Security Directory

U

University of Ostrava

osu.eu

67

The University of Ostrava is a reputable higher education institution based in the Czech Republic, offering a broad range of academic programs including bachelor's, master's, and doctoral degrees primarily taught in English. It holds a growing position among Central European universities, emphasizing quality education, affordability, and hospitality. The university operates multiple faculties and institutes under its domain, reflecting a comprehensive academic and research environment. The website is professionally designed with clear navigation and a strong brand presence, targeting prospective students, researchers, and academic partners internationally. Technically, the website employs a traditional web stack with jQuery and jQuery UI libraries, along with Lightbox and FontAwesome for UI elements. The site is mobile responsive and implements essential security headers and HTTPS enforcement, though some security headers could be enhanced. Cookie consent and GDPR compliance mechanisms are in place, reflecting good privacy practices. The WHOIS data is privacy protected as per EURid policies, which is typical for .eu domains and justified for an educational institution. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the use of an outdated jQuery version and absence of a security.txt or vulnerability disclosure page are areas for improvement. The site lacks a clearly identified terms of service page, which could be addressed to improve legal transparency. Overall, the website demonstrates a mature digital presence with good security and privacy compliance, suitable for its educational mission. Strategically, the university should focus on updating its technical stack, enhancing security headers, and publishing formal policies such as terms of service and vulnerability disclosure to strengthen trust and compliance. Continued investment in accessibility and performance optimization will further improve user experience and institutional reputation.

P

PROEBIZ s.r.o.

ebizforum.com

64

PROEBIZ s.r.o. operates the eBF festival, a leading event focused on the digitalization of corporate and public procurement. The company has established a strong market position in Central Europe by organizing annual conferences, workshops, and educational programs that attract procurement professionals and industry experts. Their business model centers on event management, education, and knowledge sharing in procurement digitization. The website reflects a mature digital presence with comprehensive content, program archives, and active social media engagement. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the domain registration and company information are consistent and trustworthy, supporting the legitimacy of the business. The site is safe for general audiences and free from suspicious or adult content.

P

PROEBIZ s.r.o.

pbacademy.cz

53

PROCUREMENT BOARD ACADEMY, operated by PROEBIZ s.r.o., is a specialized educational platform focused on procurement digitalization and public procurement training in the Czech Republic. The company offers structured courses such as the Digital Procurement Team and Digital Contracting Team, targeting procurement professionals from both public and private sectors. The website reflects a professional and consistent brand image with clear contact details and links to privacy and cookie policies. Technically, the site uses modern front-end technologies including Bootstrap, FontAwesome, and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though security headers and explicit security policies are absent. The WHOIS data confirms legitimacy and consistency with the business profile. Overall, the site is trustworthy, well-maintained, and compliant with basic privacy regulations.

M

ManpowerGroup s.r.o.

manpowergroup.cz

73

ManpowerGroup s.r.o. is a leading personnel and employment agency operating in the Czech Republic, providing comprehensive HR and IT recruitment services. The company leverages 75 years of global experience to connect talented individuals with innovative companies, offering services ranging from temporary staffing to permanent placement and HR consulting. Their market position is strong, supported by a professional website with clear branding and extensive service descriptions targeting employers and job seekers. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable, slightly reducing domain trust verification.

E

Endevel s.r.o.

escapemania.cz

45

Escapemania.cz is a well-established online platform founded in 2015, operated by Endevel s.r.o., that serves as the largest catalogue and ticketing service for escape rooms across Czechia and Slovakia. It offers users comprehensive listings, direct ticket purchases, universal vouchers, last-minute deals, and community features such as reviews and player diaries. The platform targets escape room enthusiasts ranging from beginners to experienced players, providing a user-friendly and multilingual experience. Technically, the website leverages modern web technologies including Django, Google Analytics, Smartlook, and Google Maps API, ensuring a responsive and moderately performant user experience. Security-wise, the site uses HTTPS and CSRF protections but lacks some advanced security headers and does not publish explicit security or incident response policies. Privacy compliance is addressed with cookie consent mechanisms and a basic privacy policy, though GDPR compliance could be improved. Overall, the website demonstrates a solid business credibility and technical foundation with room for enhanced security and privacy transparency.

3

321 CREATIVE CREW s.r.o.

tridvajedna.cz

63

321 CREATIVE CREW s.r.o. is a Czech-based graphic studio and digital agency specializing in video production, 3D animation, web design, and branding services. The company positions itself as a creative partner for businesses seeking modern digital communication and graphic design solutions, boasting over 17 years of experience and a portfolio of more than 150 satisfied companies. Their website reflects a professional and consistent brand image, targeting business clients primarily in the Czech Republic. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap, limiting domain trust assessment. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and security disclosures.

L

Lambda-comp s. r. o.

lambdacomp.cz

61

Lambda-comp s. r. o. is a Czech-based digital marketing and web design company specializing in custom website creation, web applications, audits, consultations, and online campaign management. Established since 2008, the company targets small businesses, educational institutions, municipalities, and organizations primarily in the Moravian-Silesian region. Their website demonstrates a professional and consistent brand presence with clear service offerings and client references. Technically, the site uses modern frontend technologies such as Bootstrap, FontAwesome, and jQuery, hosted on a Czech hosting provider, and implements HTTPS with cookie consent mechanisms. However, the absence of a privacy policy and terms of service pages indicates gaps in compliance documentation. Security posture is moderate with no visible security headers and limited incident response information.

L

Laugo Arms USA

laugoarmsusa.com

55

Laugo Arms USA is a small retail business specializing in innovative pistols, positioning itself as a niche player in the firearm market within the United States. The company emphasizes product quality and versatility, targeting firearm enthusiasts and tactical professionals. The website serves as an e-commerce platform and brand showcase, leveraging WordPress and WooCommerce technologies. The digital infrastructure is modern and moderately optimized for performance and mobile use, with SEO practices in place. Security posture is adequate with HTTPS and domain locks, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the business appears legitimate with consistent domain registration and branding, but could improve transparency and security documentation.

A

Asociace organizací cestovního ruchu z.s.p.o

asociaceocr.cz

54

Asociace organizací cestovního ruchu z.s.p.o is a Czech non-profit association representing regional tourism organizations and destination management entities. With over 10 years of experience, it focuses on supporting the development and certification of destination management organizations (DMOs) in the Czech Republic. The website reflects a professional presence with active news updates and partnerships with key tourism and governmental bodies. Technically, the site is built on WordPress using modern frontend technologies like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, which are compliance gaps. The absence of WHOIS data reduces domain trustworthiness, though the site content and partner affiliations suggest legitimacy. Overall, the site is suitable for its target audience but would benefit from enhanced security and compliance measures.

HTB - Požární ochrana a.s. is a Czech Republic based company specializing in comprehensive fire protection and occupational safety services. Their offerings include fire extinguisher servicing, inspections of fire safety equipment, risk analysis, training, and supply of related products such as floating pumps and smoke detectors. The company operates physical branches in Ostrava and Jihlava and maintains partnerships with several notable industrial entities, indicating a solid market presence in the regional manufacturing and safety sectors. Technically, the website is built using modern frontend technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced backend platform. The site lacks visible analytics or tracking scripts, suggesting minimal user tracking. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site does not exhibit critical vulnerabilities but lacks important security headers and privacy-related policies, which are essential for GDPR compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact information appear legitimate and professional. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance measures, and improved transparency regarding domain registration to strengthen trust and reduce risk.

The website www.ahol.cz represents an educational institution named Zemědělka Olomouc, offering secondary and higher vocational education in the Olomouc region of the Czech Republic. The site serves as a portal linking to three main educational branches: a secondary vocational school, a secondary school of gastronomy, tourism and spa services, and a higher vocational school. The business model is focused on providing specialized education to students, with a clear target audience of prospective students and their families. Technically, the website is built on WordPress CMS, utilizing modern web technologies such as jQuery, Google Fonts, FontAwesome, and WP Rocket for performance optimization including lazy loading. The site is mobile optimized and has good SEO practices with proper meta tags and structured data (JSON-LD) implemented. The performance is moderate, with room for improvement in accessibility features. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks visible security headers and explicit privacy policy or terms of service pages, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable or privacy protected, but the website content and social media presence support legitimacy. Overall, the website is professional and functional with a moderate security posture. Strategic recommendations include adding explicit privacy and terms of service pages, improving security headers, and providing clear contact information for security and general inquiries to enhance trust and compliance.

A

Adeon CZ s.r.o.

adeon.cz

49

Adeon CZ s.r.o. is a Czech Republic-based company specializing in delivering comprehensive CAD and BIM solutions, IT infrastructure services, and technical support primarily for the manufacturing and construction sectors. The company holds strong partnerships with leading technology providers such as Autodesk, Eset, HP, and Microsoft, positioning itself as a trusted regional technology integrator. Their offerings include software sales, implementation consulting, training, and ongoing support, targeting professional industrial and architectural clients. The website reflects a mature digital presence with well-structured content, multiple service offerings, and active communication channels including blogs and newsletters. Technically, the website is built on WordPress with modern plugins and frameworks, including Oxygen Builder and AJAX Search Pro, ensuring a responsive and user-friendly experience. The site integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Drip, with a GDPR-compliant cookie consent mechanism. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs secure forms with nonce tokens. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy. Overall, Adeon CZ demonstrates a solid business and technical foundation with good security hygiene and privacy compliance. Strategic recommendations include enhancing security headers, adding a vulnerability disclosure policy, and improving accessibility features to further strengthen trust and compliance.

J

Juta Agency

jutaagency.cz

52

Juta Agency is a Czech-based company specializing in the rental of mobile sanitary equipment including toilets, urinals, VIP sanitary trailers, mobile washbasins, fencing, and other related infrastructure primarily for construction sites, cultural events, sports events, weddings, and garden parties. The company targets businesses and event organizers within the Czech Republic, focusing on regions such as Moravia and Silesia. Founded in 2011, it operates as a small-sized enterprise with a clear regional market presence. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, Google Fonts, Google Analytics, and Smartsupp Live Chat. The site is mobile optimized, uses HTTPS with good SSL configuration, and includes cookie consent mechanisms, indicating a reasonable level of digital maturity and compliance with privacy regulations. Hosting is provided by a Czech hosting provider, aligning with the company's regional focus. From a security perspective, the website enforces HTTPS and uses cookie consent banners but lacks explicit security headers such as CSP or HSTS in the provided data. No security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. The site does not expose sensitive data and uses asynchronous script loading to improve performance and security. Overall, the security posture is moderate but could be improved by implementing additional security headers and formal policies. The overall risk assessment is low with no signs of malicious activity or suspicious content. The company demonstrates good business credibility with clear contact information, social media presence, and downloadable legal and product documents. Strategic recommendations include enhancing security headers, publishing security policies, and improving privacy compliance transparency to strengthen trust and security culture.

Z

ZZIP, s.r.o.

zzip.cz

44

ZZIP, s.r.o. is a regional television studio based in the Czech Republic, specializing in professional video production, news broadcasting, and advertising services primarily for the Olomouc and Prostějov regions. Established in 1993, the company has a strong market presence with a diverse portfolio including news, sports, publicistic content, and documentary production. Their broadcasting license covers cable TV and internet platforms, reaching a significant local audience. Technically, the website is built on WordPress with modern plugins and integrates social media and video streaming effectively, though some security headers are missing. The site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Security posture is good with HTTPS enabled but could be improved with additional headers and regular audits. Overall, the business demonstrates professionalism and trustworthiness, though the lack of WHOIS data slightly impacts domain trust. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and expanding transparency with terms of service and incident response information.

E

Enterprise Ireland

enterprise-ireland.com

74

Enterprise Ireland is a government agency dedicated to supporting Irish businesses in manufacturing and internationally traded services. The website serves as a comprehensive portal offering information on business supports, funding, market access, and success stories, targeting Irish companies and international partners interested in Irish innovation. The site demonstrates a strong market position as a national agency with extensive resources and services to help businesses grow globally. Technically, the website employs a modern technology stack including CoreMedia CMS, Bootstrap framework, Google Tag Manager, and various third-party integrations for analytics and consent management. The site is mobile-optimized, accessible, and performs moderately well, with good SEO practices and structured content. From a security perspective, the site enforces HTTPS, implements a robust Content Security Policy, and uses cookie consent mechanisms. However, it lacks explicit security policy documentation, incident response contacts, and a security.txt file, which are recommended for enhanced transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low risk profile with strong business credibility and professional digital presence. The absence of WHOIS registrant data slightly reduces trust but is mitigated by the official nature of the content and government affiliation. Strategic recommendations include publishing security policies, incident response information, and enhancing transparency around data protection officers and vulnerability disclosures.

P

Pražské reality

praguerealestate.cz

49

Pražské reality operates a specialized real estate portal focused on luxury properties for sale and rent in Prague and the Czech Republic. The website offers a catalog of houses, apartments, lands, commercial properties, and other real estate types, along with agency registration services and a real estate advisory blog. The platform targets individuals and agencies interested in the Czech real estate market, positioning itself as a niche service provider with a professional online presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, and Leaflet.js for interactive maps. The site is built on a custom CMS and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, no explicit security policies or incident response contacts are published, and security headers are not detected in the provided data. The absence of WHOIS registration details limits domain trust analysis, but the professional presentation and valid contact address support legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policy transparency and technical security controls would enhance trust and resilience.

F

FreeDivision

freedivision.com

60

FreeDivision is a specialized company focusing on hardware and software data security with over 15 years of experience, primarily serving the Czech, Slovak, and Brazilian markets. They represent several globally recognized manufacturers of security technologies and emphasize GDPR compliance and advanced data security analysis. The website reflects a professional B2B service provider with a clear focus on security solutions and data protection. Technically, the site uses modern frontend frameworks and libraries, including Bootstrap, FontAwesome, and Cookiebot for consent management, hosted on AWS Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and bot protection via Google reCAPTCHA, but lacks visible security headers and explicit incident response contacts. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS data and domain registration information raises concerns about domain legitimacy and consistency with the claimed business history. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security best practices.

Realitní tržnice, s.r.o. operates a comprehensive real estate portal focused on property sales, rentals, auctions, and insolvency listings primarily in the Czech Republic with some international offerings. The company has established a strong market presence since its founding in 2011, offering a variety of services including anonymous listings and specialist sales support. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site leverages modern JavaScript libraries such as Leaflet for mapping, Google Analytics and Tag Manager for tracking, and integrates Google reCAPTCHA for bot protection. Advertising is managed via Google Adsense and retargeting through Seznam, with a cookie consent mechanism in place to comply with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of a dedicated security policy or incident response contact is noted. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the site is trustworthy, compliant, and well-positioned in its market niche.

P

Pražské reality

prazskereality.cz

49

Pražské reality operates a professional real estate portal primarily focused on property sales and rentals in Prague and across the Czech Republic. The website offers a comprehensive catalog of properties including houses, apartments, commercial spaces, and land, along with tools such as a mortgage calculator and a blog featuring real estate news. The platform targets individuals and businesses interested in luxury and general real estate in the region. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy. Overall, the site is professional and trustworthy from a user perspective but would benefit from enhanced transparency and security practices.

F

Federal Agency for Cartography and Geodesy

gdi-de.org

69

The website www.gdi-de.org represents the Spatial Data Infrastructure Germany (SDI Germany), a governmental initiative coordinated by the Federal Agency for Cartography and Geodesy. It serves as a central platform to provide standardized access to geospatial data from federal, state, and local authorities, integrated within the European INSPIRE Directive framework. The site targets government entities, researchers, and public users interested in geodata services. The business model is focused on public sector data provision and infrastructure coordination, positioning itself as a key national spatial data authority. Technically, the website is built on Drupal 10 CMS with Bootstrap 3 and FontAwesome, delivering a responsive and professionally designed user experience. The site includes structured navigation, multilingual support, and integration with external official geoportals. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, HTTPS is implied but no explicit security headers were detected in the provided data. No vulnerabilities or exposed sensitive data were found in the HTML content. However, the absence of a cookie consent mechanism and explicit privacy compliance features is noted. The WHOIS data is incomplete and malformed, limiting domain trust verification, but the official government branding and content strongly support legitimacy. Overall, the website is a credible, professional government resource with good content quality and technical implementation. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, improving accessibility, and addressing WHOIS data transparency to strengthen trust and compliance.

M

M&M reality

prodejzanejvic.cz

53

The website prodejzanejvic.cz is a professional real estate auction platform operated by M&M reality, the largest and most trusted real estate agency in the Czech Republic. It specializes in selling properties via televised auctions, offering sellers the opportunity to achieve higher sale prices through competitive bidding. The platform integrates live auction broadcasts, detailed auction archives, and marketing plans to attract buyers and sellers. The target audience includes individuals and entities interested in buying or selling real estate within the Czech market. The business model revolves around auction-based real estate sales supported by comprehensive marketing and professional real estate services. Technically, the website is built on Joomla CMS and leverages modern web technologies including Google Fonts, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security. Cookie consent is managed via CookieHub, ensuring compliance with privacy regulations. The site is mobile responsive, well-structured, and optimized for SEO, providing a good user experience. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements cookie consent mechanisms. However, it lacks explicit HTTP security headers and a vulnerability disclosure policy. No exposed sensitive data or vulnerable libraries were detected. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and integration with known partners suggest legitimacy. Overall, the website presents a low-risk profile with good security practices and compliance measures. Strategic recommendations include enhancing HTTP security headers, conducting regular security audits, improving accessibility, and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

H

HotelTechReport

hoteltechreport.com

67

HotelTechReport is a specialized online platform founded in 2017 that provides comprehensive reviews, comparisons, and recommendations of hotel management software and digital tools. It serves a large audience of hoteliers and hospitality professionals, positioning itself as a leading hotel industry app store with a strong market presence. The platform offers verified user reviews, personalized software recommendations, free tech audits, and extensive resources to help hotels optimize their technology stacks. Technically, the website is built on a modern Laravel framework with Livewire and Alpine.js, leveraging Cloudflare for DNS and security. It employs multiple analytics and marketing tools, including Google Analytics, Tag Manager, and LinkedIn Insight, indicating a mature digital marketing strategy. Security-wise, the site uses HTTPS and Cloudflare protections but lacks DNSSEC and explicit security policies. Privacy and cookie policies are not found, which is a compliance gap. Overall, the site is professional, well-branded, and trustworthy but would benefit from enhanced privacy and security transparency.

H

Horizon Holding

arboret.cz

47

The website www.arboret.cz represents a real estate development project by Horizon Holding, focusing on modern residential apartments in Prague 4 - Záběhlice. The project offers a variety of apartment sizes with amenities such as terraces and balconies, targeting individuals and families seeking quality urban living with good transport links and access to nature. The site is professionally designed with clear navigation and relevant content, supporting a positive user experience. Technically, the website employs modern front-end frameworks including Bootstrap and uses analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. However, there is no evidence of a CMS or hosting provider details, and some security best practices like security headers are missing. From a security perspective, the site uses HTTPS and has no visible vulnerabilities or exposed sensitive data. The cookie consent and privacy policy indicate a commitment to privacy compliance. The absence of WHOIS data for the domain is a concern, reducing trust from a domain registration standpoint, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and professional front for the real estate project, with room for improvement in security policy transparency and domain registration clarity.

B

B3 Technology s.r.o.

videobydleni.cz

42

Videobydleni.cz is a Czech Republic based real estate portal operated by B3 Technology s.r.o., offering a wide range of property listings including apartments, houses, offices, and historic buildings. The platform differentiates itself by providing video tours alongside traditional photos, enhancing user experience and helping buyers and renters gain a comprehensive understanding of properties. The website targets Czech-speaking users interested in real estate transactions and related market news. The business model revolves around online property listings and real estate market content, serving both consumers and real estate agencies.

R

Realitní komora České republiky

realitnikomora.cz

49

Realitní komora České republiky is a professional association established in 2009 that serves real estate agents, offices, and related professionals in the Czech Republic. The organization focuses on education, professional development, and providing member benefits such as insurance and discounts. The website reflects a well-established market position with clear business information and active partnerships. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. However, it lacks some compliance elements such as a privacy policy and terms of service pages. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and serves its target audience effectively.

T

Tomawell s.r.o.

chytry-web-rk.cz

47

Chytrý web RK is a Czech-based SaaS provider specializing in web applications tailored for real estate agencies. The company, operated by Tomawell s.r.o., offers a comprehensive platform enabling agencies to create recruitment websites, manage email marketing campaigns, present properties professionally, and leverage AI tools for content creation. The business targets real estate professionals seeking to enhance client acquisition and digital presence. The website demonstrates a mature market position with over 10 years of experience and thousands of created websites and property pages. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and integrates advanced tools such as Google reCAPTCHA Enterprise and multiple marketing pixels (Google Ads, Facebook, LinkedIn, Seznam). Hosting and domain registration are managed by Webglobe, a reputable provider. The site is mobile-optimized, SEO-friendly, and features a professional design with clear navigation and user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and incorporates spam protection and cookie consent mechanisms. However, it lacks explicit HTTP security headers and a published security policy or incident response contact. Privacy compliance is robust, with detailed GDPR-aligned privacy policies and terms of service. No critical vulnerabilities or suspicious patterns were detected. Overall, Chytrý web RK presents a trustworthy, professional online presence with strong business credibility and technical implementation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and trustworthiness.

P

Private Brauereigasthöfe Beratungsgesellschaft für Brauereigastronomie mbH

braugasthoefe.de

52

Private Brauereigasthöfe Beratungsgesellschaft für Brauereigastronomie mbH operates a professional online platform focused on connecting consumers with private brewery inns across Europe, primarily targeting German-speaking audiences. The website offers search functionality, guides, and membership information, positioning itself as a niche leader in the hospitality sector specializing in brewery experiences. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies including FontAwesome, Mapbox, and tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and professionally maintained with room for improvement in transparency and security documentation.

The Landesenergie- und Klimaschutzagentur Mecklenburg-Vorpommern GmbH (LEKA MV) is a regional energy and climate protection agency focused on supporting the energy and climate policy goals of Mecklenburg-Vorpommern, Germany. It provides free and neutral consulting services to municipalities, companies, and citizens on energy efficiency, renewable energies, and climate protection. The agency acts as a knowledge hub and networking platform to promote the energy transition in the region. The website reflects a professional and consistent brand presence with clear service offerings and contact information.

J

Jannys Eis

jannys.de

73

Jannys Eis is a German retail ice cream brand operating over 100 physical shops nationwide, offering natural and innovative ice cream products. The website presents a professional and visually appealing digital presence, leveraging modern technologies such as Blazor WebAssembly and MudBlazor, hosted on Microsoft Azure infrastructure. The site includes cookie consent management via Cookiebot and integrates Microsoft Application Insights for analytics. Security posture is generally good with HTTPS and anti-forgery protections, though some security headers are missing. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. WHOIS data is unavailable, which slightly impacts trust but the website content and branding are consistent and professional.

H

Hot Rod Fun

hotrod-fun.com

47

Hot Rod Fun is a small service provider specializing in guided city tours, firm events, and voucher sales primarily in Germany with additional locations in cities like Bucharest and Leipzig. The company offers unique experiences using Hot Rod vehicles, targeting general audiences interested in fun and adventurous city tours. The website is built on WordPress using Elementor, featuring a professional design with good mobile optimization and SEO practices. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data slightly reduce the overall trustworthiness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies. Overall, the website presents a functional and professional front for its niche market but would benefit from enhanced compliance and transparency measures.

M

minimare Entdeckerpark

minimare.de

44

minimare Entdeckerpark is a family-oriented tourism and educational attraction located in Kalkhorst, Germany, offering interactive experiences through 9 themed parks, miniature models, playgrounds, and a dedicated mobile app. The website is professionally designed with clear navigation and content relevant to its target audience of families and tourists. Technically, the site uses modern JavaScript libraries and tracking tools, is mobile-optimized, and runs on Craft CMS. Security posture is good with HTTPS and CSRF protections, though additional security headers and policies could enhance it further. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site presents a trustworthy and credible business with a solid digital presence.

F

Förderberatung des Leea e. V.

foerderung-leea-mv.de

65

Förderberatung des Leea e. V. operates as a regional advisory service focused on facilitating access to funding programs in the energy and climate protection sector within Mecklenburg-Vorpommern, Germany. The organization targets a broad audience including private individuals, companies, municipalities, and institutions, providing technical and funding consultation to support energy system transformation. The website reflects a professional and consistent brand presence with clear communication of services and partners, including government and EU funding bodies. Technically, the website is built on WordPress with integration of modern consent management tools such as Cookiebot, ensuring GDPR compliance and user privacy. The site employs standard web technologies including jQuery and Bootstrap, with moderate performance and good mobile optimization. However, there is room for improvement in security headers and explicit incident response disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent is granular and transparent, supporting privacy compliance. The absence of a terms of service page and explicit security policies suggests areas for enhancement in governance and transparency. Overall, the website and organization present a trustworthy and credible profile with a strong focus on energy funding advisory services. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and adding a terms of service page to improve legal clarity and user trust.

AGIT Aachener Gesellschaft für Innovation und Technologietransfer mbH is a regional technology and innovation service provider based in Aachen, Germany. The company supports startups, established companies, and regional development initiatives by offering innovation consulting, patent and intellectual property services, business plan advice, financing support, and networking opportunities. Their market position is that of a key regional innovation facilitator within the Aachen technology ecosystem. The website is built on TYPO3 CMS and demonstrates a moderate to good level of digital maturity with active content updates and multilingual support. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

DIAMANTAN investment s.r.o.

vitalweb.cz

43

Vitalweb.cz is a Czech media website specializing in healthy lifestyle, nutrition, sports, and general physical activity content. Operated by DIAMANTAN investment s.r.o., the site targets a general audience interested in health and wellness. The business operates primarily through content publishing supported by advertising revenue, positioning itself as a niche health and lifestyle content provider in the Czech market. The website features a professional design with consistent branding and good content quality, supported by clear privacy and cookie policies with GDPR-compliant consent mechanisms. From a technical perspective, the website uses a variety of modern web technologies including jQuery, Google Analytics, Google Adsense, FontAwesome, and Facebook SDK. The site is mobile-optimized with good SEO practices, though no explicit CMS was detected, suggesting a custom or proprietary platform. Hosting is linked to the registrar REG-WEBGLOBE, with no explicit hosting provider identified. Performance is moderate with room for improvement in accessibility features. Security posture is adequate with HTTPS enabled and a consent management platform in place. However, security headers are not explicitly detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data is consistent with the website's business information, showing a domain age appropriate for the company's history and no suspicious registration patterns. Overall, Vitalweb.cz presents a trustworthy and professional online presence with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and trustworthiness.

R

Reality Sedmička

realitysedmicka.cz

47

Reality Sedmička is a Czech Republic-based real estate agency established in 2017, specializing in property sales, valuations, and quick buyouts. The company positions itself as a reliable and professional partner in the local real estate market, boasting over 1200 properties sold and a high success rate. Their website reflects a clear business focus with comprehensive service offerings and a professional team presentation. The business operates under the parent company Tomawell s.r.o., indicating a structured corporate backing. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google reCAPTCHA Enterprise, and Google Fonts, hosted on Wedos infrastructure. The site is mobile-optimized with good SEO practices and a consistent branding approach. However, some security headers are missing, which could be improved to enhance security posture. The site uses HTTPS exclusively and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as secure form handling with reCAPTCHA and no visible sensitive data exposure. The absence of explicit incident response or security policy pages is noted, suggesting room for maturity in security governance. Privacy compliance is strong with a detailed privacy policy and cookie management. No critical vulnerabilities or suspicious content were detected. Overall, Reality Sedmička presents a trustworthy and professional online presence with solid business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture and user trust.

A

AD reality s.r.o.

ad-reality.cz

49

AD reality s.r.o. is a Czech Republic based real estate agency specializing in the sale and rental of properties primarily in the South Bohemia region including České Budějovice, Český Krumlov, and Prachatice. The company offers professional brokerage services with a focus on achieving the best possible sale price for clients and maintaining a steady portfolio of properties for sale. The website reflects a well-structured and professionally presented business with clear contact information and customer testimonials indicating positive client experiences. Technically, the website is built on WordPress using the Elementor page builder and OceanWP theme, employing modern web technologies and providing a responsive user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements could be made by adding security headers and formal security policies. The absence of WHOIS data for the domain is a concern for domain legitimacy and trust but does not detract from the professional presentation of the business online. Overall, the company appears to be a credible small-sized real estate agency with a solid local market presence.

A

Algeco B.V.

algeco.nl

70

Algeco B.V. is a well-established Dutch company specializing in modular housing solutions with over 65 years of experience. The company targets businesses and organizations requiring flexible, temporary, or permanent modular buildings, positioning itself as a reliable and expert partner in the modular construction sector. The website reflects a mature digital presence built on Drupal 9, integrating modern analytics and marketing tools such as HubSpot and Google Analytics, ensuring good performance and user experience across devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could be enhanced. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

K

Kraftlager Jekabpils, SIA

chathelp.ai

53

ChatHelp.ai is a technology company founded in 2023 and registered in Latvia as Kraftlager Jekabpils, SIA. The company offers an AI-powered chatbot platform designed to assist businesses, professionals, and students with customer support automation and AI tools integration. Their platform supports over 100 AI tools and agents, enabling customizable AI chat widgets for websites and integrations with popular messaging apps. The website demonstrates a professional and consistent brand presence with good content quality and SEO optimization. Technically, the site is built on WordPress with Elementor and uses modern libraries and Google Analytics for tracking. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration details align well with the business claims, indicating legitimacy. The site is accessible without WAF blocking and contains no adult or questionable content.

D

DALTEN media s.r.o.

utulne.cz

61

Útulně.cz is a well-established Czech online media platform operated by DALTEN media s.r.o., focusing on home, garden, and lifestyle content. Founded in 2007, it serves a niche audience interested in interior design, renovation, and gardening. The website offers rich editorial content supported by advertising revenue, leveraging Google Adsense and Facebook marketing tools. The platform demonstrates a solid market position within Czech lifestyle media, with consistent branding and professional presentation. Technically, the site uses a modern technology stack including Google Analytics, Facebook SDK, jQuery, and FontAwesome, with custom or proprietary CMS infrastructure. Hosting is likely provided by Wedos, consistent with the registrar information. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While some security headers are implied, explicit implementation could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are clearly linked and comprehensive, supporting regulatory compliance. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers and incident response transparency would further enhance its posture.

S

Schloss Kummerow

schloss-kummerow.de

58

Schloss Kummerow is a cultural heritage site located in Mecklenburg-Vorpommern, Germany, offering photographic collections, exhibitions, and event hosting services including weddings and guided tours. The website targets visitors interested in cultural events and photography, positioning itself as a significant regional venue with a focus on baroque architecture and modern photographic art. The business model revolves around cultural tourism and event rental services. Technically, the site is built on WordPress with a mature plugin ecosystem including Yoast SEO, Borlabs Cookie for GDPR compliance, and Smart Slider 3 for visual content. Hosting is provided by kasserver.com, and the site uses HTTPS with good SSL configuration. Marketing and analytics tools include Facebook Pixel and Google Tag Manager, indicating moderate user tracking with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent but lacks published security policies or incident response information. No critical vulnerabilities or suspicious WHOIS patterns were detected. Overall, the site is professional, well-branded, and trustworthy, serving a niche cultural audience effectively.

S

Schliemann-Museum

schliemann-museum.de

46

The Schliemann Museum Ankershagen is a cultural institution dedicated to preserving and presenting the life and work of Heinrich Schliemann, a notable archaeologist and businessman. The museum offers exhibitions, educational programs, and events targeting families, school groups, and cultural enthusiasts. It holds a respected position regionally with national cultural significance, operating under the MuSeEn gGmbH umbrella. The website reflects this mission with clear, well-structured content and a focus on accessibility and visitor information. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Hosting is stable with German providers, and performance is moderate with good SEO and accessibility practices. The site employs a cookie consent mechanism compliant with GDPR, and integrates Google Tag Manager for analytics. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website content and hosting, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its cultural and educational purpose effectively. Strategic improvements could include publishing formal security and incident response policies and enhancing security headers to further strengthen the security posture.

M

MuSeEn gGmbH

museenplatte.org

52

MuSeEn gGmbH operates the MuSeenPlatte website, a regional cultural portal showcasing museums and exhibitions in the Mecklenburgische Seenplatte region of Germany. The platform provides visitors with comprehensive information about museums, including locations, contact details, and a discount program encouraging cultural tourism. The website is well-structured, uses modern web technologies such as WordPress, Yoast SEO, and Leaflet.js for interactive maps, and targets cultural enthusiasts and tourists interested in the region's heritage. Technically, the site is built on WordPress with a drag-and-drop page builder and integrates SEO best practices and structured data for enhanced search visibility. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, there is a lack of privacy and cookie policies, which poses compliance risks under GDPR regulations. Security-wise, HTTPS is enforced, but the absence of security headers and incident response information indicates room for improvement. Overall, the website is trustworthy and professional in its presentation and content but would benefit from enhanced privacy compliance and security hardening. The WHOIS data is incomplete or unavailable, which slightly reduces domain trustworthiness but does not detract significantly from the site's legitimacy given its regional and cultural focus.

M

Moroccan National Tourist Office (MNTO)

visitmorocco.com

10

The website www.visitmorocco.com is the official online presence of the Moroccan National Tourist Office (MNTO), dedicated to promoting tourism in Morocco. It offers comprehensive travel information, cultural insights, suggested tours, and practical advice for international tourists. The site targets a global audience interested in Moroccan heritage, nature, and leisure activities. The business model is government-driven tourism promotion, positioning itself as the authoritative source for Moroccan travel.

S

Sunseekers Tours

sunseekerstours.com

51

Sunseekers Tours is a well-established travel and tour operator specializing in bespoke and luxury tours primarily in Ghana and West Africa, with outbound tours to destinations such as Dubai and South Africa. The company emphasizes personalized travel experiences and vehicle rentals, supported by over 30 years of industry experience and multiple prestigious awards. Their website reflects a professional and consistent brand image, targeting travelers seeking customized and memorable journeys. Technically, the website is built on a modern WordPress platform using WooCommerce and Elementor, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, though improvements in security and privacy compliance are recommended.

E

ERBIA

ckerbia.cz

48

ERBIA is a Czech travel agency specializing in vacations in Italy, offering accommodation bookings, bus transportation to Caorle from across the Czech Republic, and pet-friendly apartment options. The company has been established since 2003, indicating a stable presence in the hospitality sector. Their website targets Czech travelers interested in Italian holiday destinations, with additional offerings such as flights to the island of Ischia. The business operates a niche model focusing on regional travel services with a small company size. Technically, the website is built on WordPress CMS, utilizing WooCommerce for e-commerce capabilities and KingComposer for page building. The site integrates common web technologies including jQuery, Bootstrap, FontAwesome, and Google Fonts. Hosting and domain registration are consistent with Czech providers, specifically REG-ZONER and WEDOS DNS servers. The site demonstrates moderate performance and good mobile optimization, with SEO enhancements via Yoast SEO and All in One SEO plugins. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the provided data, and the Google Analytics tracking code contains a placeholder ID, suggesting incomplete analytics setup. No exposed sensitive data or vulnerabilities were identified in the HTML content. The absence of terms of service, security policies, or vulnerability disclosure pages indicates areas for improvement in transparency and security posture. Overall, the website presents a professional and trustworthy front for a small travel agency, with good content quality and compliance with privacy regulations. Strategic recommendations include enhancing security headers, completing analytics configuration, and publishing comprehensive security and terms policies to strengthen trust and compliance.

W

weiberwirtschaft

weiberwirtschaft.at

56

Weiberwirtschaft is a small Austrian creative agency specializing in concept and design, with a focus on text and textiles. The website serves as both a portfolio and an e-commerce platform showcasing various cultural and artistic projects. The business targets a general audience interested in creative services and products. Technically, the website is built on WordPress with WooCommerce, leveraging Bootstrap and jQuery for frontend functionality. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published security policies and incident response information. Overall, the website is trustworthy and professionally presented, with room for improvement in security transparency and technical enhancements.

S

Smart City Wettbewerb 2025 - Smartcity Wettbewerb

smartcitywettbewerb.com

48

The website smartcitywettbewerb.com serves as a platform for the Smart Green City competition 2025, focusing on innovative and sustainable urban development solutions in Dornbirn, Austria. It targets innovators, urban planners, and sustainability advocates to submit projects that contribute to a climate-neutral and technologically advanced city. The site is built on WordPress with Elementor and uses modern web technologies, providing a good user experience and mobile optimization. Structured data and SEO practices are well implemented, enhancing discoverability. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional and trustworthy but would benefit from enhanced compliance documentation and security hardening.

W

Webtasy, d.o.o.

controlpanel.si

62

Webtasy, d.o.o. is a Slovenian technology company that consolidates brands such as Domovanje.com, Domenca.com, and Si-shell.net, primarily offering web hosting, domain registration, and related internet services. The website is built using the BaseKit CMS platform and is hosted on infrastructure associated with domenca.com. The site is accessible without any WAF or security challenge barriers, indicating open availability to users. However, the absence of WHOIS registration data for the domain www.webtasy.com raises questions about the domain's registration status and legitimacy, warranting further verification. The website lacks explicit privacy policies, terms of service, and contact information, which are critical for user trust and regulatory compliance.

K

Kunst- und Kulturstrategie - Kärnten | Koroška

kulturstrategie-kaernten.at

55

The website www.kulturstrategie-kaernten.at serves as a regional cultural strategy platform for Carinthia, Austria, focusing on promoting arts and cultural initiatives within the region. It appears to be a governmental or public sector initiative aimed at residents, cultural institutions, and stakeholders interested in the cultural development of Carinthia. The site uses WordPress with the The7 theme and performance optimizations via WPRocket, indicating a moderate level of technical maturity. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No contact emails, phone numbers, or social media links were found, limiting direct communication channels. Overall, the domain registration aligns well with the website's regional focus, supporting its legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve compliance and trust.

A

Anklamer Wohnungsgenossenschaft eG

wg-anklam.de

47

The Anklamer Wohnungsgenossenschaft eG operates as a local housing cooperative based in Anklam, Germany, providing rental apartments and member services to the community. The website serves as a portal for housing offers, member services, and contact information, targeting residents seeking housing solutions in the region. The business model focuses on cooperative housing with a strong community orientation. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including FontAwesome and Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation and content relevance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and incident response contacts. Overall, the website is trustworthy and well-maintained, suitable for its target audience and business purpose.