Critical-risk security reports

Website security analysis completed with a risk score of 22/100.

Security assessment completed with an overall score of 0/100 (unknown risk). 7 critical issues require immediate attention. Total of 34 security findings identified across all modules.

Security assessment completed with an overall score of 0/100 (unknown risk). 6 critical issues require immediate attention. Total of 30 security findings identified across all modules.

شرکت مهندسی صنعت و تولید جمع‌ساز یک شرکت تولیدی متوسط در ایران است که در زمینه طراحی و تولید سیستم‌های روشنایی خودرو فعالیت می‌کند. این شرکت با سابقه بیش از 30 سال، محصولات متنوعی از چراغ‌های خودرو را ارائه می‌دهد و دارای آزمایشگاه تخصصی با گواهینامه‌های معتبر است. سایت شرکت به زبان فارسی و با استفاده از وردپرس و افزونه‌های رایج ساخته شده است. از نظر فنی، سایت از تکنولوژی‌های مدرن بهره می‌برد اما فاقد گواهی SSL معتبر است که یک ضعف امنیتی مهم محسوب می‌شود. همچنین سیاست‌های حفظ حریم خصوصی و کوکی‌ها در سایت به صورت آشکار وجود ندارد که می‌تواند ریسک‌های قانونی ایجاد کند. به طور کلی، شرکت موقعیت خوبی در بازار روشنایی خودرو ایران دارد اما نیازمند بهبودهای امنیتی و انطباق با مقررات حفظ حریم خصوصی است.

The domain icnm.at currently serves a temporary unavailability error page hosted by Host Europe GmbH, indicating the website is offline or under maintenance. No business content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or services. The technical infrastructure is minimal, with only an nginx server detected and no SSL certificate installed, resulting in an insecure HTTP-only connection. DNS records are valid but lack advanced security features such as DNSSEC or CAA. The security posture is weak due to the absence of HTTPS, security headers, and modern TLS protocols. Overall, the site is not operational and presents significant security and trust concerns.

SisterWood appears to be a small business focused on products related to Zirbenhout (pine wood) as indicated by the website title and description. The website content is minimal, primarily consisting of images linking to an external related domain and a marketing platform. There is no visible contact information, privacy policies, or terms of service, which limits the business credibility and user trust. Technically, the website uses basic HTML and CSS with Google Fonts, hosted on a provider identified by DNS nameservers. Performance is slow despite minimal content, and mobile optimization is basic. Security posture is weak due to the absence of HTTPS and SSL certificates, lack of security headers, and disabled DNSSEC. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website lacks essential security and privacy features, which poses risks to user trust and compliance.

Dr. Pendl & Dr. Piswanger GmbH is a well-established human resources consulting firm founded in 1980, operating primarily in Austria and Central and Eastern Europe with 14 offices. The company specializes in executive and expert search, personnel development, training, coaching, and consulting services. As a partner of the global InterSearch network, it holds a strong market position among top HR consultants in the region. The website reflects a professional and consistent brand image, targeting companies and candidates seeking HR solutions. Technically, the website uses Apache server technology with JavaScript and CSS frameworks, but lacks modern security features such as HTTPS, which is a critical vulnerability. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. However, the absence of SSL/TLS and security headers significantly impacts the security posture.

Dr. Rammer RM e.U. is a small Austrian consultancy specializing in research funding and innovation project support, targeting primarily SMEs and organizations seeking national and international funding opportunities. The business offers advisory services including funding instrument search, application support, communication with funding bodies, and project execution consulting. The website content is primarily in German with some English navigation, reflecting a niche market focus in Austria and the EU research funding ecosystem. Technically, the website is built with outdated tools (Microsoft FrontPage Express 2.0) and lacks modern web standards such as responsive design and accessibility features. Performance is slow with a load time exceeding 10 seconds. There is no CMS detected, and hosting appears to be via a domain control provider with no clear hosting platform identified. From a security perspective, the site lacks HTTPS entirely, exposing visitors to risks. No security headers or modern TLS protocols are implemented. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism. Contact information is limited to a single email address with no phone or physical address provided on the site. No incident response or security policies are disclosed. Overall, the website presents moderate business credibility but suffers from critical security shortcomings and outdated technical implementation. Strategic improvements in security, performance, and privacy compliance are recommended to enhance trust and user experience.

Rupp Austria GmbH is a well-established cheese product manufacturer and retailer based in Austria with over 100 years of history. The company offers a variety of cheese products and engages consumers through recipes and branded content. The website is professionally designed, content-rich, and optimized for SEO with structured data and social media integration. However, the absence of a valid SSL certificate and HTTPS support is a critical security vulnerability that undermines user trust and data protection. The site implements GDPR-compliant cookie consent mechanisms and provides comprehensive privacy and terms of service documentation. Overall, the business demonstrates strong market positioning in the retail cheese sector with a medium-sized operational scale.

PROVA is a French manufacturing company specializing in custom brown extracts and aromatic solutions for the food industry, with a strong heritage of 75 years. The company targets B2B clients in the food manufacturing sector, offering tailored flavor creation and innovation services. The website is professionally designed, SEO optimized, and provides multilingual support via Weglot. However, the technical infrastructure lacks a valid SSL certificate and HTTPS enforcement, which is a critical security gap. The absence of DNSSEC and CAA records further reduces domain security. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is available primarily via contact forms and social media links. Overall, the business appears legitimate and well-positioned, but the security posture requires urgent improvement to protect user data and enhance trust.

The website fensterhandwerk.at is currently inaccessible to the public due to HTTP Basic Authentication blocking access without valid credentials. This prevents any meaningful content from being viewed or analyzed. The domain is registered and hosted with standard DNS and mail configurations, indicating a legitimate small business presence in Austria. However, the lack of HTTPS and valid SSL/TLS certificates severely impacts the security posture of the site. No privacy, cookie, or terms of service policies are visible, and no contact or business information is publicly accessible. Overall, the website's digital maturity is low, with minimal technical sophistication and poor security practices.

Step sas is a small Italian IT solutions and consultancy company based in Jesi, Italy, operating since 2003. The company offers services related to IT, security, automation, and web technologies targeting local businesses and partners. The website content is minimal, primarily consisting of meta tags and a redirect, with no visible contact or policy information. Technically, the site is hosted on Apache via register.it with no SSL/TLS encryption, resulting in a poor security posture. The domain is mature but at high risk due to imminent expiry and lack of domain protection locks. Security best practices such as HTTPS, HSTS, and security headers are absent, exposing the site to potential risks. Overall, the website lacks modern digital maturity and trust signals, which could impact business credibility and user trust.

IKG Group AB is a mature Swedish technical consulting company specializing in engineering services for product development firms. With over 28 years of domain age and a presence in ten Swedish cities, the company offers a broad range of engineering disciplines including software development, mechanics, IT systems, electrical construction, and project management. The website reflects a professional business with consistent branding and a clear focus on technical consulting services. Technically, the site uses an older jQuery-based stack combined with modern analytics tools like Google Analytics and Tag Manager. However, the website suffers from significant security shortcomings, notably the absence of HTTPS and a valid SSL certificate, which exposes visitors to risks and reduces trust. Privacy compliance is basic, with a cookie consent banner present but no visible privacy policy or terms of service. The business information is clear and consistent with WHOIS data, supporting legitimacy. Overall, the site is functional but requires urgent security improvements to protect users and enhance credibility.

Plasser & Theurer is a well-established Austrian company specializing in the development, construction, and export of railway track maintenance machinery with over 60 years of industry presence. The company serves railway infrastructure operators and maintenance professionals globally, supported by a broad network of subsidiaries and partners. Their website reflects a professional and comprehensive digital presence, showcasing their products, services, and international reach. Technically, the website is built on TYPO3 CMS and uses modern JavaScript libraries such as Swiper.js for UI components and Matomo for analytics. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Performance is slow, and no advanced security headers or domain protection mechanisms are in place. Security-wise, the lack of HTTPS and security headers exposes visitors to risks, and the absence of cookie consent mechanisms raises compliance concerns under GDPR. The WHOIS data confirms a mature and consistent domain registration aligned with the company's identity, enhancing legitimacy. Overall, while the business and content quality are strong, the security and privacy compliance gaps present significant risks. Strategic recommendations include immediate implementation of HTTPS, security headers, and cookie consent mechanisms, alongside enhancing domain security configurations. These steps will improve trust, compliance, and overall security posture, supporting the company's reputable market position.

ROSMARIE is a small Dutch theatrical business focused on monologue performances and play instruction, led by Rosmarie 'Roos' Blaauboer. The website serves as a professional portfolio and booking platform, targeting theater audiences and cultural event organizers. The business operates with a niche market position emphasizing artistic productions and cultural heritage. Technically, the site is built on WordPress with common plugins for SEO and sliders, but suffers from lack of HTTPS and performance optimization. Security posture is weak due to missing SSL, lack of security headers, and absence of privacy and cookie policies. The domain is mature and consistent with the business history, but domain protection is minimal. Overall, the site is functional and professional in content but requires urgent security and privacy improvements to reduce risk and improve trust.

timeCOM GmbH is a small Austrian technology company specializing in time management solutions including personnel time tracking, project time tracking, workflow, personnel deployment planning, access control, and payroll export. With over 25 years of experience, they serve business clients primarily in Austria and maintain partnerships with notable software and hardware providers such as Atoss AG, Datafox GmbH, and PCS GmbH. The website is built on WordPress with Elementor and provides clear contact information but lacks critical security and privacy features such as HTTPS and privacy policies. Technically, the site uses standard web technologies but suffers from missing SSL/TLS, which is a significant security risk. No web application firewall or blocking mechanisms are detected, and the site is fully accessible.

ANGER MACHINING GmbH is a medium-sized manufacturing company specializing in turnkey machining solutions for the automotive industry, focusing on battery trays, profiles, and structural components. The company has a mature online presence with a domain registered since 2007 and holds recognized certifications such as TÜV Süd. Their website is multilingual and professionally designed, targeting B2B clients in automotive manufacturing. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and cookie compliance. However, the website suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site provides good business credibility and content quality but requires urgent security improvements.

Leftshift One is an established Austrian technology company specializing in generative AI solutions, particularly their MyGPT platform which leverages Retrieval-Augmented Generation (RAG) to provide secure, scalable, and customizable AI-powered knowledge management for enterprises and SMEs. The company positions itself as a technology leader with over 8 years of experience and 200 successful AI projects, emphasizing data privacy and compliance with GDPR. Technically, the website is built on WordPress with modern frameworks like Elementor and optimized with WP Rocket, but lacks a valid SSL certificate and proper TLS configuration, which are critical security gaps. The security posture is moderate with some vulnerabilities such as a subdomain takeover risk. Overall, the website is professional, content-rich, and compliant with privacy regulations, but requires urgent improvements in SSL/TLS security to enhance trust and protect user data.

Lab Zero Games is an independent game development studio known for titles such as Skullgirls and Indivisible. The website serves primarily as a promotional platform for their games, targeting gamers interested in indie and retro-style games. The business model focuses on game development and publishing within the technology sector. The company appears to be small-sized with consistent branding and good content quality. Technically, the website is built on WordPress 5.2.21 with PHP 7.3.33 and Apache server. The site lacks HTTPS support, which is a significant security concern. Performance metrics are not available, but the site shows basic mobile optimization and accessibility features. No advanced frameworks or analytics tools are detected. From a security perspective, the absence of SSL/TLS encryption, lack of security headers, and missing privacy and cookie policies indicate a low security posture. No incident response or vulnerability disclosure mechanisms are present. The domain registration data is consistent and legitimate, but the site would benefit greatly from implementing modern security best practices. Overall, the website is functional and professional in design but requires urgent improvements in security and privacy compliance to protect users and enhance trustworthiness.

Lebenshilfe Österreich is a well-established non-profit organization dedicated to advocating for the rights and support of people with intellectual and multiple disabilities across Austria. Serving as the umbrella organization for regional Lebenshilfe groups, it offers services including support, advocacy, public relations, and organizes events such as the Austrian Inclusion Prize. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency targeting individuals and stakeholders interested in disability rights and inclusion. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Cookiebot for consent management. It uses Apache hosting with DNS managed by easyname.eu. Accessibility features and structured data are implemented, enhancing user experience and SEO. However, performance metrics are not provided. From a security perspective, the site lacks a valid SSL/TLS certificate, exposing it to significant risks and undermining user trust. No advanced security headers or protocols are configured, and no incident response or security policies are publicly disclosed. Cookie consent is properly implemented, and privacy policies are present and GDPR compliant. Overall, while the website excels in content quality, user experience, and privacy compliance, the absence of HTTPS is a critical vulnerability that must be addressed immediately to protect users and maintain credibility. Strategic improvements in security posture and transparency around security policies are recommended to enhance trust and resilience.

rieg marketing is a small German marketing consultancy specializing in creative marketing, communication, and promotional services primarily for the sporting goods, marine, and fashion industries. The company offers tailored marketing strategies, project management, public relations, promotions, and visual merchandising services. The website is built on WordPress and uses common plugins such as Contact Form 7 and Cookie Law Info for user interaction and compliance. While the website content is professional and well-structured, the technical infrastructure lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Cookie consent mechanisms and a privacy policy compliant with GDPR are present, indicating attention to privacy compliance. However, no incident response or security policy information is provided, and no terms of service page is found.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

AMES - Aerospace and Mechanical Engineering Services is a mature Austrian company specializing in aerospace engineering, certification, production, maintenance, CAMO, consulting, and training services. With a domain age of 17 years and multiple aerospace certifications, AMES positions itself as a reliable service provider in the aerospace transportation sector. The website reflects a professional business model targeting aerospace industry professionals and companies requiring specialized engineering and certification services. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs a variety of established JavaScript libraries and frameworks such as jQuery, Bootstrap, and Owl Carousel, indicating a moderate level of digital maturity. However, the site lacks HTTPS encryption and modern security configurations, which significantly impacts its security posture. Performance is rated slow due to missing SSL and potential optimization gaps, though mobile responsiveness and navigation clarity are good. Security evaluation reveals critical vulnerabilities including the absence of SSL/TLS, no HSTS, no DNSSEC, and missing security headers. These gaps expose the site to potential interception and downgrade attacks. The domain's imminent expiry in 11 days adds operational risk. Privacy compliance is minimal, with basic privacy and terms documents available but no cookie consent or incident response contacts. Overall, AMES demonstrates solid business credibility and content quality but requires urgent security improvements to protect its digital assets and customer trust. Strategic recommendations include immediate SSL implementation, enhanced domain protection, and adoption of security best practices to elevate the security score and compliance posture.

La Bistrot Agency (No Name) is a small French marketing agency specializing in 360° activation strategies primarily for FMCG clients. The company offers a range of services including promotional activations, digital marketing, licensing, video production, packaging management, and print. The website reflects a mature business with 18 years of domain age and a consistent brand presence. Technically, the site runs on WordPress 4.7.29 with PHP 7.0 and uses various JavaScript libraries for UI effects and Google Maps integration. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. No advanced security headers or privacy compliance mechanisms such as cookie consent banners are present. Contact information is not explicitly provided on the homepage, though social media links to Facebook and Twitter are available. Overall, the site is functional with good content quality and navigation but requires urgent security and privacy improvements.

Symvaro GmbH is a small Austrian company specializing in digital solutions for water and waste management, targeting municipalities and associations. Their key offerings include WATERLOO, a water meter data management system, and Die Müll App, a smart waste management service. The company positions itself as a niche provider focused on efficiency, simplicity, and data protection. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet, but lacks a valid SSL certificate and proper DNS configuration, which negatively impacts security and trust. The security posture is weak due to missing HTTPS and DNS records, although some security headers like HSTS are present. Privacy compliance is partially met with a comprehensive privacy policy hosted externally but lacks cookie consent mechanisms. Overall, the website is functional and professionally designed but requires significant improvements in security and domain management to enhance trust and compliance.

Distillery | Paranormal Agency is a small creative agency based in Austria specializing in transformative branding, experiential marketing, media production, and communication design. The company positions itself as a niche player focusing on immersive and genuine cultural experiences. The website is built on WordPress with a modern tech stack including Yoast SEO and Contact Form 7, but lacks a valid SSL certificate, which is a critical security concern. The site implements cookie consent mechanisms indicating GDPR awareness but lacks explicit privacy policy and terms of service pages. Contact information including company emails and physical address is clearly presented, alongside active social media profiles. Overall, the website is professionally designed with good content quality and navigation but suffers from poor security posture due to missing HTTPS.

unit-IT Dienstleistungs GmbH & Co KG is a medium-sized Austrian IT services company specializing in SAP solutions, IT operations, infrastructure, and mobile solutions. The company targets the Austrian mid-market and benefits from its international affiliation with the parent company Atos. Their website presents a professional image with clear service offerings, references, and certifications, positioning them as a trusted regional player in the technology sector. Technically, the website is built on WordPress with common plugins and frameworks, but suffers from a critical lack of HTTPS and modern TLS support, which significantly impacts its security posture. Privacy compliance is well managed with comprehensive privacy and cookie policies and a consent mechanism. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the website is functional and professional but requires urgent security improvements to protect user data and build trust.

Related:atos.net

The website represents a small private psychotherapy practice operated by Darchelle Worley MA, LMHC, based in Seattle, Washington. The business focuses on providing individual and group therapy services to adults and adolescents, emphasizing present-focused change and healing from past traumas. The site content is relevant and consistent with the healthcare sector, targeting clients seeking mental health support. Technically, the website is built on a legacy stack using Apache server and older versions of jQuery. It lacks a CMS and modern web technologies, resulting in basic mobile optimization and slow performance. The site is served over HTTP without a valid SSL certificate, which is a significant security concern. Google Analytics is used for tracking, but no privacy or cookie policies are present, indicating poor privacy compliance. From a security perspective, the absence of HTTPS, lack of security headers, and missing DNS security features such as DNSSEC and CAA records expose the site to risks. No incident response or security policies are published, and no forms are present to collect user data, reducing attack surface but also limiting user engagement. The domain's DNS records are incomplete or missing, and no SSL certificate is installed, which undermines trust and legitimacy. Overall, the website scores low on security and privacy compliance, moderate on business credibility and content quality, and basic on technical implementation. Strategic improvements in SSL deployment, privacy policy publication, and security header implementation are critical to enhance trust and compliance.

Jacobs Douwe Egberts is an established enterprise-level company operating in the retail sector, specializing in coffee and related consumer goods. The website presents a professional corporate image with clear branding and content focused on product portfolio, sustainability, careers, and corporate responsibility. The target audience includes consumers, job seekers, and stakeholders interested in corporate responsibility. The business model centers on product sales and brand reputation in the global coffee market. Technically, the website uses a modern CMS platform (Episerver) and integrates analytics and tag management tools such as Microsoft Application Insights and Google Tag Manager. However, the site suffers from slow load times and lacks a valid SSL certificate, which impacts user trust and security. Mobile optimization and SEO are adequately addressed, but accessibility is basic. From a security perspective, the absence of HTTPS and security headers is a critical vulnerability. The DNS configuration lacks DNSSEC and CAA records, and no advanced security policies or incident response contacts are published. Cookie consent is implemented via OneTrust, indicating some privacy compliance efforts. Overall, the website is functional and professional but requires urgent improvements in security infrastructure, particularly enabling HTTPS and adding security headers. Performance optimization is also recommended to enhance user experience and trust.

The American Austrian Foundation is a well-established non-profit organization dedicated to fostering knowledge transfer and experience exchange in medicine, culture, and media through fellowship programs and bilateral exchanges. The website reflects a professional and consistent brand with clear program offerings and international reach. Technically, the site is built on WordPress with Elementor and uses modern web technologies, but suffers from a critical lack of HTTPS, which undermines security and user trust. The security posture is weak due to the absence of a valid SSL certificate and missing security headers, although no major vulnerabilities were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is strong, supported by trust badges and consistent WHOIS data. Overall, the site is functional and informative but requires urgent security improvements to protect users and enhance trust.

Security assessment completed with an overall score of 0/100 (unknown risk). 6 critical issues require immediate attention. Total of 31 security findings identified across all modules.

Workheld GmbH operates a professional website presenting a software platform focused on connected workforce management for industrial and manufacturing sectors. The company offers digital workflows, mobile apps, remote support, and IIoT integration, positioning itself as a leading Field Service Management solution aligned with Industry 4.0 principles. The website is well-structured, content-rich, and targets industrial clients seeking digital transformation solutions. Technically, the site is built on WordPress with modern plugins and integrates with Microsoft Azure and SAP HANA platforms. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to risks and reducing trust. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms despite using tracking services like HubSpot. Business credibility is strong with clear branding, client logos, and legal pages, but contact details such as emails and phone numbers are not explicitly provided on the site. Overall, the site demonstrates good digital maturity but requires urgent security improvements to protect user data and enhance trust.

The PKE Group is a well-established Austrian technology company founded in 1979, specializing in security, communication, media, traffic, building, and logistics technology solutions. It operates internationally with a strong regional presence across Europe and the Middle East through multiple subsidiaries. The website reflects a professional and comprehensive digital presence, targeting businesses seeking innovative and reliable technology services. Technically, the site uses modern frameworks such as Pimcore CMS and Alpine.js, and employs Matomo for analytics, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks and undermining trust. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates strong business credibility but requires urgent security improvements to align with best practices.

iMedia Web Solutions is a small technology company based in India specializing in web design, WordPress development, eCommerce solutions, and responsive websites. With over 9 years of operation and more than 500 satisfied clients, the company positions itself as a reliable service provider offering white label and outsourcing solutions. The website is built on WordPress with a modern tech stack including PHP 7.4, LiteSpeed server, and popular plugins such as WPBakery and Slider Revolution. However, the site lacks a valid SSL certificate, which critically impacts its security posture. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Contact information is clearly provided, including phone, email, physical address, and a detailed contact form. Overall, the site demonstrates good content quality and business credibility but suffers from significant security and privacy shortcomings.

Ingenieurbüro Arnold is a small, regionally focused engineering firm specializing in construction planning, structural statics, energy demand calculations, sound insulation, and fire protection services in the Potsdam area of Germany. The company emphasizes quality, reliability, and cost optimization, serving private and commercial clients with over 30 years of experience. Their business model is project-based engineering consultancy with a strong local market presence. Technically, the website is built on WordPress with common plugins and a responsive design, but suffers from slow performance and lacks modern security features such as HTTPS. Security posture is weak due to the absence of SSL/TLS encryption, missing security headers, and no published security or incident response policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism but no GDPR-specific indicators. Overall, the website is professional and credible but requires urgent security improvements to protect user data and enhance trust.

The website 'mmmmm.org.uk' represents a small personal or artistic portfolio associated with Adrian Fisher and Luna Montenegro under the name 'montenegrofisher'. It primarily showcases artistic works, films, and CV information, targeting art enthusiasts and collaborators. The business model is portfolio-based with a niche market presence in the UK. Technically, the site is basic, built with static HTML, CSS, and JavaScript, hosted by Pickaweb, and uses Google Analytics for visitor tracking. However, the site suffers from slow load times and lacks mobile optimization and accessibility features. Security posture is weak due to the absence of HTTPS, no security headers, and no advanced security configurations. Privacy compliance is poor with no privacy or cookie policies present. WHOIS data indicates a legitimate UK registration consistent with the website's nature. Overall, the site is functional but requires significant improvements in security, privacy, and technical performance to enhance trust and professionalism.

Sanochemia Pharmazeutika GmbH is an established Austrian pharmaceutical manufacturer specializing in contrast agents for medical imaging, including MRI and CT products, with a focus on gadolinium-free alternatives to enhance patient safety. The company operates globally with distribution in over 50 countries and offers contract manufacturing and API production services. The website is built on WordPress with modern plugins and multilingual support, providing a professional and content-rich user experience. However, the absence of a valid SSL certificate is a critical security gap, exposing users to potential risks. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. Overall, the business presents a credible and professional digital presence but must urgently address its SSL/TLS configuration to improve security posture.

bulthaup is a premium kitchen brand specializing in high-quality kitchen concepts and living space solutions. The company operates a multilingual WordPress-based website that serves as a platform for product information, dealer location, and appointment scheduling. The site targets affluent consumers and businesses seeking bespoke kitchen solutions, positioning itself as a premium retail brand with a global dealer network. Technically, the website employs modern JavaScript libraries and WordPress plugins, including hCaptcha for form security and Cookiebot for cookie consent management. However, the site lacks a valid SSL certificate and modern TLS support, which significantly weakens its security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to enhance security and trust.

EVOLUXER is a Spanish consultancy company specializing in the comprehensive management of international tenders. The company targets businesses and public/private entities seeking to expand their international presence and develop new projects globally. Their services include advisory, administrative, and financial management throughout the project lifecycle, with experience working alongside major multilateral organizations such as EuropaAid, the World Bank, and the Inter-American Development Bank. The website reflects a professional and consistent brand image with clear contact information and relevant business content. Technically, the site is built on WordPress using Elementor and related plugins, but suffers from slow load times and lacks modern security configurations such as HTTPS and security headers. The absence of a valid SSL certificate and security policies represents a significant security risk. Privacy compliance is basic, with privacy and cookie policies present but lacking consent mechanisms. Overall, the website demonstrates moderate business credibility but requires urgent improvements in security and technical performance to enhance trust and user experience.

Continental Trading GmbH operates as a specialized retailer of used printing and finishing machines, rooted in Salzburg, Austria, with an international customer base. The website presents basic information about the business and its offerings but lacks comprehensive contact details and legal policies. The technical infrastructure relies on Apache web server with Plesk hosting, AngularJS framework, jQuery, and Bootstrap for frontend, and uses Google Analytics for visitor tracking with IP anonymization enabled. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, exposing users to potential risks. No privacy or terms of service policies are present, indicating compliance gaps with GDPR and other regulations. Overall, the website is functional but exhibits outdated technology and security weaknesses that require urgent remediation.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

VCC USA is a well-established general contractor and construction management company operating nationally in the United States. With a mature domain and over 38 years of industry experience, VCC offers a broad range of construction services across multiple sectors including hospitality, healthcare, retail, multifamily, and institutional projects. The website reflects a professional and comprehensive business presence with strong branding and clear service offerings. Technically, the site is built on WordPress with common plugins and libraries, but suffers from a critical lack of HTTPS/SSL, which severely impacts its security posture. The absence of modern TLS protocols and security headers further weakens its defense against common web threats. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though terms of service and incident response policies are not evident. Social media integration and an ethics hotline demonstrate a commitment to transparency and ethical business practices. Overall, while the business credibility and content quality are high, the security deficiencies present a significant risk that should be remediated promptly.

Sensorbis GmbH operates a cloud-based telemetry data management platform focused on Internet of Things (IoT) devices and sensors. The company provides subscription services enabling users to acquire, store, visualize, and export telemetry data with real-time charts, maps, and alert notifications. Their target audience includes IoT device operators, industrial machinery managers, and fleet tracking services. The business model centers on SaaS subscriptions with API and web interface management capabilities. The website content is professionally presented with consistent branding and relevant business descriptions, positioning Sensorbis as a niche player in the IoT telemetry cloud market. Technically, the website is built on ASP.NET WebForms with jQuery and Bootstrap, indicating a mature but somewhat dated technology stack. Performance is moderate to slow with a page load time exceeding 5 seconds and a large page size. Mobile optimization and accessibility are basic but functional. The site includes cookie consent mechanisms and privacy policy documentation, though GDPR compliance is not explicitly confirmed. Analytics tracking is present but disabled. From a security perspective, the site suffers from critical issues including the absence of a valid SSL certificate, missing DNS records, and lack of security headers. HTTPS is enforced in the application logic but without a valid certificate, exposing users to risks. No advanced security policies or incident response contacts are published. These vulnerabilities significantly reduce the security posture and trustworthiness of the site. Overall, Sensorbis GmbH presents a credible small technology company with a focused IoT telemetry service offering. However, critical security improvements are necessary to protect user data and enhance trust. Addressing SSL and DNS issues should be prioritized to improve the security score and user confidence.

The domain apler.at currently hosts a minimal placeholder website indicating that the domain is not assigned to any webspace. There is no business content, no contact information, and no privacy or cookie policies present. The website is served over HTTP without SSL/TLS encryption, which is a significant security concern. The hosting provider is kasserver.com, and the server runs Apache. The lack of HTTPS and security headers exposes the site to potential risks and reduces user trust. Overall, the website is inactive and does not present any business or security maturity.

Trigon Entwicklungsberatung is a well-established consulting firm specializing in organizational development, leadership, strategy, coaching, mediation, and innovation services primarily serving clients in Austria, Germany, and Switzerland. With over 40 years of experience and a team of 40+ consultants, the company holds a strong market position in the German-speaking consulting sector. Their website is professionally designed, content-rich, and targets organizational leaders and teams seeking transformational support. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and cookie management, but suffers from critical security shortcomings including the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. Privacy policies are comprehensive and GDPR compliant, and contact information is clearly provided via email and forms. Social media presence on LinkedIn and Facebook supports brand trust and outreach.

Loredo Muebles y Equipos is a Mexican manufacturing company specializing in office, school, medical, stainless steel, and hospitality furniture. The company operates a WordPress-based website using the Divi theme and Yoast SEO plugin, targeting regional business and institutional customers. The website provides clear contact information and displays relevant certifications, indicating a legitimate and socially responsible business. However, the technical infrastructure lacks a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. The absence of privacy and cookie policies also indicates compliance gaps. Overall, the website is functional with good content quality but requires urgent security improvements to protect user data and enhance trust.

BHDT GmbH is a specialist company focused on high pressure equipment and components for the chemical and petrochemical industries, operating primarily in Austria. The company is part of the Dr. Aichhorn Group and offers engineering, design, and production services. The website reflects a medium-sized B2B manufacturing business with a professional online presence and clear business segmentation. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and marketing analytics. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. Privacy policies are present but lack a cookie consent mechanism, which may affect GDPR compliance. Overall, the site is functional and professional but requires urgent security improvements.

Kreutzpointner is a well-established family-owned company specializing in electrical and information technology solutions, with over 100 years of experience and operations in Germany, Austria, and Romania. The company offers a comprehensive portfolio including electrical installations, renewable energy, software solutions, and full-service offerings such as consulting, engineering, execution, and maintenance. Their market position is strong with multiple subsidiaries and a broad service spectrum targeting industrial, commercial, and public sectors. Technically, the website is built on WordPress with modern plugins and frameworks, providing good SEO and user experience. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by certifications and detailed company information.

iService d.o.o. operates the website iservice.hr, providing fast and professional repair services for smartphones, tablets, Mac computers, and Apple devices, alongside retail sales of related accessories. The company targets both individual consumers and businesses, offering services such as quick repairs, free diagnostics, and warranty-backed parts. The business is well-positioned in the Croatian market with a strong reputation supported by certifications like Apple IRP and a 15-year operational history. Technically, the website uses a standard Apache server with modern marketing integrations including Google Analytics and Facebook Pixel, but lacks a valid SSL certificate, which is a significant security concern. The site is mobile-optimized with good SEO and user experience, though performance metrics indicate slow loading times. Security posture is weak due to missing HTTPS, lack of modern TLS protocols, and absence of key security headers. Privacy compliance is addressed with visible policies and cookie consent mechanisms, but no explicit security or incident response policies are found. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and enhance trust.

Two Pi GmbH is a specialized provider of signal processing intellectual property and firmware solutions for hearing aids and OTC hearing healthcare markets. The company offers audiology algorithm libraries, firmware for semiconductor platforms, and advisory services, with products tested in multiple medical and consumer product families. The website reflects a professional business presence targeting hearing healthcare companies and technology providers. Technically, the site is built on WordPress with standard plugins and uses Google Analytics for tracking. However, the absence of HTTPS and security headers significantly undermines the security posture. Privacy compliance is lacking, with no visible privacy or cookie policies or consent mechanisms. Business credibility is supported by consistent company information and professional content, but the lack of contact phone numbers and social media presence limits engagement channels. Overall, the site is functional and informative but requires urgent security and privacy improvements.