in Germany, recognized as the largest research and education institution in Northern Germany with a strong excellence status. The website serves as a comprehensive portal for students, researchers, staff, and the public, offering extensive information on academic programs, research projects, career services, and international cooperation. Technically, the site uses modern JavaScript libraries and analytics tools but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. However, the absence of HTTPS and security headers significantly weakens the security posture, exposing the site to potential risks. Strategic recommendations include immediate SSL deployment, enabling modern TLS protocols, and enhancing security headers to protect user data and improve trust.

cituro is a German-based technology company specializing in providing a comprehensive online appointment booking system tailored for businesses across various sectors. The company offers a SaaS platform that enables seamless online scheduling, customer management, and payment processing, positioning itself as a flexible and GDPR-compliant solution with a strong market presence in multiple countries. The website reflects a professional and consistent brand image with extensive content detailing features, customer testimonials, and integration capabilities.

The website 'boernsen-erleben.de' serves as an official community information portal for the municipality of Börnsen, Germany. It provides residents and visitors with local news, event announcements, business listings, and social information. The site promotes a mobile app and offers structured navigation across various community topics. Technically, the site is built on the ProcessWire CMS, hosted by Strato, and uses common web libraries such as jQuery and Owl Carousel. Performance is moderate with a page load time of approximately 3.8 seconds. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. The site uses Matomo analytics, indicating moderate user tracking with some privacy considerations. Overall, the website is functional and informative but requires significant security improvements to protect user data and comply with modern web standards.

Gemeinde Büchen operates as a local government entity serving approximately 6,700 residents in the Herzogtum Lauenburg district of Germany. The website provides comprehensive information about municipal services, including family and social services, education, culture, economy, and local infrastructure. It targets residents, families, businesses, and visitors, positioning itself as a community hub with a focus on quality of life and connectivity. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, but suffers from slow load times and lacks modern security configurations such as HTTPS. The security posture is weak due to the absence of SSL/TLS encryption, security headers, and DNS security features. Privacy compliance is partially addressed with a cookie consent mechanism and a privacy policy, but no terms of service or incident response policies are evident. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

Spark Photonics is a US-based photonic integrated circuit design and software distribution company serving defense, commercial, government, and academic sectors. The company offers end-to-end PIC design services, distributes Luceda IPKISS design software in North America, and provides educational PIC kits. The website is built on the Wix platform, leveraging modern JavaScript frameworks and various Wix apps to deliver content and services. However, the site lacks a valid SSL certificate, which is a critical security vulnerability that undermines user trust and data protection. Additionally, no privacy or cookie policies are present, indicating poor privacy compliance. The site provides clear contact information including a phone number, physical address, and a contact form, but lacks explicit security policies or incident response information.

Community Partners is a nonprofit organization focused on accelerating social change through fiscal sponsorship and intermediary services. Their website presents a professional and content-rich platform targeting nonprofit leaders, funders, and changemakers. The organization emphasizes equity, justice, and vibrant communities as core themes. Technically, the site is built on WordPress and hosted on Pantheon, utilizing modern JavaScript libraries for UI elements and Google Analytics for tracking. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are partially implemented but incomplete, and no cookie consent mechanism is present despite the use of tracking scripts. Privacy and legal policies are available and comprehensive, enhancing compliance posture. Overall, the site demonstrates good business credibility and user experience but requires urgent security improvements.

Digibiz24.com is a German-based SaaS platform operated by Digital Assets AG, offering an all-in-one solution for building websites, sales funnels, and membership areas primarily targeting online entrepreneurs and coaches. The platform integrates with Digistore24 for sales automation and affiliate marketing, providing a comprehensive ecosystem for online business growth. The website features rich content including detailed product descriptions, FAQs, testimonials, and interactive elements, reflecting a mature digital presence. Technically, the site uses modern web technologies such as Express.js, jQuery, and Vimeo for video content, but lacks a valid SSL certificate, which is a significant security concern. Privacy compliance is well addressed with GDPR adherence and cookie consent mechanisms. Overall, the platform demonstrates strong business credibility and user engagement but must address critical security issues to improve trust and compliance.

Related:digistore24.com

Rek.ai, operated by Sandskogen AI Aktiebolag, is a Swedish technology company specializing in AI-driven personalization of websites, primarily targeting public sector entities such as municipalities, intranets, and businesses. Their platform offers automated, CMS-independent solutions that enhance user experience by personalizing navigation, content recommendations, and search suggestions. The company positions itself as an innovative player in the AI personalization market with a focus on privacy and data anonymization. Technically, the website is built using modern frameworks like Next.js and React, with integrations for cookie consent (Cookiebot) and privacy-focused analytics (Plausible). However, the site suffers from a lack of a valid SSL certificate and does not enforce HTTPS, which significantly impacts its security posture. Security headers are absent, and no explicit privacy or terms of service pages were found, though a cookie consent mechanism is implemented. Overall, the website demonstrates strong business credibility and content quality but requires urgent improvements in security and compliance to meet industry standards.

co.met GmbH is a German municipal IT company specializing in data collection, processing, and provision services primarily for the energy and metering sector. With over 20 years of experience and a customer base exceeding 650 clients nationwide, the company offers a range of services including reading management, workforce management, regulatory services, and IoT solutions. The website reflects a professional and consistent brand presence targeting municipal energy providers and related organizations in Germany. Technically, the site is built on WordPress using popular plugins and a commercial theme, but suffers from slow load times and lacks a valid SSL certificate, which impacts security and user trust. Security posture is weak due to missing HTTPS, lack of security headers, and no advanced security configurations. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and informative but requires urgent security improvements to protect user data and enhance trust.

Related:mysmartshop.desaarbruecker-stadtwerke.de

Friedrich-Alexander-Universität Erlangen-Nürnberg (FAU) is a large, well-established public research university in Germany, founded in 1743. It offers a broad spectrum of over 280 study programs and is recognized as one of the leading research institutions in the country. The university serves a diverse audience including prospective students, current students, researchers, staff, alumni, companies, schools, and the press. Its business model centers on education, research, and outreach, with strong partnerships and international collaborations. The website reflects a mature digital presence with comprehensive content, structured navigation, and integration of multimedia and social media channels.

Hammerite Nederland is a medium-sized manufacturing and retail company specializing in metal protection coatings and paints, operating primarily in the Netherlands. The website serves as a product showcase and e-commerce platform, supported by WooCommerce and WordPress, with a focus on consumer and professional markets seeking metal protection solutions. The site is branded under the parent company AkzoNobel, indicating a strong market position in the coatings industry. Technically, the website employs common web technologies including jQuery, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent, but suffers from slow load times and lacks a valid SSL certificate, impacting security and user trust. Security posture is weak due to missing HTTPS and security headers, although privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in security infrastructure to protect user data and enhance credibility.

Related:akzonobel.com

Bunny.net is a global edge platform providing content delivery network (CDN), streaming, storage, optimization, and edge computing services. It serves over 1.5 million websites with a robust infrastructure spanning 119+ edge locations worldwide. The platform is designed to deliver high performance, security, and reliability, targeting businesses that require fast and secure content delivery. Technically, the website leverages modern frameworks like Gatsby and React, with strong security practices including TLS 1.3 support and no known SSL vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, bunny.net demonstrates a mature digital presence with strong business credibility and technical implementation.

The website vienna.info is the official online travel guide for the City of Vienna, operated by the Vienna Tourist Board. It provides comprehensive information and services for tourists including attractions, events, accommodations, city cards, and accessibility resources. The site targets visitors planning trips to Vienna and serves as an authoritative source for travel-related content. Technically, the site uses modern JavaScript libraries, structured data (JSON-LD), and integrates privacy-conscious analytics (Matomo) alongside cookie consent via OneTrust. However, a critical security gap is the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Security headers are present and well-configured, but without HTTPS, the site is vulnerable to interception and man-in-the-middle attacks. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional, content-rich, and user-friendly but urgently requires HTTPS implementation to meet modern security standards.

Visa Protect is a comprehensive enterprise-wide risk and fraud prevention solution offered by Visa Inc., a global leader in payment technology and security. The website presents detailed information about Visa Protect's capabilities in preventing fraud across multiple payment endpoints using AI and real-time decisioning. The site targets financial institutions, acquirers, issuers, merchants, and large businesses, emphasizing Visa's scale and expertise in securing billions of transactions daily. Technically, the site is built on modern web technologies including Adobe Experience Manager CMS, uses Cloudflare for hosting and security, and employs DigiCert SSL certificates ensuring strong encryption. The site is well-structured with multimedia content and good SEO practices but lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security headers are robust, and no vulnerabilities were detected in the provided data. Overall, the site demonstrates a strong security posture and professional business credibility but should improve privacy compliance and contact transparency.

Related:visa.com

TÜV NORD GROUP operates as a global service provider specializing in testing, certification, inspection, and training services across multiple sectors such as energy, transportation, real estate, and industry. The company maintains a strong market position as a large enterprise with a broad international presence and multiple subsidiaries. Their website reflects a professional and well-structured digital presence targeting both business and private customers. Technically, the site is built on TYPO3 CMS and integrates various marketing and analytics tools, including Pardot, HubSpot, and Google Analytics, with a good level of GDPR compliance and consent management. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which poses a critical risk to secure communications. The site implements strong security headers and content security policies but requires urgent remediation of SSL/TLS issues to ensure data protection and user trust. Overall, the website is functional and professional but needs immediate security improvements to align with best practices and compliance standards.

The TÜV NORD GROUP is a well-established enterprise headquartered in Germany, specializing in safety, certification, inspection, and consulting services across multiple sectors including energy and transportation. With over 150 years of experience and a global presence in more than 100 countries, the company positions itself as a trusted provider of quality and safety solutions. The website reflects a professional and comprehensive digital presence, targeting businesses and organizations seeking expert services in safety and compliance. Technically, the site is built on TYPO3 CMS and utilizes modern JavaScript libraries and consent management tools, although performance is hindered by slow load times and an invalid SSL certificate. Security posture is weakened by the lack of a valid SSL certificate and absence of security headers, which poses risks to user trust and data protection. Privacy compliance is strong, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness but requires urgent security improvements to enhance user confidence and compliance.

Related:tuev-nord.de

Afya Participações S.A operates as the largest hub for medical education and digital solutions in Brazil, targeting medical students, professionals, and healthcare providers. The company offers a broad portfolio including undergraduate medical courses, postgraduate education, continuing medical education, and digital health solutions. It holds a strong market position with over 20,000 medical students and multiple subsidiaries and partners enhancing its ecosystem. Technically, the website is built on Webflow, hosted via Cloudflare, and integrates modern analytics and marketing tools, demonstrating a mature digital infrastructure with fast performance and good mobile optimization. Security posture is solid with HTTPS, strong security headers, and cookie consent mechanisms, although improvements in HSTS and vulnerability disclosure could be made. Privacy compliance is well addressed with comprehensive policies and consent management. Overall, the website reflects a professional, trustworthy, and well-managed digital presence aligned with its enterprise scale and sector focus.

Landitec GmbH is a specialized B2B technology company based in Germany, offering high-quality network hardware appliances and related services across Europe. Their business model combines e-commerce with consulting, testing, and support services, targeting enterprises and organizations requiring secure and flexible network infrastructure. The website is built on the Odoo CMS platform and hosted on Odoo.sh, featuring a professional design with clear navigation and multilingual support. However, the site lacks a valid SSL certificate, resulting in no HTTPS protection, which significantly impacts its security posture. While cookie consent mechanisms and privacy policies are present, explicit security policies and incident response information are missing. The company demonstrates trust through extended warranties, partner logos, and detailed product testing.

Viennasightseeing.at is a medium-sized tourism and transportation business specializing in guided sightseeing tours, hop-on-hop-off bus services, day trips, and sightseeing passes in Vienna, Austria. The company positions itself as a market leader in Vienna's sightseeing tour sector, targeting tourists seeking convenient and flexible travel experiences. The website is built on TYPO3 CMS and integrates modern marketing and tracking tools such as Google Tag Manager, Trustpilot, and Usercentrics for consent management. However, the site suffers from critical security issues including an invalid SSL certificate, lack of HTTPS enforcement, and a subdomain takeover vulnerability on its shop subdomain. These issues significantly impact the site's security posture and trustworthiness. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site offers good content quality and user experience but requires urgent security improvements to protect user data and maintain business credibility.

Related:viennapass.devienna.info

The Universitätsklinikum Hamburg-Eppendorf (UKE) is a leading European university hospital specializing in healthcare, research, and education. The website reflects a comprehensive digital presence with extensive information about clinics, institutes, research programs, patient services, and educational offerings. The site targets patients, medical professionals, researchers, and students, positioning UKE as a major healthcare and research institution in Germany. Technically, the site uses established libraries like jQuery and Modernizr, and employs Matomo for privacy-conscious analytics. However, the absence of a valid SSL certificate and modern TLS protocols significantly impacts the security posture. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The site demonstrates high professionalism and trustworthiness but requires urgent improvements in security infrastructure to protect user data and enhance trust.

The website hfmt-hamburg.de currently serves a 404 error page indicating that no site configuration is found, suggesting the site is either offline or not properly configured. The site is powered by TYPO3 CMS and hosted on infrastructure associated with Technische Universität Hamburg. There is no accessible business content, contact information, or policies available, which severely limits the ability to assess the business or its services. Technically, the site lacks a valid SSL certificate and does not support HTTPS, exposing it to security risks. The absence of security headers and modern TLS protocols further weakens its security posture. Overall, the site is not operational from a user or security perspective, resulting in a very low trust and quality rating.

The website represents the Hochschule für bildende Künste Hamburg (HFBK Hamburg), a medium-sized public art university in Germany focused on fine arts education, exhibitions, and research. It targets prospective and current students, artists, and the art community with comprehensive content on academic programs, events, and projects. The site is professionally designed with consistent branding and rich content, supporting an excellent user experience and clear navigation. Technically, the site uses a modern JavaScript stack including jQuery, Masonry, and Klaro for cookie consent, but lacks a valid SSL certificate, resulting in insecure HTTP connections. Security headers are well configured but ineffective without HTTPS. Privacy compliance is partially addressed with a privacy policy and cookie consent mechanism, though GDPR compliance is not fully evident. The site uses Matomo analytics with user consent. Overall, the security posture is weak due to missing HTTPS, which is a critical issue. The site is accessible without WAF or blocking mechanisms.

vitrado.de operates as an inhouse affiliate marketing network primarily serving the freenet Group's portfolio of digital lifestyle and telecommunications products. The platform targets affiliate marketers and partners seeking to promote these products through various partner programs and marketing tools. The website presents a professional and consistent brand image aligned with its parent company, freenet Group, and offers a range of partner programs including waipu.tv, klarmobil, and freenet Mobile among others. Technically, the site leverages JavaScript, CSS, and SVG technologies with Cloudflare DNS and hosting, but suffers from slow load times and lacks modern security configurations such as a valid SSL certificate and HTTPS support. Security posture is weak due to missing HTTPS, absent security headers, and disabled DNSSEC, exposing the site to potential risks. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site is functional and content-rich but requires urgent security and privacy improvements to enhance trust and compliance.

Freenet DLS GmbH operates a comprehensive German telecommunications website offering mobile phone tariffs, devices, and related digital services. The company targets German consumers seeking flexible mobile plans and devices, positioning itself as a significant player in the German telecom market. The website features structured data with detailed company information and social media presence, supporting brand credibility and customer engagement. Technically, the site employs modern JavaScript frameworks, Cloudflare CDN, and personalization tools like Kameleoon, but suffers from critical SSL/TLS misconfigurations that undermine secure HTTPS access. Security headers are partially implemented, but the lack of a valid SSL certificate and disabled TLS protocols represent major vulnerabilities. Privacy and cookie policies are not detected, indicating compliance gaps. Overall, the site is functional and professionally designed but requires urgent security improvements to protect user data and comply with regulations.

Related:freenet-internet.de

The website karriere.hamburg serves as the official career portal for the Freie und Hansestadt Hamburg, offering a wide range of job opportunities, training programs, and career entry options in the public sector. It targets job seekers, students, and professionals interested in working for the city government. The site is well-branded and professionally presented with clear navigation and relevant content in German. Technically, the site uses modern HTML5 and responsive design techniques but lacks a valid SSL certificate, which is a critical security flaw. Security headers are partially implemented but some settings reduce protection. Privacy compliance is limited, with no cookie consent mechanism despite the presence of tracking scripts. Overall, the site is functional and credible but requires urgent security improvements to protect user data and trust.