Low-risk security reports

R

Rotax Limited

rotaxltd.com

32

Rotax Limited is a well-established industrial electrical solutions provider based in Sri Lanka with over 60 years of experience. The company offers a broad range of services including automation, system integration, manufacturing, contracting, and supply of electrical products. It operates associate companies such as Rotax Global LTD in Canada and Roche Engineering Lanka, expanding its market reach internationally. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with WooCommerce and uses modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. The site lacks visible privacy and cookie policies, which is a compliance gap that should be addressed. Contact information is primarily via forms and social media links, with no direct emails or phone numbers explicitly labeled. Overall, the website is trustworthy and professional but could improve privacy compliance and security transparency. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response contacts, and enhancing accessibility and compliance features to strengthen trust and regulatory adherence.

Karolinska.se represents the digital presence of two leading Swedish healthcare and medical education institutions: Karolinska Universitetssjukhuset (University Hospital) and Karolinska Institutet (Medical University). The website serves as a bilingual landing page directing visitors to either institution's dedicated site, targeting patients, healthcare professionals, researchers, students, and partners. The business model is public healthcare and education, with a strong market position as a leading European hospital and world-renowned medical university. Technically, the site uses modern JavaScript and Azure Application Insights for monitoring, hosted likely on Microsoft Azure infrastructure. The design is professional and mobile-optimized, though accessibility and SEO features are basic. Security posture is moderate, with no visible security headers or explicit HTTPS confirmation in the provided data, and no privacy or cookie policies present. No contact or incident response information is provided, limiting transparency. Overall, the site is credible and functional but would benefit from enhanced security and compliance features.

O

Oberforsthofalm Familie Mayr KG

oberforsthofalm.at

33

Oberforsthofalm Familie Mayr KG operates a hospitality business in St. Johann im Pongau, Austria, specializing in alpine regional cuisine and event hosting. The website presents a well-structured and professionally designed platform that highlights the business's offerings, including dining, weddings, events, and an online shop. The company has a strong local presence and is recognized with multiple awards, enhancing its market position. Technically, the website is built on WordPress using the Divi theme, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some security headers and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and credible, though improvements in security and privacy practices are recommended.

VIVEUM is a payment service provider based in Austria, offering a comprehensive portfolio of payment solutions including over 300 payment methods, plugins for popular shop systems, and PCI-DSS Level 1 certified services. The company targets online merchants, startups, and developers, positioning itself as a top provider in the e-commerce payment space. The website is built on WordPress with the Divi theme and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, all managed with a robust cookie consent mechanism via Borlabs Cookie. Security posture is strong with HTTPS enforced and compliance with industry standards, though some security headers could be improved. Overall, the site is professional, well-structured, and compliant with GDPR requirements, providing clear contact information and trust signals.

C

crosseye Marketing GmbH

crosseye.at

36

crosseye Marketing GmbH is a specialized tourism marketing agency based in Austria, focusing on digital marketing services such as SEO, SEA, social media, content creation, and workshops tailored for tourism businesses and destinations. The company holds several certifications and maintains a professional online presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website is built on TYPO3 CMS and integrates modern analytics tools including Google Analytics, Google Tag Manager, and Matomo, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and incident response disclosures. Overall, the website is well-designed, mobile-optimized, and trustworthy, serving its niche market effectively.

E

ELITEDOMAINS

btc.at

32

The website btc.at is a domain sales landing page operated through ELITEDOMAINS, a domain marketplace and escrow service provider. It offers the domain btc.at for sale with clear instructions on the purchase process, payment methods, and domain transfer. The site targets individuals and businesses interested in acquiring premium domains. Technically, the site is built using Angular framework with modern web fonts and responsive design, providing a good user experience and basic SEO optimization. Security posture is moderate with no visible security headers or explicit HTTPS enforcement in the HTML, but the use of escrow and verified payment methods adds trust. Privacy compliance is basic with a privacy policy linked externally but no cookie consent mechanism visible. Business credibility is moderate due to the lack of direct contact emails or phone numbers, relying instead on a contact form linked to the marketplace platform. Overall, the site is functional and professional but could improve in security transparency and privacy compliance.

I

Interad Software GmbH

interad.at

38

Interad Software GmbH is a well-established Austrian software company specializing in custom software solutions based on Microsoft .NET technologies. Founded in 2005, the company operates with a young and dynamic team from Graz and Krumpendorf am Wörthersee, serving clients both domestically and internationally. Their market position is strengthened by their status as a Microsoft Gold Partner and Microsoft Solutions Partner, placing them among the top 1% of Microsoft partners worldwide. Key services include individual software development, IT experts on demand, software consulting, and developer coaching. The company targets businesses seeking tailored IT solutions and expert consulting services. Technically, the website employs a modern tech stack including AngularJS, jQuery, and various third-party marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and CookieScript for consent management. The site is mobile-optimized with good SEO and accessibility basics, although some improvements could be made in accessibility and performance tuning. The website is hosted securely with HTTPS and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks some advanced security headers like CSP and HSTS. There is no visible security policy or incident response information, which could be improved to enhance trust and preparedness. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, Interad presents a credible and professional online presence with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen their security posture and trustworthiness.

F

fortunasports

helpsole.com

38

Fortunasports is an Indonesian online sports betting platform offering live sports schedules, competitive odds, and live betting with streaming features. The website serves as a front-facing portal but heavily links to an external domain fortunasports.xyz, which likely hosts the main service. The site uses common frontend technologies such as Bootstrap and jQuery but lacks modern SEO, accessibility, and security best practices. No privacy or cookie policies are present, and no company contact information is provided, which reduces user trust and compliance with data protection regulations. Security posture is weak due to absence of HTTPS and security headers. Overall, the site appears functional but lacks professionalism and transparency, posing risks to users and limiting business credibility.

A

Automationstechnik

automationstechnik.pl

33

Automationstechnik is a well-established Polish company specializing in industrial automation and robotics solutions with over 25 years of experience. The company designs and builds advanced machines and assembly lines, focusing on optimizing production processes, intralogistics, and traceability systems. Their market position is strong within Poland's manufacturing sector, supported by multiple certifications and a portfolio of satisfied clients. Technically, the website is built on WordPress with modern frameworks and includes essential security and privacy features such as HTTPS, cookie consent, and Google reCAPTCHA. Security posture is good, though explicit security headers and published security policies could enhance it further. Overall, the company demonstrates a professional digital presence with strong business credibility and compliance with GDPR.

The website at fpz.com currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The page references legacy CMS platforms Joomla 1.5 and WordPress 2.5, both of which are outdated and pose significant security risks. No meaningful business or contact information is available on the page, and no privacy or cookie policies are present. The technical infrastructure appears minimal, relying on basic HTML, CSS, and JavaScript with no modern frameworks or analytics detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and use of deprecated software. Overall, the site is inaccessible for detailed analysis and scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

M

mrp hotels

mrp-hotels.com

36

mrp hotels is a leading European consultancy specializing in hospitality, hotel real estate, and hotel operator companies. With nearly two decades of experience, they provide comprehensive services including asset management, strategy consulting, digitalization, investment management, operator search, and ESG strategies. Their client base includes investors, owners, operators, banks, and developers across Europe. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, optimized for performance, SEO, and mobile responsiveness. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site reflects a professional and trustworthy consultancy with strong branding and clear contact information.

G

Gebr. Swinkels Grondwerken BV

swinkelsgrondwerken.nl

29

Gebr. Swinkels Grondwerken BV is a Dutch company specializing in groundworks and road construction, serving a diverse clientele including large construction firms, municipalities, holiday parks, and private individuals. The company offers a comprehensive range of services including earthworks, supply and processing of construction materials, and foundation laying. Their market position is that of a well-established regional player with a solid reputation and trusted partnerships. The website reflects a professional and consistent brand image with clear business information and legal documentation available for visitors. Technically, the website is built on WordPress using the Elementor page builder and Blocksy theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published. Overall, the website demonstrates a mature digital presence with good privacy compliance, including a privacy policy and cookie consent mechanism. Contact information is complete and clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing a dedicated security policy and incident response contact, enhancing accessibility, and considering a security.txt file for vulnerability disclosure to further strengthen trust and compliance.

The website nabucco-pipeline.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile CAPTCHA, which blocks direct access to any substantive content. As a result, no business information, policies, or contact details are available for analysis. The site appears to rely on Cloudflare's security infrastructure to mitigate automated access and potential threats. Due to the lack of accessible content, the technical infrastructure assessment is limited to the presence of Cloudflare services and basic HTML/CSS/JS technologies. Security posture benefits from Cloudflare's WAF and CAPTCHA but lacks visible security headers or documented policies. Overall, the site cannot be fully evaluated, and the risk assessment remains low due to insufficient data.

The website rs-innovation.at is a domain parking page primarily designed to advertise the domain for sale through Sedo's platform. It lacks any active business content, contact information, or company branding beyond the Sedo parking template. The site targets general internet users who might be interested in purchasing the domain. Technically, the site uses standard HTML, CSS, and JavaScript with integration of Google Ads and Sedo's domain parking scripts. However, it lacks HTTPS, security headers, and privacy compliance mechanisms, which are critical for trust and security. The security posture is weak due to absence of SSL and security policies. Overall, the site serves as a placeholder with minimal content and limited user engagement features.

H

HKG Embroderies

hkg.at

31

HKG Embroderies is a small manufacturing business specializing in embroidery products since 1956, based in Austria. The website serves as a digital presence showcasing their collections and company information primarily in German, with multilingual support. The business appears established with a consistent brand presence but lacks detailed contact and compliance information on the site. Technically, the website is built on WordPress with common plugins and Google services integration, including reCAPTCHA and Google Maps API. However, the site lacks HTTPS, which is a critical security deficiency. Security measures are minimal, with no advanced headers or policies visible. Privacy compliance is poor due to the absence of privacy and cookie policies. Overall, the site is functional but requires significant improvements in security and compliance to meet modern standards.

M

M® Design | Marion Rhomberg

mdesign.cc

32

M® Design | Marion Rhomberg is a small Austrian design agency specializing in art direction, corporate design, packaging, branding, illustration, and related creative services. The website serves as a portfolio showcasing various projects and provides clear contact information including email, phone, and physical address. The technical infrastructure is basic, relying on older JavaScript libraries such as jQuery 3.1.1 and Masonry for layout, with no detected CMS or advanced frameworks. The site appears moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is weak due to absence of HTTPS, security headers, and privacy or cookie policies, which also raises GDPR compliance concerns. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to reduce risk and enhance trust.

The website ares-genetics.com currently serves as a placeholder domain reservation page managed by EOLAS, a Grenoble-based web hosting and domain registration provider affiliated with Orange Business Services SA. The site does not present any active business content or services related to the domain name itself, indicating it is not yet operational for its intended purpose. The target audience appears to be French-speaking clients seeking web hosting and domain services, but no direct business offerings are visible on this domain. From a technical perspective, the website is very basic, consisting of static HTML and CSS with no dynamic content, scripts, or CMS detected. There is no evidence of HTTPS or security headers, and the site lacks mobile optimization and accessibility features. SEO is minimal, with only basic meta tags present. No analytics or tracking technologies are in use. Security posture is weak due to the absence of HTTPS, security headers, privacy policies, and cookie consent mechanisms. No incident response or vulnerability disclosure information is provided. Contact information is available but limited to a single email, phone number, and physical address associated with EOLAS. The domain registration is privacy protected, which is common for hosting providers but limits transparency. Overall, the site scores low on content quality, technical implementation, security, and privacy compliance, reflecting its status as a parked/reserved domain page rather than an active business website. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile and accessibility features, and developing actual business content to enhance credibility and user trust.

The website landrover-africa.com is currently inaccessible due to an HTTP ERROR 526 indicating an invalid SSL certificate. The page content is a browser-generated error page with no actual business content, contact information, or policies available. This severely limits the ability to assess the company's market position, services, or target audience. Technically, the site uses standard Chromium error page scripts and styles but lacks any modern SEO, accessibility, or security enhancements. The security posture is weak due to the SSL issue and absence of security headers or policies. Overall, the site is non-functional from a user perspective and presents significant trust and compliance concerns.

S

Salzburger Turnverein

stv1861.at

34

Salzburger Turnverein is a historic sports club based in Salzburg, Austria, with a founding date of 1861. The club offers a variety of sports and cultural activities including gymnastics, swimming, volleyball, fitness programs, and choir participation. It serves a local community audience including children, youth, and families. The website is built on WordPress and uses common plugins for event management and media embedding, reflecting a moderate level of digital maturity. The site is well-structured with good content relevance and navigation clarity, supporting a positive user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security practices.

C

Customer Care Solutions

customer-care-solutions.at

33

Customer Care Solutions is a specialized service provider based in Austria offering comprehensive customer communication solutions including call center operations, telemarketing, assistance services, and risk management. With over 15 years of experience and clients from more than 30 countries, the company positions itself as a reliable partner for businesses seeking tailored customer service and support solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using the Avada theme and integrates standard analytics and SEO tools, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature digital presence aligned with its business claims.

M

Metis

metis-vienna.eu

31

Metis is a small Austrian organization specializing in European integration, focusing on labor markets, rural and urban development across Austria and the EU. The website serves as an informational platform presenting their mission and projects, targeting policymakers and regional development stakeholders. The site is built on WordPress with multilingual support, employing common web technologies such as Bootstrap and jQuery. While the site is functional and professionally designed, it uses outdated software versions which may pose security risks. The presence of a cookie consent banner and privacy policy indicates basic GDPR compliance, but no explicit security or incident response policies are visible. Overall, the website is moderately secure and compliant but would benefit from technical updates and enhanced transparency.

The website selfsustain.com.au is currently parked with minimal content indicating no active business presence. The site only displays a placeholder message 'Self Sustain is Parked' and contains no business descriptions, contact information, or policies. The technical infrastructure is basic, using simple HTML5, CSS, and JavaScript without any advanced frameworks or CMS. There is no evidence of HTTPS or security headers, and no analytics or advertising scripts are present. The security posture is weak due to lack of HTTPS and absence of privacy or cookie policies. Overall, the site does not provide sufficient information to assess business operations or security maturity. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear business contact information, and enhancing website content and structure to improve trust and compliance.

G

GISquadrat GmbH

gisquadrat.com

39

GISquadrat GmbH is a medium-sized Austrian company specializing in integrated geoinformation solutions for municipalities, associations, energy suppliers, and telecommunications companies. As part of the Hexagon group, it leverages advanced GIS software and services to provide digital mapping, data management, and mobile data collection solutions. The company offers a comprehensive portfolio including digital cadastres, fiber optic planning, and digital twin technologies, positioning itself as a key player in the regional GIS market. The website reflects a professional and consistent brand image with clear navigation and detailed service descriptions. Technically, the site is built on WordPress with modern plugins and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides transparent contact information.

B

Berg & Macher

startupalm.com

39

Berg & Macher is a German-based organizational consulting firm specializing in organizational development, strategy implementation, leadership, and corporate culture transformation. The company targets medium-sized enterprises seeking to become resilient and adaptable in a rapidly changing business environment. Their website reflects a professional and consistent brand image with comprehensive service offerings and client testimonials that reinforce their market position. Technically, the site is built on WordPress using WPBakery and integrates modern marketing and analytics tools such as HubSpot, Google Analytics, and Facebook Pixel. Security posture is strong with HTTPS enforced, GDPR-compliant cookie consent, and no visible vulnerabilities. However, some HTTP security headers could be improved. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

O

Orderman GmbH

orderman.com

33

Orderman GmbH is a well-established company specializing in professional hardware and services tailored for the hospitality and retail sectors. With over 30 years of experience and a strong market position as a leader in mobile cash registers, Orderman offers a broad portfolio including handheld devices, POS systems, printers, panel PCs, kiosks, and call systems. The company operates primarily in Austria and Italy, with additional presence in Dubai, and is a subsidiary of NCR, enhancing its credibility and market reach. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built on WordPress using modern frameworks such as Elementor and JetEngine, supported by Borlabs Cookie for GDPR-compliant cookie management. It integrates Google Tag Manager and Google Analytics with consent mode enabled, demonstrating a good level of digital maturity and privacy awareness. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs cookie consent mechanisms and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response page, and no vulnerability disclosure or security.txt file is present. These gaps represent opportunities for improving transparency and security posture. Overall, Orderman GmbH's website is professional, trustworthy, and compliant with privacy regulations, supporting its business credibility. Strategic enhancements in security policy communication and incident response readiness would further strengthen its risk management and customer trust.

The website at nextsense.com.mk is currently inaccessible, returning an HTTP 404 Not Found error with minimal HTML content. No business information, metadata, or technical details are available from the page. The lack of accessible content prevents any meaningful analysis of the company's services, market position, or technical infrastructure. Security posture cannot be assessed due to absence of HTTPS or security headers. Overall, the site appears non-functional or under construction, posing a high risk for users and lacking trust indicators.

F

First Facility

firstfacility.net

35

First Facility is a well-established international group specializing in integrated facility management and property management services across nine European countries. With over 40 years of experience, the company holds a strong market position as a leading expert in the facility management sector. Their service portfolio includes property management, facility management, and consulting, targeting property owners and corporate clients. The website reflects a mature digital presence with modern technologies and good user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with a cookie consent mechanism and a privacy policy. Overall, the company demonstrates a professional and trustworthy online presence.

The website ad-m.com is currently inaccessible, presenting a 503 Service Temporarily Unavailable error page with minimal content. The only contact information available is an abuse email address linked to kasserver.com, suggesting hosting or administrative support but no direct business contact details. Due to the lack of accessible content, metadata, or structured data, it is not possible to determine the company's business model, services, or market position. The technical infrastructure cannot be assessed beyond the inference that the site is hosted or managed by kasserver.com. Security posture is poor with no HTTPS or security headers detected, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the site appears down or blocked, severely limiting any meaningful analysis.

The website at embl.de is currently inaccessible, returning a 404 Not Found error page with minimal HTML content and no meaningful data. There is no visible metadata, structured data, or business information available for analysis. The lack of accessible content prevents assessment of the company's business model, services, or market position. Technically, the site does not provide any detectable technologies, scripts, or frameworks, and no security headers or SSL configuration details are available. The security posture cannot be evaluated due to the absence of content and technical data. Overall, the site is non-functional for analysis and requires remediation to restore accessibility and provide essential business and compliance information.