Transportation security reports

A

AUTO KP PLUS HOLDING a.s.

autokpplus.cz

46

AUTO KP PLUS HOLDING a.s. operates as a multi-brand automotive dealership and service provider based in Liberec, Czech Republic. The company offers a wide range of automotive brands including Suzuki, Fiat, Citroën, Toyota, Nissan, Jeep, Opel, Hyundai, and Dongfeng. Their services encompass new and used vehicle sales, vehicle servicing, car rental, commercial vehicle leasing, and insurance claim support. The website reflects a well-established regional business with a comprehensive portfolio targeting both private and business customers. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Slider, integrates Google Tag Manager, Google Analytics, Facebook Pixel, and Seznam Retargeting for marketing and analytics purposes. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent and privacy policies are implemented in compliance with GDPR, enhancing user trust. From a security perspective, the website uses HTTPS with good SSL configuration but lacks explicit security headers which could improve its security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces domain trust slightly but does not detract significantly from the overall legitimacy of the business. Overall, AUTO KP PLUS presents a professional and trustworthy online presence with room for security enhancements and improved transparency in domain registration. Strategic recommendations include implementing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

The website represents the Českomoravská asociace dopravního značení, a Czech regional association focused on transportation signage. The business appears to be a small, niche organization serving professionals and stakeholders in traffic signage within the Czech Republic. The domain is well-established, having been registered since 2002, which supports the legitimacy of the association. However, the website content is minimal and primarily structured using outdated HTML framesets, which negatively impacts usability and modern web standards. From a technical perspective, the site lacks modern web technologies, responsive design, and accessibility features. There is no evidence of HTTPS enforcement or security headers, which raises concerns about the security posture. No privacy, cookie, or terms of service policies are present, indicating poor compliance with GDPR and other privacy regulations. Contact information and social media presence are also absent, limiting user engagement and trust. Security-wise, the site shows minimal maturity with no visible incident response or security policies. The lack of HTTPS and security headers exposes the site to potential risks. The domain registration data is consistent and trustworthy, but the website itself requires significant improvements to meet modern security and privacy standards. Overall, the website scores low on content quality, technical implementation, security posture, and privacy compliance. Strategic recommendations include modernizing the website structure, implementing HTTPS and security headers, adding privacy and cookie policies, and providing clear contact information to enhance trust and compliance.

E

Envibus

envibus.fr

55

Envibus operates as the public transportation network for the Communauté d'Agglomération Sophia Antipolis, providing urban and school bus services, transport on demand, and real-time traffic information. The website is well-structured, professionally designed, and targets residents and commuters in the Sophia Antipolis region. It promotes mobile applications and offers multiple ticket purchasing options, including SMS ticketing. Technically, the site is built on TYPO3 CMS with modern web technologies and includes accessibility and cookie consent features, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and published security policies. The absence of WHOIS data is a concern for domain legitimacy, though the website content and official affiliations suggest a legitimate entity. Overall, the site is trustworthy and functional but would benefit from enhanced transparency in privacy and security disclosures.

D

DS Automobiles

dsautomobiles.cz

62

DS Automobiles Czech Republic operates a professionally designed website showcasing their luxury French automobile offerings, including new models, financing, leasing, and after-sales services. The site targets B2C customers in the Czech market with a focus on premium vehicles and connected services. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and responsive design, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though explicit privacy policies and security headers are lacking. The absence of WHOIS data reduces domain trustworthiness but the overall branding and content quality indicate a legitimate business under the Stellantis group.

T

Toyota Domanský

toyota-domansky.cz

50

Toyota Domanský is a regional automotive dealership group specializing in Toyota vehicles with physical branches located in Prague, Czech Republic. The website primarily serves as a portal to promote their dealership locations and brand presence. The business model focuses on retail car sales and customer service at physical locations, targeting local car buyers interested in Toyota vehicles. From a technical perspective, the website employs basic frontend technologies such as jQuery and Slick Slider for UI elements. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern web frameworks, indicating a relatively simple technical infrastructure. Security posture is minimal with no detected security headers or HTTPS verification in the provided data. The absence of privacy, cookie, and terms of service policies indicates low compliance with GDPR and other privacy regulations. No contact information or incident response details are provided, limiting transparency and trust. Overall, the website is functional but basic, with moderate risk due to missing WHOIS data and lack of security and privacy policies. Strategic improvements in security, compliance, and business transparency are recommended to enhance trust and reduce risk.

P

PASSERINVEST GROUP, a.s.

republikabohatsi.cz

62

The website republikaBohatsi.cz represents an initiative led by PASSERINVEST GROUP, a.s., focused on promoting societal and infrastructural development in the Czech Republic. The initiative aims to foster changes in public thinking to support future prosperity, emphasizing transportation infrastructure, building development, and workforce availability. The site is well-structured, professionally designed, and targets Czech citizens and stakeholders interested in national development. The business is positioned as a significant player in infrastructure and real estate sectors, leveraging the reputation of its founder Radim Passer. Technically, the website is built on the Solidpixels CMS platform and integrates modern web technologies including Google Analytics and Tag Manager for tracking, as well as various UI enhancement libraries. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and publicly available incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the website presents a credible business initiative with good technical implementation and privacy compliance. However, improvements in security headers, WHOIS transparency, and incident response disclosures would enhance trust and security posture.

Mobile Industrial Robots (MiR) is a Denmark-based company specializing in autonomous mobile robots designed to automate internal transportation for businesses. Founded in 2012 and now part of Teradyne Robotics, MiR offers versatile robotic solutions complemented by service portals, training academies, and community engagement platforms. The company targets industrial and manufacturing sectors seeking automation to improve operational efficiency. The website reflects a mature digital presence with professional design and clear navigation, supporting a global B2B audience. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Storyblok CMS for content management. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is adequate with privacy and cookie policies present, though no active consent mechanism is detected. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

H

Hiplok

hiplok.com

70

Hiplok is a specialized e-commerce business focused on providing innovative bike security solutions including locks for bikes, motorbikes, e-bikes, and scooters. The company emphasizes product quality with Sold Secure Insurance Rated locks and offers lifetime warranties, positioning itself as a trusted niche player in the transportation security market. The website is built on a modern WordPress platform with WooCommerce, integrating various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Klaviyo, indicating a mature digital marketing strategy. Technically, the site is well-structured, mobile optimized, and uses HTTPS with a valid SSL certificate, though it lacks some advanced security headers and explicit privacy and terms policies. The domain is long-established since 2009, registered transparently without privacy protection, which supports the legitimacy of the business. Overall, the security posture is moderate with room for improvement in policy transparency and security headers. The website content is safe for general audiences and professionally presented.

D

Deliveroo

deliveroo.net

75

Deliveroo is a prominent UK-based online food delivery platform founded in 2012, offering a wide range of services including food, groceries, pharmacy, and gift deliveries. The company operates a large-scale digital marketplace connecting consumers with local restaurants and delivery riders, positioning itself as a leader in the transportation and e-commerce sectors within the UK. The website reflects a mature digital presence with a professional design, clear navigation, and mobile-optimized interfaces, supported by modern web technologies such as React and Next.js. Deliveroo employs robust security measures including HTTPS, security headers, and bot protection, alongside comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and aligned with the company's business model and market position.

D

Deliveroo

deliveroo.com

75

Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom with a strong international presence. The company connects consumers with local restaurants, grocery stores, pharmacies, and gift services, offering fast and convenient delivery options. Deliveroo's market position is strong, supported by a large user base, extensive restaurant partnerships, and a robust rider network. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization, supporting a seamless user experience across platforms. Technically, the site leverages modern frameworks such as React and Next.js, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent management, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and uses bot protection services, demonstrating a solid security posture. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for users and partners alike.

D

Deliveroo

deliveroo.tw

68

Deliveroo is a well-established online food delivery platform connecting customers with local restaurants and takeaways. The website serves multiple international markets, including Taiwan, although it currently announces cessation of operations in Taiwan. The platform offers a comprehensive service including online ordering, delivery, and subscription plans. The website is built on modern web technologies such as React and Next.js, hosted via Cloudflare, and integrates payment services like Stripe. It demonstrates good digital maturity with fast performance, mobile optimization, and SEO best practices. Security posture is strong with HTTPS, multiple security headers, and secure form handling, though explicit security policies are not prominently found. Privacy compliance is evident with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional and trustworthy brand presence with consistent branding and clear business information.

D

Deliveroo

deliveroo.es

73

Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom and several international markets. The company connects consumers with local restaurants, takeaways, supermarkets, and other shops, offering fast delivery services typically within 30 minutes. Deliveroo also provides corporate food delivery solutions and gift card services, positioning itself as a leader in the food delivery sector with a strong digital presence and mobile app availability. The website reflects a mature business with consistent branding and comprehensive service offerings.

D

Deliveroo

deliveroo.nl

73

Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom with a strong international presence. The company connects consumers with local restaurants, grocery stores, pharmacies, and gift providers, offering fast and convenient delivery services. Their business model leverages a marketplace approach, generating revenue through delivery fees, service charges, and partnerships with restaurants and riders. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service offerings including corporate catering and gift cards.

D

Deliveroo

deliveroo.it

75

Deliveroo.it is a well-established online food and grocery delivery platform operating in Italy since 2014. It connects consumers with local restaurants and shops, offering convenient takeaway and grocery delivery services. The website demonstrates a strong market position with a large user base and comprehensive service offerings including partner and rider recruitment as well as corporate meal solutions. The platform is supported by modern web technologies such as Next.js and React, ensuring a fast, responsive, and accessible user experience across devices. Security measures include HTTPS enforcement, robust security headers, and bot protection via PerimeterX, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the website is professional, trustworthy, and aligned with industry best practices.

D

Deliveroo.ie

deliveroo.ie

77

Deliveroo.ie is a prominent online food and grocery delivery platform operating in Ireland, offering consumers convenient access to local restaurants and shops. The company leverages a robust digital infrastructure including modern web frameworks and cloud-based hosting to deliver a seamless user experience across web and mobile platforms. The website demonstrates strong branding consistency, comprehensive legal and privacy documentation, and effective integration of consent management tools. Security posture is solid with HTTPS enforcement, security headers, and bot protection, although DNSSEC is not enabled and no explicit incident response contacts are published. Overall, the platform is well-positioned in the Irish market with a large user base and extensive partner network.

D

Deliveroo

deliveroo.hk

62

Deliveroo is a global online food delivery platform that previously operated in the Hong Kong market but has now exited, as clearly stated on the website. The platform connects customers with local restaurants and takeaways, offering convenient food delivery services. The website maintains consistent branding and provides links to other international Deliveroo domains, reflecting its broad market presence. The Hong Kong site serves primarily as an informational landing page to communicate the market exit and thank customers and partners. Technically, the website is built using modern web technologies including React and Next.js, hosted behind Cloudflare DNS and CDN services, and incorporates cookie consent mechanisms via OneTrust. Security posture is good with HTTPS enforced and some security-related scripts in use, though explicit security headers and policies are not publicly documented. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service on the landing page. Contact information such as emails or phone numbers is not directly available on the page. Overall, the site is professional and trustworthy but could improve transparency around privacy and security policies.

D

Deliveroo

deliveroo.de

65

Deliveroo is a large international food delivery platform connecting consumers with local restaurants and takeaways. The company operates in multiple countries, including Germany, although the website indicates that Deliveroo has ceased operations in Germany for now. The platform offers online ordering, delivery services, and subscription plans such as Deliveroo Plus. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and Next.js. Hosting and CDN services are provided by Cloudflare and roocdn.com. Security posture is strong with HTTPS enforced and multiple security headers implemented. Privacy policies and cookie consent mechanisms are present and GDPR compliant. However, direct contact information such as phone numbers is not prominently displayed on the site. Overall, the site reflects a mature, professional e-commerce business with a strong technical foundation and good privacy and security practices.

D

Deliveroo

deliveroo.be

73

Deliveroo is a leading online food and grocery delivery platform operating in Belgium and multiple international markets. The company connects consumers with local restaurants and shops, providing convenient takeaway and grocery delivery services. Their business model focuses on partnering with restaurants, managing delivery logistics, and offering a seamless digital ordering experience via web and mobile apps. Deliveroo holds a strong market position with a well-established brand and extensive service coverage. Technically, the website leverages modern frameworks such as Next.js and React, supported by robust third-party services including Google Tag Manager, OneTrust for cookie consent, and PerimeterX for bot detection. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and privacy compliance aligned with GDPR. However, explicit security policy and incident response information are not publicly detailed, representing an area for improvement. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, supporting Deliveroo's reputation as a reliable service provider.

D

Deliveroo

deliveroo.co.uk

73

Deliveroo is a well-established UK-based online food delivery platform founded in 2012, offering a wide range of services including food, groceries, pharmacy, and gift deliveries. It operates a large-scale digital marketplace connecting consumers with local restaurants and delivery riders, positioning itself as a leading player in the transportation and e-commerce sectors. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as React and Next.js, supported by robust analytics and marketing tools. The platform is optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policy documentation and vulnerability disclosure mechanisms are not publicly evident. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms, reflecting adherence to GDPR requirements. Overall, the website and business exhibit high professionalism, trustworthiness, and operational legitimacy.

P

Postmates Inc.

postmates.com

69

Postmates Inc. operates a leading on-demand delivery platform specializing in food, groceries, alcohol, and other goods, serving millions of customers primarily in the United States. As a subsidiary of Uber Technologies Inc., Postmates benefits from a robust technical infrastructure and integration within a global transportation and delivery ecosystem. The website demonstrates a mature digital presence with modern technologies such as React and extensive use of JavaScript frameworks, optimized for both desktop and mobile platforms. Security posture is strong with HTTPS enforcement, use of Google reCAPTCHA, and secure script loading practices, although DNSSEC is not enabled and explicit security policies are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a commitment to user data protection. Overall, the site is professional, trustworthy, and well-positioned in the competitive food delivery market.

J

Jean Lain Mobilités

jeanlain.com

70

Jean Lain Mobilités is a French automotive dealership and mobility services provider offering a wide range of vehicle brands including Volkswagen, Audi, Toyota, and others. The company provides new and used vehicle sales, leasing, after-sales services, electric mobility solutions, and professional fleet services. The website is well-structured and professionally designed, targeting both consumers and business clients seeking automotive and mobility solutions. Technically, the site is built on WordPress with modern frameworks and includes analytics tools such as Matomo and Facebook Pixel. Security posture is good with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are not found on the homepage. The domain is a subdomain of jeanlain.com, a known automotive group, with no separate WHOIS registration, which is expected and legitimate. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

GEMOS CZ spol s r.o. operates the website usekovarychlost.cz, providing specialized traffic monitoring and management systems, particularly focusing on section speed measurement technology. The company targets transportation authorities and municipalities, offering B2B solutions including weight measurement systems, smart speed indicators, and navigation tools. The business is positioned as a niche player within the Czech Republic's transportation technology sector, with a domain age consistent with its operational history since 2014. Technically, the website employs standard web technologies such as Bootstrap and jQuery, with Google Analytics and Tag Manager for tracking. However, the site lacks visible HTTPS enforcement and security headers, indicating room for security improvements. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and functional but requires enhancements in security and privacy to meet modern standards.

GEMOS DOPRAVNÍ SYSTÉMY a.s. is a Czech company specializing in intelligent traffic monitoring and control systems, including speed indicators and meteorological data integration. The website presents a professional image with clear product descriptions and partner affiliations, targeting organizations involved in traffic management. The business model is B2B, focusing on providing technology solutions for transportation safety and efficiency. The domain age and WHOIS data align well with the company's stated history, supporting legitimacy. Technically, the website uses established web technologies such as Bootstrap, jQuery, and Jssor Slider, providing a moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. However, the site lacks advanced security headers and does not explicitly enforce HTTPS based on the provided data, which could be a risk. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Security posture is moderate but could be improved by implementing HTTPS, security headers, and formal privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which limits transparency and readiness for security events. The site uses Google Tag Manager for analytics, but no cookie consent mechanism is present, which may expose the company to privacy compliance risks. Overall, the website is functional and professional but requires enhancements in security and privacy compliance to reduce risk and improve trustworthiness. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

T

TecAlliance

tecalliance.net

68

TecAlliance is a global leader in providing automotive aftermarket data solutions and digital services. Their offerings include comprehensive parts catalogues, logistics and order management platforms, repair and maintenance data, and fleet management tools. The company targets manufacturers, traders, workshops, e-commerce businesses, and fleet owners worldwide, positioning itself as a key enabler of innovation and efficiency in the automotive aftermarket industry. The website reflects a mature digital presence built on WordPress and Elementor, with modern technologies and good mobile optimization. Privacy compliance is well addressed through Usercentrics consent management. Security posture is generally good with HTTPS and no exposed sensitive data, though some security headers are not evident in the HTML source and should be verified server-side. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain registration legitimacy. Overall, TecAlliance presents a professional and trustworthy business front with strong branding and partner ecosystem.

B

Barum

barum-reifen.de

66

Barum is a well-established tire brand operating under the Continental umbrella, offering affordable and durable tires for passenger cars, SUVs, vans, trucks, and industrial vehicles. The website is professionally designed using Adobe Experience Manager, featuring comprehensive product information, dealer search, and customer support options. The digital infrastructure includes modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the brand association and website professionalism support legitimacy. Overall, the site serves its target audience effectively with good user experience and content quality.

U

Uniroyal

uniroyal.de

70

Uniroyal is a well-established tire brand specializing in tires optimized for wet conditions, operating under the Continental group. The website targets primarily German-speaking customers in Europe, offering products for passenger cars, vans, trucks, and commercial vehicles. The site is built on a modern Adobe Experience Manager platform with integrated analytics and consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response information are not publicly visible. The absence of WHOIS registrant data reduces transparency but does not undermine the brand's credibility given its association with Continental. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

S

Semperit

semperit-reifen.de

66

Semperit is a well-established tire brand with a history dating back to 1906, specializing in quality tires for passenger cars, trucks, buses, and vans, primarily targeting the German-speaking market. The website is professionally designed, leveraging Adobe Experience Manager CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. The domain WHOIS data is missing, which raises some concerns about registration transparency, but the brand's association with Continental supports its legitimacy. Overall, the website presents a trustworthy and professional front with room for improvement in security disclosures and domain transparency.

C

Continental Reifen

continental-reifen.de

68

Continental Reifen operates as a major tire manufacturer and retailer focused on providing high-quality tires for various vehicle types including cars, trucks, motorcycles, bicycles, and specialized sectors such as agriculture and earthmoving. The website targets both private and business customers primarily in Germany and Europe, positioning itself as a leader in the tire industry with a strong emphasis on safety, comfort, and innovation. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and consent management tools, and includes accessibility features to ensure compliance with digital accessibility standards. Security posture is generally good with HTTPS and consent mechanisms in place, though explicit security headers and policies are not evident in the provided data. Privacy compliance is partial due to the absence of a clearly linked privacy policy and terms of service. Overall, the website is professional, trustworthy, and well-structured, supporting the brand's market position. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection officers.

ATE, a brand under Continental Aftermarket & Services GmbH, operates a comprehensive website focused on automotive brake technology products and services. The site targets both B2B and B2C customers, offering a wide range of brake components, hydraulic parts, tools, and support services. The brand is well-established with a strong market position in the transportation sector, particularly in Germany and globally through Continental. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and a consent management platform, ensuring a secure and privacy-compliant user experience. The site is well-structured, mobile-optimized, and professionally designed, reflecting high digital maturity. Security posture is strong with HTTPS enforcement and form protections, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

P

PlaxidityX (Formerly Argus)

plaxidityx.com

75

PlaxidityX is a newly established automotive cybersecurity company, recently rebranded from Argus, focusing on providing cybersecurity solutions tailored for the automotive industry. The company targets vehicle manufacturers and related stakeholders, positioning itself as a specialized provider in the transportation technology sector. The website reflects a professional digital presence built on WordPress, incorporating modern SEO and performance tools such as Yoast SEO and Cookiebot for cookie consent management. The technical infrastructure includes lazy loading scripts and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is newly registered with GoDaddy, consistent with the company's recent rebranding and launch. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures and more visible contact information to improve trust and compliance.

A

AUMOVIO SE

aumovio.com

63

AUMOVIO SE is a technology-driven company specializing in future mobility solutions, focusing on software-defined vehicles, electric mobility, vehicle electrical/electronic architectures, safety, driver assistance, user experience, and cybersecurity. The company has a strong market position supported by a diverse portfolio of products and services and is publicly listed on the Frankfurt Stock Exchange since September 2025. The website reflects a mature digital presence with comprehensive corporate governance and investor relations information, targeting automotive industry professionals, investors, and potential employees. Technically, the website employs modern web technologies including Adobe Experience Manager components, Google Tag Manager, and consent management tools, ensuring good performance, mobile optimization, and accessibility. The site uses HTTPS and includes privacy and cookie policies with consent mechanisms, indicating compliance with GDPR and related regulations. From a security perspective, while HTTPS and consent management are in place, the absence of visible security headers and incident response information suggests room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the professional site and corporate disclosures mitigate this risk. Overall, the website presents a professional, trustworthy, and well-maintained digital front for AUMOVIO SE, with recommendations to enhance security headers, publish incident response policies, and clarify domain registration details to strengthen trust and compliance.

C

Continental Aftermarket

continental-aftermarket.com

64

Continental Aftermarket is a division of Continental AG, a leading global automotive supplier. The website serves as a comprehensive portal for their aftermarket products and services, targeting automotive professionals, workshops, and distributors. It offers extensive product categories including batteries, brakes, tires, workshop equipment, and specialized vehicle components, supported by training and service programs. The brand is well-established with multiple subsidiaries and a strong market presence in Germany and internationally. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and a consent management platform to ensure compliance with privacy regulations. The site is mobile-optimized, uses HTTPS with a Content Security Policy, and integrates reCAPTCHA Enterprise for form security. The CMS appears to be TYPO3, a robust enterprise content management system. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSP headers, and consent management. However, DNSSEC is not enabled, and additional security headers could be added to enhance protection. No explicit security policy or incident response contacts are publicly available, and no vulnerability disclosure mechanism was found. Overall, the website is professional, trustworthy, and compliant with GDPR. The domain registration data aligns with the business profile, indicating legitimacy. There are no signs of malicious content or security issues. Strategic improvements could focus on enhancing security headers, publishing security policies, and enabling DNSSEC to further strengthen the security posture.

SIGNEX, spol. s r.o. is a Czech Republic based small business specializing in comprehensive traffic signage services including project design, approval, installation, rental, and maintenance primarily serving Brno and the South Moravian Region. The company has a long-established presence since 1999, reflected in its domain age and consistent WHOIS data. The website presents a professional and well-structured digital presence with clear contact information and service descriptions tailored to businesses and entities requiring traffic safety solutions. Technically, the site uses legacy JavaScript libraries and common web technologies such as jQuery, Bootstrap, and Google Maps API, with moderate performance and good mobile optimization. Security posture is moderate with room for improvement, notably updating outdated libraries and implementing security headers. Privacy compliance is basic, with a cookie consent banner but no privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

GEMOS CZ spol s r.o. is a Czech company specializing in smart traffic monitoring and management systems, offering a range of products including dynamic traffic lights, speed indicators, red light violation detection, and navigation solutions. The company targets municipalities and transportation authorities, positioning itself as a niche technology provider within the Czech Republic. The website reflects a professional business model focused on B2B technology solutions in the transportation and energy sectors. Technically, the website employs standard web technologies such as Bootstrap and jQuery, with integration of Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, though accessibility and SEO features are basic. No CMS or hosting provider details were identified. The website is fully accessible with no blocking or WAF detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and verification of domain registration details to strengthen trust and compliance posture.

Autoservis Kobolka is a small, local automotive repair and maintenance service provider based in Kutná Hora, Czech Republic. The company specializes in servicing vehicles from major European brands such as VW, Peugeot, Citroen, Fiat, Ford, Opel, and Alfa Romeo. Established in 1999, the business offers a comprehensive range of services including diagnostics, mechanical repairs, brake and axle work, engine and transmission overhauls, and additional services like tire service and vehicle towing. The website reflects a modest but functional online presence with clear contact information and basic service descriptions.

Přerost a Švorc auto is a medium-sized authorized automotive dealer and service partner specializing in Škoda and Volkswagen vehicles, operating primarily in Prague, Czech Republic. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, financing options, and additional services such as car washing and rental. Their market position is that of a trusted regional dealer with a strong focus on customer service and authorized brand partnership. Technically, the website employs a moderate technology stack with jQuery, DataTables, Google Fonts, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and secure forms, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is addressed with a clear privacy policy and GDPR contact, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business objectives, though the absence of WHOIS data slightly impacts domain trustworthiness.

D

Domanský s.r.o.

domansky.cz

46

Domanský s.r.o. operates as an authorized automotive dealer specializing in Peugeot, Citroën, Hyundai, Toyota, and DS vehicles. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, financing options such as leasing and loans, and sales of spare parts and accessories. The website reflects a well-established regional dealership with a professional online presence targeting customers primarily in the Czech Republic. The business model focuses on direct sales and after-sales services, supported by multiple brand partnerships and dedicated subdomains for each brand. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for SEO, user interaction, and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with enforced HTTPS and cookie consent mechanisms, though it lacks some advanced security headers. The absence of publicly available WHOIS data limits domain transparency but does not detract from the apparent legitimacy of the business. Overall, the site demonstrates a solid digital maturity appropriate for its industry and market position.

AURES Holdings a.s. is a leading European automotive retail company specializing in the sale of pre-owned cars through multiple established brands such as AAA AUTO, Mototechna, and RESULMATIC. With a history dating back to 1992 and a customer base exceeding 3.3 million, the company operates primarily in Central and Eastern Europe, holding market leadership positions in several countries. Their business model leverages advanced data analytics, machine learning, and omnichannel sales strategies to optimize sourcing, pricing, and customer engagement. Technically, the website employs modern JavaScript libraries and analytics tools, with a responsive design and good SEO practices, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the company's credible market presence.

C

Communauté de Communes Pays du Mont-Blanc

montenbus.fr

53

Montenbus is a local on-demand transport service operated by the Communauté de Communes Pays du Mont-Blanc, serving multiple communes in the Mont-Blanc region of France. The service targets residents, secondary residents, vacationers, and persons with reduced mobility, offering subscription-based access with flexible reservation options via phone and a dedicated mobile app. The website presents a professional and user-friendly interface with clear information on tariffs, service operation, and accessibility features. Technically, the site is built on WordPress using the Divi theme and integrates common plugins for SEO, analytics, and user interaction. Security posture is adequate with HTTPS enforced, though additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, supporting user trust. However, the absence of WHOIS registration data reduces domain transparency, which is a minor concern given the official nature of the service and partner endorsements.

Z

Zrůst Trailers, s.r.o.

elektromobily-carello.cz

9

Elektromobily Carello, operated by Zrůst Trailers, s.r.o., is a Czech manufacturer specializing in electric utility vehicles with over 40 years of experience. Their product range includes electric three-wheelers, compact electric cars, and electric transporters designed for municipal, commercial, and industrial use. The company emphasizes reliability and supports state subsidies for electric vehicles, positioning itself as a trusted partner in the electromobility sector. The website presents detailed product information with images and contact details, targeting businesses and municipalities interested in electric transport solutions. Technically, the website is built on WordPress using Elementor, with standard web technologies and Google Fonts. It is mobile optimized and provides a good user experience, although SEO and accessibility could be improved. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. No WHOIS data is available, likely due to privacy protection, but the website content and contact information suggest legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

Z

ZRŮST Trailers, s.r.o.

lorries-privesy.cz

46

The website www.lorries-privesy.cz represents ZRŮST Trailers, s.r.o., a small Czech company specializing in the sale and rental of various trailers including motorcycle trailers, car carriers, construction trailers, flatbed trailers, and boat trailers. The company has a stable market presence with over 7 years of experience and offers high-quality, safe trailers under the LORRIES brand. The site is professionally designed using WordPress and Elementor, with clear navigation and mobile optimization. Privacy and cookie policies are implemented with user consent mechanisms, reflecting GDPR compliance. Security posture is good with HTTPS and no visible vulnerabilities, though additional security headers and incident response info could improve it. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy. Overall, the site is a trustworthy and professional digital presence for a niche transportation business.

C

CarbonTear

carbontear.cz

10

CarbonTear is a small Czech Republic based company specializing in luxury caravans, offering custom-made caravans with 100% handmade production in the EU and a caravan rental service. The company targets customers in the Czech and Slovak markets who seek high-quality, bespoke caravans. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to privacy. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is good with HTTPS and consent mechanisms, but could be improved by adding security headers and incident response information.

A

AUMOVIO SE

continental-automotive.com

61

AUMOVIO SE is a large German company specializing in future mobility solutions, including software-defined vehicles, electric mobility, vehicle electrical/electronic architectures, safety, driver assistance, and user experience technologies. The company recently became publicly listed on the Frankfurt Stock Exchange, indicating a strong market presence and investor confidence. Their website is professionally designed, mobile-optimized, and rich in relevant content targeting automotive industry professionals, investors, and potential employees. Technically, the site uses modern technologies such as Adobe Experience Manager, Google Tag Manager, and ConsentManager for privacy compliance. Security posture is good with HTTPS and consent mechanisms, but lacks explicit security policies and vulnerability disclosures. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility, though the absence of WHOIS data for the domain is a concern that should be investigated further.

U

Uber Technologies Inc.

ubereats.com

66

Uber Eats is a leading global online food and grocery delivery platform operated by Uber Technologies Inc. The website offers consumers the ability to order food and groceries from local restaurants and stores with contactless delivery options. It supports business accounts, restaurant sign-ups, and delivery partner registrations, positioning itself as a comprehensive marketplace in the food delivery sector. The platform is accessible via web and mobile apps, serving over 500 cities worldwide. Technically, the website is built using modern web technologies including React and various JavaScript libraries, with performance optimizations such as CDN usage and script preloading. It employs Google reCAPTCHA for bot defense and uses secure HTTPS connections with Content Security Policy measures. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident. From a security perspective, Uber Eats demonstrates strong security posture with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly found, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of WHOIS data is due to privacy protection, which is justified for a large enterprise. The platform integrates extensive analytics and marketing tools, reflecting a mature digital marketing strategy. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure to further strengthen security culture and user trust.

D

Deliveroo

deliveroo.fr

77

Deliveroo.fr is a major online food and grocery delivery platform operating in France, part of the global Deliveroo brand. The website offers consumers access to local restaurants and shops for takeaway and grocery delivery, supported by a robust digital infrastructure including modern web frameworks and cloud-based hosting. The platform also supports restaurant partners and riders, indicating a comprehensive ecosystem. Technically, the site is well-optimized for performance, mobile responsiveness, and accessibility, leveraging Cloudflare and Google Tag Manager for security and analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and WHOIS data align well with the brand's legitimacy and market presence. Recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

A

apilayer

aviationstack.com

66

Aviationstack is a technology company specializing in providing real-time and historical aviation data through a scalable REST API. The company targets developers and businesses requiring accurate flight tracking and aviation information globally. With a solid market position supported by over 5,000 customers and a robust cloud infrastructure, Aviationstack offers a comprehensive suite of aviation data services including flight status, airline routes, airport information, and aircraft details. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and clear navigation. Security posture is strong with HTTPS enforcement, domain registration locks, and secure form implementations, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and well-positioned in the aviation data API market.

C

Continental AG

continental-jobs.com

73

Continental AG operates a comprehensive and professionally designed job portal at jobs.continental.com, targeting global job seekers interested in automotive and manufacturing careers. The site leverages modern web technologies including Angular and TYPO3 CMS, ensuring a responsive and accessible user experience. Privacy and cookie policies are clearly stated and supported by a consent management platform, reflecting strong compliance with GDPR requirements. Security posture is robust with HTTPS and content security policies in place, although additional headers could enhance protection. The absence of WHOIS data for the subdomain is typical for corporate subdomains and does not detract from the site's legitimacy, which is reinforced by consistent branding and official social media presence.

M

Malina

autojerabymalina.cz

60

Malina is a Czech Republic-based company specializing in heavy lifting and transport services, particularly mobile crane rentals and oversized transport. Established since 1995, the company positions itself as an experienced and reliable service provider with a focus on safety, efficiency, and customer support. Their website reflects a professional business model targeting industries such as energy, manufacturing, and construction. Technically, the website is built on the Webflow platform, leveraging modern marketing and analytics tools including Google Analytics, Google Tag Manager, and Google Ads conversion tracking. Security measures include HTTPS enforcement, Google reCAPTCHA, and Cloudflare Turnstile anti-bot protection, complemented by a cookie consent mechanism with opt-in. However, the absence of WHOIS data limits domain trust verification, though the website content and contact details support legitimacy. Overall, the site demonstrates good digital maturity and a solid security posture with room for improvement in explicit security headers and incident response disclosures.

M

Malina

ajm.cz

59

Malina is a specialized service provider in the Czech Republic offering heavy lifting and transport equipment rental and operations, with a focus on mobile cranes and oversized transport. Established since 1995, the company positions itself as an experienced and reliable partner for clients needing efficient and safe handling of heavy loads. Their website reflects a professional business with clear service offerings and a customer-centric approach. Technically, the site is built on Webflow CMS, leveraging modern web technologies and integrating Google Analytics and Google Ads for marketing and tracking. Security measures include HTTPS, bot protection via Google reCAPTCHA and Cloudflare Turnstile, and a cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data limits domain trust verification, and no explicit security or incident response policies are published. Overall, the website is well-designed, informative, and secure, suitable for its target audience and business model.