Technical audit · 2026-05-26

a-sit.at

Secure Information Technology Center of Austria

Austria's Secure IT Center — 20 requests, 1 domain. Absolutely everything from [www.a-sit.at](https://www.a-sit.at). Zero external dependencies, zero cookies, zero trackers. Apache on Debian.

Timeline of the leak

+0 ms · load
All resources — HTML, CSS, JS, images — are loaded exclusively from [www.a-sit.at](https://www.a-sit.at).

Context

A-SIT (Zentrum für sichere Informationstechnologie Austria) is Austria’s competence center for cryptography and secure information technology. Founded in 1999, jointly funded by the Austrian federal government, the Austrian National Bank, and the Graz University of Technology. Participates in the development of electronic signature and eIDAS standards. HAR: 20 requests, 1 domain.

One domain — the maximum minimum

20 requests, all to [www.a-sit.at](https://www.a-sit.at). Not a single external request — no CDN, no analytics, no fonts, no chatbots. Server: Apache 2.4.67 on Debian — proprietary infrastructure with no cloud provider. HSTS with max-age=31536000.

Policy — correct and clear

The policy is in English. It explicitly states the GDPR legal bases: cookies only upon consent (Art. 6(1)(a)), log files also upon consent. Applies to both domains of the organization: a-sit.at and egiz.gv.at (E-Government Innovationszentrum). No DPO explicitly named, but the policy describes data subject rights.

Profile matches the mission

An organization specializing in secure information technology and cryptography — a public website with no external dependencies whatsoever. The same result as the ECB (1 domain) and the Council of the EU (1 domain) — architectural deliberateness.

Conclusion

20 requests, 1 domain, zero external services. A-SIT is the second site in the Austrian series after ages.at, and it’s already green. The Secure IT Center complies with the very standard it develops.

Evidence
Original (audit)
HAR file: at/a-sit-at-2026-05-26.har
SHA-256: f8a5059bf051f14d69e15059703fc59f5bca56c7c2a25f65c3b32b7bb6f1716b
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.