Real Estate security reports

G

GOLDBECK

goldbeck.de

61

GOLDBECK is an enterprise-level company specializing in integrated building solutions, offering comprehensive services from design through construction to operational services. The website reflects a professional presence targeting business clients primarily in Germany's real estate and construction sectors. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Tailwind CSS and utilizes Azure DNS for hosting infrastructure. The presence of Usercentrics for cookie consent and Google Tag Manager for analytics indicates a moderate level of digital maturity and compliance awareness. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and vulnerability disclosures suggests room for improvement. Overall, the site is accessible without WAF or blocking mechanisms, providing a good user experience and trustworthy business representation.

M

Messe München GmbH

exporeal.net

62

EXPO REAL is a leading international trade fair and conference for the real estate and investment industry, organized by Messe München GmbH. The website provides comprehensive information about the event, including ticketing, exhibitor services, conference programs, and visitor information. It targets professionals and stakeholders in the real estate sector, offering a platform for networking and industry insights. The technical infrastructure is modern, leveraging JavaScript modules, web components, and consent management tools like Usercentrics, ensuring compliance with GDPR and providing a good user experience across devices. Security posture is strong with HTTPS enforced, no visible vulnerabilities, and good privacy practices, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are found. Overall, the site is professional, trustworthy, and well-maintained, reflecting the stature of the EXPO REAL event in the European real estate market.

H

Hanse Haus

hanse-haus.ch

77

Hanse Haus is a well-established German prefabricated house provider with a strong presence in Switzerland, offering individually planned turnkey and shell houses. The company emphasizes customer satisfaction, quality, and personalized service, supported by a large workforce and a history dating back to 1929. Their website is professionally designed, multilingual, and optimized for user experience and accessibility. Technically, the site uses TYPO3 CMS and integrates modern analytics and cookie consent tools, ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital infrastructure with good privacy and security practices, supporting the company's credible market position.

F

frankfurt let‘s talk

frankfurtletstalk.de

53

frankfurt let‘s talk is a specialized event organizer focusing on ESG (Environmental, Social, Governance) challenges and solutions within the real estate and construction industries. The website promotes the second ESG conference scheduled for September 2, 2025, in Frankfurt am Main, targeting professionals, decision-makers, and innovators in the sector. The business model revolves around knowledge sharing, networking, and fostering collaboration to address climate and sustainability challenges. The site is well-branded, professionally designed, and provides comprehensive event details, speaker profiles, and program schedules. Technically, the website is built on WordPress using the Divi theme, optimized with Autoptimize and managed cookie consent via Complianz, indicating a mature digital infrastructure. The site is mobile-optimized, SEO-friendly, and uses modern libraries such as jQuery 3.7.1. Hosting appears to be with rzone.de, a known hosting provider. Performance is moderate with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies. WHOIS data shows a relatively new domain consistent with the business timeline, with no privacy protection but limited registrant details. Overall, the website presents a trustworthy, professional, and compliant platform for ESG-focused real estate events, with recommendations to enhance security headers and publish incident response information to further strengthen trust and security posture.

L

Lighthouse Engineering

lighthouseeng.com

61

Lighthouse Engineering is a specialized service provider focusing on residential and commercial foundation inspections and planning. The company appears to be established since 2007, with a domain age consistent with its business history. The website is built on WordPress using the Divi theme and incorporates Yoast SEO for search optimization. The technical infrastructure includes Cloudflare DNS but lacks DNSSEC and security headers, indicating room for improvement in security hardening. The website content is professional and relevant to its target audience of property owners and developers, but lacks explicit privacy, cookie, and terms of service policies, which impacts compliance posture. Overall, the security posture is basic with HTTPS enabled but missing advanced protections and incident response information. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure and incident response contacts to enhance trust and compliance.

D

Dinalsa d.o.o. Sarajevo

dinalsa.ba

50

Dinalsa d.o.o. Sarajevo is a medium-sized construction and infrastructure service provider operating primarily in Bosnia and Herzegovina with over 20 years of experience. The company specializes in turnkey construction solutions including electrical, water, and thermal installations, as well as civil engineering works such as demolition, concrete processing, and equipment rental. Their market position is supported by a portfolio of reputable partners and a professional online presence. Technically, the website employs modern front-end technologies and is mobile optimized, though it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for compliance and security enhancements.

S

SSP AG

ssp.ag

48

SSP AG is a leading German architectural and engineering firm specializing in integral planning, with approximately 200 employees across multiple offices in Bochum, Karlsruhe, Aachen, Berlin, and Münster. The company emphasizes attractiveness, adaptability, and energy efficiency in its projects, positioning itself as a top integrative planning office in Germany. Their website reflects a professional and modern digital presence built on WordPress, enhanced with SEO and cookie management tools, and supported by a GDPR-compliant privacy framework. The site is well-structured, mobile-optimized, and regularly updated with news and project highlights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is privacy-protected, which is common and justified for this business type, and no suspicious patterns were detected. Overall, SSP AG demonstrates a mature digital infrastructure aligned with its market position and business needs.

M

MAX Badkamers

maxbadkamers.nl

63

MAX Badkamers is a Dutch company specializing in high-quality bathroom renovations and bathroom elements. Founded in 2019, the company targets homeowners seeking safe, comfortable, and modern bathroom solutions. The website reflects a professional business with a strong customer satisfaction rating (9.2/10 from 322 reviews) and offers services such as showroom visits, free brochures, and home advice. The business operates primarily in the real estate sector, focusing on home improvement. Technically, the website is built on a modern Next.js framework with React, integrating various marketing and analytics tools including Cookiebot for cookie consent management, Google Analytics, Facebook Pixel, and Bing Ads. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and published security policies limits the security maturity. Privacy compliance is partially met with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service. No incident response or vulnerability disclosure information is published, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security best practices.

Office Planning Solutions is a small, specialized service provider focused on creative office space and facility planning primarily for real estate brokerages, corporate offices, and banking facilities. The company has a long-standing presence since 2004 and is nationally recognized for its personalized approach to office space design and strategic facility planning. The website reflects a professional business with clear contact information and relevant service descriptions, targeting businesses seeking to optimize their office environments. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by DreamHost with domain registration through NameCheap. The site is mobile optimized and offers good navigation and user experience, though SEO and accessibility features are basic. No CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. There are no visible forms or input fields on the homepage, reducing immediate attack surface, but the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy but would benefit from improved privacy compliance and enhanced security headers. The domain registration data supports legitimacy with consistent business history and transparent registration details.

V

VDB Holidayhome

vdbholidayhome.nl

41

VDB Holiday Home is a Dutch company specializing in the sale and investment of recreational holiday homes located in scenic natural parks across the Netherlands. The company offers both new and occasion chalets, targeting individuals seeking private holiday residences as well as investors interested in combining recreation with investment. The website reflects a niche market position with a focus on quality and location. Technically, the website is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, and integrates common marketing and analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy, with clear contact information and consistent branding, but could improve in privacy and security transparency.

G

Goedhuis

goedhuis.nl

45

Goedhuis is a Dutch company specializing in the innovative construction of affordable, sustainable, and customizable detached homes. They leverage a unique sandwich panel system to build energy-neutral houses faster and more efficiently than traditional builders. The company offers an online configurator for customers to personalize their homes and supports the sales process with a showroom in Hendrik-Ido-Ambacht. Their market position is that of an innovative and transparent builder in the Dutch residential real estate sector, targeting individuals and families seeking modern, energy-efficient homes. Technically, the website is built on WordPress with modern plugins and performance optimizations, including Yoast SEO, Google Analytics, Facebook Pixel, and WP Rocket. The site is mobile-optimized and uses HTTPS with DNSSEC enabled, indicating good security practices. However, there are areas for improvement such as implementing a cookie consent mechanism, adding Content Security Policy headers, and publishing a security.txt file for vulnerability disclosures. Overall, the website is professional, trustworthy, and content-rich, supporting a medium-sized business with a solid digital presence.

D

Daibau International d.o.o.

daibau.cz

67

Daibau.cz is a Czech Republic-based online platform specializing in connecting customers with verified construction and renovation service providers. The platform offers a comprehensive directory of service providers, project inquiry submission, price estimation tools, and customer reviews, positioning itself as the largest service platform in its market. The website demonstrates a good level of digital maturity, employing modern web technologies such as jQuery, lazy loading, Google Tag Manager, and Facebook Pixel for analytics and marketing. It also implements a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforcement and CSRF protection, though some HTTP security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the professional presentation and extensive content suggest a legitimate business. Overall, the site provides a user-friendly experience with good mobile optimization and clear navigation.

UNIKO Písek, s.r.o. is a Czech construction company specializing in general contracting for industrial, engineering, agricultural, civil, and residential buildings. Founded in 1992, it operates with a small team of 25 employees and holds ISO 9001 certification, indicating a commitment to quality management. The company presents a professional website with detailed project references and clear contact information, targeting clients in the Czech Republic's construction sector. Technically, the website is built on WordPress 6.7.2 using the dt-presscore theme and includes modern technologies such as jQuery and Google reCAPTCHA v3 for bot protection. The site is moderately performant, mobile-optimized, and has basic SEO and accessibility features. Hosting and domain registration are consistent with the company's location and history. From a security perspective, the site enforces HTTPS and uses reCAPTCHA but lacks important HTTP security headers and does not publish a security policy or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable GDPR compliance gap. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and privacy compliance measures to improve its risk posture and user trust.

A

Asental Group

asental.cz

44

Asental Group operates as a medium-sized real estate company specializing in commercial and industrial property development, sales, and leasing primarily in the Czech Republic. Their website showcases multiple real estate projects including office complexes and industrial parks, targeting investors and businesses seeking property solutions in the region. The company maintains a professional online presence with clear navigation, project details, and compliance with privacy regulations. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and well-maintained, with room for security enhancements.

A

ABADIA a.s.

balkony-a-lodzie.cz

43

ABADIA a.s. is a Czech-based company specializing in the manufacturing and installation of suspended balconies and lodžies, primarily targeting panel houses. Established in 2012, the company has built a strong market presence in the Czech Republic and Slovakia, with some projects in Germany. Their services include design proposals, static assessments, 3D visualizations, manufacturing, and installation, positioning them as a leading supplier in their niche. The website reflects a professional business with clear contact information and a portfolio of completed projects, supporting their credibility. Technically, the website employs common marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook SDK, and CookieYes for cookie consent management. The site appears to be custom-built without a known CMS and is hosted via Active24. While the site has moderate performance and basic mobile optimization, some technical improvements are needed, particularly regarding HTTPS enforcement and security headers to enhance security posture. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR principles but lacks visible privacy policies, terms of service, or incident response information. The absence of HTTPS on some resources introduces mixed content risks. No critical vulnerabilities or blocking mechanisms were detected, but security best practices could be improved to protect user data and enhance trust. Overall, the website is functional and professional but would benefit from enhanced security measures, explicit privacy documentation, and technical modernization to improve user trust and compliance.

M

maerz architekten ag

maerz.ag

45

maerz architekten ag is a Swiss architecture firm specializing in architecture, development, spatial planning, and project realization. Operating as a subsidiary of RaumUnion AG, the company serves clients primarily within Switzerland, offering professional architectural services with a focus on quality and regional projects. The website presents a professional portfolio and clear contact information, reinforcing its market presence. Technically, the website is built on WordPress with modern technologies such as Alpine.js and jQuery, optimized for performance and mobile responsiveness. Hosting is provided by Hostpoint AG, inferred from DNS records. Google Analytics is integrated via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to strengthen its posture and user trust.

R

raumwerk ag

raumwerkag.ch

28

raumwerk ag is a Swiss-based company specializing in comprehensive and reliable construction processes, including project development, building permit procedures, realization phases, and project handover. As a total contractor and part of the RaumUnion AG group, raumwerk ag emphasizes responsible specialists, customer security, transparency, and quality execution. The company targets clients seeking trustworthy construction project management and related services in the real estate sector. The website reflects a professional and consistent brand image with clear contact information and a focus on service offerings. Technically, the website is built on WordPress with modern JavaScript libraries such as Alpine.js and jQuery. It uses WP Rocket for performance optimization and loads resources efficiently. The site is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration, but no security headers were detected. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No analytics or tracking scripts were found, indicating minimal user tracking. The WHOIS data is consistent with the business claims, showing legitimacy and domain age appropriate for the company's stated history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response to improve its security posture and regulatory adherence.

B

baumanager ag

baumanager.ag

48

baumanager ag is a Swiss-based architectural and construction project management company, operating as a small but specialized service provider. The company emphasizes holistic and innovative architectural solutions, coordinating project quality, costs, and timelines effectively. As a subsidiary of RaumUnion AG, it benefits from a reputable parent company association. The website is professionally designed using WordPress with modern frontend technologies, providing a good user experience and clear business information. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and serves its target audience well, but compliance and security enhancements are recommended.

Z

Zindel United

zindel-united.swiss

53

Zindel United is a Swiss-based company specializing in sustainable architectural design and construction services. Their business model focuses on creating resource-conscious and generational building solutions, positioning them as a reputable player in the Swiss real estate and construction sector. The website reflects a medium-sized enterprise with a professional online presence, targeting clients interested in sustainable and innovative building projects. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in implementing additional security headers. Overall, the website is trustworthy, well-structured, and compliant with GDPR and Swiss data protection laws.

R

RaumUnion AG

raumunion.ch

49

RaumUnion AG is a Swiss-based company specializing in architecture and realization services, targeting institutional investors, real estate funds, private investors, public entities, foundations, and cooperatives. Their offerings include modular and flexible services for new constructions and renovations across residential, commercial, healthcare, and industrial sectors. The company positions itself as an expert with tailored project models to meet diverse client needs. Technically, the website is built on WordPress with modern JavaScript libraries like Alpine.js and jQuery, optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and partner relationships.

P

PEYTON legal

peytonlegal.cz

49

PEYTON legal is a Czech Republic-based legal services provider specializing in comprehensive corporate housekeeping and transactional legal advisory services. The firm aims to be a reliable partner to its clients, focusing on corporate law and real estate legal matters. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting business clients and corporate entities. Technically, the site is built on WordPress with modern libraries such as jQuery and Slick Carousel, and integrates Google Analytics and CookieHub for analytics and cookie consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the website's professional presentation and trust signals mitigate some concerns. Contact is primarily via a web form, with no explicit emails or phone numbers found. Overall, the site is well-structured, GDPR compliant, and suitable for its target audience.

S

SIA Rēzeknes Namsaimnieks

reznam.lv

49

SIA Rēzeknes Namsaimnieks is a Latvian property management company focused on servicing residential and municipal properties in Rēzekne. The website provides information about their services including property maintenance, energy efficiency, procurement, and community projects such as animal shelter support. The company targets local residents and property owners, positioning itself as a regional leader in property management. The website is built on WordPress, leveraging common web technologies and hosted behind Cloudflare DNS services. The site includes client login portals and regularly updated news content, indicating active engagement with its audience. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial with a basic privacy policy present but no explicit GDPR consent tools. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

P

ProEx 2000

proex2000.cz

58

ProEx 2000 is a Czech Republic-based company specializing in roofing and construction materials and services. The website presents a professional and well-structured platform targeting homeowners and construction professionals seeking roofing solutions. The business model appears to be a mix of B2C and B2B sales with a regional focus. Technically, the website employs common modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies on the site reduce the overall trustworthiness and compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and documented incident response or security policies, which are areas for improvement. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures to improve trust and compliance.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

L

London Build

londonbuildexpo.com

67

London Build is the UK's leading and largest construction expo, attracting over 38,000 attendees, 750+ speakers, and 450+ exhibitors. The event offers a comprehensive platform for networking, knowledge sharing, and business development within the construction sector. The website is professionally designed, mobile-optimized, and provides detailed information about the event stages, speakers, and exhibitor opportunities. Technically, the site uses a modern tech stack including jQuery, ScriptJS, and CookieYes for consent management, hosted on a platform powered by ASP.events SHOWOFF CMS. Security posture is good with HTTPS enforced and bot protection cookies in use, though security headers are not visibly present and no explicit security or incident response policies are published. Privacy compliance is strong with a clear cookie consent mechanism and links to comprehensive privacy and cookie policies hosted on the parent company’s domain. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

M

Melbourne Build Expo

melbournebuildexpo.com

64

Melbourne Build Expo is a newly established but rapidly growing trade show event focused on the construction and design industry in Victoria, Australia. It is officially supported by government officials and features a large number of speakers, exhibitors, and networking opportunities. The website is professionally designed using modern web technologies and a specialized CMS platform, providing a good user experience and mobile optimization. However, the site lacks some key compliance documents such as privacy policy and terms of service, which should be addressed to improve trust and legal compliance. Security posture is adequate with HTTPS and cookie consent implemented, but could be enhanced by adding security headers and publishing a security policy. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency with the event's timeline.

S

Sydney Build Expo

sydneybuildexpo.com

64

Sydney Build Expo is a major Australian construction and design trade show, hosting hundreds of exhibitors and speakers, targeting professionals across the construction industry. The website is professionally designed, content-rich, and optimized for user experience, showcasing detailed event information, speaker profiles, and networking opportunities. Technically, the site uses modern web technologies including jQuery, FontAwesome, and Google Tag Manager, with a CMS platform SHOWOFF by ASP.events. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit privacy and security policies are missing. WHOIS data is unavailable, which raises some legitimacy concerns, but the site content and external partnerships suggest a legitimate business presence. Overall, the site is a credible and professional platform for the Sydney Build Expo event.

N

New York Build

newyorkbuildexpo.com

66

New York Build is a major construction and design trade show held in New York City, targeting professionals such as contractors, architects, engineers, developers, government officials, investors, and realtors. The event features a large number of attendees, exhibitors, and speakers, positioning itself as the largest construction and design show in New York. The website is built on the SHOWOFF CMS platform by ASP.events and uses modern web technologies including jQuery, Google Tag Manager, and Leadinfo for analytics and tracking. The site is well-structured with good navigation, mobile optimization, and accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not explicitly detected and privacy policies are missing. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the professional presentation and event branding suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and verify domain registration details.

C

Chicago Build

chicagobuildexpo.com

60

Chicago Build 2025 is a major construction and design trade show positioned as the Midwest's largest event in this sector. It attracts over 30,000 attendees, 400+ speakers, and 350+ exhibitors, offering a comprehensive platform for networking, education, and business development within the construction industry. The event is organized by Oliver Kinross Events and features multiple conference tracks and workshops. The website is professionally designed, mobile-optimized, and provides rich content about the event, speakers, exhibitors, and industry news. Technically, it uses a modern tech stack including jQuery, FontAwesome, and a proprietary CMS (SHOWOFF by ASP.events). Security posture is moderate with HTTPS implied but lacks visible security headers and privacy compliance documentation. WHOIS data is missing, raising concerns about domain legitimacy, though the site content and branding suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

N

Nineteen Events

theworkplaceevent.com

71

The Workplace Event is a UK-based professional event platform focused on workplace and facilities innovation, bringing together a diverse audience of workplace leaders, facilities managers, HR professionals, and technology experts. The event offers a comprehensive program including exhibitions, seminars, networking opportunities, and awards, positioning itself as the largest gathering of its kind in the UK. The website is well-branded and professionally designed, reflecting a mature business presence in the real estate and facilities sector. Technically, the website employs a modern tech stack including jQuery, bxSlider, and HubSpot integrations, supported by multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and Cyber Essentials certification, but could benefit from enhanced security headers and a published security policy. No critical vulnerabilities or adult content were detected, and privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data for the domain is missing, which is unusual and slightly reduces trustworthiness. Overall, the site demonstrates a solid security and compliance posture with room for improvement in transparency and security header implementation.

M

M2C

m2c.eu

46

M2C is an established international group specializing in integrated facility management, security services, and digital innovation for building management. Operating in 13 European countries and the USA, M2C offers comprehensive services including maintenance, cleaning, security, and advanced technology solutions to optimize building operations. The company also invests in software development through its subsidiary Good Sailors, which emphasizes social responsibility by employing disabled developers. M2C recently entered the Prague Stock Exchange, signaling growth and investor interest. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Hotjar. The site is well-structured, mobile-optimized, and uses multiple languages to serve a broad audience. Security practices include HTTPS and asynchronous loading of tracking scripts, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a visible privacy policy and terms of service reduces privacy compliance scores. The WHOIS data is privacy protected, which is common but limits transparency. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy disclosures. Strategically, M2C should enhance its privacy and legal policy visibility, strengthen security headers, and maintain rigorous audits of third-party scripts to uphold trust and compliance in a competitive market.

N

Noor Jobs AB

ledigajobb.se

64

Ledigajobb.se is a Swedish job search platform operated by Noor Jobs AB, founded in 2018. The website offers a large inventory of job listings across Sweden and some international locations, targeting job seekers and employers. The platform provides career advice, guides, and recruitment advertising services, positioning itself as a significant player in the Swedish employment market. Technically, the site uses modern web technologies including Bootstrap, Google Fonts, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. It is hosted behind Cloudflare DNS and likely uses CDN services for performance. The site is mobile-optimized and implements a Progressive Web App (PWA) approach for enhanced user experience. Security-wise, the site enforces HTTPS and uses modern JavaScript libraries without visible vulnerabilities. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose security or incident response policies. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms on the homepage. The domain registration is transparent, consistent with the business location and history, and shows no suspicious patterns. Overall, the website is professional and functional but could improve in privacy and security transparency.

A

AproapeAcasă

aproapeacasa.ro

48

AproapeAcasă is a Romanian real estate platform launched recently in 2024, offering property listings, free evaluations, and professional consultancy to facilitate buying, selling, and renting homes. The website is built on WordPress with modern SEO and marketing tools, targeting individuals and businesses in Romania seeking real estate solutions. The platform positions itself as a trusted intermediary with premium promotion services and dedicated support. Technically, the site uses a solid WordPress infrastructure with Elementor and various plugins, hosted under a Romanian registrar with DNS via Cloudflare. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but would benefit from enhanced privacy and security measures.

D

Delta AG

delta.at

52

Delta AG operates as a comprehensive service provider in the construction sector, offering architecture, general planning, construction management, green building, and IT services primarily in Austria. The company positions itself as a trusted partner for building projects, with a professional and consistent online presence targeting business clients in the real estate and construction industries. The website is built on WordPress with modern SEO and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates good compliance with GDPR and marketing transparency, but lacks visible direct contact information and formal security policies. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

R

Rethink Architecture Institute, z. ú.

climarchibase.cz

55

ClimArchiBase is an educational and informational platform focused on sustainability in architecture and real estate, operated by the Rethink Architecture Institute, a Czech non-profit organization. The platform collaborates with several Czech non-profits and is supported by EU and national funding. It offers seminars, consultancy services, case studies, and a variety of resources aimed at architects, developers, public investors, and sustainability professionals. The website is well-structured, professionally designed, and provides relevant content for its target audience. Technically, it is built on Webflow CMS with modern web technologies and uses privacy-friendly analytics. However, the absence of WHOIS data and lack of explicit privacy and cookie policies slightly reduce trust and compliance scores. Security posture is moderate but could be improved by adding security headers and incident response information.

N

NOHO

cihlovka.cz

52

The website cihlovka.cz represents a real estate development project by NOHO focused on revitalizing the Kukleny district in Hradec Králové, Czech Republic. It highlights sustainable residential buildings, including the first passive house in the city, and offers modern living solutions with amenities such as carsharing and proximity to public transport. The site is professionally designed using WordPress and WPBakery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and Wordfence plugin presence, but lacks visible security headers and privacy policies, indicating room for improvement in compliance and security best practices. Overall, the domain registration is consistent with the business claims, supporting legitimacy and trustworthiness.

M

Mimokolektiv

mimokolektiv.cz

54

Mimokolektiv is a small architectural and design studio based in Olomouc, Czechia, offering services in architecture, garden architecture, interior design, and product design. The company also operates a design shop and has an e-commerce presence linked via mimoshop.cz. The website is professionally designed using the Squarespace platform, featuring rich visual content and clear navigation. Technical infrastructure includes modern web technologies and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy and cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which raises concerns about domain registration transparency but does not detract from the professional presentation of the business. Overall, the website is trustworthy and suitable for its target audience, though enhancements in privacy compliance and security best practices are recommended.

M

MgA. Filip Kotlář Architekt

kotlararchitekt.cz

47

Filip Kotlář architekt is a small architecture studio based in Prague, Czech Republic, offering architectural design and consulting services. The website presents basic business information including contact details and physical addresses, targeting clients seeking architectural expertise locally. The business model is straightforward, focusing on personalized architectural services without evident e-commerce or large-scale operations. Technically, the website is built on the Webflow platform using standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile devices and has a good user experience with clear navigation, though SEO and accessibility features are basic. Security posture is limited; no HTTPS or security headers were explicitly detected in the provided data, and no privacy or cookie policies are published, which may impact compliance and trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate for a small local business. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

P

Prodesi/Domesi

prodesidomesi.cz

51

Prodesi/Domesi is a Czech Republic based architectural and construction firm specializing in wooden houses and dřevostavby (wooden buildings). The company offers comprehensive services including individual design and realization, turnkey wooden houses, and public/commercial buildings. With over 22 years of experience and 250 completed projects, they hold a solid regional market position. Their website is professionally designed, mobile optimized, and includes clear navigation and relevant content targeting clients interested in wooden architecture. Technically, the site uses WordPress CMS with modern tracking and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Hosting is provided by OVH, a reputable provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and social media presence.

D

DEBYT

debyt.cz

59

DEBYT is a small Czech architecture and furniture design studio that integrates architectural services with sociological participation and community involvement. Their offerings include architectural projects, artistic creations by architect Tomáš Petrášek, and a curated e-shop for retro and antique furniture renovation and sales. The website presents a professional portfolio and clear contact information, targeting clients interested in personalized architectural and furniture solutions. Technically, the website uses modern analytics tools and is mobile-optimized, but lacks some security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain legitimacy, although the website content itself is professional and safe. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

T

TSC Facility, s.r.o.

tsc-facility.com

51

TSC Facility, s.r.o. is a Czech-based company specializing in integrated facility management, technical building management, and maintenance services. It operates as part of the larger TSC Group, which is the largest holding in its sector in the Czech Republic. The company offers a comprehensive range of services including facility management, technical inspections, maintenance, and consulting, targeting businesses that require professional upkeep of their commercial, administrative, or production facilities. The website is professionally designed, multilingual, and provides clear contact channels including a GDPR-compliant contact form. From a technical perspective, the website employs modern web technologies such as Google Tag Manager for analytics, Swiper.js for interactive carousels, and the Nette framework for form validation. The site is mobile-optimized and demonstrates good SEO practices. However, some security best practices like explicit security headers are not evident, and the SSL configuration details are not provided. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response or security policy disclosures. The site includes GDPR compliance elements such as a privacy policy and consent checkbox on forms but lacks a cookie consent mechanism. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance and business consistency. Overall, the website is a credible and professional business platform with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, verifying SSL configuration, adding explicit cookie consent, and resolving WHOIS data inconsistencies.

A

AGRO 21 s.r.o.

agro21.cz

59

AGRO 21 s.r.o. is a Czech company specializing in the organization of agricultural land purchases directly for farmers, avoiding resale to maximize prices for sellers. The company positions itself as a trusted intermediary with over 4000 transactions in more than a decade, targeting landowners and farmers primarily in the Czech Republic. The website is professionally designed, with clear navigation and relevant content focused on their services, references, and social responsibility initiatives. Technically, the site uses Orchard CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is moderate with no visible security headers and missing WHOIS transparency, which slightly reduces trust. Overall, the site is accessible, informative, and compliant with privacy regulations but could improve in security best practices and domain registration transparency.

M

MyNemo Planning s.r.o.

mynemo.cz

55

MyNemo Planning s.r.o. operates a professional website focused on providing comprehensive real estate investment planning and management services primarily in the Czech Republic. The company offers a broad range of services including analysis, project realization, financing, property sales and purchases, and ongoing consultation. Their market position is that of a niche, client-focused service provider emphasizing an all-inclusive approach to simplify complex real estate processes for their customers. The website content is well-structured, professionally designed, and targets individuals seeking expert assistance in real estate investments. Technically, the website employs a modern but somewhat dated technology stack including Bootstrap 3.3.6, jQuery 1.12.4, and various UI libraries such as Owl Carousel and Font Awesome. The site is mobile optimized and provides a good user experience with clear navigation and responsive design. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness, although the website content and contact information appear legitimate. Overall, the website is professional and trustworthy from a business perspective but requires improvements in privacy compliance and security best practices. The lack of WHOIS data reduces domain trust and should be investigated further to ensure legitimacy.

J

JUDr. František Štourač advokátní kancelář

brnoadvokati.cz

57

The website represents a professional law firm based in Brno, Czech Republic, specializing in a broad range of legal services including criminal, family, commercial, and administrative law. The firm emphasizes personalized, reliable, and discreet legal support with a team of qualified lawyers and support staff. The business is well-established with nearly two decades of experience and a solid client base. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google services, hosted behind Cloudflare for performance and security. Security measures include HTTPS, reCAPTCHA on forms, and a comprehensive cookie consent mechanism, although explicit security headers and dedicated security policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it suitable for its target audience of individuals and businesses seeking legal counsel in the Czech Republic.

L

Livingstav s.r.o.

livingstav.cz

43

Livingstav s.r.o. is a small, established architectural and urban planning firm based in Brno, Czech Republic, founded in 1992. The company offers architectural and urbanist design services and acts as a general project manager overseeing projects from initial phases through to building permits and final approvals. The website reflects a professional business presence with a focus on showcasing references and services. Technically, the site is built on WordPress using common libraries such as jQuery, UIkit, and Leaflet.js for mapping, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices but lacks visible advanced accessibility features. Security posture is moderate with no visible HTTPS enforcement or security headers in the provided data, and no privacy or terms of service pages were found, which may expose compliance risks. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from improved security and compliance measures.

T

The QUIKRETE® Companies

flagstonepavers.com

62

Flagstone Pavers is a well-established business specializing in hardscape products such as pavers, retaining walls, coping, and permeable pavers. The company operates under the reputable QUIKRETE® brand, targeting homeowners, contractors, and hardscape professionals. Their website provides product catalogs, resources, and training materials to support their customers. The domain has a long history dating back to 2000, reinforcing their market presence and credibility. Technically, the website is built on WordPress with modern technologies including Bootstrap and various tracking and analytics tools. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and domain locking but lacks DNSSEC and some security headers. Privacy compliance is basic, with no cookie consent mechanism or GDPR indicators detected. Overall, the website is trustworthy and professionally maintained but could improve in privacy and security transparency.

O

OK REAL ESTATE s.r.o.

okrealestate.cz

48

OK REAL ESTATE s.r.o. is a Czech Republic based real estate agency offering a comprehensive range of services including property sales, rentals, financial services, insurance, and virtual tours. The company is part of the larger OK HOLDING group, which enhances its market position and service capabilities. The website is professionally designed with clear navigation, multiple client engagement forms, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies including Google Analytics and Seznam Map API, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and form validations, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, the site is a reliable digital presence for a medium-sized real estate business in the Czech market.

V

VHST Holding a.s.

vhst.cz

51

VHST Holding a.s. is a Czech joint-stock company operating primarily in water management construction, real estate development, and social responsibility through its foundation VHST Nadace. The company holds a strong regional market position as one of the largest water management construction firms and actively engages in community partnerships and sponsorships. The website reflects a medium-sized enterprise with consistent branding and good content quality, targeting business clients and community stakeholders in the Czech Republic. Technically, the website uses modern JavaScript libraries such as jQuery, Owl Carousel, and SimpleLightbox, along with Google Analytics and Google Tag Manager for tracking. The site is hosted likely by REG-ZONER, with moderate performance and good mobile optimization. SEO and accessibility are basic but functional. The website employs HTTPS and a cookie consent mechanism, though lacks advanced security headers and explicit security policy documentation. From a security perspective, the site shows a good baseline with HTTPS and cookie consent but lacks visible security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Privacy compliance is basic with a GDPR policy and cookie information but no terms of service or vulnerability disclosure. Overall, the website presents a professional and trustworthy business presence with room for improvement in security policies, contact transparency, and technical SEO. The risk level is low, but enhancing security headers and incident response readiness would strengthen the posture.

S

START Zelený s.r.o.

zeleny.cz

60

START Zelený s.r.o. is a small Czech Republic based company specializing in construction work, sales of building materials, and garden and forest machinery. The company targets local customers primarily in the Kraj Vysočina region. The website is built on the Wix platform, leveraging Wix Thunderbolt and standard web technologies, providing a moderate level of performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data due to privacy protection limits transparency but does not contradict the business legitimacy indicated by the website content and structured data. Overall, the site presents a professional and trustworthy image for a small regional business.

Ateliér AJV, s.r.o. is a Czech family-run architectural and engineering studio specializing in project design, engineering activities, industrial construction, developer projects, engineering networks, and heritage reconstruction. With over 33 years of experience and more than 1000 completed projects, the company serves a diverse clientele including industrial firms, developers, and public institutions. Their website reflects a professional and consistent brand image with detailed service descriptions and client testimonials, positioning them as a trusted regional player in the real estate and construction sector. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, and includes Google Analytics for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, though it lacks a dedicated privacy policy and terms of service pages, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled and email obfuscation implemented, but missing security headers and incident response information suggest room for improvement. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of company contact details and consistent branding supports credibility.