Real Estate security reports

S

SIA PRO DEV

prodev.lv

53

SIA PRO DEV is a Latvian construction company with over 10 years of experience and more than 500 completed projects nationwide. The company specializes in construction management and direct execution of construction works, with a strong focus on home insulation and renovation. It is part of a group including UNITEMP and SIA PRO GROUP, indicating a broader business ecosystem. The website is professionally designed, multilingual, and provides clear contact information and social media presence. Technically, the site is built on WordPress with modern plugins and integrates security features such as HTTPS, Google reCAPTCHA, and cookie consent mechanisms. However, WHOIS data is unavailable due to query limits, limiting domain registration verification. Overall, the site demonstrates a solid business presence with good security posture and user experience.

L

Linstow Baltic SIA

origoone.lv

52

Origo One is a modern A-class office building located in the heart of Riga, Latvia, operated by Linstow Baltic SIA, a reputable real estate developer and manager with 25 years of experience in the Baltic region. The website presents a professional image with clear business focus on office space leasing and property management. The technical infrastructure is based on WordPress CMS with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. Overall, the website is trustworthy and well-structured, though WHOIS data is unavailable due to query limits, slightly reducing confidence in domain registration transparency.

L

Lofts & Rosegold

loftandrosegold.lv

53

Lofts & Rosegold is a real estate project based in Riga, Latvia, focusing on loft-style residential apartments and commercial business spaces designed for a hygge lifestyle. The website presents a professional and visually appealing interface with clear navigation and relevant content targeted at prospective residents and business tenants. The technical infrastructure includes modern web technologies and integration with popular analytics and tracking services such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as the lack of explicit contact information, suggests gaps in compliance and user trust facilitation. Security posture is moderate with asynchronous script loading but lacks visible security headers and SSL configuration details. Overall, the website is accessible and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

R

River Breeze Residence

riverbreeze.eu

58

River Breeze Residence is a premium real estate business offering luxury private residences located on the Riga waterfront in Latvia. The company targets affluent property buyers and investors seeking high-quality homes with exceptional construction standards and privacy. The website reflects a professional and consistent brand image with clear contact details and social media presence. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the business appears legitimate and trustworthy with a strong market position in the local real estate sector.

Dream Property, operating under the parent company SIA Dream Industries, is a Latvian real estate agency specializing in property management and related services. The company offers a variety of services including 24/7 emergency support, residential and commercial property management, financial and legal assistance, gardening, and cleaning services. Their target audience is primarily local Latvian clients seeking real estate services. The website is built on WordPress and integrates common technologies such as Google Analytics, Facebook Pixel, and Google Maps API, indicating a moderate level of digital maturity. From a security perspective, the website uses HTTPS and secure AJAX form submissions, but lacks important security headers and cookie consent mechanisms, which are critical for GDPR compliance and overall security posture. No WHOIS data was available due to query limits, which limits the ability to fully verify domain legitimacy. However, the website content and contact information appear consistent with a legitimate Latvian real estate business. Overall, the website presents a professional and functional online presence with good content quality and user experience. Security and privacy compliance can be improved by implementing security headers, cookie consent, and publishing detailed security and incident response policies. The business should also consider enhancing transparency and trust by providing terms of service and data protection officer contact information.

Floris.lv is a Latvian-based company specializing in the production and installation of stretch ceilings, operating since 2008 with offices in Latvia, Lithuania, Belarus, and Poland. The company offers a wide range of ceiling solutions including decorative and photo ceilings, with a focus on quality materials and professional service. The website is built on WordPress and incorporates modern web technologies and spam protection mechanisms. While the site is well-structured and provides multiple contact channels, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is generally good with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and formal security policies. Overall, Floris.lv presents as a credible medium-sized business with a solid market presence in the Baltic region.

P

Pinewood Apartments

pine-wood.lv

53

Pinewood Apartments is a real estate business focused on selling residential apartments in Jurmala, Latvia. The website presents a well-structured portfolio of apartments with detailed descriptions, pricing, and location information. The business targets buyers interested in quality living spaces integrated with nature and modern architecture. Technically, the site is built on WordPress and hosted on WordPress.com, leveraging Jetpack and Swiper.js for galleries and slideshows. The site is mobile-optimized and uses HTTPS, but lacks some security headers and privacy compliance documentation. Security posture is moderate with no visible vulnerabilities but could be improved with better headers and policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is professional and credible for a small real estate business but should enhance privacy and security transparency.

Double9 SIA operates a coworking space business in Riga, Latvia, providing flexible workspace solutions including hot desks, dedicated desks, private offices, virtual office services, and meeting rooms. The company targets freelancers, startups, and professionals seeking a collaborative and well-equipped environment. The website is built on modern web technologies such as Next.js and React, integrated with third-party services like Stripe for payments and Google Maps for location services. The site is well-structured, mobile-optimized, and provides comprehensive business and service information. Security posture is strong with HTTPS and security headers implemented, though cookie consent mechanisms and explicit incident response contacts are absent. Overall, the digital presence reflects a professional and trustworthy business with transparent offerings and active community engagement.

S

SIA ARS Magna

arsmagna.lv

43

ARS Magna is a Latvian small business specializing in architectural and construction-related services, including consultations, project estimation, measurement, design, technical development, production, assembly, and drawing creation. The company targets clients seeking comprehensive architectural project services and positions itself as a professional service provider within the real estate sector. The website is built on WordPress and uses common web technologies such as jQuery, Owl Carousel, and FontAwesome, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security posture is moderate, with HTTPS enforced and a Content-Security-Policy header present, but the use of an outdated jQuery version and lack of additional security headers or incident response information are notable gaps. Privacy compliance is weak, as no privacy or cookie policies are found, and GDPR indicators are absent. Contact information is clearly provided, including company email, phone number, physical address, and VAT number, supporting business credibility. Overall, the website is safe, professional, and trustworthy, but improvements in security and privacy compliance are recommended.

Apartamenti.lv is a small local hospitality business based in Liepāja, Latvia, offering apartment and holiday home rentals primarily targeting tourists and visitors to the city. The website presents a professional and consistent brand image with clear contact information and social media presence, positioning itself as a trusted local accommodation provider. Technically, the site is built on WordPress with a modern but somewhat dated tech stack including jQuery and Bootstrap 3.3.6. It integrates Google Analytics and Google Maps, although the map functionality is currently broken due to API key issues. Security posture is basic with HTTPS enabled but lacking important security headers and privacy policies, which impacts compliance and trust. Overall, the site is functional and informative but would benefit from enhanced security and privacy compliance measures.

R

Rīgas Spīķeri

spikeri.lv

38

Spīķeru kvartāls is a creative and business quarter located in the center of Riga, Latvia, combining historical ambiance with modern office rentals and an active cultural event scene. The website serves as a platform to promote office space leasing, event spaces, and cultural activities, targeting businesses and the local community. The site is built on WordPress using popular plugins and frameworks, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security features to align with best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and improving accessibility.

A

Art Luxury House

artluxhouse.com

53

Artluxhouse.com is a professional real estate website focused on marketing luxury apartments in Riga, Latvia. The site targets affluent home buyers seeking premium residential properties. The business appears to be established since 2014, consistent with the domain registration date. The website provides key services such as apartment listings, complex information, news updates, and contact options including a callback request form and a phone number. The site is multilingual with Russian as the primary language and options for English and Latvian. Technically, the site uses common JavaScript libraries like jQuery and integrates analytics tools such as Google Analytics and Yandex Metrika. Advertising is managed via DoubleClick Floodlight tags. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features.

C

City Real Estate

cityreal.lv

53

City Real Estate operates a Latvian real estate platform specializing in property sales and rentals primarily in Rīga and Jūrmala. The website offers comprehensive listings including apartments, houses, commercial spaces, land, and new projects. It targets local buyers, sellers, and renters, providing a user-friendly search interface and additional services such as real estate news and email subscription for offers. The company maintains a professional online presence with clear contact details and active social media channels. Technically, the website is built on TYPO3 CMS version 4.5, an older but functional content management system, supplemented by jQuery and Bootstrap for responsive design elements. The site includes modern features such as Google reCAPTCHA for form security and cookie consent mechanisms aligned with GDPR requirements. However, the CMS version is outdated, which may pose security risks if not regularly patched. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Overall, the website demonstrates a solid business and technical foundation with room for security enhancements and modernization. It is suitable for general audiences with no adult or unsafe content. Strategic improvements in security headers, CMS updates, and explicit security policies would strengthen its posture and trustworthiness.

R

RUUME arhitekti

ruume.lv

56

RUUME arhitekti is a Riga-based architecture and urbanism practice focused on sustainable, resilient, and inclusive city design. Their website showcases a portfolio of selected projects primarily in Latvia, targeting clients interested in architectural and urban planning services. The business operates as a small entity with a clear local market focus. Technically, the website is built on Webflow with jQuery, offering a modern and mobile-optimized experience, though some performance and security enhancements are recommended. Security posture is moderate with HTTPS assumed but lacking explicit security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, but the domain's ccTLD and website content align with the claimed Latvian location, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

V

Velve SIA

velve.lv

47

Velve SIA is a Latvian construction company established in 1992, specializing in quality construction services including historic building preservation and new urban and industrial projects. The company emphasizes professionalism, experience, and a balance of modern and traditional construction methods. Their website reflects a medium-sized business with a clear focus on client collaboration and corporate social responsibility, supported by multiple ISO certifications. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, Google Analytics, and Google Maps API, providing a good user experience with mobile optimization and clear navigation. However, security posture could be improved by implementing security headers and cookie consent mechanisms. WHOIS data was unavailable due to query limits, but the website content and contact information support legitimacy. Overall, Velve presents a professional and trustworthy digital presence with room for enhanced security and privacy compliance.

S

Drošas metāla durvis mājai un dzīvoklim par pieņemamu cenu - SOSDIENESTS.LV

sosdienests.lv

39

The website sosdienests.lv is a Latvian small business focused on providing secure metal doors for homes and apartments, along with emergency door opening and lock replacement services. The business targets homeowners and apartment residents seeking reliable security solutions. The site highlights partnerships with metal door manufacturers SKYDAS and SUPPORTA, emphasizing quality and customer satisfaction. The website content is well-structured and informative, primarily in Latvian, with some multilingual support. Technically, the site uses a range of JavaScript libraries including jQuery, bxSlider, Fancybox, and Semantic UI, running on the DIRcms platform. While the site is accessible and functional, there is room for improvement in mobile optimization and accessibility. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, indicating a gap in GDPR compliance. From a security perspective, the site lacks visible security headers and does not provide incident response or vulnerability disclosure information. The use of older JavaScript libraries may pose risks if not updated. WHOIS data could not be retrieved due to query limits, but no suspicious indicators were found on the site itself. Overall, the security posture is moderate but could be enhanced with better SSL configuration, security headers, and privacy compliance. The overall risk is moderate with recommendations to improve security best practices, implement privacy policies, and update technical components. The business appears legitimate and focused on its niche market in Latvia, with clear contact information and positive trust signals.

Rēzeknes Special Economic Zone (RSEZ) is a Latvian government-supported economic zone focused on attracting investment and supporting businesses through tax incentives, ready infrastructure, and consultation services. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring multimedia content such as videos and charts to engage investors and stakeholders. The site is accessible, mobile-optimized, and provides clear contact information, although it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is credible and functional but could improve compliance and security transparency.

K

KOURASANIT

kourasanit.com

48

KOURASANIT is a medium-sized company specializing in natural construction materials, leveraging ancient formulas and natural resources to serve a niche market focused on sustainability and environmental quality. The company operates internationally with multiple showrooms and sales points, primarily targeting architects, builders, and environmentally conscious consumers. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses a modern but basic tech stack including jQuery and Google Analytics, hosted on HostGator servers. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy page. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

U

UNITY Offices

unityoffices.lv

12

UNITY Offices is a commercial real estate business specializing in office and retail space leasing in Riga, Latvia. Their flagship property, UNITY Business Centre, offers flexible office layouts and large spaces up to 212 m² per tenant. The company targets businesses seeking professional office environments with modern amenities and ample parking. The website is built on WordPress and integrates common web technologies such as jQuery, Google Analytics, and Google Maps API, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data limits full trust verification, but the website content and external references suggest a legitimate business. Overall, the site is professional and functional but could improve in privacy and security transparency.

S

SIA "METR DOOR"

metrdoor.lv

56

SIA "METR DOOR" is a Latvian company specializing in the manufacture and sale of metal and wooden exterior doors for residential and commercial customers. With over seven years of production experience, the company offers a broad range of standard and custom door solutions, including installation and after-sales maintenance services. The website is professionally designed, providing clear navigation and comprehensive contact information, including multiple physical locations and contact forms. Technically, the site uses modern analytics tools such as Google Analytics and Microsoft Clarity, integrates hCaptcha for spam protection, and enforces HTTPS for secure communications. However, some security headers are missing, which could be improved to enhance security posture. Privacy compliance is addressed with a dedicated privacy policy and cookie consent mechanism, reflecting good adherence to GDPR requirements. Overall, the website presents a trustworthy and professional image consistent with a small manufacturing business in Latvia.

H

Hepsor

strelnieku4b.lv

52

Hepsor is a real estate development company focused on delivering modern residential properties in Riga, Latvia, exemplified by the Strelnieku 4b project. The website showcases their offerings of 1-2 room apartments with quality finishes in a prestigious and quiet city center location, targeting investors, home buyers, and renters. The company positions itself as a reputable developer with a professional online presence and clear contact channels. Technically, the site is built on Joomla CMS with UIkit framework, integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a mature digital marketing strategy. Security posture is good with HTTPS, reCAPTCHA protection on forms, and privacy policies in place, though some security headers could be improved. Overall, the site is professional, user-friendly, and compliant with privacy regulations, though WHOIS data is unavailable due to query limits, limiting full domain trust assessment.

P

Padures Muiža

paduremanor.com

51

Padures Manor is a hospitality and event venue business offering a historic manor setting for celebrations and gatherings. The website presents a professional and visually appealing experience built on WordPress with the Divi theme, integrating modern tracking and cookie consent technologies. The site provides clear contact information and a comprehensive privacy and cookie policy, demonstrating good privacy compliance. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Security posture is solid with HTTPS and cookie consent, but could be improved with additional security headers and policies. Overall, the website is functional, trustworthy, and well-positioned in its niche market.

S

SIA “SS-BŪVE”

gulbuves.lv

35

SIA “SS-BŪVE” is a Latvian small business specializing in the construction and restoration of log buildings including houses, saunas, and other wooden structures. The company offers comprehensive services from project design, 3D visualization, to delivery, installation, and full interior finishing. Their website is multilingual, professionally designed, and optimized for SEO, reflecting a mature digital presence for a small construction firm. The technical infrastructure is based on WordPress with popular plugins for SEO, multilingual support, and contact forms, supported by Google Analytics and reCAPTCHA for user interaction and spam protection. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data limits domain trust verification, but the website content and business information appear consistent and legitimate. Overall, the site demonstrates a solid business presence with room for improvement in security transparency and WHOIS data availability.

S

SIA Arhis

arhis.eu

38

SIA Arhis is a small Latvian company specializing in professional civil design, building design, architecture, structural engineering, and Building Information Modelling (BIM). The company targets clients in the real estate and construction sectors, offering consulting and engineering services. Their market position is that of a niche regional player with some international tender participation, as evidenced by projects and consortium involvement in Russia and Armenia. The website content dates back to 2013-2014, indicating a possible lack of recent updates. Technically, the website is built on an outdated WordPress 2.7.1 platform with old JavaScript libraries such as jQuery 1.7.2 and MooTools 1.11. It uses plugins like Featured Content Gallery and Lightbox for galleries. The site lacks modern mobile optimization and accessibility features, and no HTTPS enforcement or security headers were detected in the provided data. Google Analytics and Google Tag Manager are used for tracking, indicating moderate user tracking. From a security perspective, the site shows weaknesses due to outdated software and lack of HTTPS, which exposes it to potential vulnerabilities. No privacy or cookie policies were found, indicating poor privacy compliance. Contact information is clearly provided, but no incident response or security policies are visible. The WHOIS data is privacy protected by EURid, which is common for .eu domains, and no suspicious patterns were found. Overall, the website is functional but outdated and lacking in modern security and privacy practices. The risk level is moderate due to these factors. Strategic recommendations include upgrading the CMS and libraries, implementing HTTPS, adding privacy and cookie policies, and improving mobile responsiveness and accessibility.

R

R.evolution

rvlc.lv

52

R.evolution is a business entity represented by the website www.rvlc.lv, primarily focused on real estate and intellectual property development. The site is multilingual, targeting Latvian and English-speaking audiences, and showcases various projects and partnerships. The company appears to be a small-sized entity operating in Latvia with a professional online presence built on the Wix platform. Technically, the website uses Wix's Thunderbolt framework and standard JavaScript polyfills, ensuring moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and includes JavaScript-based security enhancements, but lacks explicit security headers and formal privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data limits full domain legitimacy verification, but the use of Wix hosting and professional design supports a moderate trust level. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.

U

UAB Tvora

tvora.lv

49

UAB Tvora is a fencing solutions provider specializing in manufacturing and selling a wide range of fencing products including metal, concrete, wood, wire, and composite fences. The company targets private landowners, industrial, and agricultural sectors primarily in Latvia and neighboring countries. Their website features a fence price calculator and detailed product catalogs, indicating a customer-centric approach with digital tools to enhance user experience. Technically, the website uses modern JavaScript libraries and Google services, with a cookie consent mechanism compliant with GDPR, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers are not explicitly detected and could be improved. Overall, the site is professional, well-structured, and trustworthy, but the lack of WHOIS data transparency slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining up-to-date third-party libraries.

S

SIA "Domuss"

mezaparks.lv

45

Mežaparka Rezidences is a prominent real estate development project in Riga, Latvia, managed by SIA "Domuss". The website showcases a variety of residential offerings including villas, twin villas, terraced houses, apartments, office spaces, and building land. The project targets home buyers and investors seeking premium living spaces in a harmonious environment. The site is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website is built on WordPress, utilizing common libraries such as jQuery and Swiper.js, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism, indicating a good level of privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, but the professional presentation and consistent business information support trustworthiness. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements include adding security headers, publishing security policies, and implementing vulnerability disclosure mechanisms to enhance trust and resilience.

C

Coworking Riga

coworkingriga.com

42

Coworking Riga is a small business providing flexible coworking spaces, private offices, meeting rooms, and studio facilities in the city center of Riga, Latvia. The website presents a professional and consistent brand image targeting freelancers, startups, and small businesses seeking a cozy and productive workspace. The business has been established since 2014, with a domain age consistent with this timeline. The website is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences.

L

Liapor s.r.o.

dumjednimtahem.cz

53

Dům jedním tahem is a Czech company specializing in low-energy prefabricated family houses made from ceramic concrete. The company emphasizes rapid construction, excellent insulation, and long durability. Their website offers free project designs, catalogs, consultations, and virtual tours, targeting individuals and families interested in energy-efficient homes in the Czech Republic. The business is positioned as a medium-sized regional player with a professional online presence and consistent branding. Technically, the website uses a variety of JavaScript libraries including jQuery, Google Tag Manager, and Slick Carousel, with good mobile optimization and SEO practices. The site enforces HTTPS and implements a cookie consent mechanism, reflecting a good security posture. However, no explicit security headers were detected, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Security-wise, the site shows good compliance with GDPR, including detailed privacy policies and consent forms. There are no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a concern but does not negate the legitimacy suggested by the website content and business information. Overall, the website is professional, secure, and compliant, with minor improvements recommended in security headers and domain registration transparency.

B

BAU-STAV a.s.

baustav.cz

52

BAU-STAV a.s. is a well-established construction company based in the Karlovy Vary region of the Czech Republic, with nearly 30 years of experience. The company offers a comprehensive range of construction-related services including project design, construction work, steel constructions, locksmith work, transport, and roofing. It primarily serves clients in the Karlovy Vary and Central Bohemia regions but is capable of undertaking projects throughout the Czech Republic. The company is part of the SUAS GROUP, which is disclosed transparently on the website. Technically, the website uses a custom CMS built on the Gambik framework and incorporates modern JavaScript libraries such as jQuery, Bootstrap, and Fancybox. The site is mobile-optimized with good navigation and SEO practices. However, a visible server-side PHP fatal error indicates some backend instability and potential information leakage, which poses a security risk. The site uses HTTPS and Google Analytics with consent settings that deny ad and analytics storage by default, showing some privacy awareness. From a security perspective, the site lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data reduces domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, limiting the company's security posture visibility. Overall, BAU-STAV a.s. presents a credible and professional business front with room for improvement in backend stability, security best practices, and privacy compliance to enhance trust and reduce risk.

G

Geodézie Kladno s.r.o.

geodeziekladno.cz

48

Geodézie Kladno s.r.o. is a Czech geodetic company established in 2005, specializing in cadastral surveying, construction and engineering network measurements, digital mapping, GPS measurements, and consulting services. The company serves municipalities, government agencies, energy companies, and private clients, with a small team of eight employees. Their website reflects a professional and consistent brand image with clear contact information and references from reputable clients. Technically, the site is built on Joomla CMS with Gridbox builder, using modern web technologies including Bootstrap and Google Maps API. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms were detected, and no analytics or tracking scripts suggest minimal user tracking. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

H

HaMPR, a.s.

hampr.cz

45

HaMPR, a.s. is a Czech-based construction and development company operating since 2008, serving both the Czech and Slovak markets. The company specializes in commercial, industrial, residential, transportation, and engineering construction projects, including development and infrastructure logistics. Their website reflects a professional business presence with clear service offerings and subsidiary companies under the HAMPR Group umbrella. Technically, the site uses common JavaScript libraries and Google Fonts, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which impacts trustworthiness, but the website content and contact information appear legitimate and consistent with the business claims.

S

Správce Bytu

spravcebytu.cz

43

Správce Bytu is a Czech Republic based small-sized property management company established in 2009. The company offers comprehensive rental management services including tenant screening, maintenance, insurance handling, and administrative support. The website is professionally designed using WordPress and Elementor, featuring multiple physical office locations and positive client testimonials, indicating a strong local market presence. Technically, the site uses modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, but lacks explicit privacy and terms of service pages and security headers. Overall, the website is trustworthy and business credible but could improve compliance and security practices.

4

4köhl s.r.o.

4kohl.cz

56

4köhl s.r.o. is a small Czech construction company specializing in residential and non-residential building projects, including reconstructions and infrastructure such as transport and water management structures. Founded in 2019, the company positions itself as a reliable and sustainable builder with a professional team. The website reflects a modern, well-structured digital presence with clear service offerings and a portfolio of completed projects. Technically, the site uses modern web standards and responsive design but lacks advanced security headers and privacy compliance documentation. The security posture is basic, with no visible incident response or vulnerability disclosure mechanisms. Overall, the company appears legitimate and professional, but improvements in security and privacy compliance are recommended to enhance trust and regulatory adherence.

S

S-O-D Holding s.r.o.

beskydskabrana.cz

45

Beskydská Brána is a real estate project focused on selling high-quality design mountain houses (chalets) in the Beskydy region of the Czech Republic. The project targets individuals seeking a second home or investment property with rental management services provided by the developer, S-O-D Holding s.r.o. The website presents a professional and well-structured digital presence, showcasing detailed property information, financing options, and local amenities. Technically, the site uses a mix of modern JavaScript libraries and frameworks, including jQuery, Nette Forms, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. The absence of WHOIS data limits domain legitimacy verification, but the business information and contact details are transparent and consistent with a legitimate real estate developer. Overall, the site demonstrates a mature digital infrastructure suitable for its business model, with room for security enhancements and domain registration transparency.

D

Debant s.r.o.

prazsky.cz

50

Pražský.cz is a Czech Republic based online directory and advertising platform focused on tradespeople, professionals, and services in Prague. Established in 2008 and operated by Debant s.r.o., the website offers a comprehensive catalog of local craftsmen, service providers, and related businesses, targeting residents and businesses within Prague. The platform also includes advertising opportunities and links to related partner sites in accommodation and other sectors. Technically, the site uses a custom-built infrastructure with standard web technologies including HTML, CSS, JavaScript, Google Fonts, and integrates Google Adsense and Google Analytics for monetization and analytics. It employs an IAB Transparency and Consent Framework compliant consent management platform to address GDPR requirements. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Contact information is available but decentralized, with no dedicated privacy or terms of service pages. Overall, the site is functional and serves its niche well but could improve in privacy transparency and security best practices.

Ostrava Towers Complex is a real estate development project by RT TORAX, s.r.o., focused on creating a vibrant urban center in Ostrava, Czech Republic. The project integrates residential and multifunctional towers with public spaces, aiming to connect historic and new city areas. The website presents detailed architectural concepts and company vision, targeting residents, investors, and local businesses. Technically, the website uses standard web technologies with a clean design and good mobile optimization but lacks advanced security headers and privacy compliance features. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with the business. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

RT TORAX, s.r.o. is a Czech Republic-based company operating primarily in the real estate development and automotive sectors. Their website highlights various real estate projects including residential and commercial properties, alongside automotive sales and leasing services. The company appears to target regional customers interested in property investment and automotive purchases or leasing. The business model combines property development with automotive retail and financial services, positioning RT TORAX as a medium-sized regional player with a diversified portfolio. Technically, the website is built with standard HTML, CSS, and JavaScript, utilizing Google Fonts for typography. The site is moderately optimized for performance and mobile use but lacks advanced technical frameworks or CMS platforms. There is no evidence of analytics or tracking technologies, and the site does not implement modern security headers or privacy mechanisms. The absence of privacy and cookie policies, as well as contact information, limits the site's compliance posture. From a security perspective, the site uses HTTPS (assumed from URL scheme) but lacks visible security headers and incident response contacts. The WHOIS data is unavailable due to privacy protection or query failure, which reduces transparency and trustworthiness. No forms or data collection points are present, minimizing immediate data exposure risks but also limiting user engagement. Overall, the security posture is basic with room for improvement in compliance and transparency. The overall risk assessment indicates a moderately trustworthy business website with limited security and privacy features. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, publishing contact and incident response information, and improving WHOIS transparency where possible to build greater trust with users and partners.

N

NEPI Rockcastle

vulcan-residence.ro

54

Vulcan Residence is a residential real estate development project located in the 13 Septembrie area of Bucharest, Romania, developed by NEPI Rockcastle, a leading real estate investor and developer in Central and Eastern Europe. The project offers a variety of residential units including studios, two and three-bedroom apartments, and duplexes, complemented by commercial spaces. The website highlights the project's awards and nominations, emphasizing quality, sustainability, and community living. Technically, the website is built on WordPress using Elementor and Slider Revolution, with integrations for Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is well-structured, mobile-optimized, and uses HTTPS with a good SSL configuration. Security headers are not fully verified but HTTPS is enforced. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Contact information is primarily via contact forms, with no explicit emails or phone numbers found. Overall, the website presents a professional and trustworthy image with strong business credibility and moderate to good security posture.

T

Triangel spol. s r.o.

triangel.cz

61

Triangel spol. s r.o. is a Czech company specializing in the supply of ventilated facades and cladding materials including brick, ceramic, stone, glass, and photovoltaic facades. Established in 1999, the company serves construction professionals and developers with a broad portfolio of facade solutions. The website reflects a small but established business with a clear focus on facade systems and related products. Technically, the website uses standard web technologies such as jQuery and Google Analytics, hosted on a Czech hosting provider. The site is accessible, with basic mobile optimization and navigation clarity. Security posture is moderate with HTTPS implied but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the domain registration data aligns well with the business information, supporting legitimacy and trustworthiness.

TREPART s.r.o. is a Czech-based company specializing in professional demolition and asbestos removal services. The company emphasizes expertise, speed, ecological responsibility, and compliance with applicable laws and regulations. Their website showcases references to significant demolition projects, indicating a solid market presence in the local construction and environmental sectors. The target audience primarily includes businesses and organizations requiring demolition and hazardous material disposal services within the Czech Republic. Technically, the website is built on the IPO CMS platform and utilizes a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Matomo, and Google reCAPTCHA for security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy compliance is addressed through a cookie consent banner and a comprehensive privacy policy page, reflecting adherence to GDPR requirements. From a security perspective, the website enforces HTTPS and employs reCAPTCHA to protect forms, but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trustworthiness from a domain registration perspective. Overall, TREPART s.r.o. presents a professional and trustworthy online presence with room for improvement in security policy transparency and domain registration disclosure. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and resolving the WHOIS data visibility issue to improve legitimacy and trust.

D

DT-EXPERT s.r.o.

dtexpert.cz

47

DT-EXPERT s.r.o. is a Czech Republic based interior design and fit-out company with over 25 years of experience specializing in commercial, public, and residential interior projects. Their website presents a professional portfolio of services including workspace consulting, space planning, custom production, and installation services. The company targets commercial and residential clients seeking comprehensive interior project realization. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics and Facebook Pixel for marketing insights. Security posture is solid with HTTPS and reCAPTCHA implemented, though lacking published security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-structured, supporting the company's established market position.

D

DEBANT, s.r.o.

debant.cz

43

DEBANT, s.r.o. is a small family-owned Czech company established in 1992, operating the largest Czech online portal for private accommodation in Croatia, UBYTOVANIvCHORVATSKU.cz. The company also manages real estate rentals and domain sales, targeting travelers and property renters primarily in the Czech Republic and Croatia. Their market position is strong in the Central European travel niche, with a significant volume of unique inquiries annually. Technically, the website uses a traditional tech stack with jQuery, Bootstrap, and various JavaScript libraries, but some components like jQuery are outdated, posing security risks. The site is mobile-optimized and well-structured but lacks modern security headers and visible HTTPS enforcement in the provided data. Security posture is moderate with room for improvement, especially in updating libraries and implementing security best practices. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but should address security and compliance gaps to enhance user trust and regulatory adherence.

N

NEPI Rockcastle

nepirockcastle.com

70

NEPI Rockcastle is a leading property investment and development group operating primarily in Central and Eastern Europe. The company manages a large portfolio of commercial and residential properties across multiple countries, positioning itself as a market leader in the real estate sector. The website reflects a mature corporate presence with comprehensive information on governance, financials, and sustainability. Technically, the site is built on WordPress using Elementor and related plugins, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced and multiple security headers, though DNSSEC is not enabled and no explicit vulnerability disclosure policy is published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks visible cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, serving investors and partners effectively.

J

Ještědská stavební společnost, spol. s r.o.

jss.cz

57

Ještědská stavební společnost, spol. s r.o. is a well-established Czech construction company specializing in building and water management projects with over 30 years of experience and more than 790 completed projects. The company targets clients in the Liberec region and broader Czech Republic, offering comprehensive construction services including new builds, reconstructions, and ecological water infrastructure. The website reflects a professional and consistent brand presence with clear service descriptions and references. Technically, the site uses modern JavaScript libraries and Google analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is partial due to missing privacy and terms documents. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is trustworthy and functional with room for improvement in compliance and security best practices.

K

Kinský dal Borgo, a.s.

kinskydalborgo.cz

9

Kinský dal Borgo, a.s. is a Czech company with a long-standing tradition in forestry management, ethical hunting, sawmill operations, and cultural heritage site stewardship. The company manages extensive land and natural resources, including forests, ponds, and agricultural land, and operates event rental services and wedding locations. Their management of iconic Czech landmarks such as Karlova Koruna Castle and Kost Castle positions them as a notable regional player in real estate, hospitality, and cultural preservation sectors. Technically, the website is built on WordPress with modern plugins like Revolution Slider and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and includes a cookie consent mechanism, reflecting some privacy compliance efforts. Security posture is good with HTTPS enforced, but lacks advanced security headers and formal policies. WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. Overall, the website is professional and functional but would benefit from enhanced privacy disclosures and contact transparency.

S

Stopka

stopka.cz

47

Stopka is a well-established interior design and realization company based in the Czech Republic, with over 35 years of experience in premium residential and commercial projects. The company offers tailored interior design services, showroom sales, and partnerships with renowned global brands. Their website reflects a high level of professionalism, showcasing their projects, product categories, and brand collaborations. Technically, the site uses modern web technologies including lazy loading, video content, and cookie consent mechanisms, hosted by Active24. Security posture is good with HTTPS and consent mechanisms, though improvements can be made by adding security headers and explicit privacy policies. Overall, the website is trustworthy and well-positioned in its market niche.

L

lulafit

lulafit.com

65

Lulafit is a boutique service provider specializing in amenity consulting and management for commercial real estate properties. Their business model focuses on transforming office buildings into workplace destinations through hospitality-driven and wellness-forward amenities. The company leverages proprietary technology platforms to enhance tenant engagement and operational efficiency. Their market position is supported by partnerships with major real estate firms and a portfolio of client testimonials, indicating a strong reputation in the niche market of workplace amenities. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including HubSpot for marketing and analytics, Segment for data collection, and Visual Website Optimizer for A/B testing. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. However, some security best practices such as implementing security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the professional website and client references mitigate some risk. Overall, the security posture is good but could be improved with additional transparency and technical controls. The overall risk assessment suggests a generally trustworthy and professional business presence with minor gaps in domain registration transparency and security policy disclosures. Strategic recommendations include verifying domain registration status, enhancing security headers, publishing security policies, and providing direct contact information to improve trust and compliance.

J

JLL Technologies

jllt.com

75

JLL Technologies is a leading provider of commercial real estate technology solutions, offering software, data, and expertise to optimize property acquisition, management, and experience. Positioned as a market leader, JLLT serves enterprise clients globally with integrated workplace management systems, facilities management platforms, AI-powered workplace experience tools, and data analytics services. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding aligned with its parent company JLL. Technically, the site leverages WordPress CMS with modern frameworks like Bootstrap, integrates advanced analytics and marketing tools such as Microsoft Clarity, Google Tag Manager, and Drift live chat, and employs Cloudinary for optimized media delivery. Security posture is strong with HTTPS, security headers, and secure form handling, though public security policies and incident response contacts are not published. Overall, the site is trustworthy, well-optimized for SEO and accessibility, and compliant with privacy regulations including GDPR. The lack of WHOIS data suggests privacy protection, which is justified for this enterprise business. Strategic recommendations include publishing security policies and incident response information to enhance transparency and trust.

S

Second Century Ventures

secondcenturyventures.com

48

Second Century Ventures is a strategic venture capital firm focused on accelerating innovation in the real estate technology sector. Backed by the National Association of REALTORS®, it provides investment funding and strategic partnerships to portfolio companies operating in real estate, financial, insurance, and home service verticals. The firm leverages a unique network of industry executives and entrepreneurs to maximize growth opportunities for its investments. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses SEO and marketing plugins such as Yoast SEO and HubSpot. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business credibility is high given the backing entity and professional presentation.