Czech Republic security reports

W

WOOD & Company Financial Services, a.s.

wood.com

57

WOOD & Company Financial Services, a.s. is a well-established investment banking and asset management firm focused on the Central and Eastern European markets. With over 35 years of experience, the company offers a range of financial services including markets, investment banking, asset & wealth management, real estate, and venture investments. The company is a member of the global Oaklins network, enhancing its cross-border transaction capabilities. The website reflects a professional and trustworthy brand with comprehensive service offerings and clear contact channels. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted behind Cloudflare DNS, and employs multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. The site is mobile-optimized, fast-loading, and SEO-friendly, with good accessibility features. Security measures include HTTPS enforcement, use of Google reCAPTCHA on forms, and implied security headers, although explicit header details are not fully visible. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR compliance indicators, and consent mechanisms. However, the site lacks a published security policy or incident response contact details, which could be improved. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity. Strategically, WOOD & Company should consider publishing a dedicated security policy and incident response information to enhance transparency and trust. Adding a security.txt file for vulnerability disclosures and explicitly implementing security headers would further strengthen their security posture. Regular audits of third-party scripts are recommended to mitigate potential risks. These improvements will support the company’s reputation as a secure and compliant financial s…

D

DERMAGUARD CZ spol. s.r.o.

dermaguard.com

56

DermaGuard CZ spol. s.r.o. operates a website offering skin protection creams designed for family and workplace use, positioning itself as a trusted provider in the healthcare sector. The company emphasizes product effectiveness against various skin irritants and promotes wholesale distribution opportunities. The website is professionally designed using modern web technologies such as UIkit and jQuery, with mobile responsiveness and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies and security headers. WHOIS data is missing, which raises concerns about domain legitimacy, though the website content and contact information appear consistent with a Czech Republic-based business. Overall, the site presents a moderate risk profile with room for improvement in compliance and security transparency.

R

ROBE Lighting

robe.cz

65

ROBE Lighting is a globally recognized manufacturer specializing in moving lights and professional lighting solutions. The company maintains a strong market position with multiple regional subsidiaries and a comprehensive product portfolio, targeting professional event production and venue markets. Their website reflects a mature digital presence with rich multimedia content and clear navigation, supporting their business model effectively. Technically, the site leverages modern frameworks such as Next.js and React, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy and terms policies are not clearly presented. Overall, the site demonstrates professionalism and trustworthiness, though improvements in privacy compliance and incident response transparency are recommended.

F

Family Nudism Photos and Videos

purenudism.cz

51

The website 'Family Nudism Photos and Videos' operating at purenudism.cz is a niche adult content platform focused on nudism and naturism, including family and teen nudism themes. The site uses WordPress CMS with the Customizr theme and Yoast SEO plugin, hosted behind Cloudflare DNS. The technical infrastructure is moderate with basic mobile optimization and SEO practices. However, the security posture is weak, lacking visible security headers, privacy policies, and incident response information. The content is explicit and targeted at adults, but includes references and links to questionable domains and content involving minors, raising significant ethical and legal concerns. Overall, the site lacks transparency and compliance with privacy and security best practices, resulting in a low trustworthiness score.

Č

Český svaz vědeckotechnických společností z.s.

csvts.cz

44

Český svaz vědeckotechnických společností z.s. (ČSVTS) is a well-established Czech non-profit organization representing scientific and technical societies. Founded in 1997, it offers membership services, organizes events, supports students, and provides rental services for conference halls and other spaces. The organization maintains international collaborations and promotes engineering and scientific activities within the Czech Republic. The website is professionally designed using Joomla CMS and modern web technologies, providing good user experience and mobile responsiveness. Contact information and physical address are clearly presented, enhancing business credibility. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is adequate with HTTPS and CSRF protections but could be improved with additional security headers and incident response information. Overall, the website is trustworthy, content-rich, and serves its target audience effectively.

The website spsch.cz represents Střední průmyslová škola chemická Pardubice, a secondary industrial chemical school based in the Czech Republic. The institution focuses on providing technical education in the chemical industry to students in the region. The domain is well-established, having been registered since 2000, and is consistent with the school's identity and location. However, the website itself is minimal, consisting only of a redirect page with no substantive content or user engagement features. From a technical perspective, the site lacks modern web technologies, content, and optimization. There is no evidence of CMS usage, analytics, or security headers, and mobile optimization is poor. The hosting provider is identified as WEDOS, a known Czech hosting service. The absence of privacy, cookie, or terms of service policies indicates a lack of compliance with common data protection regulations such as GDPR. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and no visible incident response or vulnerability disclosure information. The WHOIS data is consistent and trustworthy, indicating a legitimate domain with no suspicious patterns. Overall, the site presents a low risk but also a low level of digital maturity and security readiness. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving website content and user experience, and establishing clear contact and security incident response channels to enhance trust and compliance.

Zahraniční Kasina is a Czech-language affiliate and review website specializing in international online casinos, targeting Czech players interested in gambling abroad. The site provides detailed reviews, bonus information, payment methods, legal considerations, and responsible gaming advice. It operates as an informational platform without direct gambling services, leveraging affiliate marketing links to casino operators. The website is built on WordPress with modern technologies such as Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and SSL encryption, though some security headers and privacy compliance mechanisms like cookie consent are missing. The domain is newly registered in 2024, consistent with the site's content and business model. Overall, the site presents a professional and trustworthy resource for Czech players seeking international casino options.

N

Novartis CZ

novartis.cz

68

Novartis CZ is the Czech Republic branch of Novartis AG, a global pharmaceutical leader operating in over 140 countries with approximately 110,000 employees. The company focuses on innovative medical therapies in cardiology, neurology, ophthalmology, respirology, and oncology. The website reflects a mature digital presence with professional design, localized content, and comprehensive privacy and cookie policies. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Crazy Egg, and TikTok Pixel, with appropriate consent mechanisms in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers should be verified. WHOIS data is incomplete, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand presence and consistent content. Overall, the site is well-positioned to serve its target audiences including patients, healthcare professionals, and researchers.

P

PentaGen s.r.o.

pentagen.cz

56

PentaGen s.r.o. is a specialized Czech company founded in 2006, focused on the supply and distribution of products for laboratory diagnostics and in vitro fertilization (IVF). The company targets laboratories, medical professionals, and IVF clinics primarily in the Czech Republic and Slovakia. Their business model is B2B distribution of specialized medical and genetic diagnostic products, supported by technical services and product expertise. The website reflects a professional and consistent brand image with clear navigation and relevant content for their niche market. Technically, the website employs modern JavaScript frameworks such as Vue.js and uses Google Tag Manager for analytics. It is hosted on Czech hosting infrastructure (Forpsi) and shows good mobile optimization and SEO practices. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and a published security policy are absent. From a security perspective, the site demonstrates good practices including secure forms with captcha and GDPR consent, no exposed sensitive data, and minimal user tracking. The absence of a vulnerability disclosure policy or incident response contact limits transparency in security management. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent with the business claims, indicating a trustworthy domain. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Recommendations include adding security headers, publishing a security policy, and establishing a vulnerability disclosure channel to enhance trust and security posture further.

M

Medplus

medplus.cz

71

Medplus.cz is a Czech Republic-based e-commerce platform specializing in healthcare and dental supplies. The website offers a broad catalog of over 6,390 products catering to both specialists and the general public, supported by expert advice and customer service via dedicated phone lines. The business model focuses on direct online sales with benefits such as free shipping over a certain order value and customer registration advantages. The site is well-positioned in the Czech healthcare supply market with a medium-sized operational scale. Technically, the website employs modern web technologies including Google Tag Manager, Microsoft Clarity, and Persoo personalization tools, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and uses secure HTTPS connections with appropriate security headers. The presence of secure login forms and cookie consent mechanisms reflects attention to privacy and security compliance. From a security perspective, Medplus.cz demonstrates a solid posture with HTTPS enforcement, security headers, and no visible vulnerabilities in the HTML content. However, the absence of a publicly available security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The WHOIS data is unavailable, which limits domain trust assessment, but the professional website presentation and business information mitigate concerns. Overall, Medplus.cz is a trustworthy and professionally managed e-commerce site with good technical and security standards. Strategic recommendations include publishing a formal security policy, implementing a vulnerability disclosure program, and enhancing accessibility features to further strengthen compliance and user trust.

G

GeneTiCA s.r.o.

genetica.cz

59

GeneTiCA s.r.o. is a Czech Republic-based company specializing in supplying modern instruments, reagents, consumables, and specialized diagnostics for biomedical research and diagnostic applications. The company targets biomedical researchers, diagnostic laboratories, and healthcare professionals, offering a broad portfolio including NGS sequencing kits, sequencers, microarrays, automated pipetting and nucleic acid extraction systems, spatial transcriptomics, single-cell analysis, and data analysis tools. The website reflects a medium-sized enterprise with a consistent brand presence and professional content, positioning itself as a niche player in the healthcare technology sector within the Czech market.

E

EWE s.r.o.

donfelder.cz

40

Don Felder is a small Czech-based business operating a diving center, retail shop, and accommodation services primarily focused on the Croatian island of Brač. The website presents basic information about diving courses, equipment rental, lodging, and a diving guide book. The business targets diving enthusiasts and tourists interested in hospitality services in Croatia. The digital presence is minimalistic with basic HTML and CSS, lacking advanced technical frameworks or CMS platforms. There is no evidence of modern analytics or advertising technologies. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, which reduces domain trustworthiness but the website content appears legitimate for a small regional business. Overall, the site provides essential business information but lacks comprehensive security and privacy compliance features.

E

EWE s.r.o.

ewe.cz

45

EWE s.r.o. is a Czech Republic-based small manufacturing and service company specializing in electrotechnical components, cable assemblies, and professional hand assembly including soldering and coating. The company also operates a home work portal, a hospitality pension in Croatia, and a car sales brand (EWE-cars). Their market position is that of a specialist serving diverse industrial sectors internationally. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern frontend libraries and frameworks but lacks visible security headers and privacy policies, which are areas for improvement. Security posture is moderate with no critical vulnerabilities detected but missing some best practices. Overall, the site is safe, business-focused, and trustworthy with clear contact information and social media presence.

T

Ton a.s.

ton.cz

65

Ton a.s. is a well-established furniture manufacturer specializing in designed chairs and tables, with a heritage spanning over 160 years. The company targets a general audience interested in quality handcrafted furniture, positioning itself as a reputable player in the manufacturing sector. The website reflects this with professional design and clear branding, emphasizing craftsmanship and design excellence. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. However, some technical improvements could be made, such as adding security headers to enhance protection. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, indicating good privacy compliance. The extensive use of third-party analytics and marketing tools suggests a moderate to extensive user tracking level, but the presence of consent mechanisms aligns with GDPR requirements. The lack of a visible privacy policy or terms of service page is a minor gap. Overall, the website is professional and trustworthy, with no signs of malicious content or security risks. The domain WHOIS data is privacy protected, which is standard for .eu domains, and does not raise concerns. Strategic recommendations include publishing explicit privacy and security policies, enhancing security headers, and providing more direct contact information to improve transparency and trust.

S

SAB servis s.r.o.

myplann.cz

65

SAB servis s.r.o. operates as a brokerpool providing comprehensive support services for financial advisors and leaders of advisory firms primarily in the Czech Republic. The company emphasizes simplifying the operational life of its clients through education, events, and a suite of tools designed to enhance advisory practices. Their market position is supported by a clear vision and active engagement with their target audience, positioning them as a proactive player in the financial advisory sector. Technically, the website is built on the Solidpixels CMS platform and leverages modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and a professional design, though some accessibility features could be improved. Performance is moderate, with a well-structured navigation system and clear content presentation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, no advanced security headers were detected, and there is no visible security or incident response policy published. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the professional web presence and social media footprint support the company's credibility. Overall, SAB servis presents a trustworthy and professional digital presence with room for improvement in security transparency and domain registration disclosure. Strategic enhancements in security policies and WHOIS transparency would further strengthen their risk posture and trustworthiness.

L

LUX-IDent s.r.o.

lux-ident.com

60

LUX-IDent s.r.o. is a leading RFID transponder manufacturer based in Central Europe, specializing in RFID inlays and transponders across multiple frequency bands. The company operates under the parent company HID Global and serves various industries including animal ID, access control, and logistics. Their website is professionally designed, content-rich, and well-structured, targeting business customers requiring RFID solutions. Technically, the site is built on WordPress with common plugins and uses HTTPS with Google Analytics for tracking. Security posture is generally good with enforced HTTPS and no visible vulnerabilities, though security headers and explicit security policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy assessment. Overall, the website presents a credible business front but would benefit from improved transparency and security practices.

W

Weidmüller Lanškroun s.r.o.

weidmueller-lanskroun.com

42

Weidmüller Lanškroun s.r.o. is a manufacturing subsidiary of the multinational Weidmüller Holding Co&KGaA, specializing in the production of precise spare parts, tools, molds, and providing metal and plastic pressing along with simple automation solutions. The company targets industrial clients requiring high-quality manufacturing services. The website reflects a professional and consistent brand image with clear contact details and partner affiliations, positioning the company as a reliable manufacturing entity within its sector. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Active24 infrastructure. The site is mobile optimized with good navigation and moderate performance. However, no CMS or advanced frameworks were detected, indicating a straightforward static or custom-built site. From a security perspective, the site uses HTTPS (implied by domain status and typical practice), but lacks visible security headers and does not implement DNSSEC. There is no privacy or cookie policy present, which is a compliance gap. No incident response or security policy information is provided. No forms are present on the main page, reducing attack surface but also limiting user interaction. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

S

SANELA spol. s r.o.

sanela.cz

53

SANELA spol. s r.o. is a Czech-based company specializing in sanitary technology products, including stainless steel sanitary equipment, RFID payment systems, and smart sanitary water and energy management solutions. The company targets business and institutional customers requiring advanced sanitary technology solutions. The website reflects a medium-sized manufacturing business with a consistent brand presence and a professional digital footprint. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, integrates Google Tag Manager and Analytics for tracking, and uses a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and includes reCAPTCHA for forms, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility.

O

ORPA Papír a.s.

orpa.cz

59

ORPA Papír a.s. is a well-established Czech manufacturer specializing in paper-based tubular packaging solutions, including Tubusbox and paper tubes, serving food and industrial sectors. With over 140 years of tradition and multiple ISO and industry certifications, the company positions itself as a reliable and quality-focused packaging partner. The website reflects a professional and modern digital presence with rich multimedia content, clear navigation, and multilingual support. Technically, the site uses modern frameworks and tracking technologies with appropriate consent mechanisms, hosted by a reputable Czech provider. Security posture is good with HTTPS and consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the company's history and location, supporting legitimacy.

K

Kozák Svitavy, s.r.o.

kozak-svitavy.cz

52

Kozák Svitavy, s.r.o. operates a wholesale e-commerce platform specializing in candles, home and garden accessories, and related decorative products. The website targets wholesale customers primarily in the Czech Republic, offering a broad product range including seasonal and floristry items. The business model focuses on B2B sales through an online portal, positioning itself as a regional supplier with a clear product focus. The website content is professionally presented in Czech, with clear navigation and relevant business information, including contact details and ethical reporting channels. Technically, the site is built on ASP.NET WebForms with Kentico CMS, utilizing common JavaScript libraries such as jQuery, bxSlider, and fancyBox. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site shows moderate performance and good mobile optimization but lacks some advanced accessibility features. Security measures include HTTPS and CSRF tokens, but there is an absence of security headers and cookie consent mechanisms, indicating room for improvement in security posture and privacy compliance. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. The website provides clear contact information and an ethical whistleblowing email, which are positive trust signals. Overall, the security posture is moderate but could be enhanced by implementing security headers, cookie consent, and publishing a vulnerability disclosure policy. The overall risk assessment suggests the website is functional and legitimate for its business purpose but would benefit from improved transparency in domain registration and enhanced privacy and security practices. Strategic recommendations include verifying domain registration details, implementing GDPR-compliant cookie consent, adding security headers, and establishing a formal security policy to strengthen trust and compliance.

V

VOŠPS a SPgŠ Kroměříž

ped-km.cz

50

VOŠPS a SPgŠ Kroměříž is an educational institution based in the Czech Republic offering secondary and higher vocational education focused on pedagogical professions. The website targets students, parents, and educational professionals seeking meaningful pathways into teaching careers. It provides comprehensive information about study programs, admissions, school events, and additional educational services. The institution maintains a consistent brand presence and clear communication channels including phone, email, and social media. Technically, the website is built on the iCard.cz platform using Bootstrap 3.3.2 and Vue.js 3.2.45, with modern UI components and responsive design. It integrates Google Tag Manager for analytics and employs a robust cookie consent mechanism supporting GDPR compliance with multi-language support. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, no explicit security headers were detected, and there is no visible security policy or incident response information. The WHOIS data for the domain is missing, which reduces domain trustworthiness but the website content and contact details appear legitimate and professional. Overall, the website is well-structured, content-rich, and compliant with privacy regulations, making it a trustworthy source for educational information. The main risk lies in the lack of domain registration transparency and some missing security best practices. Strategic improvements in security headers and domain registration visibility are recommended.

E

EKOME, spol. s.r.o.

ekome.cz

40

EKOME, spol. s.r.o. is a Czech company specializing in environmental emission measurements and ecological consulting, with a focus on stationary pollution sources and workplace risk factors. The company holds multiple accreditations and authorizations from the Ministry of the Environment, indicating a reputable position in its sector. Their website reflects a professional service provider targeting businesses and organizations requiring environmental compliance and consulting services. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and privacy compliance, including GDPR and cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the visible business information and certifications support legitimacy.

A

Avenir Financial Group

avenirgroup.cz

52

Avenir Financial Group is a Czech Republic based financial advisory company with over 20 years of experience among its founders. The company offers a comprehensive range of financial services including insurance, investment, real estate, mortgage advisory, and vehicle financing. Their business model focuses on providing clients with access to a broad portfolio of vetted financial institutions and products, emphasizing fair and quality service. The website reflects a mature digital presence built on Joomla CMS with Bootstrap and jQuery, featuring a cookie consent mechanism and Google Analytics integration with IP anonymization. Contact information and partner affiliations are clearly presented, enhancing business credibility. However, the absence of WHOIS data limits domain trust evaluation. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, user-friendly, and compliant with privacy regulations, targeting clients seeking financial and insurance services in the Czech market.

S

S prací v batůžku – Práce na cestách, projekty, osobní blog.

spracivbatuzku.cz

51

The website spracivbatuzku.cz is a personal blog and freelance portfolio operated by Lucie Janíková, focusing on travel experiences, creative projects such as graphic design, illustration, writing, and online lessons. The site targets travel enthusiasts and clients seeking creative freelance services. The business model is small-scale, project and commission-based, with a niche market position as a personal brand. Technically, the site is built on WordPress using Elementor, hosted by Wedos, and employs standard web technologies including jQuery and Font Awesome. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Contact is available via a contact form, with social media presence on Facebook and Instagram. No WAF or blocking mechanisms are detected, and the domain registration is consistent and appropriate for the business age. Overall, the site is professional and trustworthy but could benefit from enhanced privacy compliance and security hardening.

Č

Česká nefrologická společnost, o.s.

nefrol.cz

48

The Česká nefrologická společnost (Czech Society of Nephrology) is a non-profit professional organization dedicated to nephrology, encompassing medical professionals and researchers focused on kidney diseases. The website serves as an information hub for both professionals and patients, providing news, event calendars, and partner collaborations. The organization holds a reputable position within the Czech healthcare sector, supported by partnerships with recognized international nephrology bodies. Technically, the website employs modern analytics tools such as Google Analytics and Fathom, integrates Google Maps API, and demonstrates good mobile responsiveness and accessibility features. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is generally good with HTTPS enforced, but the absence of security headers and vulnerability disclosures suggests room for improvement. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and partner affiliations support its legitimacy. Overall, the site is well-maintained and trustworthy but should enhance privacy compliance and security transparency.

The mevatec.net domain hosts a minimal placeholder website generated by Web4u s.r.o., a Czech web hosting and site editor service provider. The site content is limited to basic introductory text and links to Web4u's client and support pages, with no specific business information about mevatec.net itself. The domain is registered since 2011 and is active but not developed into a full business website. Technically, the website uses simple HTML and CSS without any advanced frameworks or CMS beyond the Web4u proprietary editor. There is no evidence of modern web technologies, analytics, or tracking. Performance and mobile optimization are basic, and SEO is minimal due to lack of metadata and content. From a security perspective, the site lacks HTTPS information in the provided data, has no security headers, and no privacy or cookie policies. There are no forms or data collection points, which reduces risk but also indicates low maturity. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, mevatec.net is a low-activity domain with a placeholder site, minimal content, and limited security or compliance measures. It poses low risk but also low trust and business credibility. Strategic improvements should focus on enabling HTTPS, adding privacy and cookie policies, and developing meaningful content and contact information.

P

Pevně Spolu

pevnespolu.cz

45

Pevně Spolu is a Czech-based corporate group website associated with RADKA Group, focusing on recruitment and corporate services primarily in real estate and energy sectors. The site targets job seekers and partners, offering open positions and a CV submission form. The business model revolves around employment and corporate group services, positioning itself as a medium-sized regional player with several subsidiaries under the RADKA brand. Technically, the website is built on WordPress CMS, utilizing Gravity Forms for data collection and CookieHub for cookie consent management. It employs modern web technologies including jQuery and Google Fonts, and integrates Plausible Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness despite the professional presentation and corporate affiliations. Overall, Pevně Spolu presents a professional and compliant web presence with room for improvement in transparency and security documentation. Strategic enhancements in security headers, incident response visibility, and WHOIS data transparency would strengthen its risk posture and trustworthiness.

R

RADKA Pardubice a.s.

radka-group.eu

41

RADKA Group is a medium-sized holding company based in Czechia with over 30 years of tradition. It operates multiple subsidiaries across Europe specializing in chemical production and distribution, industrial real estate rental and management, specialized industrial technology development, and water treatment solutions. The company targets B2B clients in the chemical and industrial sectors, leveraging a family-owned business model with strong local and international presence. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the website uses modern web technologies including jQuery and Google Fonts, with integration of Plausible Analytics for user tracking. The site is mobile optimized and loads with moderate performance. However, it lacks advanced security headers and comprehensive privacy or cookie policies, which limits its privacy compliance maturity. No CMS or hosting provider details are evident, and no forms or direct contact information are provided on the main site. From a security perspective, the site uses HTTPS and defers analytics scripts, but lacks visible security headers and incident response information. The WHOIS data is fully privacy protected under EURid, which is common for European businesses but limits transparency. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is moderate but could be improved with better policy disclosures and security headers. The overall risk is moderate with no blocking or WAF detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing contact and incident response information, and improving accessibility and compliance features to enhance trust and security culture.

M

Mirek Beneš

mirekbenes.cz

43

Mirek Beneš operates as a freelance frontend developer based in the Czech Republic, offering specialized services in HTML template coding, JavaScript programming, WordPress development, graphic design, and email newsletter coding. The website serves as a professional portfolio showcasing client references and detailed service offerings, targeting businesses and clients across the Czech Republic seeking quality frontend development and web design solutions. The business model is focused on external collaboration and contract work, with a clear emphasis on usability and modern web standards. Technically, the website is well-constructed using modern web technologies including HTML5, CSS3, SVG graphics, and JavaScript libraries such as Swiper.js for carousels. The site is mobile-optimized, fast-loading, and SEO-friendly, with minimal but privacy-conscious analytics implemented via Plausible Analytics. However, there is no detected CMS or hosting provider information, and no advanced frameworks are identified. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture and transparency. Overall, the website presents a professional and trustworthy image for a small freelance business but would benefit from improved privacy compliance and security best practices. The absence of WHOIS data reduces domain trustworthiness slightly, but the content quality and business transparency mitigate this concern. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to strengthen compliance and security.

PRECHEZA a.s. is a well-established large European manufacturer specializing in titanium dioxide and related chemical products. The company operates primarily in the manufacturing sector, serving industrial and commercial clients with a diverse product portfolio including pigments, ferrous sulfate, calcium sulfate, and sulfuric acid. It is part of the AGROFERT holding group, which enhances its market position and credibility. The website reflects a professional business presence with clear product offerings and legal disclosures. Technically, the website employs modern web technologies such as Google Tag Manager, Bootstrap, and slick carousel, and is built on the Kentico CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is addressed through a cookie consent mechanism and a dedicated privacy policy page. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not significantly detract from the overall trustworthiness given the professional presentation and business information. Overall, PRECHEZA a.s. demonstrates a solid digital presence with good security hygiene and compliance practices. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and security posture.

R

RADKA spol. s r.o.

radka.cz

45

RADKA spol. s r.o. is a Czech-based chemical distribution company with over 30 years of history, specializing in high-quality chemical products including plastics, elastomers, coatings, adhesives, and water treatment chemicals. As a member of the RADKA Group, it holds a solid market position in the manufacturing and chemical distribution sectors, targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 9001 and ISO 14001, enhancing trustworthiness. Technically, the website is built on WordPress 6.8.3 with modern performance optimizations including WP Rocket and Rank Math SEO. It uses Google Fonts and integrates Plausible Analytics for privacy-conscious tracking. The site is mobile-optimized and loads quickly, with good SEO practices and basic accessibility features. However, explicit privacy and cookie policies are not found, which is a gap in compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. No major vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly present, and there is no visible vulnerability disclosure or security.txt file, which could improve the security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, RADKA.cz presents a trustworthy and professional online presence with strong business credibility and technical implementation. To further enhance security and compliance, the company should publish clear privacy and cookie policies, implement security headers, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory compliance.

C

Czech chemical society

csch.cz

37

The Czech chemical society is a well-established professional organization serving the chemical science community in the Czech Republic and Europe. It provides membership services, organizes conferences, publishes journals, and supports young chemists. The website reflects a medium-sized non-profit entity with a consistent brand and professional content. Technically, the site is built on WordPress with common plugins and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy and cookie policies, indicating compliance gaps. Overall, the domain's age and WHOIS data support legitimacy and trustworthiness.

V

VVKL

vvkl.cz

55

VVKL is a specialized conference focused on the development, manufacturing, and quality control of pharmaceutical products, targeting professionals in the healthcare and pharmaceutical industries. The website is built on the Wix platform, leveraging standard Wix technologies and Google Analytics for visitor tracking. The site presents professional content relevant to its niche audience but lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and trust. Security posture is adequate with HTTPS enabled, but could be improved with additional security headers and transparency about data protection. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the site content and technical setup suggest a legitimate small-scale event organizer. Strategic improvements in privacy compliance and contact transparency would enhance trust and security.

The website www.isn.cz is a small-scale, niche project site operated by Jiří Blažek, focusing on two main projects: an electronic timing system for fire sport and an e-learning platform for volunteer firefighters in the Czech Republic. The business model appears to be community and project-driven, targeting volunteer fire brigades and fire sport enthusiasts with affordable and modular technical solutions and accessible online education. The site content is well-structured, informative, and uses modern web technologies such as Bootstrap and jQuery, with backend technologies including Java EE and Spring frameworks for the e-learning platform. However, the site lacks visible privacy, cookie, or terms of service policies and does not provide explicit contact information, which limits its compliance and business credibility. Security posture is moderate, with some use of Spring Security but no visible HTTPS or security headers information. WHOIS data is unavailable, likely due to privacy protection, which reduces trust verification. Overall, the site is functional and relevant for its audience but would benefit from improved security, compliance, and contact transparency.

J

Jan Gregor

jgregor.cz

52

Jan Gregor is a certified Webflow Premium Partner specializing in custom Webflow web development solutions primarily targeting businesses and agencies seeking high-quality, scalable, and SEO-optimized websites. The company has established a strong market position in the Czech Republic with a portfolio of notable clients and projects, emphasizing technical SEO, localization, and lead automation. The website demonstrates a modern technical infrastructure leveraging Webflow CMS, GSAP animations, and secure AJAX form submissions, reflecting a mature digital presence. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

Ř

Řešení pro audio / videokonference

headsety.cz

45

The website www.headsety.cz is an e-commerce platform specializing in professional audio and videoconferencing equipment, primarily targeting call centers, offices, and industrial users in the Czech Republic. The site offers a range of products including headsets, videoconferencing devices, and hands-free communication tools. The business presents itself professionally with clear product offerings, pricing, and customer support channels. The website is built on the OpenCart CMS platform and employs modern web technologies such as jQuery, Bootstrap, and Google Analytics for tracking and marketing purposes. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. However, the absence of WHOIS registrant data and lack of explicit security policies or incident response information slightly reduce the overall trustworthiness. The site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and a vulnerability disclosure page. Overall, the website is functional, secure at a basic level, and professionally maintained, suitable for its niche market.

MAXX Creative s.r.o. is a well-established creative agency based in the Czech Republic, specializing in marketing strategy, creative design, and campaign execution. Founded in 1998, the company has built a solid reputation with approximately 150 clients and multiple industry awards, positioning itself as a trusted partner for businesses seeking comprehensive creative services. The website reflects a professional and consistent brand image, targeting business clients in need of marketing and advertising solutions. Technically, the site employs modern frontend technologies including jQuery, Foundation, and Google Tag Manager, hosted on Tele3 infrastructure. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and published privacy or terms of service policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the site is trustworthy and professionally maintained, with a moderate to good security posture and compliance level.

E

ETCC 2026 | European Technical Coatings Congress

etcc2026-prague.org

62

The website www.etcc2026-prague.org represents the European Technical Coatings Congress scheduled for Prague in 2026. It serves as an informational platform for an industry event focused on coatings research, formulations, production, applications, and testing. The site is built on the Wix platform, leveraging Wix's standard technologies and hosting infrastructure. The content is professionally presented with a clear focus on the coatings industry and event attendees, but lacks detailed business or organizational information. Technically, the site is moderately optimized with good mobile responsiveness and basic SEO, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data and registrant information reduces the ability to fully verify domain legitimacy. Overall, the security posture is weak due to missing security headers and privacy policies, and no contact or incident response information is provided. The site is accessible without WAF or blocking mechanisms, and contains no adult or questionable content.

C

CHEMAGAZÍN s.r.o.

laborexpo.cz

44

LABOREXPO is a well-established event organizer specializing in trade fairs and exhibitions for laboratory and process analysis equipment in the Czech Republic. The company, CHEMAGAZÍN s.r.o., founded in 2005, holds a strong market position with a focus on showcasing innovations and technologies relevant to laboratory professionals and industry stakeholders. The website provides comprehensive event information, partner details, and visitor guidance primarily in Czech with an English option, reflecting a regional focus with international accessibility. Technically, the site employs modern JavaScript libraries and frameworks such as jQuery, Foundation, and Slick Carousel, ensuring a responsive and interactive user experience. The presence of Google Analytics and retargeting scripts indicates moderate user tracking aligned with common marketing practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published security policies, suggesting room for improvement in security posture and transparency. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, the website is professional, content-rich, and trustworthy, with moderate technical and security maturity.

R

REGARTIS

prague-chemicals-management-cruise.com

56

The website prague-chemicals-management-cruise.com serves as a professional landing page for the Prague Chemicals Management Cruise 2026, an event organized by REGARTIS and the Association of Chemical Industry of The Czech Republic. It targets chemical industry professionals and regulatory experts, focusing on global chemical regulations including REACH and sustainability strategies. The site provides detailed event information, pricing, and registration options, positioning itself as a niche conference organizer in the manufacturing sector. Technically, the site is built on the LeadPages platform, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Google Ads. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by adding security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

Č

Česká platforma antibiotické rezistence, z.s.

czepar.cz

51

Česká platforma antibiotické rezistence, z.s. is a Czech non-profit organization dedicated to combating antibiotic resistance by uniting experts from human and veterinary medicine, environmental sciences, and government sectors. The organization operates primarily through membership engagement, organizing conferences, and disseminating information to raise awareness and coordinate efforts against antibiotic resistance. The website serves as an informational and membership platform, reflecting a focused mission within the healthcare sector in the Czech Republic. Technically, the website is built on WordPress hosted on WordPress.com, utilizing modern Gutenberg blocks and Jetpack features. The site is mobile-optimized, accessible, and performs moderately well, with a professional design and clear navigation. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and formal policies are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security documentation.

C

CHEMAGAZÍN s.r.o.

pigmentyapojiva.cz

43

The website pigmentyapojiva.cz represents a professional international conference focused on pigments and binders in the coatings industry. It serves as a platform for manufacturers, researchers, academia, and suppliers to collaborate and share knowledge. The event is organized by CHEMAGAZÍN s.r.o. in cooperation with academic and industry partners, positioning itself as a niche but reputable conference within the manufacturing sector in the Czech Republic. The site content is primarily in Czech with an English option, targeting industry professionals and researchers. Technically, the website employs a modern JavaScript stack including jQuery, Foundation framework, and various UI libraries such as SweetAlert2 and Slick Carousel. Google Analytics and Tag Manager are used for visitor tracking. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. No CMS or hosting provider details were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS (implied by domain and scripts loaded from HTTPS sources), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy compliance efforts, but no privacy policy or terms of service are published. Contact information is limited to a phone number, with no email or incident response contacts. No forms or data collection beyond analytics scripts were found. Overall, the website is legitimate and trustworthy with a solid business foundation but could improve its security posture and privacy compliance by publishing relevant policies, enhancing security headers, and providing clearer contact channels for security incidents.

R

REGARTIS s.r.o.

regartis.com

44

REGARTIS s.r.o. is a specialized consulting company focused on providing compliance and advisory services primarily for the chemical industry. Their expertise includes navigating complex regulatory frameworks such as REACH, CLP, UK REACH, BPR, and RoHS, targeting businesses that require adherence to national and European legislation. The company maintains a professional online presence with multilingual support and offers educational resources like webinars and training courses, positioning itself as a niche expert in the Czech Republic and broader EU market. Technically, the website employs a modern technology stack including jQuery, Select2, PhotoSwipe, Google Analytics, and Drift chat for customer engagement. The site is built on a custom CMS platform, optimized for mobile devices, and includes GDPR-compliant consent mechanisms. While performance is moderate, the site demonstrates good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site uses HTTPS and implements GDPR consent banners, indicating a baseline of privacy compliance. However, the absence of WHOIS registration data for the domain www.regartis.com raises concerns about domain legitimacy and registration status, which impacts overall trust. No critical vulnerabilities or exposed sensitive data were detected, but security headers should be enhanced to improve protection. Overall, REGARTIS s.r.o. presents a credible and professional business front with solid technical implementation and privacy compliance. The primary risk lies in the unclear domain registration status, which should be addressed to strengthen trust and legitimacy. Strategic recommendations include verifying domain registration, enhancing security headers, and maintaining regular audits of third-party scripts and privacy policies.

Pragolab s.r.o. is a well-established Czech company specializing in the supply and servicing of laboratory instruments and equipment, primarily serving analytical chemistry and physical measurement sectors. Founded in 1998, it holds a strong market position as one of the leaders in laboratory equipment within the Czech Republic. The company targets scientific institutions and laboratories, offering a range of products and services including sales, maintenance, and application support. The website reflects a professional and consistent brand image with clear business focus and relevant content.

The website mladýCHEMIK.cz is an educational platform dedicated to organizing and promoting a chemistry competition for young students in the Czech Republic. It is managed by the Střední průmyslová škola chemická Pardubice and supported by regional government and chemical industry partners. The site provides competition information, results, and educational materials targeting 8th and 9th grade students. Technically, the site is built on WordPress with a responsive theme and uses standard plugins for enhanced user experience. The site is secured with HTTPS and shows no signs of malicious content or vulnerabilities, though it lacks advanced security headers and formal privacy or cookie policies. Business credibility is strong due to clear institutional backing and partner endorsements, but contact information is limited in the visible content. Overall, the site is professional, trustworthy, and serves its educational purpose effectively.

The website www.kardio-cz.cz serves as the official online platform for the Czech Cardiology Society (Česká kardiologická společnost). It provides comprehensive resources including news, upcoming professional cardiology events, educational materials, and patient information. The society positions itself as a leading professional healthcare organization in the Czech Republic, targeting cardiologists, healthcare professionals, and patients interested in cardiovascular health. The business model is non-profit, focusing on education, professional development, and dissemination of cardiology knowledge. Technically, the website employs a legacy jQuery version alongside Bootstrap-like styling and integrates Google Analytics with a cookie consent mechanism that respects user privacy by default. The site is mobile responsive and offers a good user experience with clear navigation and professional design. However, some technical improvements are recommended, including updating JavaScript libraries and enhancing security headers. From a security perspective, the site uses HTTPS and implements cookie consent with granular user controls, indicating a good privacy posture. However, no explicit security headers were detected, and WHOIS data is unavailable, which slightly reduces trustworthiness. There is no evidence of vulnerabilities or exposed sensitive data. The site complies with GDPR, providing a comprehensive privacy policy and terms of service. Overall, the website is a trustworthy, professional resource for cardiology professionals and patients, with moderate technical maturity and a solid privacy framework. The lack of WHOIS data and missing security headers are areas for improvement to enhance trust and security posture.

G

GALÉN - SYMPOSION s.r.o.

gsymposion.cz

46

Galén Symposion is a Czech Republic-based company specializing in organizing medical conferences, congresses, symposia, and professional seminars since 2000. Their website reflects a focused business model targeting healthcare professionals and institutions, offering event management and VIP services. The site is professionally designed with consistent branding and clear navigation, supporting their market position as an established event organizer in the healthcare sector. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.3 and jQuery UI, alongside modern tools like AOS for animations and Google Fonts for typography. Google Analytics and Adsense are integrated for analytics and advertising purposes. While HTTPS is enabled, the absence of security headers and the use of outdated libraries present moderate security risks. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found, indicating partial privacy compliance. WHOIS data is missing, which reduces domain trustworthiness, though the website content and branding suggest a legitimate business. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but has room for improvement in security posture and privacy compliance.

S

Signify

signify.cz

64

Signify is a Czech Republic-based event management company specializing in organizing congresses, seminars, conferences, and training events. Their services cover full event organization from invitations to final cleanup, including location selection, catering, sponsorship management, merchandising, and accommodation arrangements. The company targets professional and scientific audiences, particularly in the healthcare and academic sectors, as evidenced by testimonials from medical professionals. Technically, the website is built on WordPress with common plugins such as Slider Revolution and uses Google Analytics for tracking. The site is well-designed, mobile-optimized, and provides a good user experience, though it lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, limiting domain trust assessment. Overall, the website is professional and trustworthy but could improve transparency and security practices.

I

Institute of Organic Chemistry and Biochemistry of the CAS

uochb.cz

61

The Institute of Organic Chemistry and Biochemistry of the CAS is a prominent Czech academic research institution specializing in organic chemistry and biochemistry. It operates under the Czech Academy of Sciences and offers extensive research programs, including PhD and postdoctoral opportunities, as well as technology transfer initiatives. The website reflects a well-established organization with a strong academic and scientific focus, targeting researchers, students, and industry collaborators. Technically, the website employs modern web technologies such as Vue.js and integrates multiple third-party services including Google Analytics, Facebook SDK, and Twitter widgets. The site is mobile-optimized, accessible, and features a comprehensive cookie consent mechanism, demonstrating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and anonymizes user data in analytics. However, it lacks explicit published security policies, incident response plans, and vulnerability disclosure information. The absence of WHOIS data limits domain trust verification, though the website content and branding are professional and consistent with a legitimate academic entity. Overall, the website presents a low-risk profile with strong content quality and privacy compliance, but would benefit from enhanced transparency in security policies and domain registration details.

F

FETMED

fetmed.cz

47

FETMED is a specialized healthcare provider in the Czech Republic focusing on fetal medicine, genetics, and gynecology. The company operates two physical centers in Olomouc and Ostrava, offering comprehensive prenatal diagnostics, genetic consultations, psychological counseling, and pediatric cardiology. Their market position is that of a trusted regional specialist with experienced medical professionals and advanced diagnostic technologies. The website is professionally designed, mobile-optimized, and provides clear service information and contact channels. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA, ensuring a functional and user-friendly experience. Performance is moderate with good mobile responsiveness and basic accessibility features. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages are present, which impacts compliance and trust. Security posture is generally good with HTTPS enforced and use of CAPTCHA for forms, but the absence of security headers and WHOIS transparency reduces the overall security confidence. No vulnerabilities or exposed sensitive data were detected. Cookie consent is implemented properly, supporting GDPR compliance to some extent. Overall, the website is a credible and professional healthcare service platform with room for improvement in privacy disclosures and security hardening. The lack of WHOIS data is a concern but may be due to local registry policies. Strategic recommendations include publishing privacy and terms policies, adding security headers, and maintaining updated libraries to enhance security and compliance.