Security Directory

M

Multi Digital

multidigital.ch

62

Multi Digital is a Swiss-based digital agency specializing in the development, programming, and implementation of web and software solutions tailored to regional, national, and international clients. The company emphasizes user-friendly, personalized digital experiences that support client strategies. As part of the Galledia Group, Multi Digital benefits from a strong regional presence and professional backing. The website reflects a modern, professional design with clear navigation and comprehensive service offerings including software development, e-commerce, marketing, and web design. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Metricool for analytics and marketing, and employs a robust cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Elk River Systems

eventgroovefundraising.com

61

Eventgroove is a medium-sized technology company specializing in providing an all-in-one online fundraising platform tailored for nonprofits. Their platform supports various fundraising methods including peer-to-peer campaigns, auctions, raffles, and crowdfunding, with a strong emphasis on ease of use and customer support. The company positions itself as a cost-effective solution with no hidden fees, appealing to small and large nonprofits alike. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website is built on WordPress using the Divi theme and enhanced with NitroPack for performance optimization. It integrates modern web technologies and third-party services such as Vimeo for video content and HubSpot for marketing and analytics. The site demonstrates good SEO and accessibility practices, with fast loading times and responsive design. From a security perspective, the site enforces HTTPS and employs standard security headers, contributing to a strong security posture. However, it lacks a publicly available security policy and incident response information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a trustworthy and professional image with comprehensive privacy and cookie policies. The absence of WHOIS registration data is a notable concern, suggesting the need for further verification of domain legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and improving incident response visibility to strengthen security and compliance posture.

Neon One is a technology company specializing in providing integrated software solutions for nonprofit organizations. Their platform combines donor management, fundraising, memberships, events, and ticketing into a unified system, positioning them as a key player in the nonprofit software market. Founded in 2016, the company targets nonprofit organizations seeking streamlined management tools to enhance donor engagement and event coordination. The website reflects a professional and consistent brand image, supported by structured data and social media presence on Facebook and LinkedIn. Technically, the website is built on WordPress CMS and leverages a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Pardot marketing automation, AdRoll retargeting, and Visual Website Optimizer for A/B testing. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively. The site demonstrates good SEO optimization and mobile responsiveness, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published privacy policy or terms of service found in the analyzed content, though a cookie consent mechanism is implemented via CookieYes, indicating some level of privacy compliance. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. Overall, Neon One's website presents a trustworthy and professional front for their nonprofit software services, with a solid technical foundation and marketing integration. To further strengthen their security posture and compliance, it is recommended to publish comprehensive privacy and security policies, enable DNSSEC, and implement security headers. Enhancing accessibility and providing clear contact information would also improve user trust and engagement.

P

Presseli Ltd

maxmegamenu.com

54

Max Mega Menu is a WordPress plugin provider specializing in mega menu solutions for websites. The company, Presseli Ltd, based in the UK, offers both free and premium versions of their plugin, targeting WordPress site owners and developers seeking enhanced navigation features. The website is well-structured, professionally designed, and provides extensive documentation and support resources, positioning itself as a reputable player in the WordPress plugin market with over 400,000 active installs and strong user reviews. Technically, the site is built on WordPress with common plugins such as Easy Digital Downloads and Contact Form 7, integrating Paddle for payment processing and Google Analytics for visitor tracking. The site is mobile-optimized, accessible, and uses HTTPS with anonymized IP tracking, reflecting a mature digital infrastructure. However, some security best practices like explicit security headers and incident response disclosures are absent. From a security perspective, the site demonstrates good baseline protections including HTTPS and no visible sensitive data exposure. The lack of WHOIS data reduces transparency and slightly impacts trust, but the professional content and business information mitigate concerns. Privacy compliance is well addressed with a comprehensive privacy policy and cookie disclosures, though cookie consent mechanisms could be enhanced. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further strengthen trust and compliance.

L

Leave No Trace

lnt.org

68

Leave No Trace is a well-established nonprofit organization dedicated to promoting responsible outdoor recreation through education, research, and community programs. Their website reflects a mature digital presence with comprehensive content, multilingual support, and a professional design that effectively communicates their mission and services. The organization leverages modern web technologies including WordPress with Elementor, Bootstrap, and various plugins to deliver a responsive and accessible user experience. Security measures such as HTTPS, Google reCAPTCHA, and Cloudflare DNS are in place, although some security headers could be improved. The domain registration is consistent with the organization's identity and history, enhancing trustworthiness. Overall, the website serves as a credible and authoritative platform for environmental stewardship education.

R

Rency s.r.o.

rency.cz

53

Rency s.r.o. is a Czech design-driven company specializing in branding, visual identity, and web design services. With over 13 years of experience, they target successful firms seeking to enhance their brand presence and competitive advantage. The website reflects a professional and consistent brand image, showcasing client testimonials, case studies, and a portfolio of services. Technically, the site is built on Webflow and leverages modern JavaScript libraries such as GSAP and Swiper, with fast loading times and excellent mobile optimization. Security-wise, the site uses HTTPS and modern analytics tools but lacks some security headers and explicit incident response contacts. Privacy and cookie policies are present but do not include a consent mechanism. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness despite the professional web presence.

M

Max Realitní Fond SICAV a.s.

maxrealitni.cz

36

Max Realitní Fond SICAV a.s. operates as a premium real estate investment fund focused on retail and office properties within the Czech Republic. The fund targets qualified investors, offering a business model centered on pooling capital to invest in prime real estate assets with a goal of achieving an annual return of approximately 8.5%. The website presents a professional and consistent brand image, providing detailed information about investment strategies, team members, and performance metrics. Technical infrastructure leverages modern JavaScript libraries such as jQuery, Bootstrap, and Chart.js, alongside Cookiebot for GDPR-compliant cookie management. Analytics are implemented via Google Analytics and Google Tag Manager, supporting moderate user tracking with appropriate consent mechanisms. Security posture is adequate but could be improved by implementing additional HTTP security headers and verifying SSL configurations. The absence of WHOIS data due to privacy protection limits transparency but does not detract significantly from the site's credibility given the professional presentation and clear business information. Overall, the website is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

B

Broker Consulting, a.s.

bcas.cz

65

Broker Consulting, a.s. is a well-established Czech company specializing in financial and real estate consulting services. Founded in 1998, it has grown into a market leader with a large client base and a network of over 2,000 consultants across the Czech Republic and Slovakia. The company offers a comprehensive range of services including financial planning, investments, insurance, real estate transactions, and franchising opportunities. Their strong market position is supported by high customer satisfaction scores and numerous client testimonials. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and an AI-powered chatbot, ensuring a responsive and user-friendly experience. The site is mobile-optimized and includes SEO best practices, although some improvements in security headers and explicit security policies could enhance its posture. The hosting and domain registration are consistent with the company's geographic and business claims. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security policies and incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, Broker Consulting presents a professional, trustworthy, and technically sound online presence with minor areas for security and compliance enhancement. The risk level is low, and the company demonstrates strong business credibility and digital maturity.

P

Pardubice Airport

airport-pardubice.cz

56

Pardubice Airport operates as a regional transportation hub in the Czech Republic, providing passenger flight services and collaborating with multiple travel agencies and airlines to offer holiday destinations. The website reflects a professional and user-friendly digital presence built on WordPress with Elementor, featuring flight schedules, partner offers, and airport services. The technical infrastructure includes modern web technologies and analytics tools such as Google Tag Manager, supporting moderate user tracking and marketing efforts. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though the absence of WHOIS data and some security headers suggests room for improvement. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR consent. Overall, the airport's digital presence supports its business model effectively but would benefit from enhanced transparency in domain registration and additional security policies.

M

Město Pardubice

pardubice.eu

57

Pardubice.eu is the official web portal for the city of Pardubice, Czech Republic, serving tourists, citizens, entrepreneurs, and local government stakeholders. It provides comprehensive information on tourism, events, city news, public services, and contact resources. The website is well-positioned as a trusted government portal with consistent branding and a clear focus on serving its community. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by a reputable Czech provider and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR, though it lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

G

Giant interactive s.r.o.

giant.cz

54

Giant interactive s.r.o. is a Czech digital agency specializing in e-commerce, web, and mobile application development with over 17 years of experience. The company positions itself as a market leader providing comprehensive digital solutions including strategy, web presence, e-commerce platforms, mobile apps, and online marketing services. Their client portfolio includes notable companies and they have received multiple industry awards, indicating strong market presence and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, React JS, and integrates Google Tag Manager for analytics. The site is well-optimized for mobile devices and offers a professional user experience with clear navigation and multimedia content. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms with anti-spam features. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no published privacy policy or incident response information is found, which are areas for improvement. Overall, the website is professional and trustworthy, but the absence of WHOIS data and privacy policy reduces the confidence level. It is recommended to verify domain registration details and publish comprehensive privacy and security policies to enhance trust and compliance.

N

Non Gamstop Casinos - OXON AA

ember.london

53

The website oxonaa.org.uk operates as an affiliate and informational platform focusing on non Gamstop casinos for UK players. It provides casino reviews, guides, and affiliate links to various offshore casinos, targeting adult UK gamblers seeking alternatives to Gamstop self-exclusion. The site is built on WordPress with modern SEO and performance optimizations, including Yoast SEO and WP Rocket, and uses Google Analytics for visitor tracking. The domain is very new, registered in 2025, which aligns with the site's recent content but may raise trust concerns for some users. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks published privacy, cookie, or security policies, which are important for compliance and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for adult audiences interested in gambling. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer business contact information.

N

Non Gamstop Casinos - OXON AA

psi.org.uk

53

The website 'Non Gamstop Casinos - OXON AA' operates as an affiliate and informational platform targeting UK players interested in casinos outside the Gamstop self-exclusion scheme. It provides curated reviews, guides, and affiliate links to licensed non Gamstop casinos, positioning itself in a niche gambling market segment. Technically, the site is built on WordPress with modern SEO and performance optimizations, including the use of Yoast SEO, WP Rocket, and Google Analytics. The site is mobile-optimized and performs well with fast loading times. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, but lacks visible security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. The WHOIS data presents inconsistencies, notably a future domain creation date, which raises questions about domain legitimacy. Overall, the site is functional and professional but requires improvements in compliance and transparency to enhance trust and security.

N

No Limit Casinos

nolimit-casinos.de

57

No Limit Casinos operates a German-language affiliate marketing website focused on providing detailed and current information about legal online casinos in Germany, specifically those without OASIS player blocking. The site offers casino reviews, bonus information, and comparisons to assist German players in finding legal gambling options. The business model relies on affiliate partnerships with casino operators, promoting their services through referral links. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WP Rocket, and uses Cloudflare for DNS and security. Google Analytics is integrated for user tracking via the MonsterInsights plugin. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is professional and well-structured but could improve transparency and compliance.

N

Non Gamstop Casinos - OXON AA

oxonaa.org.uk

53

The website oxonaa.org.uk operates as an affiliate and informational platform specializing in non Gamstop casinos targeted at UK players seeking alternatives to UKGC-regulated gambling sites. It provides curated casino reviews, bonus information, and payment guidance, positioning itself as a niche player in the UK gambling affiliate market. The site leverages WordPress CMS with modern SEO and performance optimizations, including WP Rocket and Google Analytics integration. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies, representing compliance gaps. The WHOIS data presents an anomaly with a future domain creation date, which raises questions about registration data accuracy but does not directly undermine the site's apparent legitimacy. Overall, the site is professional and functional but should improve privacy compliance and security transparency to enhance trust and regulatory adherence.

The website motol-motolice.cz/2024 is a small-scale cultural event listing platform primarily focused on music and cultural events in Prague for the year 2024. It provides event names, dates, venues, and ticketing links but lacks comprehensive business or contact information. The site appears to serve a niche local audience interested in cultural happenings. Technically, the website is built with basic HTML and CSS without advanced frameworks or CMS detected. It uses Forpsi nameservers and is registered with REG-INTERNET-CZ since 2007, indicating a stable and legitimate domain. The site shows moderate performance and basic mobile optimization but lacks modern SEO and accessibility features. From a security perspective, the site lacks HTTPS confirmation in the data provided, security headers, privacy and cookie policies, and contact information for incident response. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. The absence of privacy compliance and security best practices lowers the overall security posture. Overall, the website is functional for its purpose but requires improvements in security, privacy compliance, and business transparency to enhance trust and user confidence.

The website id.mysuitu.com is a login portal for the Suitu Identity service, which appears to be an authentication or identity management platform. The site is minimalistic, providing a basic login form with username and password fields, a 'remember me' checkbox, and a CSRF token for security. The lack of additional content, such as privacy policies or contact information, limits the ability to fully assess the business or its market position. Technically, the site uses standard HTML5 and CSS3 with Google Fonts for styling but lacks advanced frameworks or CMS indications. Security-wise, the presence of a CSRF token is positive; however, no security headers or HTTPS status information is available, and no privacy or cookie policies are present, indicating room for improvement in compliance and security posture. The WHOIS lookup for the subdomain failed, which is expected as subdomains are not separately registered, but no WHOIS data for the main domain was provided, limiting trust assessment. Overall, the site is functional but basic, with moderate trustworthiness and a need for enhanced security and compliance features.

M

MK Mariusz Korzekwa

embed.tube

56

embed.tube is a specialized online tool offering responsive iframe embed code generation for popular video platforms such as YouTube, Vimeo, Twitch, and Dailymotion. Founded in 2019 and operated by MK Mariusz Korzekwa in Poland, the service targets web developers, content creators, and website owners seeking easy and customizable video embedding solutions. The platform provides over 20 customization options, including autoplay, loop, and responsive sizing, enhancing user engagement on client websites. Technically, embed.tube leverages modern web technologies including React and Gatsby, with integrations of analytics and user behavior tracking tools like Google Analytics, Microsoft Clarity, and Hotjar. The website is well-optimized for performance and mobile responsiveness, with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and explicit GDPR compliance indicators. Business credibility is strong, supported by transparent WHOIS data and consistent branding. Overall, embed.tube presents a professional and trustworthy service with room for enhancements in privacy and security policy transparency.

A

ARISE

ariseglobalnetwork.org

67

ARISE is a UN Office for Disaster Risk Reduction (UNDRR) established network that connects private sector entities globally to promote disaster risk reduction and resilience. The platform serves as a hub for knowledge sharing, innovation, and collaboration among businesses, investors, insurers, and infrastructure stakeholders. It aligns its mission with major global frameworks such as the Sendai Framework, Sustainable Development Goals, and the Paris Climate Agreement. The website demonstrates a mature digital presence built on Drupal 10, with good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and Cloudflare protections, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by the UN affiliation and professional content. Overall, the site is a credible and authoritative resource for private sector disaster resilience initiatives.

U

UN Office for Disaster Risk Reduction (UNDRR)

preventionweb.net

69

PreventionWeb.net is a globally recognized knowledge sharing platform dedicated to disaster risk reduction and resilience, managed by the United Nations Office for Disaster Risk Reduction (UNDRR). It serves as a comprehensive resource hub for DRR professionals, policymakers, and communities worldwide, offering news, publications, training, events, and community engagement tools. The platform is well-positioned as a leading UN-backed initiative in the disaster risk management sector, with strong branding and consistent content quality. Technically, the site is built on Drupal 10 with modern web technologies including React and integrates Google Tag Manager and Cloudflare for performance and security. The website demonstrates excellent design, mobile optimization, and accessibility, ensuring a positive user experience. Security posture is strong with HTTPS enforcement and privacy compliance, including cookie consent mechanisms and comprehensive privacy and terms policies. However, WHOIS data for the domain is unavailable, likely due to privacy or registry restrictions, which slightly impacts trust analysis but is mitigated by the strong UN affiliation and professional presentation. Overall, PreventionWeb.net is a credible, authoritative platform with a robust digital presence and a clear mission to support global disaster risk reduction efforts.

D

Domains By Proxy, LLC

esm.sh

56

esm.sh is a specialized open source CDN service focused on delivering modern JavaScript and TypeScript modules (ESM) globally with no build steps required. It targets web developers and Deno users by providing fast, smart, and global CDN capabilities with support for import maps, on-the-fly transformation of TSX, Vue, and Svelte files, and compatibility with Deno's module system. The project is hosted on GitHub and powered by Cloudflare, indicating a modern and scalable technical infrastructure. The website is well-structured with comprehensive documentation and usage examples, supporting a developer-centric audience. However, it lacks formal privacy, cookie, and terms of service policies, which are important for compliance and user trust.

I

International Council for Science (ICSU)

council.science

75

The International Science Council (ISC) operates as a global non-governmental organization dedicated to advancing science as a public good worldwide. The website serves as a professional platform to communicate the organization's mission, membership, and activities to the international scientific community and stakeholders. The domain is registered to the legitimate organization based in France, consistent with the website's claims. The site uses WordPress CMS with Elementor and integrates Google Analytics and Cookiebot for analytics and cookie consent management, reflecting a moderate level of digital maturity. From a technical perspective, the website is hosted behind Cloudflare DNS and CDN services, uses HTTPS with a good SSL configuration, and demonstrates good mobile optimization and accessibility. SEO practices are well implemented with proper meta tags and structured data. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Security posture is generally good with HTTPS enforced and clientTransferProhibited domain status, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Business credibility is strong due to clear organizational identity and professional content. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

C

Cornerstone OnDemand

csod.com

74

Cornerstone OnDemand operates a leading AI-powered human capital management platform designed to empower workforce agility and talent development globally. The company serves a large enterprise customer base with comprehensive solutions including learning management, talent management, compliance, and workforce intelligence. Their market position is strong, supported by numerous industry awards and analyst recognitions. Technically, the website is built on modern frameworks such as Next.js and React, with advanced animations and integrations with marketing and analytics tools like Marketo and Google Tag Manager. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the website reflects a mature, professional, and trustworthy enterprise digital presence.

H

HOCHTIEF CZ

hochtief.sk

57

HOCHTIEF SK represents a branch or related site of HOCHTIEF CZ, a well-established construction company with a history spanning over 50 years. The company offers a broad range of construction services, from initial project discussions to the execution of complex contracts, leveraging traditional Czech construction expertise. The website targets business clients in the construction and infrastructure sectors primarily in Slovakia and the Czech Republic. The business model focuses on service provision in transportation and real estate infrastructure development, positioning itself as a significant player in the regional market.

H

HAVEL & PARTNERS

nextzeny.cz

44

NextŽeny is a specialized project by the reputable law firm HAVEL & PARTNERS, focusing on the global trend of wealth transfer to women, female entrepreneurship, and investment. The website serves as a platform for research dissemination, networking, and educational initiatives targeting women investors and business professionals primarily in Czechia and Slovakia. The project is supported by notable partners such as RSM, UBS, VISA, and others, enhancing its credibility and market position. Technically, the website is built on WordPress with modern performance optimizations including lazy loading, multilingual support via WPML, and Google Tag Manager integration. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Hosting and domain registration are consistent and appropriate for the business scale and age. From a security perspective, the site uses HTTPS and employs best practices like deferred script loading and no exposed sensitive data. However, it lacks explicit security headers and a visible cookie consent mechanism, which are important for GDPR compliance. There is no published security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in privacy compliance and security transparency would further strengthen its posture and user confidence.

H

Havel & Partners

havelpartners.sk

62

Havel & Partners is the largest Czech-Slovak law firm with an international reach, providing a wide range of legal services including compliance, data protection, banking and finance, energy, mergers and acquisitions, intellectual property, and litigation. The firm targets businesses and private clients primarily in Slovakia and the Czech Republic, positioning itself as a market leader with a comprehensive service offering and multiple office locations. The website is professionally designed, content-rich, and consistent with the firm's branding and market position. Technically, the site is built on WordPress using Oxygen Builder, with modern JavaScript libraries and analytics tools integrated. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and security headers present, though there is room for improvement in privacy compliance and incident response transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

H

HAVEL & PARTNERS

havelpartners.com

72

HAVEL & PARTNERS is presented as the largest Czech-Slovak law firm with an international approach, offering a broad range of legal services across numerous practice areas and industry sectors. The website targets corporate clients and international businesses, positioning itself as a leading legal service provider in the region. The site is built on WordPress using Oxygen builder, incorporating modern web technologies and standard analytics and tracking tools. The technical infrastructure is solid with HTTPS enabled and moderate performance and mobile optimization. Security posture is generally good with no critical vulnerabilities detected, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS domain registration data is a notable concern for domain legitimacy and transparency. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security best practices are recommended.

H

HAVEL & PARTNERS s.r.o., advokátní kancelář

havelpartners.de

70

HAVEL & PARTNERS is the largest Czech-Slovak law firm with an international approach, offering comprehensive legal and tax advisory services across Central Europe with offices in multiple cities including Frankfurt. The firm is highly recognized with numerous awards and rankings, serving a broad client base including international corporations and investors. Technically, the website is built on WordPress using modern frameworks and libraries, with good performance and mobile optimization. Security posture is strong with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are not publicly disclosed. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for a leading law firm.

L

LIVEBOX, a.s.

livebox.cz

49

LIVEBOX, a.s. is a Czech-based company specializing in live streaming services, including sports broadcasts, pay-per-view events, and event production. The company targets sports fans, corporate clients, and event organizers, positioning itself as a reliable and experienced streaming service provider with a medium-sized market presence. Their website showcases a professional design with clear navigation and multimedia content highlighting their key services and partnerships. Technically, the site uses ASP.NET Web Forms with Bootstrap and jQuery, integrating analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, all managed with user consent mechanisms. Security posture is moderate, with no visible security headers and no explicit incident response or vulnerability disclosure policies published. The absence of WHOIS data reduces domain trust, but the website content and contact information appear legitimate and professional. Overall, the site scores well in content quality and business credibility but could improve in technical security and transparency.

Asseco Central Europe is a well-established technology company specializing in delivering innovative IT solutions across multiple sectors including banking, healthcare, government, and utilities. With over 30 years of experience and a strong regional presence, it serves both commercial and public sector clients. The website reflects a mature digital infrastructure using TYPO3 CMS and integrates modern analytics and consent management tools, indicating a high level of digital maturity. Security posture is strong with HTTPS, reCAPTCHA, and GDPR compliance mechanisms in place, though some advanced security headers could be added to further enhance protection. Overall, the site is professional, trustworthy, and aligns well with the company's business profile and market position.

S

Slovanet

slovanet.net

66

Slovanet is a Slovak telecommunications company offering high-speed internet, digital television, and telephony services. The website positions Slovanet as a regional ISP with a focus on providing fast and unlimited internet access, a rich selection of TV programs, and affordable telephony. The company targets general consumers and businesses within Slovakia. Technically, the website is built on WordPress and integrates multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is mobile-optimized and uses HTTPS with a good SSL configuration, indicating a mature digital infrastructure. Security-wise, while HTTPS and cookie consent are implemented, the absence of HTTP security headers and a published privacy policy or terms of service reduces the overall security posture. The lack of WHOIS registration data is a notable concern, suggesting either privacy protection or domain registration issues, which impacts trustworthiness. Overall, the website is professional and functional but would benefit from enhanced transparency and security documentation.

V

Via Musica

viamusica.cz

58

Via Musica is a well-established Czech online platform specializing in ticket sales and promotion of classical and jazz music concerts, ballet, black theatre, and other cultural events primarily in Prague. Founded in 2000, it serves a medium-sized audience of music enthusiasts and concertgoers, offering a curated selection of events and venues. The website demonstrates consistent branding and professional content tailored to its target market. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Select2, and FancyBox, integrated with Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and search capabilities. Security-wise, the site enforces HTTPS and displays recognized trust seals, but lacks some advanced security headers and published security policies. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, Via Musica presents a credible and trustworthy digital presence with room for security policy enhancements.

C

Ceník domén, srovnání cen domén | CenikDomen.com

cenikdomen.com

47

CenikDomen.com is a Czech Republic-based website specializing in providing a comprehensive comparison of domain prices across Czech and global registrars. Established in 2013, the site monitors prices for over 500 domain extensions, targeting individuals and businesses seeking the best domain registration deals. The website employs modern frontend technologies such as Bootstrap and Font Awesome, ensuring a responsive and user-friendly interface optimized for mobile devices. However, the site lacks critical compliance elements such as privacy and cookie policies, and no contact information is readily available, which may impact user trust and regulatory compliance. Security-wise, the site uses HTTPS but does not implement DNSSEC or security headers, indicating room for improvement in its security posture. Overall, the domain registration data aligns well with the website's purpose, reflecting a legitimate and stable online presence.

VIRTUAL ZOOM s.r.o. is a Czech Republic-based company specializing in digital solutions for the hospitality sector, including automated mailing systems, loyalty programs, e-commerce platforms, and custom website development. Established since 2003, it positions itself as a leader in smart digital solutions for hotels, restaurants, and related businesses across Europe. The website is professionally designed, content-rich, and targets hospitality businesses seeking to enhance customer engagement and revenue through digital tools. Technically, the site uses modern JavaScript libraries and frameworks, integrates Google Tag Manager and reCAPTCHA for security and analytics, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enforced and secure form handling, though some security headers are missing. WHOIS data is unavailable, which slightly impacts trust but the website's professional presentation and client testimonials support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR, making it a credible digital presence for its business domain.

M

Materasso Hotels

materasso-hotels.com

56

Materasso Hotels is a specialized supplier of hotel beds, mattresses, and furniture, targeting the hospitality industry with a focus on quality sleep solutions. The company offers a range of product classes from Economy to Luxury, serving over 200 hotels, primarily in Central Europe. Their website is professionally designed, multilingual, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages WordPress with modern JavaScript libraries, Google Analytics, and Tag Manager for marketing and analytics purposes. Security measures include HTTPS enforcement and cookie consent mechanisms, though some advanced security policies and incident response information are not publicly available. The absence of WHOIS registration data for the domain is a notable concern, suggesting a need for verification of domain legitimacy. Overall, the business appears credible and well-positioned in its market segment, with recommendations to improve transparency around security policies and domain registration.

The website hotrec.eu is currently inaccessible due to an invalid SSL certificate on the origin server, resulting in a Cloudflare error 526 page being served. This prevents access to any meaningful content or business information. The site is hosted via OVH SAS and protected by Cloudflare, but the SSL misconfiguration severely impacts trust and usability. No privacy, cookie, or terms of service policies are present, nor are there any contact details or forms. The technical infrastructure is minimal, relying primarily on Cloudflare and OVH SAS hosting. Security posture is weak due to the SSL issue and lack of security headers. Overall, the site is blocked by a WAF mechanism, limiting analysis and reducing the AI score to 25.

helloCash operates as a provider of free online cash register software primarily targeting small and medium businesses in Austria and the Czech Republic. Established in 2016, the company positions itself as a compliant and easy-to-use solution for legal receipt issuance, supported by recognition such as the Constantinus Award. The website reflects a professional and consistent brand image with clear business focus and relevant service offerings. Technically, the site leverages modern JavaScript frameworks like Vue.js and Vuetify, hosted on Amazon AWS infrastructure, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and formal privacy/cookie policies indicates room for improvement. Overall, the website is trustworthy and well-positioned but should enhance compliance and security transparency to strengthen user trust and regulatory adherence.

H

HERHSIANG Information Co., LTD.

tgb.com.tw

8

The website tgb.com.tw/webmail serves as a corporate webmail login portal primarily targeting employees or users associated with the tgb.com.tw domain. The business behind the site is HERHSIANG Information Co., LTD., a Taiwanese company providing webmail services. The site is minimalistic, focusing on secure user authentication with features such as XSRF tokens and two-step verification code mechanisms. However, it lacks publicly visible privacy, cookie, or terms of service policies, and no contact information is provided on the page. From a technical perspective, the site uses standard web technologies including HTML, CSS, JavaScript, jQuery, and jQuery UI. The performance and mobile optimization are basic, with no advanced frameworks or CMS detected. Security best practices are partially implemented, but the absence of visible HTTPS enforcement and security headers reduces the overall security posture. No analytics or advertising scripts are present, indicating a focus on internal use rather than marketing. Security-wise, the site shows some good practices such as hidden XSRF tokens and password input protections, but the lack of explicit HTTPS enforcement and security headers is a concern. There is no evidence of vulnerability disclosure or incident response policies. The domain registration data is consistent and legitimate, registered through TWNIC with no suspicious patterns. Overall, the website is functional for its intended purpose but would benefit from enhanced security measures, privacy compliance, and improved user trust signals. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve credibility and compliance.

A

ASP Group s.r.o.

aspgroup.cz

61

ASP Group s.r.o. is a well-established distributor specializing in branded ATVs, motorcycles, and related accessories across Central and Eastern Europe. With over 24 years of market experience, the company holds a strong position as one of the largest distributors in its sector. The website reflects a professional and comprehensive digital presence, offering detailed product categories, brand partnerships, and dealer support services. The multilingual approach and dedicated e-commerce platforms further enhance its market reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential marketing and analytics tools such as Google Tag Manager and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a commitment to privacy and regulatory adherence. From a security perspective, the site uses HTTPS and cookie consent management but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data slightly reduces domain trustworthiness, but the overall professional presentation and contact transparency mitigate concerns. Overall, ASP Group's website demonstrates a solid business and technical foundation with good security hygiene and privacy compliance. Strategic improvements in security headers and transparency around incident response would further strengthen its posture.

V

vybrat-eshop.cz

vybrat-eshop.cz

10

Vybrat-eshop.cz is a Czech e-commerce comparison platform providing users with tools to search, compare, and review various e-shop systems and templates. It positions itself as the largest overview of e-commerce solutions in the Czech market, targeting entrepreneurs and businesses seeking to establish or improve their online stores. The website offers user-generated reviews, ratings, and news articles relevant to e-commerce trends and technologies. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Analytics, and integrates advertising through reputable networks such as Seznam SSP and Sklik. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust, but the active and professional nature of the site supports its legitimacy. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

N

Nadace Partnerství

sazimebudoucnost.cz

10

Sázíme budoucnost is a Czech non-profit environmental initiative managed by Nadace Partnerství focused on planting 10 million trees to create resilient cities and healthy landscapes. The website is professionally designed, leveraging modern web technologies including Kentico CMS, Bootstrap, AngularJS, and jQuery. It features comprehensive content, institutional partnerships, and active social media engagement. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall legitimacy is supported by the organization's public presence and partnerships. Privacy compliance is strong with a clear GDPR policy and cookie management. Contact information is not explicitly listed on the homepage, and no terms of service or incident response policies are published.

M

Metropolitní kapitula u sv. Víta v Praze

varhannifestival.cz

10

The website www.varhannifestival.cz represents the 14th International Organ Festival held at the St. Vitus Cathedral in Prague, organized by the Metropolitan Chapter of St. Vitus in Prague. It targets classical music enthusiasts and cultural tourists, providing detailed event information, artist lineups, and ticket purchasing options. The festival is well-established and supported by notable figures such as the Archbishop of Prague and the President of the Czech Republic, indicating strong cultural significance and trust. Technically, the website is built on the Solidpixels CMS platform, utilizing modern web technologies including Google Tag Manager and Google Fonts. It features responsive design, good accessibility, and SEO optimization. Performance is moderate with asynchronous script loading enhancing user experience. However, no hosting provider or domain age information is available due to missing WHOIS data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Yet, it lacks important security headers and published policies such as privacy, cookie, and terms of service, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing an area for improvement. Overall, the website is professional, content-rich, and trustworthy in terms of business credibility but requires enhancements in privacy compliance and security documentation. The absence of WHOIS data is a notable concern that should be addressed to improve domain legitimacy and trustworthiness.

T

The metropolitan chapter of St. Vitus in Prague

kapitula.cz

55

The Metropolitan Chapter of St. Vitus in Prague is a historic religious and cultural institution established in 973, making it the oldest legal entity with continuous activity in the Czech lands. The organization manages the St. Vitus Cathedral and other historic monuments, organizes cultural events such as organ festivals and choirs, and maintains a significant library and archive. The website reflects a professional and well-maintained digital presence, leveraging modern web technologies and a specialized CMS platform. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is generally strong with HTTPS and modern libraries, but could benefit from enhanced security headers and incident response information. Overall, the site serves as a credible and authoritative source for cultural and religious information related to the chapter.

M

Metropolitní kapitula u sv. Víta

katedrala.tv

47

Katedrála TV is an official streaming media platform operated by Metropolitní kapitula u sv. Víta, providing live and archived religious services primarily related to St. Vitus Cathedral in Prague. The website serves a general audience interested in religious content, offering scheduled programming and video archives. The business operates as a small non-profit entity within the media and government/non-profit sectors, with a clear focus on religious broadcasting. Technically, the website employs modern web technologies including Google Fonts, Google Analytics with consent, Cookiebot for cookie management, and Cloudflare for DNS and CDN services. The site is mobile optimized with good navigation and SEO practices, though it lacks a detected CMS and some advanced accessibility features. Performance is moderate, supported by CDN usage. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve security posture by enabling DNSSEC, adding security headers, and publishing security policies. Contact information is minimal on the site, which could be enhanced for better user support and trust.

Valbek, spol. s r.o. is a well-established Czech engineering and project management company specializing in infrastructure and construction projects since 1990. The company offers a broad range of services including project design, geotechnical surveys, construction supervision, and software development for the construction industry. With a large team of experts and multiple ISO certifications, Valbek holds a strong market position in the Czech Republic and neighboring countries. The website reflects a professional and comprehensive digital presence with clear service descriptions and contact information. Technically, the website uses a traditional tech stack with jQuery and bxSlider, and integrates modern fonts and photo galleries. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. However, some technologies like jQuery are outdated, and security headers are not visibly implemented, which could be improved. From a security perspective, the company demonstrates maturity through ISO 27001 certification and published security policies. The website enforces HTTPS and provides cookie consent, but lacks a dedicated incident response contact and security.txt file. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The domain age and WHOIS data align well with the company's history, supporting legitimacy. Strategic improvements in security headers, technology updates, and incident response transparency would enhance the security posture and user trust.

P

PricewaterhouseCoopers

pwc.cz

80

PwC Česká republika is the Czech Republic branch of the global professional services network PricewaterhouseCoopers, employing over 250,000 people worldwide. The website presents a professional and comprehensive digital presence, offering auditing, tax, legal, and consulting services to business clients. The site is well localized for the Czech market and maintains consistent branding aligned with the global PwC identity. Technically, the site uses Adobe Experience Manager as its CMS, integrates advanced analytics and tag management tools such as Google Tag Manager and Adobe DTM, and employs a cookie consent mechanism compliant with GDPR regulations. Security best practices are observed with HTTPS enforcement and CSRF protection, though explicit security policies and incident response contacts are not directly visible. The WHOIS data for the domain www.pwc.com is not publicly available, likely due to privacy or registry restrictions, which is common for large global brands. Overall, the website is a secure, professional, and trustworthy platform for PwC's Czech Republic operations.

M

Metrostav

metrostav.cz

65

Metrostav is a leading Czech construction company with a strong presence in infrastructure and engineering projects across the Czech Republic and Europe. The website reflects a professional business with a focus on technical excellence and a broad portfolio of construction services. The company targets clients in the construction and transportation sectors, emphasizing its market leadership and technical capabilities. The digital infrastructure is modern, leveraging Next.js, Google Tag Manager, Cookiebot for consent management, and analytics tools such as Microsoft Clarity and Hotjar, indicating a mature digital presence. Security posture is generally strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data reduces the domain trustworthiness score, but the website content and technology usage support legitimacy. Overall, the site is well-designed, GDPR compliant, and suitable for its business audience.

H

HOCHTIEF CZ

hochtief.cz

60

HOCHTIEF CZ is a well-established construction company operating primarily in the Czech Republic, offering a broad range of services from initial project discussions to the execution of complex construction projects. The company leverages a legacy of over 50 years, building on the traditions of HOCHTIEF VSB, and aims to modernize and develop the built environment for shared living spaces. The website reflects a professional corporate presence targeting B2B clients in the construction and real estate sectors. Technically, the site uses modern frameworks such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit policy disclosures. Overall, the website is trustworthy and well-maintained, supporting the company's market position as a reputable construction service provider.

H

HAVEL & PARTNERS

havelpartners.cz

64

HAVEL & PARTNERS is the largest Czech-Slovak law firm with an international reach, offering a broad range of legal services including banking and finance, compliance, tax law, intellectual property, energy law, and more. The firm targets businesses and private clients primarily in the Czech Republic and Slovakia, positioning itself as a leading legal advisory provider in the region. The website is professionally designed with multiple language options, reflecting its international scope and client diversity. Technically, the site is built on WordPress using Oxygen Builder, incorporating modern JavaScript libraries and analytics tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and a public security policy suggests room for improvement. Overall, the site is trustworthy and professional, but the lack of WHOIS data and visible privacy/cookie policies slightly reduce compliance confidence.

L

LOGstudio

logstudio.cz

45

LOGstudio is a Czech-based design and creative agency specializing in web development, UI/UX design, branding, printing materials, online marketing, and professional photo/video production. The company positions itself as a passionate and innovative partner for businesses seeking to enhance their brand identity and digital presence. Their website demonstrates a strong portfolio and client base, indicating a solid market position within the creative technology sector. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, and hosted by a reputable Czech registrar. Security posture is good with HTTPS enabled and CAPTCHA on contact forms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie consent and GDPR policy pages. Overall, the website is professional, user-friendly, and trustworthy, with no critical security or content safety issues detected.