Security Directory

Convertri is a technology company offering a high-performance funnel and landing page builder targeted at agencies, coaches, and solopreneurs. The platform emphasizes speed and conversion optimization, positioning itself as a leading solution in the marketing software space. The website is professionally designed with clear branding and content tailored to its target audience. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing infrastructure. Security-wise, the site uses HTTPS with a strong SSL configuration but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS registration data raises questions about domain legitimacy, although the website content and SSL presence suggest a legitimate business. Overall, the site presents a good user experience and professional appearance but would benefit from enhanced transparency and compliance documentation.

B

BitWave Consulting s.r.o.

rosicko.cz

49

Rosicko.cz is a regional online portal operated by BitWave Consulting s.r.o., serving the Rosicko region in the Czech Republic. The portal provides a comprehensive range of local services including regional news, event calendars, job listings, classifieds, real estate offers, and a business directory. It targets residents and businesses in the region, positioning itself as a key local information hub and part of a broader network of regional portals. The business model relies on advertising, premium listings, and partnerships with local service providers. The website is professionally designed with consistent branding and good content quality.

A

ALISCHEM – Průmyslová chemie s.r.o.

alischem.cz

37

ALISCHEM – Průmyslová chemie s.r.o. is a Czech Republic based small industrial chemical company founded in 2016, specializing in fireproof coatings for wood, powder coatings, industrial paints, and comprehensive corrosion protection services. The company benefits from the support of its parent company ALUMONT BUILDING a.s., which provides essential business infrastructure. The website is professionally designed using WordPress and common plugins, presenting clear business information and contact details. However, the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Technically, the site uses HTTPS but lacks important security headers, which could be improved to enhance security posture.

R

REKTIMONT s.r.o.

rektimont.cz

40

REKTIMONT s.r.o. is a Czech manufacturing company specializing in designated lifting equipment, steel constructions, fire-resistant doors, and inspection services. Founded in 1990 and part of the Alumont group since 2016, it serves industrial clients with certified expertise and a broad product range including steel containers. The website is professionally designed using WordPress with common plugins and provides clear contact information but lacks privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure policies. WHOIS data is unavailable, which impacts domain trust verification. Overall, the site is functional and business-focused but could improve compliance and security transparency.

M

MIBO Scooters s.r.o.

mibokolobezky.cz

51

MIBO Scooters s.r.o. operates an e-commerce platform specializing in the sale of scooters, including folding, racing, and electric models, along with related accessories and apparel. The company targets consumers primarily in the Czech Republic, offering a niche product line with a focus on quality and variety. The website is professionally designed with good navigation and mobile responsiveness, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and Google Tag Manager for marketing and analytics, although Google Analytics is currently disabled. Security posture is moderate with HTTPS enforced but lacks some recommended security headers. Privacy and terms policies are present but basic, with cookie consent mechanisms implemented. The absence of WHOIS data reduces domain trustworthiness, but the presence of clear company contact information and registration details supports legitimacy. Overall, the site presents a credible and functional retail platform with room for security and compliance enhancements.

A

Autocentrum Jan Šmucler

smucler.cz

48

Autocentrum Jan Šmucler is a medium-sized automotive dealership and service company based in the Czech Republic, specializing in authorized sales and servicing of major automotive brands including SEAT, CUPRA, Volkswagen, ŠKODA, and Honda Moto. The company operates multiple branches and offers a comprehensive range of services such as new and used car sales, leasing, insurance, and vehicle servicing. Their website reflects a professional and well-structured digital presence with detailed vehicle listings, promotional offers, and customer engagement features. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, Google reCAPTCHA, and secure form handling are implemented, though there is room for improvement in security headers and accessibility compliance. Privacy and legal policies are comprehensive and GDPR compliant, supporting trustworthiness. The absence of WHOIS data slightly impacts domain trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and improving accessibility features to further strengthen the security posture and user experience.

F

František Serbus alias DJ Kolečko

djkolecko.cz

59

DJ Kolečko is a small Czech Republic-based business operated by the Serbus couple, specializing in DJ services for events and custom textile printing including promotional items. Established in 2016, the company has built a niche in event entertainment and personalized merchandise. The website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and tracking tools such as Facebook Pixel and MailerLite. The site is well-designed, mobile-optimized, and provides clear contact information and customer testimonials, enhancing trust and credibility. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and no visible vulnerabilities, but security headers and vulnerability disclosure mechanisms are absent.

A

Asociace AKU-BAT CZ

akubat-asociace.cz

53

The website represents Asociace AKU-BAT CZ, an industry association likely focused on batteries and accumulators in the Czech Republic. The site provides event information and association-related content primarily in Czech. Technically, it is built on WordPress with common plugins and uses CDNs and Google Tag Manager for analytics. The security posture is weak with no visible security headers or privacy policies, and WHOIS data is unavailable, indicating privacy protection or registration issues. Overall, the site is accessible and safe but lacks transparency and formal compliance documentation.

E

Epta Finland

epta-finland.com

70

Epta Finland is a specialized Finnish sales company established in 2003, providing comprehensive refrigeration solutions and services primarily to the Finnish food retail sector. The company operates multiple offices across Finland and emphasizes sustainable refrigeration technologies. Their business model focuses on product sales, installation, maintenance, and after-sales services, positioning themselves as a market leader in their niche. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 10 with modern front-end libraries and integrates marketing and analytics tools such as Google Tag Manager and Pardot. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS domain registration data is a notable concern, suggesting either privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site is professional, compliant with GDPR, and serves its business purpose effectively.

C

ConnectAd Realtime Inc

connectad.io

64

ConnectAd Realtime Inc operates a supply-side platform focused on empowering publishers and advertisers with advanced optimization, global demand access, and sustainability initiatives. The company positions itself as a transparent and innovative player in the digital advertising technology sector, targeting a global audience with a medium-sized business footprint founded in 2016. The website infrastructure is built on WordPress with modern marketing and analytics integrations such as HubSpot and Usercentrics for consent management. Security posture is solid with HTTPS, domain transfer protection, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, accessible, and trustworthy with no blocking or WAF interference detected.

O

Obec Krásná

obec-krasna.cz

47

Obec Krásná operates as the official municipal government website for the mountain municipality of Krásná in the Moravian-Silesian region of the Czech Republic. The website provides comprehensive information about the municipality, including local news, events, administrative contacts, and community services. It serves residents and visitors by offering access to reservation systems for sports facilities, event calendars, and official documents. The site is positioned as a trusted local government portal with a focus on community engagement and transparency. Technically, the website is built on WordPress using Elementor and several plugins such as Modern Events Calendar Lite, providing a modern and responsive user experience. The site employs HTTPS and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of a visible privacy policy and terms of service pages suggests room for improvement in compliance documentation. From a security perspective, the site uses HTTPS and secure contact forms but lacks advanced security headers and explicit vulnerability disclosure information. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the content. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the official nature and content quality support trustworthiness. Overall, Obec Krásná's website is a well-structured, informative municipal portal with good technical implementation and a solid security baseline. Enhancements in privacy policy visibility, security headers, and domain registration transparency would further strengthen its security posture and compliance standing.

V

Vodovody a kanalizace Mladá Boleslav, a.s.

vakmb.cz

58

Vodovody a kanalizace Mladá Boleslav, a.s. is a regional utility company providing water supply and sewage services primarily in the Mladá Boleslav region of the Czech Republic. The company offers a range of services including new water connections, water quality testing, sewage management, emergency water supply, and engineering services. The website is professionally designed, well-structured, and targets local residents and businesses with clear navigation and comprehensive service information. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Select2, Google reCAPTCHA, and Google Analytics. It is mobile-optimized, accessible, and implements GDPR-compliant cookie consent mechanisms. The site uses HTTPS with strong SSL configuration, though security headers are not explicitly detected in the provided data. From a security perspective, the site demonstrates good practices including secure forms with CAPTCHA, no visible sensitive data exposure, and privacy compliance. However, there is room for improvement by adding security headers, publishing a security policy, and providing a vulnerability disclosure mechanism. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website presents a trustworthy and professional digital presence for a regional utility provider with moderate to strong security posture and good privacy compliance. Strategic improvements in security transparency and header implementation would further enhance trust and resilience.

F

Freemium Kft.

huskroua-cbc.eu

40

The Hungary-Slovakia-Romania-Ukraine ENI CBC Programme website serves as an official information portal for a European Union cross-border cooperation initiative focused on regional development and collaboration between the four countries. The site provides comprehensive information on programme priorities, calls for proposals, project databases, news, and events targeted at government agencies, project applicants, and regional stakeholders. The business model is public sector driven, emphasizing transparency and accessibility of programme data. Technically, the website is built on Webolucio CMS and leverages a modern JavaScript stack including jQuery, Slick Carousel, and Google Analytics for tracking. It employs HTTPS with good SSL configuration and integrates security tools such as Google reCAPTCHA and Rollbar for error monitoring. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. From a security perspective, the site demonstrates good practices with HTTPS enforcement and form protection but lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but GDPR compliance indicators could be improved. No contact emails or phone numbers are explicitly provided, which may impact user trust. Overall, the website is professional, trustworthy, and well-maintained, suitable for its government and non-profit audience. Strategic recommendations include enhancing security headers, publishing a security policy, improving GDPR compliance, and providing clearer contact information to strengthen user trust and compliance posture.

P

Pinault Collection

palazzograssi.it

60

The Pinault Collection website for Palazzo Grassi and Punta della Dogana is a professionally designed and content-rich platform showcasing contemporary art exhibitions and cultural events in Venice. It serves as an important cultural institution with a medium-sized presence, targeting art enthusiasts and tourists. The site uses Drupal 9 CMS and modern JavaScript libraries, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published privacy or incident response policies. WHOIS data is missing or unavailable, which slightly reduces trustworthiness despite the site's professional appearance and strong branding. Overall, the website is reliable and well-maintained but could improve transparency and security disclosures.

Dům dětí a mládeže Zastávka, příspěvková organizace is a local non-profit educational organization based in Zastávka, Czech Republic, focused on providing extracurricular activities, camps, and events for children and youth. The website presents a clear and professional digital presence with detailed program offerings and community partnerships. Technically, the site leverages modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data limits domain legitimacy verification, and the lack of security headers indicates room for improvement in security posture. The site implements a cookie consent mechanism but lacks a dedicated privacy policy page, which is critical for GDPR compliance. Overall, the website is safe, trustworthy, and well-suited for its target audience, but enhancing security and compliance documentation would strengthen its risk profile.

T

The Moth

themoth.org

64

The Moth is a well-established non-profit organization specializing in the art and craft of storytelling. Founded in 1999, it operates primarily in the United States and offers a variety of services including live storytelling events, educational programs, podcasts, and community engagement. The organization maintains a strong market position as a leader in storytelling with a professional and consistent brand presence. Their website reflects a mature digital presence with comprehensive content and clear navigation aimed at a general audience interested in storytelling and community participation. Technically, the website leverages a modern technology stack including jQuery, Select2, Google Analytics, Facebook Pixel, and Twilio SDK, hosted on DigitalOcean. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The use of multiple third-party marketing and analytics tools indicates a mature digital marketing strategy, though there is room for improvement in cookie consent and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and employs domain transfer protection, but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the security posture is solid but could benefit from enhanced DNS security and explicit public security policies. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enabling DNSSEC, implementing cookie consent for GDPR compliance, publishing security and incident response policies, and auditing third-party scripts regularly to maintain security and privacy standards.

P

Přemysl Veselý

premyslvesely.cz

58

Přemysl Veselý is a Czech construction and engineering company specializing in the building, reconstruction, and repair of engineering networks and communications since 1991. The company serves key regional clients including municipal utilities and city infrastructure in Brno. Their services cover water supply and sewage systems, road and parking lot construction, industrial and civil construction, sports facilities, terrain modifications, and specialized operations such as recycling and road surface repairs. The website reflects a medium-sized, established business with a professional online presence and clear contact information. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience. It is mobile-optimized and uses HTTPS with cookie consent mechanisms, indicating compliance with GDPR. However, some security headers are missing, and no explicit incident response or security policy information is provided. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection limits domain transparency but does not detract from the overall legitimacy of the business. The website is free from adult or questionable content and maintains a professional and trustworthy appearance. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable digital asset for the company.

E

Endress+Hauser AG

eh.digital

72

Endress+Hauser AG is a global leader in industrial process measurement instrumentation and automation solutions, specializing in flow, level, liquid analysis, optical analysis, pressure, and temperature measurement technologies. The company targets industrial process engineers and businesses in manufacturing and process industries, offering a comprehensive portfolio of products and software solutions to optimize process automation. The website reflects a mature enterprise with consistent branding and professional presentation, reinforcing its market position. Technically, the website employs modern web technologies including JavaScript frameworks, CSS, and performance monitoring tools such as Akamai mPulse and Tealium IQ. It is hosted on a robust infrastructure likely leveraging Akamai CDN, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, supporting a positive user experience. From a security perspective, the site enforces HTTPS and demonstrates good security practices with no visible vulnerabilities or exposed sensitive data. While explicit security headers are not fully confirmed, the overall posture is strong. Privacy compliance is evident with comprehensive privacy and cookie policies, including GDPR adherence. Contact information and social media presence further enhance trust. Overall, the domain WHOIS data is not publicly available, likely due to privacy protection, which is justified for a large enterprise. Despite this, the website's professionalism and consistency support its legitimacy. The risk assessment is low, with recommendations focusing on enhancing security header transparency and publishing a vulnerability disclosure policy to further strengthen trust.

C

CCI France International

ccifrance-international.org

62

CCI France International is a large, established non-profit network supporting French companies in their international development across 98 countries with 125 chambers. The website provides comprehensive information about their services including market diagnostics, office rental, hosting, training, and networking. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security policies and incident response details are absent. WHOIS data is privacy protected, which is typical for such organizations, but limits transparency. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

O

Obce na webu s.r.o.

obeckanice.eu

60

Obec Kanice is an official municipal website serving the local community in the Czech Republic. It provides comprehensive information about local governance, public services, events, and community news. The site is operated by Obce na webu s.r.o., a company specializing in municipal web solutions. The website targets residents and visitors of Kanice, offering essential services and information relevant to local administration and community engagement. Technically, the site uses a combination of jQuery, Bootstrap, and other common web libraries, hosted likely under a Czech registrar and hosting provider. The site is mobile-optimized and includes accessibility and SEO best practices to a basic degree. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms compliant with GDPR, but lacks explicit security headers and incident response contacts. Overall, the site is trustworthy, professional, and well-maintained, suitable for its government function.

B

BitWave Consulting s.r.o.

regionslapanicko.cz

44

Regionslapanicko.cz is a regional online portal serving the Šlapanicko area in the Czech Republic. Operated by BitWave Consulting s.r.o., it provides local news, event calendars, job listings, real estate offers, and a business directory. The portal aims to support community life and business development by collaborating with municipalities and regional institutions. It is part of a broader network of regional portals under Regionalniportaly.cz. The website demonstrates a solid content offering with a clear focus on regional information and services.

F

FORPSI

forpsi.com

74

FORPSI is a professional service provider specializing in domain registration, web hosting, VPS, and cloud services primarily targeting customers in the Czech Republic. The company positions itself as a reliable partner with its own data center, offering a range of hosting and server solutions. The website is well-structured, primarily in Czech, and provides comprehensive information about its services, targeting both business and individual customers. The presence of cookie consent and privacy policy indicates attention to regulatory compliance. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, and appears to be built on Kentico CMS. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected in the content. However, the absence of WHOIS domain registration data raises concerns about domain transparency and legitimacy, which slightly impacts trustworthiness. Overall, the website is professional and functional but would benefit from improved domain registration transparency and explicit contact information.

C

Cuatro Cero

cuatro-cero.com.mx

55

Cuatro Cero is a Mexican digital media outlet specializing in the digital industry sector. The website serves as a niche media platform providing news and insights relevant to the digital industry, targeting a general Spanish-speaking audience primarily in Mexico. The business model centers on media publishing with advertising support, leveraging WordPress as its CMS and integrating Google Analytics for visitor tracking. The site maintains a consistent brand presence and uses modern web technologies to deliver content effectively.

G

Global Energy

globalenergy.mx

65

Global Energy is a specialized media publication focused on delivering objective and reliable business information within the energy sector in Mexico. The website serves professionals and stakeholders by providing news, analysis, and virtual editions of their magazine. Their market position is that of a reputable energy sector media outlet with a consistent brand and good content quality. Technically, the site is built on WordPress using a modern Newspaper theme and several plugins for SEO, user engagement, and analytics. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced, security headers present, and no exposed sensitive data. Privacy compliance is demonstrated through a comprehensive privacy policy and cookie consent mechanism, though explicit terms of service and security policies are absent. Overall, the site is trustworthy and professional, with room for improvement in security transparency and accessibility.

O

Outward Bound Czech Republic, pobočka PŠL

outwardbound.cz

46

Outward Bound Czech Republic, pobočka PŠL, is a well-established non-profit educational organization founded in 1999, offering outdoor adventure expeditions and school programs aimed at youth and young adults. The organization is part of the international Outward Bound network, focusing on personal development through authentic nature experiences. Their website reflects a professional and consistent brand image, with comprehensive content targeting schools, parents, and young participants. Technically, the site is built on WordPress with modern libraries and tools, including Google Analytics and Facebook Pixel for tracking, and Mailchimp for newsletter management. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and complete, enhancing business credibility. Overall, the site is trustworthy, safe, and professionally maintained.

C

CORA computer s.r.o.

cesketabory.cz

59

Cesketabory.cz is a well-established Czech online platform specializing in the cataloging and promotion of children's summer camps and related recreational activities across the Czech Republic. Operated by CORA computer s.r.o., the website serves primarily parents and families seeking detailed information and booking options for various camps. The platform offers a comprehensive catalog, interactive maps, and additional resources such as advice for parents and listings for camp organizers and equipment. The business has a strong market presence since 2008 and collaborates with recognized partners in the youth and education sectors. Technically, the website employs a modern technology stack including Google Maps API, Google Analytics, Facebook SDK, and various JavaScript libraries to provide interactive features and user engagement. The site is mobile-optimized with good SEO practices and a custom CMS backend. Performance is moderate with room for improvement in accessibility features. Security is robust with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although some advanced security headers and incident response disclosures are absent. From a security and compliance perspective, the site demonstrates GDPR awareness with a comprehensive privacy policy and cookie consent banner. Contact information is clearly provided, enhancing trust and transparency. No critical vulnerabilities or suspicious patterns were detected. The domain registration details align well with the business claims, indicating legitimacy and consistency. Overall, cesketabory.cz presents a professional, trustworthy, and user-friendly platform for children's camp information in the Czech Republic. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its digital maturity and compliance posture.

T

TIPOS, národná lotériová spoločnosť, a. s.

tipos.sk

56

TIPOS, národná lotériová spoločnosť, a. s., is the national lottery company of Slovakia, offering a broad range of gambling services including lotteries, sports betting, scratchcards, and online casino games. The company holds a dominant market position as the official national operator, targeting Slovak residents interested in regulated gambling entertainment. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools, with good performance and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site demonstrates high business credibility with clear contact information, official certifications, and government affiliations.

N

NEWTON University Group, s.r.o.

newton.university

63

NEWTON University Group is a private higher education institution focused on preparing students for success in the business world through practical and innovative programs. The university operates campuses in Prague, Brno, Bratislava, and offers online courses in multiple languages including Czech, English, and Slovak. The institution is well-positioned in the education sector with recognized accreditations such as AACSB and partnerships with other educational entities like Vysoká škola Sting. The website demonstrates a mature digital presence with modern technologies, good content quality, and compliance with privacy regulations including GDPR. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain and website present a trustworthy and professional image suitable for prospective students and partners.

C

ContentFruiter s.r.o.

contentfruiter.sk

59

ContentFruiter s.r.o. is a Slovak-based professional content marketing agency established in 2014. The company specializes in content marketing projects with guaranteed growth, offering services such as functional content marketing, comprehensive online marketing audits, workshops, video content creation, and web solutions. The website demonstrates a strong market position with multiple client case studies and testimonials, targeting businesses seeking effective content marketing strategies. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, OneSignal push notifications, and MailerLite for marketing automation. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, although additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence.

P

Podcast Media s.r.o.

radiovy.cz

46

RádioVy is a Czech internet radio platform operated by Podcast Media s.r.o., offering a variety of regional and thematic radio stations, podcasts, and news content. The website targets Czech-speaking audiences interested in local news, sports, and cultural programming. The business model is primarily advertising-based, with a focus on community engagement and podcast hosting. The company is small-sized and operates within the media sector in the Czech Republic. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Wavesurfer.js for audio features, and a proprietary CMS (cmscore v2.0). The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and performance tuning. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and no dedicated security or incident response policies are published. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, but no data protection officer or vulnerability disclosure information is found. Overall, the website is professionally designed and functional with good content quality and user experience. The main risk lies in the lack of domain registration transparency and limited security policy disclosures. Strategic improvements in security posture and domain verification would enhance trust and compliance.

J

JSNŠ

jsns.cz

59

The website www.jsns.cz represents an educational initiative named Jeden svět na školách (JSNS), focused on providing free and legal documentary film screenings for schools in the Czech Republic. The platform supports educators by offering activities and projects to enrich teaching. The site targets schools and educators, positioning itself as a niche non-profit educational content provider. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Leaflet.js for mapping, and standard web libraries such as Font Awesome and Select2. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security-wise, HTTPS is enforced with appropriate security headers, and no vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are implemented, indicating GDPR awareness, although no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is professionally designed, secure, and serves a clear educational purpose, but would benefit from enhanced privacy disclosures and contact information to improve compliance and trust.

A

Apidae Tourisme

apidae-tourisme.com

50

Apidae Tourisme operates a leading national platform for tourism data management in France, serving over 900 clients and 30,000 professional users. The company provides a cooperative SaaS platform enabling territories to collect, enrich, and distribute tourism-related data, supporting both institutional stakeholders and digital service providers. Their market position is strong as a key enabler of digital transformation in the tourism sector. Technically, the website is built on WordPress with modern JavaScript libraries and plugins, offering good performance and mobile optimization. Security measures include HTTPS, anti-spam protection, and GDPR-compliant cookie management, though additional security headers could enhance posture. The absence of WHOIS data is a concern but does not detract from the professional and trustworthy presentation of the business. Overall, Apidae Tourisme demonstrates a mature digital presence with solid business credibility and compliance.

L

Le Palais Megève

lepalaismegeve.com

57

Le Palais Megève operates the largest sports and leisure complex in the French Alps, offering a wide range of activities including aquatic facilities, ice rink, spa, fitness, climbing, tennis, and event spaces. The website targets families, sports enthusiasts, and general visitors seeking multisport and wellness experiences. The business is positioned as a key regional leisure destination with a medium-sized operation founded in 2017. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Slider, and various UI libraries, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with GDPR-consistent policies and cookie management. Overall, the website is professional, trustworthy, and well-aligned with the business objectives.

C

Carts Guru

carts.guru

56

Carts Guru is a specialized SaaS provider offering ecommerce marketing automation tools that enable online merchants to engage customers across multiple channels including email, SMS, and Facebook Messenger. The company targets ecommerce businesses seeking to increase revenue through automated, multichannel marketing campaigns and data-driven decision making. Their platform includes features such as campaign automation, audience segmentation, templates, and detailed dashboards, supported by a professional team offering premium support services. The website reflects a medium-sized business based in Spain with a strong market presence and over 1000 clients worldwide. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery, Swiper, noUiSlider, and Select2. It is well optimized for mobile devices, fast loading, and SEO-friendly with proper meta tags and structured data. Google Tag Manager is used for analytics and marketing tracking. The site employs HTTPS with good SSL configuration but lacks some advanced security headers. Contact is primarily via a secure web form, with no direct email or phone contacts publicly listed. From a security perspective, the site demonstrates good practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit cookie consent mechanisms and published incident response contacts or vulnerability disclosure policies. WHOIS data is unavailable due to privacy or query failure, which slightly reduces trust but is common for SaaS businesses. Overall, the security posture is solid but could be improved with additional transparency and security headers. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing cookie consent, publishing incident response contacts, adding security headers, and maintaining regular vulnerability audits. The website is professional, trustworthy, and well-positioned in the ecommerce marketing automation sector.

E

Exalto

exalto.fr

40

Exalto is a French retail e-commerce company specializing in men's eyewear, offering a curated selection of glasses emphasizing elegance, technical quality, and comfort. The website is built on the PrestaShop platform, utilizing modern JavaScript libraries for enhanced user experience and lazy loading for performance optimization. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of visible privacy, cookie policies, and contact information suggests areas for compliance and trust improvement. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response contacts. Overall, the website presents a professional retail presence but would benefit from enhanced transparency and security best practices.

F

Flora - květiny

flora-svatby.cz

41

Flora-svatby.cz is a Czech-based small business specializing in wedding floral arrangements and decorations. The company offers a variety of wedding-related floral products and services, emphasizing fresh flowers sourced directly from the Dutch flower market and personalized consultations by experienced florists. The website is built on WordPress with WooCommerce, utilizing multiple plugins for enhanced functionality and user experience. While the site is accessible and well-structured with good content quality, it lacks critical privacy and cookie policies, and no contact emails or phone numbers are explicitly provided on the site. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policies. The absence of WHOIS data reduces domain legitimacy confidence, suggesting a need for further verification. Overall, the site serves its business purpose well but requires improvements in compliance and security transparency.

A

Anglet Hormadi Pays Basque

hormadi.fr

45

Anglet Hormadi Pays Basque is a professional ice hockey club based in France, competing in the Synerglace Ligue Magnus. The website serves as the official digital presence of the club, providing comprehensive information about the team, season schedules, news updates, ticketing options, and partner relations. The site targets sports fans and the local community, offering a well-structured and branded experience consistent with a medium-sized sports organization. Technically, the website is built on WordPress with a modern tech stack including popular plugins and libraries such as WPBakery, Bootstrap, and Google Analytics. The site demonstrates good mobile optimization, SEO practices, and user experience. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. From a security perspective, the site uses HTTPS and implements some best practices, though security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for such organizations, and does not raise immediate trust concerns. Overall, the website is professional, trustworthy, and suitable for its business purpose. Strategic recommendations include improving security headers, maintaining plugin updates, and enhancing incident response visibility.

Q

Qítko korálky

qitko-koralky.cz

48

The website www.qitko-koralky.cz operates as a Czech e-commerce platform specializing in beads, components, and materials for jewelry making. It targets hobbyists and crafters within the Czech Republic, offering a wide range of products including wooden beads, glass beads, metal components, and tools. The site is built on the BohemiaSoft e-commerce platform and uses a variety of JavaScript libraries, some of which are outdated, indicating a need for modernization. Contact information is clearly provided, including a Czech phone number and an email address linked to a related domain, suggesting a small but legitimate business presence. Technically, the site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices appear adequate with proper meta tags and structured navigation. However, the use of outdated jQuery versions introduces potential security vulnerabilities. The site implements a cookie consent banner with detailed cookie categorization, reflecting some level of privacy compliance, though no explicit privacy policy page was found. Security posture is moderate; while HTTPS and CSRF protections are implied, the absence of security headers and outdated libraries reduce the overall security score. WHOIS data is unavailable, which raises concerns about domain registration transparency but does not necessarily indicate malicious intent. Overall, the site is functional and serves its niche market but would benefit from technical and security improvements. Strategic recommendations include updating all JavaScript libraries to current secure versions, implementing comprehensive security headers, publishing a clear privacy policy, and conducting regular security audits. These steps will enhance trust, compliance, and resilience against potential threats.

T

Tržiště Pod Kaštany

trzistepodkastany.cz

46

The website trzistepodkastany.cz represents a local marketplace called "Tržiště Pod Kaštany" located in Zlín, Czech Republic. It focuses on offering a diverse range of regional food products and hosting community events that foster direct interaction between sellers and buyers. The business model is centered around a physical and digital marketplace promoting local and healthy food options, targeting local residents and tourists. The website content is well-structured, with clear navigation and a consistent brand presence, supported by social media channels on Facebook and Instagram. From a technical perspective, the site employs a variety of modern JavaScript libraries and plugins such as jQuery, fullcalendar, select2, and Google services including reCAPTCHA and Tag Manager. The site enforces HTTPS and includes a Content-Security-Policy header, indicating a baseline security posture. Performance and mobile optimization are adequate, though accessibility features could be improved. SEO is supported by proper meta tags and Open Graph data. Security-wise, the website benefits from HTTPS and basic security headers but lacks comprehensive security policies such as privacy, cookie, or vulnerability disclosure statements. No critical vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Contact information is clearly provided, enhancing business credibility. Overall, trzistepodkastany.cz is a legitimate, small-scale local marketplace website with good content quality and technical implementation. To improve security posture and compliance, it is recommended to implement privacy and cookie policies, enhance security headers, and consider a vulnerability disclosure mechanism. These steps will strengthen trust and regulatory adherence while maintaining a positive user experience.

The website visitzlin.eu serves as the official tourist information portal for the city of Zlín, Czech Republic. It provides comprehensive information about the city, including cultural events, historical background, practical visitor information, and local attractions. The portal targets tourists, local residents, and visitors interested in exploring Zlín and its surroundings. The business model is a government-operated informational service aimed at promoting tourism and local culture. Technically, the site employs a custom CMS with a modern JavaScript technology stack including jQuery and various UI libraries such as Slick Carousel and FullCalendar. It integrates Google services like Maps API, Analytics, Tag Manager, and reCAPTCHA for security and tracking. The site is hosted by Media4web, s.r.o., a Czech hosting provider, and uses HTTPS with a Content-Security-Policy header, indicating a good security baseline. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA protection on forms. However, it lacks some additional security headers and a visible cookie consent mechanism, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is transparent and consistent with the website's official city affiliation, supporting its legitimacy. Overall, the website is a well-maintained, regionally focused government portal with good content quality and technical implementation. It could improve privacy compliance and security posture by adding cookie consent, security policies, and additional headers. The risk level is low, with no critical issues detected.

N

Nadace Tomáše Bati

nadacetomasebati.cz

68

Nadace Tomáše Bati is a Czech non-profit foundation focused on preserving the legacy of the Baťa family and supporting social, cultural, and educational initiatives primarily in the Zlín region. The foundation operates from the historically significant Baťa villa and offers a variety of community events, educational programs, and an e-commerce platform for branded merchandise. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in culture and community development. Technically, the website employs a modern JavaScript stack including jQuery, Vue.js, and various UI libraries, ensuring good mobile optimization and user experience. The site uses HTTPS with valid SSL certificates and incorporates Google reCAPTCHA and cookie consent mechanisms, reflecting a reasonable security posture. However, the absence of explicit security headers and incident response information suggests room for improvement. From a security perspective, the site shows good practices such as encrypted connections and form protections but lacks detailed security policies and vulnerability disclosure mechanisms. The missing WHOIS data for the domain is a concern for trust and legitimacy, although the website content and external partnerships support its authenticity. Overall, the website presents a trustworthy and professional front for the foundation but should address WHOIS transparency and enhance security disclosures to improve credibility and compliance.

The website visitzlin.eu serves as the official tourist information portal for the city of Zlín, Czech Republic. It provides comprehensive information about the city, including cultural events, historical background, practical visitor information, and local attractions. The portal is operated by the city's magistrate and targets tourists, local residents, and cultural enthusiasts. It holds a strong market position as the authoritative source for tourism-related content in the region. Technically, the website employs a modern JavaScript-based tech stack including jQuery, FullCalendar, Slick Carousel, and Google Maps API. It uses HTTPS with a Content-Security-Policy header and integrates Google Analytics and reCAPTCHA for analytics and bot protection. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses CSP headers, but lacks several other recommended security headers. The subscription form is protected by Google reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies indicates room for improvement in privacy compliance. Overall, the website is trustworthy, professionally maintained, and aligned with its municipal purpose. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing security policies, and maintaining regular security audits to ensure ongoing protection.

E

enel-med

enelsklep.pl

63

Enel-med operates a comprehensive e-commerce platform focused on healthcare services in Poland, offering a wide range of medical consultations, diagnostic tests, rehabilitation, dental care, and aesthetic medicine. The website is built on WordPress and integrates modern tracking and consent management tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot, indicating a mature digital infrastructure. Security posture is solid with HTTPS and DNSSEC enabled, though the absence of explicit privacy and terms of service pages suggests room for compliance improvement. Overall, the platform presents a professional and trustworthy front for healthcare consumers, with a clear market position in medical service e-commerce.

C

Continental Tires

continental-me.com

53

Continental Tires Middle East operates as a regional landing platform for the established global tire manufacturer Continental AG, targeting consumers and businesses in the Middle East and North Africa (MENA) region. The website facilitates language and country selection to direct users to localized content and services, including tire dealer location and vehicle-specific tire information. The business model focuses on B2C and B2B tire sales and distribution, leveraging Continental's strong brand recognition and market presence. The site positions itself as a reliable regional resource for Continental Tires products and services.

F

Filip Kahoun

bojopozornost.cz

57

The website 'Boj o pozornost' appears to be a Czech language site operated by an individual named Filip Kahoun, with content dating back to 2019. It uses WordPress with WooCommerce and the Divi theme, indicating a small-scale e-commerce or personal business presence. The site is technically mature with modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel integrated. However, it lacks visible privacy and cookie policies, as well as explicit contact information, which impacts its compliance and trustworthiness. Security posture is moderate with HTTPS enabled but missing security headers and formal security policies. The absence of WHOIS data reduces domain trust, though the site content and technology stack suggest legitimate operations.

P

Prowine s.r.o.

prowine.cz

49

Prowine.cz operates as a specialized e-commerce platform focused on importing and selling Bulgarian wines and spirits within the Czech Republic. Established since 2002, the company offers a broad portfolio of Bulgarian wines from various wineries and grape varieties, targeting both retail consumers and wholesale clients. The website demonstrates a professional design and functional e-commerce capabilities powered by WordPress and WooCommerce, enhanced with GDPR compliance and marketing integrations such as Facebook Pixel and Google Ads. Despite the absence of WHOIS registration data, the site maintains trust signals including clear contact information, social media presence, and customer engagement widgets. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and explicit policies are recommended. Overall, the platform presents a mature digital presence suitable for its niche market, with moderate risk due to missing domain registration transparency.

T

The Canadian Partnership for Women and Children’s Health (CanWaCH)

canwach.ca

67

The Canadian Partnership for Women and Children’s Health (CanWaCH) is a Canadian non-profit organization dedicated to advancing the health and rights of women and children globally. Established in 2016, CanWaCH operates as a partnership of Canadian organizations and global citizens, providing services such as data exchange, resource centers, advocacy, and membership engagement. The organization maintains a strong market position within the Canadian global health sector, supported by a professional and content-rich website that effectively communicates its mission and services. Technically, the website is built on WordPress with a modern tech stack including Bootstrap 4, jQuery, and various plugins for SEO, GDPR compliance, and user engagement. Hosting and DNS services are provided by reputable providers including Go Daddy and Cloudflare. The site demonstrates good performance, mobile optimization, and accessibility, with comprehensive SEO and structured data implementation. From a security perspective, the site uses HTTPS, reCAPTCHA for forms, and cookie consent management, reflecting a solid security posture. However, there is room for improvement in enabling DNSSEC and implementing additional security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, CanWaCH presents a low-risk profile with a high level of professionalism and trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a terms of service page to further strengthen compliance and user trust.

C

CITY – CAR a.s.

citycar.cz

65

CITY – CAR a.s. is a well-established automotive dealership and service provider based in the Czech Republic, specializing in the sale and servicing of Citroën, DS Automobiles, Dongfeng, SWM, and Peugeot vehicles. The company has been operating since 1990, serving both individual consumers and business clients in the South Bohemia region. Their offerings include new and used vehicle sales, vehicle servicing, rental services, vehicle purchase and trade-in, and financing solutions. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service information. Technically, the website is built on WordPress using WooCommerce and Elementor, leveraging modern web technologies such as jQuery, Bootstrap, and Google Fonts. The site is mobile-optimized and demonstrates good SEO practices. Security measures include HTTPS enforcement and standard security headers, with a cookie consent mechanism aligned with GDPR requirements. However, there is no explicit incident response or vulnerability disclosure information available. The security posture is solid with no detected vulnerabilities or exposed sensitive data, but the absence of WHOIS data limits domain trust verification. The website content is safe for general audiences, with no adult or questionable material. Overall, the site presents a trustworthy and professional digital presence for the business.

C

Commune de Seneffe

seneffe.be

9

The website www.seneffe.be serves as the official online portal for the Commune de Seneffe, a local government entity in Belgium. It provides residents and visitors with access to municipal services, administrative procedures, community news, cultural events, social programs, and tourism information. The site is designed to facilitate citizen engagement and streamline access to public resources. Technically, the site is built on the Plone CMS platform, utilizing common web technologies such as jQuery, Leaflet.js for mapping, and slick sliders for content presentation. The site is accessible, mobile-optimized, and features a cookie consent mechanism, indicating a basic level of privacy compliance. Security-wise, the site uses HTTPS but lacks visible security headers and detailed privacy policies, which are areas for improvement. The WHOIS data is restricted by the .be registry, limiting transparency about domain ownership, but the site’s content and branding strongly indicate legitimacy as a government resource. Overall, the site presents a professional and trustworthy digital presence for the local government, with moderate technical maturity and room for enhanced security and privacy practices.