Manufacturing security reports

P

PANKREA s.r.o.

contpro.eu

52

CONT Proficontainers, operated by PANKREA s.r.o., is a Czech-based company specializing in manufacturing, renting, and selling modular containers and units for business use. Their offerings include residential, sanitary, storage, and technological containers, serving both individual entrepreneurs and large corporations. The website demonstrates a solid market position with references to notable clients such as Škoda and ArcelorMittal. The business model focuses on providing tailored container solutions, including self-storage services, with a clear emphasis on meeting diverse customer needs. Technically, the website employs a moderate technology stack including jQuery, NivoSlider, Google Tag Manager, and Google Analytics, hosted on the Estofan CMS platform. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although explicit privacy and security policies are limited. From a security perspective, the site uses HTTPS and standard Google tracking tools but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to EURid privacy policies, but the domain usage aligns with the business claims. Overall, the security posture is moderate with room for improvement in headers, policy transparency, and mobile optimization. The overall risk assessment indicates a legitimate, small business website with moderate technical and security maturity. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, improving mobile responsiveness, and conducting regular security audits to strengthen trust and compliance.

C

CNC-INAXES s.r.o.

cnc-inaxes.cz

51

CNC-INAXES s.r.o. is a Czech Republic based company specializing in the sale and servicing of CNC machining equipment since 2006. The company offers a range of CNC machinery including vertical and horizontal machining centers, lathes, and special machines under its own INAXES brand and represents selected manufacturers in the Czech and Slovak markets. Their target audience includes industrial manufacturers and businesses requiring CNC machining solutions. Technically, the website is built on the Estofan CMS platform, uses modern JavaScript libraries like jQuery and Nivo Slider, and integrates Google Tag Manager and analytics services. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms but could be improved by adding security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business model and market position.

M

METAL TRADE COMAX – Division COMAX Dach

comaxdach.de

57

COMAX Dach, a division of METAL TRADE COMAX, is a leading manufacturer specializing in metal roofing solutions primarily serving the German and Czech markets. The company offers a range of premium metal roofing products and related services, including custom painting and logistics. Their market position is strong, supported by decades of experience since 1973 and membership in the European Coil Coating Association (ECCA). The website reflects a professional and well-structured digital presence built on Drupal 10, with modern marketing and analytics integrations such as Google Tag Manager and CookieHub for GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and targets B2B customers in the construction and roofing sectors.

M

METAL TRADE COMAX – DIVISION COMAX ROOFS

comaxroofs.co.uk

67

COMAX ROOFS is a leading Czech manufacturer specializing in coated aluminium and metal roofing products, operating under the parent company METAL TRADE COMAX. The company offers a range of premium roofing products and services including custom painting and packaging, targeting roofing professionals and merchants primarily in the UK and Europe. The website demonstrates a mature digital presence with a modern Drupal 10 CMS, responsive design, and integrated privacy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data due to domain registration errors introduces some risk in domain legitimacy assessment, but the professional content and trust indicators mitigate this concern. Overall, the website is well-structured, trustworthy, and business-focused, supporting COMAX ROOFS' market position as a reputable manufacturer.

M

METAL TRADE COMAX, a.s.

mtcomax.cz

70

METAL TRADE COMAX, a.s. is a well-established Czech manufacturing company specializing in steel and aluminum sheet processing since 1973. They hold a leading position in the Czech Republic as the sole manufacturer and exporter of continuously coated steel and aluminum sheets, serving key industrial sectors such as construction, automotive, and machinery. Their product portfolio includes coated sheets, slitting and cutting services, profile manufacturing, and roofing materials. The company also engages in real estate development projects. Technically, the website is built on WordPress with modern SEO and multilingual support, featuring cookie consent and analytics tools. Security posture is good with HTTPS and no exposed sensitive data, but lacks advanced security headers and published security policies. The absence of WHOIS data is a concern for domain legitimacy but the website content and business information appear professional and trustworthy. Contact information and social media presence are comprehensive. Overall, the site demonstrates a mature digital presence aligned with business goals.

B

Bühler CZ s.r.o.

buhlercz.cz

54

Bühler CZ s.r.o. is a medium-sized manufacturing company based in Žamberk, Czech Republic, specializing in machinery for food processing and related industrial components. Since 2012, it has been part of the Bühler AG global group, which strengthens its market position and provides access to international markets. The company also emphasizes technical education and workforce development through partnerships with local schools. The website reflects a professional business presence with clear contact information and a focus on manufacturing and education sectors. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Tag Manager, and is built on the Estofan CMS platform. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks some advanced security headers and explicit security or incident response policies. WHOIS data is missing, which reduces transparency and trust slightly, but the overall business credibility remains high due to consistent branding and social media presence. Recommendations include improving security headers, adding explicit privacy and security policies, and enhancing incident response information to strengthen trust and compliance.

H

HPI-CZ spol. s r.o.

hpishop.sk

60

HPIshop.sk is an established e-commerce platform specializing in the distribution and sale of building accessories, particularly roofing materials, insulation systems, and related construction products. The company operates primarily in Slovakia and the Czech Republic, leveraging its parent company HPI-CZ spol. s r.o., which has been active since 1995. The website presents a professional and comprehensive catalog of products targeting construction professionals and retail customers. Technically, the site is built on the PrestaShop platform, utilizing modern web technologies including jQuery UI and Google Tag Manager for analytics and marketing. Security measures include HTTPS enforcement, cookie consent with GDPR compliance, and Google reCAPTCHA integration for form protection. However, security headers could be enhanced for improved protection. Overall, the site is well-maintained, trustworthy, and compliant with relevant privacy regulations.

K

Klober

klober.co.uk

61

Klober is a well-established UK-based manufacturer and supplier specializing in roofing ventilation products and roofing materials. As part of the BMI Group, Klober holds a leading market position in the roofing manufacturing sector, offering a comprehensive range of products including membranes, ventilation solutions, dry verge systems, and lead flashing alternatives. Their website targets installers, distributors, and roofing professionals, providing extensive product information, technical support, and training resources. The site is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper, and Bootstrap, ensuring a responsive and user-friendly experience across devices. The use of Google Tag Manager and reCAPTCHA indicates attention to marketing and security. While no explicit CMS is detected, the site demonstrates good SEO and accessibility practices. Performance is moderate, with opportunities for optimization. From a security perspective, the site enforces HTTPS and includes CSRF tokens, with a robust cookie consent mechanism supporting GDPR compliance. However, security headers are not explicitly detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms a long-standing domain registration consistent with the business claims, enhancing trustworthiness. Overall, Klober's website presents a secure, professional, and compliant platform supporting its business operations effectively. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and publishing explicit security and incident response policies to further strengthen trust and compliance.

K

Klöber GmbH

kloeber.de

59

Klöber GmbH is a well-established German manufacturer specializing in innovative roofing accessories for pitched and flat roofs, serving primarily B2B customers such as roofing professionals, architects, and distributors. The company boasts over 60 years of experience and holds recognized certifications like ISO 9001 and ISO 14001, reinforcing its market position as a leading specialist in Europe. The website reflects a mature digital presence with comprehensive product information, configurators, and resource centers, supporting customer engagement and technical support. Technically, the website employs modern web technologies including Bootstrap, jQuery, Swiper, and Google reCAPTCHA, ensuring responsive design and security against spam. The site is well-optimized for mobile devices and SEO, with clear navigation and professional design. Security practices include HTTPS enforcement and CSRF tokens, although some HTTP security headers could be improved. Privacy compliance is robust, featuring detailed cookie consent mechanisms and a comprehensive privacy policy. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response contact is noted. The domain WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the website is trustworthy, professional, and secure, with minor areas for enhancement in security headers and incident response transparency. Strategically, Klöber should focus on publishing a formal security policy and incident response contacts, enhancing HTTP security headers, and maintaining their strong privacy compliance to further build customer trust and meet evolving regulatory requirements.

E

espray

espray.gr

41

Espray.gr is a Greek-based company specializing in the sale and support of industrial spraying and coating machinery, including airless spray machines, polyurea systems, insulation, and laser cleaning equipment. The company positions itself as a leading provider in Greece with exclusive representation of several international brands and a strong focus on technical support, training, and service. The website is built on the PrestaShop platform, featuring a professional design with good navigation and mobile optimization. Structured data and Open Graph tags are properly implemented to enhance SEO and social media presence. Security posture is solid with HTTPS and security headers in place, though privacy compliance could be improved by adding explicit cookie consent and GDPR statements. No blocking or WAF challenges were detected, allowing full content access and analysis.

G

GRASPO CZ, a.s.

graspo.com

43

GRASPO CZ, a.s. is a well-established European printing company specializing in high-quality full-color printing and comprehensive bookbinding services. The company emphasizes its long tradition and expertise, serving clients from the Czech Republic to international markets. Their offerings include digital, offset, and rotary printing, along with custom diary and planner production and branding services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, along with Google Tag Manager and Analytics for tracking. It integrates reCAPTCHA for bot protection and uses a cookie consent mechanism, indicating awareness of privacy regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, HTTPS is enabled, and reCAPTCHA is implemented, but there is a lack of security headers and no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the website content and business information appear legitimate and professional. Overall, the website presents a solid business presence with moderate technical maturity and a good security posture, though improvements in transparency and security best practices are recommended to enhance trust and compliance.

W

Weber

weberpas-mixer.cz

41

The website 'Weberpas mixer' is a newly launched digital platform associated with the Weber brand, specializing in construction materials such as facades, plasters, coatings, insulation, flooring, and waterproofing. It serves primarily construction professionals and consumers in the Czech Republic, offering product-related tools and links to related Weber services. The site is part of the Saint-Gobain group, indicating a strong market position in the manufacturing sector. Technically, the site is built on Angular 10.1.6, with a modern frontend but limited backend or CMS indications. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced analytics or tracking.

S

STIHL Vertriebszentrale AG & Co. KG

stihl.com

79

STIHL Vertriebszentrale AG & Co. KG operates a professional and comprehensive website serving as the international portal for their power garden tools business. The company is a global leader in manufacturing battery-driven and motorized garden tools such as chainsaws and brush cutters. Their website reflects a mature digital presence with clear branding, extensive product information, and multiple social media channels. Technically, the site leverages modern web technologies including Adobe Experience Manager, Google Tag Manager, and various analytics tools, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and consent-based cookie management, although explicit security headers could be improved. The WHOIS data is unavailable or privacy protected, which is unusual but likely intentional for a brand of this size. Overall, the website is trustworthy, professional, and well-optimized for its audience.

M

METAL TRADE COMAX – DIVIZE STŘECHY COMAX

strechycomax.cz

63

Střechy COMAX is a leading Czech manufacturer specializing in metal roofing products, operating under the parent company METAL TRADE COMAX. The company emphasizes quality, reliability, and customer satisfaction, offering a broad range of metal roofing solutions with a strong focus on innovation and sustainability, including integrated photovoltaic roofing systems. Their market position is solidified by decades of experience since 1973 and membership in key industry associations. Technically, the website is built on Drupal 10, employs modern web technologies, and includes standard marketing and analytics tools such as Google Tag Manager and CookieHub for privacy compliance. Security posture is good with HTTPS, security headers, and cookie consent mechanisms, though the site lacks a publicly available security policy or incident response information. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data limits domain registration transparency.

S

SopremaGroup.cz

sopremagroup.cz

38

SopremaGroup.cz is a Czech-based company specializing in waterproofing and insulation products, serving primarily construction professionals and contractors. Their website offers a comprehensive catalog of products including asphalt sheets, PVC and TPO foils, thermal and sound insulation materials, and related accessories. The company positions itself as an expert in the field, providing technical documentation and customer support to its clients. The website is built on WordPress with WooCommerce, indicating a modern e-commerce infrastructure tailored for B2B sales. Technically, the website employs a standard WordPress stack with popular plugins and themes, including WooCommerce for product management and sales. It uses jQuery, Google Fonts, and Google Maps API for enhanced user experience. The site is mobile-optimized and has good SEO practices, though some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and includes some security-related scripts like reCAPTCHA, although the reCAPTCHA site key is not configured, which may reduce effectiveness. No explicit security headers were detected in the provided data, and no sensitive data exposure was found. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. WHOIS data is unavailable, limiting domain trust assessment, but the website content and social media presence suggest a legitimate business. Overall, SopremaGroup.cz presents a professional and functional online presence with moderate technical maturity and some compliance gaps. Strategic improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

R

ROOFIX®

roofix.cz

58

ROOFIX® is a Czech company specializing in manufacturing and supplying fall protection systems for roofs and ladders, with over 20 years of industry experience and a strong market presence in the Czech Republic. Their business model includes design, production, installation, training, and wholesale partnerships, targeting businesses and individuals requiring safety equipment for working at heights. The website is professionally designed, mobile-optimized, and provides comprehensive information about products, services, and certifications, reinforcing their credibility. Technically, the site uses modern web technologies including Google Tag Manager, analytics tools, and cookie consent mechanisms, hosted likely by a Czech hosting provider. Security posture is good with HTTPS enforced and secure forms, though some security headers and explicit incident response policies are missing. Privacy compliance is strong with clear GDPR policies and cookie consent. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the positive business signals. Overall, the site is trustworthy, professional, and well-maintained.

puren gmbh is a German manufacturing company specializing in high-performance polyurethane rigid foam insulation products. Their website showcases a broad product portfolio targeting architects, planners, trade professionals, industry OEMs, private builders, and the housing sector. The company emphasizes sustainability and energy efficiency in construction. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and includes GDPR-compliant privacy and cookie consent mechanisms. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and secure session management, though the absence of security headers and a public security policy are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency, but the website's comprehensive contact information and social media presence support its legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers and publish incident response information.

P

PREFA International

prefa.com

54

PREFA International is a well-established manufacturer specializing in high-quality aluminium products for roofing, facades, and flood protection, offering a 40-year material and color guarantee. The company targets construction professionals and building owners across multiple European countries, as evidenced by their extensive network of localized websites. The business model focuses on manufacturing and distributing durable aluminium building materials, positioning PREFA as a trusted international brand in the construction sector. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript and CSS technologies. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. The absence of visible analytics or tracking scripts suggests a minimal user tracking approach. However, the lack of cookie consent mechanisms indicates room for improvement in privacy compliance. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. Nonetheless, the absence of security headers such as Content-Security-Policy and X-Frame-Options reduces the overall security posture. The WHOIS data is notably missing or inaccessible, which raises some concerns about domain registration legitimacy, although the professional and consistent website presence mitigates these concerns to some extent. Overall, PREFA International's website is professional and trustworthy, with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security headers, along with clarifying domain registration details, would enhance the site's security and trustworthiness further.

H

Huntsman Building Solutions

huntsmanbuildingsolutions.com

65

Huntsman Building Solutions operates as a global manufacturer and distributor of building materials and solutions, targeting construction professionals and businesses worldwide. The website serves as a multilingual portal directing users to localized country-specific sites, indicating a broad international market presence. The business model relies on manufacturing and regional distribution partnerships, supported by localized content and language options to enhance customer engagement. Technically, the website employs modern marketing and analytics technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The website design is professional with consistent branding and clear navigation. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. No privacy policy, terms of service, or contact information are present on the landing page, which impacts privacy compliance and user trust. No forms or direct data collection mechanisms are visible, reducing immediate risk but also limiting user engagement options. Overall, the website is legitimate and professionally maintained with a moderate security posture. Strategic improvements in privacy compliance, security headers, and transparency of contact information would enhance trust and regulatory adherence.

H

HPI

hpi.cz

55

HPI-CZ is a leading Czech company specializing in the distribution and sale of building accessories, particularly for roofing and insulation systems. The company targets B2B customers in the construction sector, offering a wide range of products supported by technical advice and customer support. Their market position is strong within the Czech Republic, supported by a professional online presence including an online catalog and ordering system. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses standard web technologies such as jQuery and Font Awesome. The site is mobile optimized and includes SEO best practices. Security posture is good with HTTPS enforced and a Content-Security-Policy header, though additional headers could improve security further. Privacy compliance is well addressed with clear GDPR and cookie policies and consent mechanisms. The absence of WHOIS data is a concern for domain legitimacy verification, but the overall professional presentation and business information support the company's credibility. Recommendations include enhancing security headers and adding a vulnerability disclosure policy to improve trust and security culture.

F

Fleck GmbH

fleck-dach.de

65

Fleck GmbH operates as a specialized manufacturer and distributor of roofing accessories, serving primarily roofing professionals and trade partners in Germany. The company offers a broad and customizable product range for steep roofs, flat roofs, and solar roofs, supported by various configurators, calculation services, and trade partner resources. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast loading and good accessibility. Security posture is solid with HTTPS and privacy-focused cookie management, though additional security headers and incident response information could enhance protection. The domain registration data aligns with the business profile, showing no suspicious patterns or privacy protection that would undermine trust. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR requirements.

F

Fatra, a.s.

fatra.cz

62

Fatra, a.s. is a significant global player in the plastics manufacturing industry, providing a range of plastic processing services. The website is professionally designed with multilingual support, targeting industrial and commercial clients. The technical infrastructure is based on WordPress CMS with a modern tech stack including Google Analytics, Microsoft Clarity, and various advertising and tracking tools. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of WHOIS data and lack of explicit privacy policy and contact information slightly reduce trust and transparency. Overall, the website presents a credible business presence with room for improvement in compliance and contact transparency.

FAKRO is a well-established international manufacturer and retailer specializing in innovative roof windows, skylights, attic stairs, and related accessories primarily targeting consumers and professionals in the construction and roofing sectors. The website presents a professional and consistent brand image with comprehensive product information and customer support resources. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and CookieYes for consent management, hosted on a CMS named WebKameleon. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks visible security headers and detailed incident response information. WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly from the overall professional presentation. The site complies with GDPR and provides clear privacy and cookie policies. Overall, the website is a reliable digital presence for FAKRO with room for security and transparency enhancements.

B

BIOS s.r.o.

biossro.cz

52

BIOS s.r.o. is a well-established Czech company specializing in the manufacturing and retail of wooden roof structures, including trusses, traditional roof frameworks, and turnkey roofing solutions. With a history dating back to 1970, the company holds a strong market position in Eastern Europe, serving both professional clients and individual customers. Their website reflects a mature digital presence with e-commerce capabilities and a focus on quality and tradition. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers and policies are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy transparency and security documentation.

Saint-Gobain Construction Products CZ a.s., operating under the brand Weber, is a leading manufacturer and supplier of construction materials and systems in the Czech Republic. Their website offers comprehensive information about their products including facades, plasters, insulation, flooring, adhesives, and waterproofing solutions. The company targets professionals such as architects, developers, investors, as well as DIY enthusiasts, providing both products and supporting digital tools like calculators and design applications. The website is professionally designed, well-structured, and consistent with the Saint-Gobain corporate identity. Technically, the website is built on Drupal CMS and employs modern web technologies including Google Tag Manager, OneTrust for cookie consent, and lazy loading for performance optimization. The site is mobile-optimized and accessible, with good SEO practices and structured data implemented. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. The WHOIS data for the domain is incomplete and malformed, lacking registrar and registrant details, which reduces trustworthiness from a domain registration perspective. However, the website content and branding strongly indicate legitimacy as part of the Saint-Gobain group. Contact information is available, including a company phone number and social media channels, but no direct company emails are exposed on the site. Overall, the website presents a trustworthy and professional digital presence for a large manufacturing company, with good privacy compliance and user experience. Recommendations include enhancing security headers, publishing a security policy or incident response contacts, and verifying WHOIS data for improved domain trust.

G

Glass Service, a.s.

gsl.cz

58

Glass Service, a.s. is a Czech Republic-based company specializing in advanced glass manufacturing services and products, including simulations, lab services, audits, smart process control systems, and special furnaces. The company targets industrial clients in the glass manufacturing sector and has a strong market presence supported by over 25 years of industry experience and recognized partnerships. Their website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WP Rocket, and WPML for multilingual capabilities. It integrates Google reCAPTCHA for security and WP Statistics for analytics. The site is mobile-optimized with good SEO practices but could improve accessibility and security headers. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and anti-bot measures in place. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement. The lack of WHOIS data transparency slightly reduces trust but is mitigated by clear business contact information and professional web presence. Overall, the website is trustworthy and well-maintained, serving its business purpose effectively. Strategic improvements in security transparency and WHOIS data availability would enhance credibility and compliance.

C

Chryso

chryso.cz

61

Chryso is a global leader in sustainable construction chemicals and solutions, operating as part of Saint-Gobain Construction Chemicals. The website presents a professional corporate presence with a focus on B2B services in the manufacturing sector, targeting construction industry professionals worldwide. The digital infrastructure is built on WordPress with integration of modern marketing and analytics tools such as HubSpot and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data raises questions about domain registration transparency, which could impact trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

A

Adfors (Saint-Gobain group)

silnydikylidem.cz

65

The website www.silnydikylidem.cz represents Adfors, a manufacturing company specializing in glass production and operating under the Saint-Gobain group. The site emphasizes employee well-being, community involvement, and recruitment, targeting local job seekers and industry professionals. The business is positioned as a reputable regional employer with awards and active community projects. Technically, the website is built on the solidpixels CMS platform, utilizing modern web technologies including Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and a professional design, although accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data for the domain is missing, which limits the ability to fully verify domain legitimacy and registration details. Despite this, the professional presentation and consistent branding suggest a legitimate business presence. Overall, the website scores well in content quality, security posture, and business credibility, with room for improvement in technical implementation and transparency of security policies.

A

ANDREAS STIHL AG & Co. KG

stihl-sso.com

67

The website analyzed is the official STIHL dealer portal login page, designed to provide authorized dealers and partners access to account management and related services. STIHL, a well-established German manufacturer of power tools and equipment, uses this portal to facilitate secure Single Sign-On (SSO) authentication for its dealer network. The site is professionally branded, consistent with the corporate identity, and targets a B2B audience. The portal includes essential features such as login, password reset, and registration completion links, with clear references to privacy and terms documents hosted on trusted cloudfront URLs. Technically, the site employs modern web technologies including JavaScript ES modules and likely a SPA framework such as Vue.js, hosted on AWS infrastructure. The site is mobile optimized with a responsive design and uses HTTPS to secure communications. However, some security best practices such as DNSSEC and security headers are not enabled or visible in the provided data. The site lacks a cookie consent mechanism, which is a minor compliance gap. From a security perspective, the portal demonstrates a solid baseline with encrypted login forms and no exposed sensitive data. The domain registration is consistent with the business, and the domain age is appropriate for a corporate SSO service. No signs of phishing, malware, or blocking by WAFs were detected. Privacy policies and terms of service are clearly linked, supporting GDPR compliance. Overall, the site is trustworthy and professionally maintained. The overall risk is low, but improvements in security headers, DNSSEC, and cookie consent would enhance the security posture and compliance. Strategic recommendations include implementing these controls and publishing explicit security and incident response policies to strengthen trust and readiness.

TISK CENTRUM s.r.o. is a Czech printing and publishing company specializing in ecological book production using advanced LED UV printing technology. Established in 2005, the company positions itself as a leader in the Czech Republic and Central Europe for innovative and environmentally friendly printing solutions. Their services include book manufacturing, quality management, and logistics, targeting business clients and publishers seeking sustainable printing options. The website reflects a professional business presence with consistent branding and a focus on quality certifications and EU co-financing support. Technically, the website employs legacy JavaScript libraries such as jQuery 1.6.2 and jQuery UI 1.8.15, along with Fancybox for UI elements. Google Analytics and Seznam retargeting scripts are used for user tracking. The site appears to be custom-built without a common CMS and shows moderate performance and basic mobile optimization. SEO and accessibility features are present but basic, with room for improvement. From a security perspective, the site uses HTTPS (implied by script loading) but lacks visible security headers and uses outdated JavaScript libraries with known vulnerabilities. No privacy or cookie policies are present, and no contact information is explicitly provided on the homepage, which reduces transparency and compliance posture. There are no indications of WAF or blocking mechanisms, and the domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from modernization of its technical stack, improved security practices, and enhanced privacy compliance to better protect users and build trust.

Saint-Gobain Construction Products CZ a.s., operating under the Weber brand, provides comprehensive construction materials, tools, and expert consultancy services tailored to architects, developers, and investors in the Czech Republic. The website offers a well-structured platform with practical tools, educational content, and product information supporting successful construction projects. The company leverages its strong market position as part of the Saint-Gobain group, emphasizing quality and sustainability certifications such as LEED and BREEAM. Technically, the website is built on Drupal CMS with modern web technologies including Google Tag Manager and Bootstrap, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site demonstrates a mature digital presence aligned with business goals and compliance requirements.

S

STIHL Vertriebszentrale AG & Co. KG

stihl.cz

73

STIHL Vertriebszentrale AG & Co. KG operates the Czech Republic localized website www.stihl.cz, providing comprehensive information and sales of STIHL garden and forestry equipment. The company is a well-established leader in manufacturing and retail of outdoor power tools, targeting gardeners, landscapers, and consumers. The website reflects a mature digital presence with professional design, clear navigation, and extensive product and service information. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript frameworks, and integrates multiple tracking and consent management tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, consent-based cookie management, and use of secure authentication frameworks, though explicit security headers should be verified. Overall, the site is safe, trustworthy, and compliant with GDPR, with no adult or questionable content detected.

D

DEKMETAL s.r.o.

dekmetal.cz

63

DEKMETAL s.r.o. is a Czech-based manufacturer specializing in ventilated metal facade and roofing systems, operating since 2003 as part of the DEK a.s. group, a leading building materials supplier in Czechia and Slovakia. The company offers custom sheet metal solutions tailored to architects, investors, and project designers, positioning itself as a professional and reliable player in the construction materials manufacturing sector. The website reflects a medium-sized enterprise with a clear business focus and consistent branding. Technically, the site employs modern web technologies including Vue.js, UIkit, and integrates advanced tracking and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on contact forms, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a GDPR-compliant cookie consent mechanism and a dedicated privacy statement. Overall, the website is professional, secure, and trustworthy, supporting the company's market position and business credibility.

S

Saint-Gobain

saint-gobain.cz

57

Saint-Gobain CZ operates as a world leader in modern and sustainable construction materials, offering a wide range of products and solutions for both construction and industrial sectors. The website reflects a mature enterprise with a strong brand presence, multiple partner brands, and a focus on sustainability and innovation. The technical infrastructure is based on Drupal 10 with modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is partial, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site presents a professional and trustworthy digital presence aligned with its business stature.

S

Saint-Gobain Construction Products CZ a.s.

e-radce.cz

56

The website e-radce.cz represents Saint-Gobain Construction Products CZ a.s., a significant player in the Czech construction materials market, specializing in high-quality facade and insulation systems, plasters, coatings, and adhesives. The site targets both professional and consumer audiences interested in construction and renovation solutions, offering detailed guides, pricing, and multimedia content to support product selection and application. The business model is a hybrid B2B and B2C supplier and manufacturer, with a medium-sized market presence and consistent branding. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI plugins, supported by Google Analytics and Tag Manager for tracking. Hosting appears stable and consistent with the registrar Active24. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS (assumed from modern standards though not explicitly confirmed in HTML), but lacks visible security headers and explicit security or privacy policies, which are areas for improvement. Cookie consent is implemented, indicating some GDPR compliance awareness. No forms or sensitive data collection points are present on the main page, reducing attack surface. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found. Overall, the website is professionally maintained with moderate technical maturity and business credibility. Key recommendations include adding explicit privacy and security policies, implementing security headers, and enhancing accessibility and SEO features to improve compliance and trustworthiness.

S

Saint-Gobain Weber

weber-kalkulator.cz

48

The website www.weber-kalkulator.cz represents Saint-Gobain Weber, a leading supplier and manufacturer of high-quality facade, insulation, and other building systems in the Czech Republic. The site offers interactive calculators to assist customers with material estimation for various construction projects, targeting both professionals and consumers. The business is well positioned in the Czech market with strong brand recognition and multiple partner sites. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are not explicitly visible in the HTML. The absence of WHOIS data limits domain trust assessment but the site content and branding suggest legitimacy. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

B

Betonpres a.s.

kohoutovyzlataky.cz

54

Kohoutovy zlaťáky is a loyalty rewards website operated by Betonpres a.s., a Czech manufacturing company specializing in roofing systems and related products. The platform allows loyal customers to upload invoices, collect points ('zlaťáky'), and redeem them for various rewards. The website is professionally designed with a clear focus on customer engagement and retention within a regional market. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and the Nette framework, hosted on a Czech hosting provider. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Marketing tracking is done via Facebook Pixel, indicating moderate user tracking. Overall, the site is functional, trustworthy, and business-focused, but could improve in privacy compliance and security best practices.

M

MERKURIA - ARTES a.s.

branocentrum.cz

44

MERKURIA - ARTES a.s. operates the website branocentrum.cz as an authorized dealer and service provider for BRANO brand lifting and door closing technology. The company offers a broad range of industrial lifting equipment and related products, targeting industrial and commercial customers primarily in the Czech Republic. The website features an e-commerce platform with product listings, pricing, and purchase options, supported by a physical showroom and service center. Technically, the site uses legacy JavaScript libraries and a CMS platform called Webareal, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks modern security headers and uses outdated libraries, posing potential risks. WHOIS data is unavailable, reducing domain trust from a registration perspective, but business information and contact details are clearly presented, supporting legitimacy. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. Overall, the site is professional and trustworthy for its business domain but would benefit from technical and security improvements.

B

Betonpres a.s.

betonpres.cz

46

Betonpres a.s. is a Czech manufacturing company specializing in the production and sale of high-quality concrete roofing materials, including roofing tiles, concrete blocks, and roofing accessories. With over 30 years of experience, Betonpres holds a strong market position as a leading supplier in the Czech Republic, serving both professional roofers and end customers. The company emphasizes quality control with daily inspections and offers additional services such as roof calculation tools and training for professionals. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and lazy loading for images, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Security posture is solid with HTTPS enforced and consent mode implemented, though some security headers and explicit security policies are missing. The absence of WHOIS data for the domain reduces trust in domain registration legitimacy but does not detract from the professional presentation and business credibility of the company. Overall, Betonpres demonstrates a mature digital presence with room for improvement in security transparency and domain registration verification.

Saint-Gobain Construction Products CZ a.s., operating under the brand Weber in the Czech Republic, is a leading manufacturer and supplier of construction materials specializing in facade systems, insulation, flooring, adhesives, and related products. The website presents a professional and comprehensive digital presence targeting architects, developers, investors, and construction professionals. It offers extensive product information, technical support, online tools, and educational resources, positioning itself as a trusted industry leader. Technically, the site is built on Drupal CMS with modern web technologies including Google Tag Manager and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high business credibility and compliance with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

D

DEK a.s.

dekwood.cz

62

DEKWOOD, a division of DEK a.s., operates in the Czech Republic manufacturing and retailing wood construction materials including wall systems, CNC machining, timber houses, and trusses. The company targets construction professionals and end customers seeking quality wood building solutions. The website is professionally designed with good navigation and mobile optimization, leveraging modern frameworks like UIkit and Vue.js, though it uses an outdated jQuery version. Security posture is moderate with cookie consent and privacy policy in place, but lacks explicit security headers and updated libraries. WHOIS data confirms domain legitimacy and business consistency. Overall, the site reflects a credible medium-sized manufacturing business with room for technical and security improvements.

S

SAPELI, a.s.

sapeli.cz

59

SAPELI, a.s. is a well-established Czech manufacturer specializing in high-quality doors with a century-long tradition. The company offers a wide range of door types, including interior, entrance, safety, and specialized doors, supported by a network of 69 stores and premium showrooms across the Czech Republic and neighboring countries. Their business model focuses on custom-made products with strong emphasis on design and quality, evidenced by multiple international awards. Technically, the website is built on Drupal CMS, employs modern web technologies, and integrates privacy compliance tools such as Cookiebot and Google Tag Manager. Security posture is solid with HTTPS and privacy mechanisms, though explicit security headers could be improved. The absence of WHOIS data reduces domain registration trust but does not detract from the professional presentation and legitimacy of the business. Overall, SAPELI demonstrates a mature digital presence aligned with its market position.

J

JAP FUTURE s.r.o.

japcz.cz

56

JAP FUTURE s.r.o. is a well-established Czech manufacturer specializing in premium building elements and interior solutions, including sliding doors, staircases, door frames, and glass walls. The company emphasizes tradition since 1991 and operates with a strong network of over 2,000 dealers and showrooms in Prague and Přerov. Their business model focuses on manufacturing and retail distribution, targeting architects, interior designers, and end consumers seeking high-quality interior products. Technically, the website is built on the Studio9 webManager CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, with integrations for Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR, but lacks visible security headers and published incident response policies, which are areas for improvement. The absence of WHOIS data reduces trustworthiness slightly, but the professional presentation and business presence support legitimacy. Overall, the website scores well in content quality, technical implementation, and security posture, with recommendations to enhance security headers and transparency in security policies.

FAPA truhlářství s.r.o. is a small Czech family-owned business specializing in the manufacturing of high-quality solid wood furniture, including custom-made pieces and antique replicas. With over 20 years of experience, the company targets customers seeking durable and authentic wooden furniture for homes, hotels, and restaurants. The website presents a professional image with clear contact details and a focus on craftsmanship and customer satisfaction. Technically, the site uses standard web technologies such as HTML5, CSS3, and jQuery, with basic mobile optimization and accessibility features. Security measures include CAPTCHA on the contact form and a cookie consent mechanism, but lack visible HTTPS confirmation and security headers, which are recommended for improvement. The absence of WHOIS data limits domain trust verification, though the website content and contact information support legitimacy. Overall, the site is functional and informative but would benefit from enhanced security and transparency.

L

LibanPack

libanpack.org

58

LibanPack is a Lebanese non-profit organization established in 2009 that provides packaging and marketing services aimed at enhancing the competitiveness of Lebanese and Arab exporters. The organization offers a broad range of services including packaging design, branding, technical lab reviews, training, marketing, packaging testing, and networking events. It holds a reputable position as a full member of the World Packaging Organisation (WPO) since 2009, with its director serving as the WPO Vice President, underscoring its leadership in the packaging sector. The website reflects a professional and consistent brand image targeting exporters and packaging industry stakeholders in Lebanon and the Arab region. Technically, the website is built using Bootstrap and jQuery frameworks, with additional plugins for UI and slideshow functionality. It is hosted via Cloudflare, ensuring good performance and HTTPS security. The site is mobile-optimized and provides clear navigation and relevant content, although it lacks some modern security headers and DNSSEC. No CMS is detected, suggesting a custom-built platform. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and important security headers such as CSP and HSTS. There are no visible privacy or cookie policies, which is a compliance gap. No vulnerability disclosure or security.txt file is present, limiting incident response readiness. Contact information is clearly provided, enhancing trust and business credibility. Overall, LibanPack's website is a well-structured, professional platform that effectively supports its business goals but would benefit from enhanced security practices and privacy compliance measures to strengthen its risk posture and regulatory adherence.

Kovopol.cz represents a manufacturing business operating under the parent company KAVALIERGLASS a. s., specializing in the production and supply of industrial machinery including automats for nail production, accessories, and equipment for automotive repair and casting. The company targets industrial clients and machine operators primarily in the Czech Republic. The website content is basic but informative, providing product categories and contact details, though lacking modern web design and mobile optimization. Technically, the site uses simple HTML, CSS, and JavaScript without modern frameworks or CMS, and there is no evidence of HTTPS or advanced security measures. Security posture is weak due to missing HTTPS and security headers, and there are no visible privacy or cookie policies, which impacts compliance with GDPR. Overall, the site is functional but requires significant improvements in security, privacy, and technical modernization to enhance trust and user experience.

KAVALIERGLASS, a.s., Bělá pod Bezdězem is a manufacturing company specializing in the production of smooth and corrugated cardboard packaging with a long-standing tradition. The website presents clear business contact information and branding consistent with a professional manufacturing entity serving business customers in the packaging sector. The site is built on WordPress using the Divi theme and includes standard web technologies such as jQuery. While the website is accessible and uses HTTPS with good SSL configuration, it lacks privacy and cookie policies, security headers, and WHOIS registration transparency, which impacts its overall security and compliance posture. No advanced analytics or tracking scripts are detected, indicating minimal user tracking.

O

OBALOVÝ INSTITUT SYBA, s.r.o.

packagingsymposium.eu

51

The website 'Evropské obalové symposium' represents a professional event platform focused on the European packaging industry, organized by OBALOVÝ INSTITUT SYBA, s.r.o. It serves as a key forum for industry professionals, government representatives, and academia to discuss sustainability, innovation, and regulatory impacts in packaging. The site provides detailed thematic content, partner information, and event details, although some specifics like event date and location are pending. Technically, the site is built on Orchard CMS and utilizes modern JavaScript libraries such as jQuery, Bootstrap, and Photoswipe, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security headers and formal policies. Overall, the site is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security documentation.

O

Obalový institut SYBA

klubobalovychmanazeru.cz

43

Klub obalových manažerů is a professional networking and educational platform focused on the packaging industry in the Czech Republic and Slovakia. It operates under the Obalový institut SYBA, a well-established organization dedicated to improving packaging quality and sustainability. The club facilitates informal meetings, knowledge sharing, and industry collaboration through events, excursions, and discussions. The website reflects a small but important entity serving packaging professionals with a focus on career development, networking, and industry insights. Technically, the website is built on Orchard CMS and uses jQuery 1.9.1, indicating a somewhat dated technology stack. The site is mobile optimized and has a good design quality, but lacks advanced SEO and accessibility features. Hosting appears to be with Active24, a known provider. No blocking or WAF mechanisms were detected, and the site is fully accessible. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The use of an outdated jQuery version may expose the site to vulnerabilities. No incident response or vulnerability disclosure information is present. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and relevant to its niche but requires improvements in security posture and privacy compliance to meet modern standards and build greater trust with users.