Transportation security reports

S

Safetravel

safetravel.is

57

Safetravel is a reputable non-profit organization dedicated to providing official travel safety information and emergency support services in Iceland. Operated by ICE-SAR, the Icelandic Association for Search and Rescue, the website serves as a critical resource for travelers, offering real-time travel conditions, safety tips, travel plan submissions, and emergency alerts. The organization maintains a strong market position as the authoritative source for safe travel in Iceland, supported by a robust digital presence including a dedicated mobile app and multilingual content.

B

BIGGEST

biggestpujcovna.cz

47

BIGGEST is a Czech Republic based company specializing in the rental of construction machinery and related accessories. With over 21 years of experience, they offer a wide range of equipment including excavators, loaders, dozers, dumpers, rollers, and more, targeting both specialists and the general public. Their business model includes rental with optional operator service and own transport capabilities, positioning them as a reliable medium-sized player in the construction equipment rental market. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Sentry for error monitoring. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. However, no CMS or hosting provider information is explicitly detected, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and business presence appear professional and trustworthy. Overall, the website presents a solid business presence with good content quality and privacy compliance, but would benefit from enhanced security practices and domain registration transparency to improve trust and reduce risk.

C

car.advisor

car-advisor.cz

64

car.advisor is a Czech Republic-based online review platform specializing in ratings and reviews for automobile dealers representing major brands such as Volkswagen, Audi, SEAT, CUPRA, Volkswagen Užitkové vozy, and Das WeltAuto. The platform targets both car buyers and dealerships, providing a localized service to enhance transparency and trust in the automotive sales market. The website demonstrates a professional and modern design, leveraging Next.js and React frameworks, and is hosted on Microsoft Azure CDN, ensuring reliable performance and scalability. The presence of a cookie consent mechanism via OneTrust indicates awareness of GDPR compliance requirements, although explicit privacy and terms of service policies are not clearly found on the site. Security posture is solid with HTTPS enforced, but could be improved with additional security headers and published security policies. The lack of WHOIS data and contact information reduces overall trustworthiness and business credibility. Strategic recommendations include publishing comprehensive privacy and security policies, adding contact and incident response information, and improving transparency around domain registration.

M

MIBO SCOOTERS s.r.o.

mibo.cz

59

MIBO SCOOTERS s.r.o. is a small Czech manufacturer specializing in handcrafted kickscooters and electric kickscooters, operating since 1998. The company emphasizes artisanal production in the Walachian region and maintains a close relationship with its sellers. Their website reflects a niche business model focused on quality and craftsmanship, targeting consumers interested in unique and locally made transportation solutions. The company leverages social media platforms such as Facebook, Instagram, and YouTube to engage with customers and promote their products. Technically, the website is built on the Solidpixels CMS platform and uses modern web technologies including Google Tag Manager and Google Analytics for tracking. The site is mobile optimized with good SEO practices and a cookie consent mechanism that supports GDPR compliance. However, the absence of a published privacy policy and terms of service documents represents a compliance gap. From a security perspective, the website uses HTTPS and implements cookie consent but lacks visible security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and business information appear legitimate. Overall, the website scores well in content quality, technical implementation, and business credibility but should improve privacy compliance and security best practices. Strategic recommendations include publishing privacy and terms documents, adding security headers, and clarifying incident response contacts to enhance trust and compliance.

A

AUMOVIO Aftermarket GmbH

galfer-hamulce.pl

62

GALFER is a specialized supplier of high-quality brake components, targeting both B2B and B2C customers primarily in Poland and supported by an international partner network. The website presents a professional and consistent brand image with clear navigation and relevant content focused on brake pads and dealer services. The technical infrastructure leverages modern tools such as Google Tag Manager and reCAPTCHA Enterprise, and is built on Umbraco CMS, indicating a mature digital presence. Security measures include HTTPS usage and CSRF protection, though explicit security headers are not detected, suggesting room for improvement. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, supporting GDPR adherence. Overall, the site is trustworthy and well-positioned in its market segment.

P

Planet Express

planetexpress.com

66

Planet Express is a medium-sized logistics and package forwarding service provider established in 2001, offering US address provision and international package forwarding with consolidation services. The company targets international shoppers and businesses seeking to shop in US stores and ship globally. The website is built on WordPress with modern SEO and analytics integrations, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and domain registration protections, though it lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with comprehensive policies and a cookie consent mechanism. Overall, the site is professional, trustworthy, and technically sound, supporting its business operations effectively.

L

Loopi

loopi-velo.fr

60

Loopi is a French company specializing in sustainable and innovative tourism solutions. Their website positions them as a partner for accelerating the transition to sustainable tourism by offering unique circuits and enhancing user experience. The company targets tourism professionals and eco-conscious travelers, emphasizing heritage valorization and environmental responsibility. Technically, the website is built on WordPress using the Divi theme, with integrations such as Yoast SEO, Contact Form 7, Matomo analytics, and Google reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and anti-bot measures, but lacks explicit security headers and formal privacy or cookie policies. The absence of public WHOIS data suggests privacy protection, which is common for small businesses but slightly reduces trust. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

Z

Zlatá koloběžka – města Plzni

zlatakolobezka.cz

44

Zlatá koloběžka is a well-established traditional scooter racing event based in Plzeň, Czech Republic, with roots dating back to 1996. The website serves as an informational portal for the event, providing schedules, partner information, and contact details. The event targets scooter enthusiasts and the local community, positioning itself as a niche but reputable sports event with a consistent brand presence. Technically, the site is built on WordPress using modern themes and plugins, hosted by a Czech hosting provider, and optimized for mobile devices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and safe for general audiences, though it would benefit from enhanced privacy and security practices to align with GDPR and modern web standards.

L

Lissen

agence-lissen.com

52

Lissen is a French communication agency specializing in global communication services focused on territorial transition projects. Founded in 2023, it operates as a small agency under the Copylot group, serving clients primarily in transportation and energy sectors. The agency offers key services including communication for large projects, citizen participation and consultation, and 3D visualization and immersion. The website is professionally designed, mobile-optimized, and provides clear contact and team information, enhancing its market credibility. Technically, the website is built on WordPress with modern libraries such as Bootstrap 5 and jQuery, hosted by OVH sas. Performance is fast, and SEO and accessibility are well implemented. The site uses GDPR-compliant cookie consent via Tarteaucitron. However, DNSSEC is not enabled and security headers are not detected, indicating room for security improvements. Security posture is good with HTTPS enforced and domain status protections in place, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to further enhance trust and compliance.

K

KICKBIKE CZ

kolobezkyspribehem.cz

9

KICKBIKE CZ operates a website focused on adult scooters, offering a variety of models including sport, city, racing, and mushing scooters. The business emphasizes its 25 years of tradition and storytelling around its products, targeting a general audience interested in transportation and sport scooters. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and includes integrations with Google Analytics and Google Tag Manager for visitor tracking. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security measures include HTTPS usage and JavaScript-based hardening of fetch and XHR requests, but lack explicit security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and structured data suggest a legitimate small business. Overall, the site presents a professional and trustworthy front with room for improvement in privacy compliance and security best practices.

A

Autocentrum Jan Šmucler

smucler.cz

48

Autocentrum Jan Šmucler is a medium-sized automotive dealership and service company based in the Czech Republic, specializing in authorized sales and servicing of major automotive brands including SEAT, CUPRA, Volkswagen, ŠKODA, and Honda Moto. The company operates multiple branches and offers a comprehensive range of services such as new and used car sales, leasing, insurance, and vehicle servicing. Their website reflects a professional and well-structured digital presence with detailed vehicle listings, promotional offers, and customer engagement features. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, Google reCAPTCHA, and secure form handling are implemented, though there is room for improvement in security headers and accessibility compliance. Privacy and legal policies are comprehensive and GDPR compliant, supporting trustworthiness. The absence of WHOIS data slightly impacts domain trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and improving accessibility features to further strengthen the security posture and user experience.

Boula IPK s.r.o. is a Czech engineering and project office specializing in the preparation of project documentation for transport constructions, engineering networks, and urban planning solutions. The company also provides technical supervision and construction realization services, positioning itself as a regional service provider in Plzeň. The website reflects a professional business with clear service offerings and contact information, targeting clients in the transportation and construction sectors. Technically, the website uses a moderately modern stack including jQuery, jQuery UI, and Matomo analytics with cookie consent mechanisms, indicating a reasonable level of digital maturity and privacy awareness. The site is mobile responsive and well-structured, though some accessibility features could be improved. The CMS used is IPO by ANTEE s.r.o., a Czech content management system. From a security perspective, the site lacks visible security headers and publicly available security policies or incident response contacts. The SSL configuration could not be verified from the data provided. The use of Matomo with disabled cookies is a positive privacy practice. The absence of WHOIS data reduces transparency and trustworthiness, which is a concern for domain legitimacy. Overall, the website is functional, professional, and safe for general audiences. However, improvements in transparency, security headers, and privacy documentation are recommended to enhance trust and compliance.

E

e-community solutions s.r.o.

peoplecar.eu

58

Peoplecar is a Czech-based small company operating a shared community electric vehicle service primarily targeting smaller municipalities and communities. Their business model focuses on providing ecological, shared electric cars managed by local entities and accessible via a mobile app. The company positions itself as a sustainable transportation solution addressing local mobility challenges outside large cities. Technically, the website is built on Webflow with integration of modern tools such as Snipcart for e-commerce and Google Analytics for user insights. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are missing. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were detected. Overall, the website and business present a trustworthy and professional image with room for improvement in security transparency and incident readiness.

L

Loxxess AG

loxxess.com

53

Loxxess AG operates as a contract logistics provider specializing in solutions for E-Commerce, Omnichannel, Pharma, and Healthcare sectors. The company positions itself as reliable, efficient, scalable, and transparent, targeting business clients requiring dedicated logistics services. The website is professionally designed, primarily in German, and reflects a mature digital presence with SEO optimization and cookie consent mechanisms in place. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Cookiebot, and integrates Google Tag Manager and hCaptcha for analytics and security respectively. Security posture is good with HTTPS enforced and consent management implemented, though explicit security headers and incident response information are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the website content and structure suggest a legitimate and established business. Overall, the site is well-maintained, with moderate to good technical and security maturity, but could improve transparency and security best practices.

B

BIGGEST

biggest.cz

49

BIGGEST is a large Czech company specializing in demolition, construction, soil stabilization, recycling of construction waste, and rental of construction machinery. The company positions itself as the largest professional in these sectors within its region, offering a broad range of services including packaging services in partnership with other companies. The website is professionally designed, content-rich, and targets clients needing large-scale construction and demolition projects. The presence of partner logos and references enhances its market credibility. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Google Tag Manager, and Sentry for error monitoring. It uses reCAPTCHA for form security and implements GDPR-compliant cookie consent mechanisms. However, explicit contact information such as emails and phone numbers are not directly visible in the provided HTML content, which may affect user trust and ease of contact. Security-wise, the site uses HTTPS and some best practices but lacks visible security headers and published security policies or incident response information. The WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and professional presentation suggest legitimacy. Overall, the site scores well in content quality, business credibility, and privacy compliance but could improve in security posture and transparency.

A

AUMOVIO SE

continental-mobility-services.com

66

AUMOVIO SE is a German-based technology company specializing in advanced automotive and mobility solutions, including software-defined mobility, electric mobility, vehicle electrical/electronic architectures, safety systems, driver assistance, user experience, and cybersecurity. The company targets automotive manufacturers and industry partners, positioning itself as a medium-sized enterprise with a comprehensive portfolio of services and solutions. The website reflects a professional corporate presence with consistent branding and a clear navigation structure, although the accessed page is a 404 error page indicating missing content at the requested URL. Technically, the website leverages modern web technologies such as Adobe Helix CMS, Google Tag Manager, and LinkedIn Insight Tag for analytics and marketing. The site is mobile optimized and uses SVG graphics for logos and icons. Performance is moderate with basic SEO and accessibility features. Security posture is good with HTTPS enforced, but lacks explicit security headers and incident response information on the site. No critical vulnerabilities or security issues were detected in the analyzed content. Privacy and cookie policies are present and appear comprehensive, indicating GDPR compliance. However, no terms of service or vulnerability disclosure policies were found. Social media presence is active on Facebook, LinkedIn, and YouTube, enhancing trust and engagement. Overall, the website demonstrates a solid business credibility and technical foundation, though improvements in security transparency and content completeness are recommended to enhance user trust and compliance.

S

Site2

kickspain2025.eu

43

Kick Spain 2025 is a niche sports initiative promoting a unique scooter challenge paralleling the prestigious Vuelta a España cycling race. The website serves as a platform to showcase the event details, sponsors, merchandise, and social media engagement. The business operates primarily in the transportation and sports event sector, targeting cycling enthusiasts and supporters. Technically, the site is built using Nicepage CMS with jQuery and Google Fonts, hosted by a Czech hosting provider, and demonstrates moderate performance and good mobile optimization. Security posture is basic, with no detected security headers or privacy policies, and no forms collecting sensitive data, reducing immediate risk but indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures.

The website krosovykolobeh.cz is a niche sports event platform focused on organizing and promoting cross-country footbike (krosový koloběh) races and community rides primarily in the Czech Republic. It hosts a series of events under the XC Footbike CUP 2025 brand, providing detailed schedules, registration information, and equipment rental options. The site targets enthusiasts of footbiking and outdoor sports, offering a community hub for this specialized activity. Technically, the site is built using the WEDOS WebSite builder platform, leveraging standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Google Maps API for location services. Hosting is provided by WEDOS, a Czech hosting provider. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features and comprehensive meta-data. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating gaps in compliance and security best practices. No analytics or tracking scripts were detected, suggesting minimal user tracking. The WHOIS data presents a suspicious future domain creation date, which raises questions about registration legitimacy, though the website content appears genuine and detailed. Overall, the site is functional and informative for its niche audience but requires improvements in privacy compliance, security posture, and domain registration transparency to enhance trust and professionalism.

P

Pustevny

pustevny.cz

47

Pustevny.cz is a well-established regional tourism and transportation website focused on the Pustevny mountain area in the Czech Republic. It provides comprehensive information about cable car services, scooter and e-bike rentals, local activities, weather updates, webcams, and events. The website targets tourists and outdoor enthusiasts visiting the region, offering online ticketing and rental booking services to enhance visitor convenience. The domain has been registered since 2000, indicating a stable and credible presence in the market. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Elementor, ensuring good SEO optimization and a modern user experience. The site uses HTTPS with a good SSL configuration and includes cookie consent mechanisms compliant with GDPR requirements. However, explicit privacy policies and security policies are not published, which is a gap in compliance and transparency. From a security perspective, the site employs HTTPS and reCAPTCHA for form protection but lacks visible security headers and incident response information. No vulnerabilities or suspicious content were detected. The website demonstrates a moderate to good security posture but would benefit from enhanced security practices and clearer privacy disclosures. Overall, Pustevny.cz is a professional, trustworthy, and user-friendly website serving its niche effectively. Strategic improvements in privacy policy publication, security headers, and incident response transparency would further strengthen its compliance and security posture.

Y

Yedoo

yedoo.eu

56

Yedoo is a European-based company specializing in the design, manufacture, and sale of adult and children's scooters, balance bikes, and children's bicycles. The company targets families and outdoor enthusiasts, offering a range of products with a focus on quality, durability, and design. Their market position is that of a niche manufacturer and retailer with a strong brand presence in the EU, supported by professional customer care and a 5-year frame warranty. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, but lacks some advanced security headers and explicit incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by adding security.txt and enhancing security headers.

A

AUMOVIO Aftermarket GmbH

cryptontechnology.com

62

Continental Aftermarket, operated by AUMOVIO Aftermarket GmbH, is a prominent player in the automotive aftermarket sector, offering a comprehensive range of products including replacement parts, garage equipment, tyres, and specialized vehicle solutions. The company targets automotive professionals, garages, and distributors primarily in the United Kingdom and internationally. The website reflects a mature B2B business model with strong branding and a broad product portfolio. Technically, the website employs modern tracking and consent management technologies, ensuring GDPR compliance and user privacy. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes a Content Security Policy, but could enhance security headers further. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data retrieval issues, which slightly impacts trustworthiness. Overall, the website demonstrates a solid digital presence aligned with Continental's brand standards.

U

Uniroyal

uniroyal-tyres.com

67

Uniroyal is a tire brand specializing in wet weather driving safety, offering products for cars and trucks. The website positions Uniroyal as a brand under Continental with a long history dating back to 1868. The site provides product information, dealer locators, and brand values, targeting both individual consumers and commercial transport businesses. Technically, the website is built on Adobe Experience Manager, uses Google Tag Manager for analytics, and implements consent management for GDPR compliance. The site is well-structured, mobile-optimized, and professionally designed. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers are not evident. WHOIS data for the domain is unavailable, which reduces trustworthiness and requires further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively.

S

Semperit

semperit.com

64

Semperit is a well-established Austrian tyre brand operating under the Continental group, offering a wide range of tyres for cars, SUVs, vans, trucks, and buses suitable for all weather and road conditions globally. The website demonstrates a professional and consistent brand presence with comprehensive product information, multimedia content, and legal documentation, reflecting a mature digital presence. Technically, the site leverages Adobe Experience Manager CMS, integrates dynamic media, and employs modern tracking and consent management tools, indicating a robust digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy given the brand's reputation and content quality. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

A

AUMOVIO Aftermarket GmbH

galfer-aftermarket.com

66

GALFER is a well-established brand specializing in premium aftermarket brake products, primarily brake pads, targeting automotive and motorcycle markets internationally. The company operates a professional website with multiple language options and country-specific partner sites, reflecting a mature international presence. The business model focuses on manufacturing and distributing high-performance brake components through a dealer network. Technically, the website employs modern tools such as Google Tag Manager and reCAPTCHA Enterprise, and is built on a CMS platform (likely Umbraco), ensuring a stable and maintainable infrastructure. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is moderate with HTTPS usage, CSRF protection, and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences.

ATE is a globally recognized brand specializing in automotive brake technology and aftermarket products. The company offers a wide range of braking components including disc brakes, drum brakes, brake fluids, hydraulic parts, and related services such as partner finder and certified brake centers. The website reflects a mature business with a consistent brand presence and a focus on both B2B and B2C markets. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and ConsentManager for cookie compliance, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and bot protection in place, though there is room for improvement in security headers and published security policies. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a trustworthy online presence.

G

Global Assistance a.s.

na1220.cz

56

The website www.na1220.cz represents the Klub nebeských andělů, a project initiated in 2010 by Global Assistance a.s., Aeroklub ČR, and Letecká amatérská asociace ČR. The project focuses on integrating sport pilots into a voluntary traffic reporting network, enhancing public perception of amateur pilots, and coordinating safety in air and ground operations. The site targets the Czech aviation community and provides news, event information, and contact details for engagement. Technically, the site uses a modern CMS (Solidpixels), employs HTTPS with valid SSL, and includes cookie consent mechanisms aligned with GDPR. However, WHOIS data for the domain is unavailable, which impacts domain trustworthiness. Security headers are missing, and no explicit security or incident response policies are published on the site. Overall, the site is well-structured, content-rich, and professionally presented, but could improve in transparency and security best practices.

C

Citymapper Limited

citymapper.com

47

Citymapper Limited operates a leading urban mobility platform offering a comprehensive transport app available on iPhone, Android, and web. The service integrates multiple transport modes including public transit, cycle hire, ferries, and on-demand cabs, targeting urban commuters seeking efficient multi-modal journey planning. The company is well-established with a domain age of over 19 years and a strong market presence in transportation technology. Technically, the website employs modern web technologies, including JavaScript, Typekit fonts, and a privacy SDK, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic with no explicit privacy or cookie policies found in the provided content. Overall, the site is professional, trustworthy, and safe for general audiences.

N

NOR a.s.

nor.cz

51

NOR a.s. is a Czech company specializing in railway and road construction, maintenance, and sales of steel materials. Founded in 1991, it serves a broad client base including major transportation and industrial companies in the Czech Republic. The website presents a professional image with clear business information and multiple service offerings related to railway infrastructure and civil engineering. Technically, the site uses established but somewhat dated technologies such as jQuery and Bootstrap 3.4, with a cookie consent mechanism implemented to comply with privacy regulations. Security posture is moderate with no visible critical vulnerabilities but lacks advanced security headers and a published privacy policy. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is functional, trustworthy, and business-focused but could improve in privacy and security transparency.

R

RATP Dev Australia

ratpdevaustralia.com.au

66

RATP Dev Australia is a regional branch of the global RATP Dev group, specializing in the operation and maintenance of urban and intercity transportation systems. The company leverages the extensive experience of its parent, RATP Group, a major public transport operator with over a century of history. The website presents a professional image with detailed references to global operations, emphasizing expertise in automated metro systems and various transit modes. Technically, the site is built on Drupal 10 and integrates modern analytics tools with privacy-conscious configurations. Security posture is generally good with HTTPS and cookie consent implemented, though there is room for improvement in security headers and transparency of policies. WHOIS data is incomplete, which slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and branding.

R

RATP Dev

ratpdev.it

53

RATP Dev Italy is a subsidiary of the global RATP Dev group, specializing in operating and maintaining urban and intercity transportation systems across multiple continents. The company offers a wide range of transportation services including bus, tramway, rail, metro, sightseeing, mobility on demand, paratransit, and cable car operations. The website reflects a mature enterprise with a consistent brand and professional content targeting transportation authorities and the general public. Technically, the site is built on Drupal 10 with integration of Google Analytics, Matomo, and Google Maps API, indicating a modern digital infrastructure with moderate performance and good mobile optimization. Security posture is moderate with some privacy-conscious configurations in analytics but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

RATP Dev

ratpdevusa.com

64

RATP Dev USA operates as a regional branch of the global RATP Dev group, providing urban and intercity transportation services across multiple continents. The company offers a wide range of transit solutions including bus, tramway, paratransit, metro, rail, cable cars, and sightseeing services. Their market position is strong as one of the largest multi-modal urban public transit operators with over 120 subsidiaries in 17 countries. The website reflects a professional and consistent brand image targeting transit agencies and passengers. Technically, the website is built on Drupal 10 CMS and leverages modern web technologies including Google Analytics, Matomo for analytics, and Google Maps API for geolocation features. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics. However, some security best practices such as security headers are missing, and no explicit security or incident response policies are published. Security posture is adequate with HTTPS enabled and privacy-conscious analytics configurations, but the lack of WHOIS data and absence of privacy policy and contact information reduce trust. No signs of malware or phishing were detected. Overall, the site is safe and business-focused but would benefit from improved transparency and security disclosures. The risk assessment indicates moderate risk primarily due to missing WHOIS data and incomplete privacy and security disclosures. Strategic recommendations include publishing privacy and security policies, adding security headers, providing clear contact information, and establishing a vulnerability disclosure process.

R

RATP Group

ratpgroup.com

58

RATP Group is a leading global urban transport operator, ranked third worldwide, providing comprehensive mobility services, infrastructure management, real estate, and safety solutions. The company serves cities and regions primarily in France but also internationally, supported by a large workforce and multiple subsidiaries. The website reflects a mature digital presence with a focus on sustainability and corporate social responsibility. Technically, the site uses modern frameworks such as React and Next.js, hosted on Akamai infrastructure, and integrates privacy-conscious analytics via Matomo. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

Via Transportation operates a comprehensive digital platform transforming public transit and shared mobility through software and operations. The company targets a broad audience including cities, transit authorities, operators, educational institutions, corporations, and healthcare providers. Their market position is strong with strategic partnerships such as with Waymo and Citymapper, offering a suite of services from microtransit to corporate shuttles. Technically, the website is built on HubSpot CMS, leveraging modern analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and domain protections, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though direct contact emails and phone numbers are not publicly listed, relying on forms for communication.

E

EFFIA

effia.com

65

EFFIA is a prominent parking service provider operating primarily in France and Belgium, offering parking space reservations and subscription plans across more than 500 locations. The company targets drivers and commuters seeking convenient and cost-effective parking solutions near city centers and train stations. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site is built on Drupal CMS and integrates modern tools such as Google Maps API, Didomi for consent management, and analytics platforms like Piano Analytics and Google Tag Manager. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS registration data for the domain www.effia.com raises some concerns about domain legitimacy, though the website content and business presence appear credible. Overall, the site scores well in content quality, technical implementation, and security, but could improve business credibility by providing more transparent domain registration and direct contact information.

A

ARTOIS MOBILITES

artois-mobilites.fr

47

Artois Mobilités is a regional public transportation authority in France managing the Tadao bus network and mobility initiatives focused on sustainable and innovative transport solutions. The website reflects an active organization with recent news updates, a clear focus on public service, and community engagement through newsletters and social media. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook SDK, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and contact transparency.

M

Marina Strážnice

marinastraznice.cz

57

Marina Strážnice is a specialized marine service provider based in the Czech Republic, offering comprehensive boat maintenance, repair, and accessory sales. Their services cover outboard and inboard motor repairs, boat trailer servicing, marine oils and parts sales, boat painting, upholstery, electrical repairs, and custom boat furniture manufacturing. The company targets boat owners and operators seeking professional care for their vessels. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a solid digital presence for a small local business. Technically, the site is built on WordPress with Elementor and related plugins, leveraging modern web technologies and Google Analytics for user tracking. Security posture is good with HTTPS enabled, though security headers and privacy compliance measures are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy business. Strategic improvements include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure information to enhance compliance and trust.

T

Tadao

tadao.fr

61

Tadao operates as a regional public transportation network serving the Artois and Gohelle sectors in France, providing bus schedules, route planning, traffic updates, and on-demand transport services. The website reflects a medium-sized organization with a clear focus on user accessibility and service information, supported by a parent company, Transdev, a known global transport operator. The digital infrastructure is modern, leveraging JavaScript frameworks, cookie consent management, and analytics tools, with a CMS platform (ActiPAGE) generating the site content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security best practices like explicit security headers and incident response information could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies in French, aligned with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

The website jemegare.fr serves as a regional landing page for EFFIA, a significant French company specializing in paid on-street parking management and mobility services. The site highlights EFFIA's extensive presence across multiple French cities, emphasizing its role in parking space management and regulation. The business targets both city authorities and motorists, positioning itself as a key player in the transportation sector in France. The website content is straightforward, focusing on service offerings and city-specific parking solutions, with links to multiple city subdomains.

Via Transportation operates a sophisticated digital platform that transforms public transit and shared mobility through software and operational services. The company targets a broad audience including cities, transit authorities, operators, educational institutions, corporations, and healthcare providers. Their market position is strong, supported by strategic partnerships with industry leaders such as Waymo and Citymapper. The website reflects a mature enterprise with comprehensive service offerings including microtransit, paratransit, planning and scheduling, and consulting services. Technically, the site is built on HubSpot CMS with modern marketing and analytics integrations, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforcement, reCAPTCHA Enterprise usage, and domain locking, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

R

RATP Dev

ratpdev.com

66

RATP Dev is a global operator specializing in the operation and maintenance of urban and interurban transportation networks across five continents. The company offers a wide range of services including metro, tramway, bus, train, sightseeing, demand-responsive transport, and specialized services for persons with reduced mobility. The website reflects a mature enterprise with a strong international presence and multiple subsidiaries. Technically, the site is built on Drupal 10, uses modern analytics and mapping technologies, and implements cookie consent mechanisms, indicating a reasonable level of digital maturity. Security posture is good with HTTPS and some privacy measures, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and branding align with the known RATP Group. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in privacy and security disclosures.

Vyhrajsone.cz is a Czech-language promotional website focused on encouraging e-commerce businesses to use the One by Allegro parcel delivery service. The site promotes a monthly lottery competition for customers who ship parcels using their service, offering prizes such as Apple devices, vouchers, and a grand prize car. The business model centers on B2B logistics services combined with marketing incentives to increase customer engagement and loyalty. The website targets small to medium-sized e-shops in the Czech Republic, positioning itself as a reliable and cost-effective delivery partner.

M

Mototechna

mototechna.cz

60

Mototechna.cz is a well-established Czech automotive company specializing in the sale and purchase of premium used cars, along with financing, insurance, and rental services. The website reflects a mature business with a strong market presence, evidenced by over 10,000 cars sold last year and a high customer satisfaction rate. The technical infrastructure is modern, leveraging Angular framework and optimized for mobile devices, with a professional design and clear navigation. Security posture is adequate with HTTPS and cookie consent implemented, but lacks published privacy policies and security headers, which are areas for improvement. Overall, the website is trustworthy and professional, supporting the company's credibility in the transportation sector.

T

Twisto

twisto.fr

61

Twisto is the primary public transportation provider for the Caen la mer urban community in France, offering bus and tramway services along with real-time traffic updates, route planning, and ticketing solutions. The website is professionally designed using Drupal 10, featuring a mobile-optimized interface and integrated journey planner widgets. It maintains a strong social media presence and provides comprehensive traffic alerts to its users. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is not publicly available, indicating privacy protection, which is justified for this type of public service entity. Overall, the website is trustworthy, user-friendly, and compliant with privacy regulations.

M

Montélibus

montelibus.fr

50

Montélibus operates as the public transportation network for Montélimar Agglomération in France, providing bus services, route planning, schedules, and real-time traffic updates. The website is designed to serve residents and visitors seeking transit information within the region. It leverages TYPO3 CMS and integrates modern web technologies including Google Fonts and cookie consent management via tarteaucitron. The presence of a clear contact phone number and social media link enhances user engagement and trust. However, the absence of WHOIS data limits domain trust verification. The website lacks explicit privacy policy and terms of service pages, which are important for regulatory compliance and user trust. Security headers are not detected, suggesting room for improvement in security posture. Overall, the site is functional, informative, and professionally presented, but could benefit from enhanced transparency and security practices.

G

Grand Besançon Métropole

ginko.voyage

66

The website www.ginko.voyage serves as the official digital platform for Grand Besançon Métropole's public transportation services, branded as Ginko. It provides users with access to schedules, route planning, and ticket purchasing functionalities, targeting residents and visitors of the Grand Besançon metropolitan area in France. The site is professionally designed with a consistent brand identity and offers accessibility features to accommodate diverse user needs. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Google Tag Manager, and Cookiebot for analytics and compliance. The site is mobile-optimized and includes SEO best practices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements, although explicit security headers are not fully confirmed. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which is common and justified for this type of public service website. Overall, the site demonstrates a mature digital presence with good security and privacy compliance.

M

Megève Mont-Blanc

megeve-montblanc.com

55

Megève Mont-Blanc is a well-established cycling event organizer specializing in a unique mountain cyclosportive held annually in the French Alps. The website promotes the 2025 edition with detailed information on routes, registration, volunteering, and partnerships. The business targets cycling enthusiasts and mountain sports lovers, offering multiple race distances and live tracking features. Technically, the site is built on WordPress with Elementor and several plugins, hosted by OVH, and shows good SEO and mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, including emails, phone, and physical address. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

A

AUTO JAROV, s.r.o.

autojarov.cz

50

AUTO JAROV, s.r.o. operates a comprehensive automotive dealership and leasing service platform in the Czech Republic, primarily serving Prague and surrounding regions. The company offers a wide range of new and used vehicles from major brands including Volkswagen, Škoda, Audi, SEAT, CUPRA, and Honda, alongside operational leasing options branded as JAROV DRIVE. Their services extend to vehicle buyback, authorized servicing, and motorcycle sales, targeting both individual consumers and corporate clients. The website reflects a well-established business with a strong market presence and brand partnerships. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and the Nette PHP framework, complemented by advanced marketing and analytics tools such as Google Analytics, Microsoft Clarity, Bing Ads, and Cookiebot for consent management. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers could enhance its posture. The use of HTTPS and invisible reCAPTCHA indicates a commitment to secure user interactions. From a security perspective, the site demonstrates good practices with encrypted connections and consent mechanisms but lacks explicit security policies or incident response contacts. The absence of WHOIS data limits domain trust verification, though the professional presentation and comprehensive contact information mitigate concerns. No vulnerabilities or suspicious content were detected, and the site is free from adult or questionable material. Overall, AUTO JAROV's digital presence is robust, supporting its business operations effectively. Strategic enhancements in security transparency and domain registration clarity would further strengthen trust and compliance.

V

VIP line s.r.o.

vipline.cz

45

VIP line s.r.o. is a Czech Republic-based transportation service provider specializing in passenger transport via buses, minibuses, vans, and limousines. Founded in 2016, the company serves individuals, schools, companies, travel agencies, and sports clubs primarily in Prague and surrounding regions. Their business model focuses on providing professional, safe, and comfortable transport solutions with a modern fleet and experienced drivers. The company maintains partnerships with notable organizations such as Škoda Auto and regional sports clubs, enhancing its market credibility. Technically, the website is built on Joomla CMS using the Astroid Framework, with modern frontend technologies including jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized and uses Google Analytics and Google Tag Manager for user tracking. Hosting is provided by WEDOS, consistent with the domain registration data. The website performance is moderate with good design and navigation clarity. From a security perspective, the site uses HTTPS and modern libraries but lacks visible security headers and published security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no incident response or security contact channels are published. Overall, the security posture is adequate but could be improved with better policy disclosures and security headers. The website content is safe for general audiences, focusing solely on transportation services without any adult or questionable content. The domain registration data is consistent with the business claims, showing no suspicious patterns. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to enhance trust and compliance.

G

GLOBAL ASSISTANCE a.s.

globalassistance.cz

59

GLOBAL ASSISTANCE a.s. is a Czech-based company specializing in comprehensive assistance services including car, medical, home, legal, and concierge assistance. Founded in 2004 and part of the Vienna Insurance Group since 2014, it serves motorists and business clients primarily in Europe. The website reflects a professional and consistent brand presence with clear service offerings and contact channels. Technically, the site uses modern web technologies including Google Fonts, YouTube API, Facebook Pixel, Google Analytics, and is built on the Solidpixels CMS platform. It is well-optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data is a minor concern but does not significantly detract from the overall trustworthiness given the company's certifications and parent company affiliation.