Security Directory

The website komoraplus.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before access. This prevents any meaningful content analysis or extraction of business, contact, or compliance information. The domain was registered in 2020 with a Czech registrar and uses Cloudflare for DNS and security services, indicating a legitimate setup but limited public information. Due to the blocked content, no privacy policies, cookie policies, terms of service, or contact details are visible. The technical infrastructure relies on Cloudflare's security platform, but no further technology stack or CMS details are available. The security posture cannot be fully assessed beyond the presence of Cloudflare's WAF protection. Overall, the site appears to be a small business or service based in the Czech Republic but lacks publicly accessible content for deeper analysis.

K

Kreativní Praha, z. ú.

poznejvltavu.cz

52

Poznej Vltavu is a cultural festival organized by Kreativní Praha, a non-profit entity focused on celebrating the Vltava river through family-friendly events, workshops, and entertainment in Prague. The website serves as an information hub for the festival, providing event details, maps, partner information, and updates. The organization has established partnerships with local government and cultural institutions, enhancing its credibility and community reach. The website is well-branded, consistent, and targets a broad audience including families and cultural enthusiasts. Technically, the website uses modern JavaScript libraries such as Leaflet for interactive maps and Swiper for carousels, hosted on WEDOS servers. It employs Google Tag Manager for analytics with a privacy-conscious default denying tracking until consent is given. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit security policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and GDPR policy pages indicate good privacy compliance. However, there is no explicit incident response or security policy documentation, which could be enhanced. Overall, the site is trustworthy, safe, and professionally maintained. The risk assessment is low, with recommendations focusing on improving security headers, adding incident response contacts, and enhancing accessibility. The domain is newly registered but consistent with the event timeline, and WHOIS data aligns with the website's claims, supporting legitimacy.

V

Výzkumný ústav vodohospodářský T. G. Masaryka, veřejná výzkumná instituce

vtei.cz

50

The website www.vtei.cz represents the open access scientific journal VTEI, published by the Výzkumný ústav vodohospodářský T. G. Masaryka, a public research institution in the Czech Republic. The journal focuses on water management technical and economic information, targeting researchers and professionals in hydrology, hydrogeology, ecology, and related fields. It is recognized in international databases such as DOAJ and Scopus, indicating a reputable academic standing. The business model is based on open access publishing without fees for authors or readers, supporting knowledge dissemination in water management sciences. Technically, the website is built on WordPress CMS with Bootstrap framework and uses modern web technologies including jQuery, Shadowbox.js, and AI content generation plugins. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Cookie consent is implemented with advanced user controls, reflecting awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. WHOIS data for the domain is unavailable, which limits domain registration verification and slightly reduces trustworthiness. Overall, the security posture is moderate with room for improvement in headers and policy transparency. The overall risk assessment is low, given the professional nature of the content and institutional backing. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, and providing incident response contact information to enhance trust and compliance. The domain's WHOIS data absence should be investigated to ensure legitimacy and reduce potential risk.

E

Economia, a.s.

hn.cz

64

Hospodářské noviny (HN.cz) is a leading Czech news portal specializing in business, politics, and economic analysis. Operated by Economia, a.s., the site offers a broad range of content including news articles, podcasts, and special reports targeting Czech-speaking professionals and the general public interested in economic and political affairs. The business model combines advertising revenue with a subscription service (HN+) that offers an ad-free experience. The website demonstrates a mature digital presence with consistent branding and high-quality content.

S

Svaz knihovníků a informačních pracovníků České republiky (SKIP)

brezenmesicctenaru.cz

42

The website 'Březen měsíc čtenářů' is a Czech Republic-based cultural initiative promoting reading and library events during March. It is operated under the auspices of the Svaz knihovníků a informačních pracovníků České republiky (SKIP), a recognized non-profit organization. The site provides event registration, news updates, and a searchable program of activities targeting libraries, readers, and cultural institutions. The event has a history of over 12 years with significant participation, positioning it as a well-established national initiative. Technically, the website is built on WordPress 5.6.16, utilizing common libraries such as jQuery and Leaflet for interactive maps. It employs Google Fonts for typography and demonstrates good mobile responsiveness and navigation clarity. Performance is moderate, with no major technical issues detected. However, the site lacks advanced security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, the site enforces HTTPS, which is a positive baseline. No WAF or blocking mechanisms are detected, and no obvious vulnerabilities or exposed sensitive data were found in the HTML content. The absence of security headers and privacy policies represents a compliance gap, especially under GDPR regulations. The WHOIS data is missing, which reduces domain registration transparency and trustworthiness, though the official affiliation and content quality mitigate some concerns. Overall, the website is a credible and professional platform for a cultural non-profit event but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and reduce risk.

C

Celé Česko čte dětem

celeceskoctedetem.cz

45

Celé Česko čte dětem is a well-established Czech non-profit organization founded in 2006, dedicated to strengthening family bonds through reading activities aimed at children and parents. The website reflects a mature digital presence with a clear focus on community engagement, supported by numerous reputable partners and sponsors. The content is primarily in Czech, targeting local families and educational stakeholders. Technically, the site employs a modern tech stack including Bootstrap, jQuery, FullCalendar, and Google services, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some advanced security headers and explicit policies are absent. Privacy compliance is addressed via a cookie policy and consent mechanism, aligning with GDPR requirements. Overall, the site demonstrates a solid business credibility and trustworthy online presence.

P

Provozně ekonomická fakulta ČZU v Praze

vu3v.cz

58

The website vu3v.cz serves as the official portal for the Virtual University of the Third Age (VU3V), operated by the Provozně ekonomická fakulta of the Czech University of Life Sciences Prague. It provides lifelong learning opportunities primarily targeting seniors aged 50 and above, including retirees and unemployed persons. The platform offers both virtual and in-person educational courses, consultation centers, and free bonus courses, aiming to support active aging and social engagement through education. The site is well-positioned as a niche educational provider within the Czech and Slovak regions, leveraging Moodle as its learning management system.

Rozečti.se is an online educational platform specializing in teaching speed reading to Czech-speaking audiences and other language groups. The website offers interactive courses, e-books, and certification to help users improve reading efficiency. The platform targets students, professionals, schools, and companies, providing both free trial and paid full versions. Technically, the site uses a combination of jQuery, Bootstrap, and the Nette Framework, with integrations of Facebook and Twitter SDKs and Google Analytics for tracking. The site is served over HTTPS with good SSL configuration, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and GDPR-related documents available. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is well-designed, user-friendly, and safe for general audiences.

N

Noc literatury

nocliteratury.cz

47

Noc literatury is a cultural literary project based in the Czech Republic that organizes literature events featuring contemporary European authors interpreted by well-known actors. The website is professionally designed using WordPress with Elementor and the jNews theme, providing a rich content experience primarily in Czech with English language support. The site includes comprehensive cookie consent management and privacy policy compliance, reflecting a mature approach to user privacy. However, the absence of WHOIS data and lack of explicit security and incident response policies slightly reduce the overall trustworthiness. The site is well-optimized for SEO and mobile devices, with active social media engagement on Facebook, Instagram, and YouTube.

M

Moudrá Sovička z.s.

moudrasovicka.cz

40

Moudrá Sovička z.s. is a small Czech non-profit organization focused on providing assistance with the initial setup of computers, tablets, and phones. The website serves as an informational and service platform targeting individuals who need help with technology setup. The organization maintains a modest but professional online presence, including a Facebook page and clear contact information. The business model revolves around educational and technical support services, positioning itself as a niche local service provider in the Czech Republic. Technically, the website is built on WordPress using the Radiate theme and employs standard web technologies such as PHP, JavaScript, and CSS. It includes a cookie consent mechanism compliant with GDPR, indicating a reasonable level of digital maturity and privacy awareness. Performance and mobile optimization are adequate, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and includes common security headers, contributing to a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in security transparency and incident readiness. Overall, the website presents a low-risk profile with a solid foundation for a small non-profit. The lack of WHOIS data reduces trust slightly but does not outweigh the positive indicators from the website content and technical setup. Strategic recommendations include enhancing security disclosures, maintaining up-to-date software, and improving transparency around incident response.

S

S knížkou do života

sknizkoudozivota.cz

58

S knížkou do života is a Czech Republic based non-profit project dedicated to promoting early childhood literacy by distributing book sets and providing educational resources to parents and libraries. The website serves as an information hub with news, media content, and resources for participants. Technically, the site is built on WordPress with Elementor and uses modern web technologies including HTTPS, social media SDKs, and embedded videos. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the active social media presence and content quality support legitimacy. Overall, the site is well-designed and functional but could improve privacy compliance and domain transparency.

M

Městská knihovna Poděbrady

knihovna-pdy.cz

57

Městská knihovna Poděbrady is a municipal public library serving the community of Poděbrady, Czech Republic. The website provides comprehensive information about library services including book lending, e-books, audiobooks, events, and community engagement activities. It targets a broad audience including children, seniors, and local residents, positioning itself as a key educational and cultural institution in the region. The business model is non-profit and focused on public service and education. Technically, the website is built on the Vismo CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and Vue.js. It integrates Google services including reCAPTCHA v3 for form security, Google Translate for multilingual support, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and performs moderately well, with good SEO and navigation clarity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the content. Privacy and cookie policies are present and indicate GDPR compliance, with a consent mechanism implemented. Overall, the website is trustworthy, professional, and safe for general audiences. The main limitation is the absence of WHOIS data, which restricts domain registration transparency and trust analysis. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to improve security posture and trustworthiness.

R

REMspace Inc

obe4u.com

48

REMspace Inc is a specialized research and educational organization focused on REM sleep, lucid dreaming, sleep paralysis, and out-of-body experiences. The company offers a range of services including research publications, free educational content such as books and videos, and products like the LucidMe mask and mobile app. Positioned as a leading niche research center, REMspace targets individuals interested in sleep science and consciousness exploration. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages to reach a global audience. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern JavaScript libraries like Swiper.js for UI components and multiple analytics and tracking services including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Yandex Metrica. Hosting and DNS are managed via Cloudflare, with domain registration through Launchpad.com Inc. The site demonstrates moderate performance and good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL configuration and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and DNSSEC is not enabled. Privacy compliance is partially addressed with privacy and cookie policies present, though no active consent mechanism is implemented. Contact information is clearly provided, enhancing business credibility. Overall, REMspace.net is a trustworthy and professionally maintained website serving a specialized audience with educational and product offerings in the lucid dreaming and REM sleep technology space. Strategic improvements in security policies, cookie consent, and DNSSEC would enhance its security posture and compliance.

Z

Access to this page has been denied

zazzle.com

56

The website zazzle.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) challenge page that blocks content access. This prevents a full analysis of the website's content, policies, and contact information. The domain is well-established, registered since 1999 through MarkMonitor Inc., indicating a legitimate and mature e-commerce business. The visible technical infrastructure includes PerimeterX security services, which suggests a focus on bot mitigation and security. However, due to the content block, no privacy, cookie, or terms of service policies are accessible, and no contact or incident response information is available for review. The security posture cannot be fully assessed, but the domain registration and use of security services indicate a baseline of security awareness.

G

Global Shading Day

globalshadingday.com

67

Global Shading Day is an international awareness initiative founded in 2022 and supported by the European Solar Shading Organisation (ES-SO). The website promotes the benefits of shading to reduce energy consumption and improve comfort in buildings, positioning itself as a niche advocate in the energy and sustainability sector. The site is professionally designed using WordPress with modern SEO and accessibility features, integrating Google Analytics and Tag Manager for traffic analysis. Security posture is solid with HTTPS, Cloudflare bot management, and reCAPTCHA, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy and cookie policies. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy, well-branded, and serves its advocacy purpose effectively.

Kliken is a small business marketing platform that enables owners to easily manage advertising campaigns across Google Ads, Google Shopping, Facebook, and retargeting channels. The company integrates with popular ecommerce and website building platforms such as Ecwid by Lightspeed and WordPress, positioning itself as a niche SaaS provider focused on simplifying digital marketing for small businesses. The website is hosted on the Weebly platform and employs modern marketing and analytics technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and outdated jQuery version present areas for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Overall, Kliken presents a professional and functional online presence tailored to small business marketing needs.

The domain usercontent.one is registered to One.com A/S, a Danish company established in 2019. The website content is currently inaccessible, returning only a minimal 'Bad Request' HTML message, indicating that the site is either blocked, misconfigured, or under maintenance. Due to the lack of accessible content, no business description, services, or user-facing information can be derived. The domain registration data is consistent and legitimate, with no privacy protection enabled and domain status flags that protect against unauthorized changes. From a technical perspective, the website lacks any detectable metadata, scripts, forms, or external links, and no security headers or HTTPS information is available from the provided data. DNSSEC is not enabled, representing a potential security enhancement. The hosting provider is One.com A/S, consistent with the registrar information. Security posture is weak due to the absence of HTTPS, security headers, and any visible security or privacy policies. The site does not provide contact information or incident response channels, limiting trust and compliance capabilities. Overall, the site appears non-functional or blocked, resulting in a low AI score and high risk for users attempting to access it.

Š

šéfbot s.r.o.

sefbot.cz

53

šéfbot s.r.o. is a Czech technology company specializing in custom intelligent AI chatbots and AI agents tailored to business needs. Established in 2018, the company has built a strong market presence with over 400 clients since 2019, positioning itself as a leading provider of AI conversational solutions in the Czech Republic. Their offerings include hybrid AI conversational models combining fixed scenarios with advanced AI, RAG technology integration for dynamic data, and AI assistant training and reporting tools. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress, Elementor, and Yoast SEO. The technical infrastructure includes multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Snowplow Analytics, indicating a mature digital marketing strategy. Security posture is strong with HTTPS, reCAPTCHA, and Cloudflare DNS, though some improvements are recommended such as explicit security headers and vulnerability disclosure policies. Overall, the website and business demonstrate high professionalism, trustworthiness, and technical maturity, with minor gaps in privacy compliance and security transparency.

G

GRENA, a.s.

grenamat.cz

44

GRENA, a.s. is a Czech Republic-based medium-sized manufacturing company specializing in non-flammable and fire-resistant materials such as vermiculite boards and acoustic panels. Established in 2009, the company serves industrial clients and construction sectors with a broad product portfolio and maintains a professional web presence with multi-language support. The website is well-structured, providing clear navigation and contact options, including phone, email, and contact forms, alongside active social media channels. Technically, the site uses modern JavaScript libraries and frameworks like jQuery, Bootstrap, and Owl Carousel, hosted likely on Czech infrastructure consistent with the domain's WHOIS data. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy page. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

S

SENSIT s.r.o.

sensit.cz

46

SENSIT s.r.o. is a well-established Czech manufacturer specializing in sensors and measurement devices, including temperature, humidity, CO2, level, flow, and position sensors. Founded in 1991, the company has a strong market presence domestically and exports to 65 countries. Their website reflects a professional and consistent brand image, offering detailed product information and certifications that reinforce their industry credibility. Technically, the site uses a modern ASP.NET framework with common JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS in use but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the overall business and website quality remain solid. Strategic improvements in security headers and transparency policies are recommended to enhance trust and compliance.

F

FlexiSystems s.r.o.

flexiedu.cz

40

FlexiSystems s.r.o. operates the elearning.flexiedu.cz website, providing modern e-learning solutions tailored for corporate clients and organizations. The company specializes in developing custom e-learning courses, managing online education, and offering mobile e-learning platforms. Their market position is that of an established Czech provider with a clear focus on education technology. The website reflects a professional and consistent brand image with a good quality of content and user experience. Technically, the site is built on ASP.NET Web Forms with common libraries such as jQuery and Slick Carousel for UI components. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. However, accessibility features are basic and could be improved. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data was retrievable, which slightly reduces domain trustworthiness, though the website content and contact information support legitimacy. There are no visible vulnerabilities or exposed sensitive data, but improvements in security headers and compliance documentation are recommended. Overall, the site presents a low-risk profile with solid business credibility but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

F

FlexiSystems s.r.o.

flexisystems.cz

42

FlexiSystems s.r.o. is a Czech-based technology company specializing in delivering modern e-learning solutions, custom web projects, and tailored design services. Their offerings include a proprietary e-learning platform (FlexiEdu), web development services with CMS and mobile app integration (FlexiSite), and an online platform for course purchase and delivery (FlexiPortal). The company targets businesses and organizations seeking digital education and web solutions, positioning itself as a specialized regional provider with a professional online presence. Technically, the website is built on ASP.NET Web Forms with modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Security best practices are partially implemented; HTTPS is presumed but security headers are missing, and no explicit privacy or cookie policies are present. From a security perspective, the site shows no immediate vulnerabilities in the visible content, but the absence of WHOIS data and security policies reduces trustworthiness. The company provides clear contact information and client references, enhancing credibility. However, improvements are needed in privacy compliance, security headers, and incident response readiness. Overall, the website is professional and functional with moderate technical maturity and a solid business focus. Strategic enhancements in security and privacy policies would strengthen trust and compliance, supporting sustainable growth and risk mitigation.

A

ABF a.s.

pvaexpo.cz

62

PVA Expo Praha, operated by ABF a.s., is a prominent exhibition center in Prague offering modern facilities for a wide range of events including fairs, conferences, and festivals. The website showcases upcoming events, rental services, and partner collaborations, positioning itself as a key player in the Czech exhibition market. The digital infrastructure is built on a modern tech stack including Yii framework, Vue.js, and various JavaScript libraries, providing a responsive and user-friendly experience. Security measures such as HTTPS, CSRF protection, and cookie consent mechanisms are implemented, though some advanced security headers and policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

S

SHOPEX

shopex.cz

49

Shopex.cz is an established Czech marketplace platform founded in 2007, offering a wide range of products including home goods, hobby items, children's products, pet supplies, and event tickets for fairs held at PVA EXPO PRAHA. The website targets general consumers in the Czech Republic seeking diverse retail products and event access. Technically, the site is built on the CS-Cart e-commerce platform and integrates multiple third-party analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Adform. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent with the business age and content, indicating legitimacy.

A

ABF a.s.

abf.cz

60

ABF a.s. is a well-established Czech company specializing in organizing trade fairs, exhibitions, and conferences, primarily operating the PVA EXPO PRAHA venue in Prague. The company has a strong market position as a leading event organizer in the Czech Republic and Central Europe, hosting a diverse portfolio of events across multiple sectors including technology, energy, culture, and sports. The website reflects this with extensive event announcements and partnership information, notably with Škoda Auto and other industry players. Technically, the website uses a mix of legacy and modern web technologies, including jQuery, Bootstrap, and multiple analytics platforms, indicating a mature but somewhat dated infrastructure. Security posture is adequate with HTTPS and cookie consent implemented, though some outdated libraries and missing advanced security headers suggest room for improvement. No privacy policy or terms of service were found, which is a compliance gap. Overall, the domain's WHOIS data confirms legitimacy and long-term operation, supporting trust in the business.

A

ABF a.s.

forarch-poradenskacentra.cz

58

FOR ARCH Poradenská centra is a Czech Republic based advisory platform focused on architecture and construction consulting, supported by ABF a.s. and various government and professional partners. The website serves as an informational and event coordination hub, targeting architects, construction professionals, and related stakeholders. The platform demonstrates a solid market position with established partnerships and a consistent brand presence. Technically, the site uses a mix of legacy and modern web technologies including Bootstrap 3.3.7, jQuery 1.12.4, and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though outdated libraries and lack of security headers present moderate risks. Privacy compliance is basic but present, with a GDPR policy linked from a parent domain. Overall, the site is professional and trustworthy with room for technical and security improvements.

G

go bananas s.r.o.

gobananas.cz

49

go bananas s.r.o. is a Czech-based digital marketing and branding agency founded in 2021. The company specializes in building strong brands and delivering performance marketing solutions including creative campaigns, web development, social media management, video production, and influencer marketing. Their market position is that of a small but professional agency with a portfolio of diverse clients, emphasizing long-term partnerships and trust-building with customers. The website is built on Webflow and integrates modern technologies such as Google Analytics and Tag Manager for tracking, with a focus on responsive design and user experience. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

A

Appli Development s.r.o.

appli.cz

36

Appli Development s.r.o. is a Czech Republic based digital agency specializing in the development of mobile and web applications as well as digital marketing services. Founded in 2020, the company positions itself as a full-service provider helping businesses digitalize and grow through tailored app solutions and marketing campaigns. Their website reflects a professional and modern digital presence built on WordPress with Elementor, featuring clear service offerings and client engagement pathways. The technical infrastructure is based on a WordPress CMS with popular plugins such as Yoast SEO and Google Analytics integration, indicating a moderate level of digital maturity. The site is hosted on VAS Hosting as inferred from the nameservers. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are implemented with structured data and meta tags. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and explicit privacy and cookie policies indicates room for improvement in compliance and security best practices. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. Overall, the website and business appear legitimate and professional with a good trust level. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts to enhance compliance and security posture.

B

BMT Medical Technology s.r.o.

sterilizatory-bmt.com

49

BMT Medical Technology s.r.o. is a Czech-based company specializing in the development, manufacturing, and supply of sterilization equipment including steam, hot air, and chemical sterilizers, as well as laboratory dryers, incubators, and stainless steel furniture. The company serves healthcare, pharmaceutical, and industrial sectors and is part of the MMM Group, indicating a strong market position and international reach. The website is professionally designed, content-rich, and targets Russian-speaking audiences with multilingual options. Technically, the site uses modern JavaScript libraries such as jQuery and Slick carousel, with lazy loading for performance optimization. However, no CMS or hosting provider details are evident. Security-wise, the site uses HTTPS (implied by external links), has a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service pages. The WHOIS data for the domain is missing or indicates the domain is unregistered, which is a significant concern for domain legitimacy and trust. Overall, the site is functional and professional but requires improvements in security posture and domain registration verification.

B

BMT Medical Technology s.r.o.

sterilizers-bmt.com

47

BMT Medical Technology s.r.o. is a Czech-based manufacturer specializing in steam, hot air, and chemical sterilizers, laboratory drying ovens, incubators, and stainless steel furniture. The company serves a global customer base primarily in healthcare, laboratories, and the pharmaceutical industry. It is part of the MMM Group, which enhances its market credibility and reach. The website reflects a professional business with clear product and service offerings, supported by a consistent brand presence and multilingual support. Technically, the website uses modern JavaScript libraries such as jQuery and Slick carousel, with lazy loading for images and Google Analytics for visitor tracking. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism indicating GDPR awareness. However, no explicit security headers were detected, and no detailed privacy or security policies were found beyond cookie information. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy despite the professional website content and contact information. Overall, the website presents a trustworthy and professional business front but should address WHOIS transparency and enhance security policies and headers to improve trust and compliance.

M

MMM Group

mmmgroup.com

68

MMM Group is a well-established company specializing in cleaning, disinfection, and sterilization solutions for healthcare and life science sectors. With a history dating back to 1954, the company positions itself as a leading system provider in Germany and Europe, offering a comprehensive product and service portfolio including modular construction and general contracting for medical product processing units. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. Security posture is adequate with HTTPS and cookie consent but lacks some security headers and explicit privacy and terms of service documentation. WHOIS data is missing or not found, which raises concerns about domain registration legitimacy despite the professional appearance and detailed business information on the site. Overall, the site is safe, trustworthy, and targets healthcare professionals and organizations. Strategic improvements in transparency and security documentation are recommended.

L

LESENSKY.CZ s.r.o.

lesensky.cz

68

LESENSKY.CZ s.r.o. is a Czech Republic based PR and marketing agency established in 2009, specializing in integrated PR and marketing services including strategy, public relations, marketing campaigns, and web projects. The company has a strong market position supported by multiple industry awards and a professional digital presence. Their website is built on Drupal 10, featuring modern technologies and comprehensive cookie and privacy compliance mechanisms. Security posture is strong with HTTPS, security headers, and secure forms, though no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly impacts domain transparency but does not detract from the business legitimacy indicated by the website content and client references. Overall, the company demonstrates a mature digital infrastructure and a professional approach to business and security.

S

Svaz podnikatelů ve stínicí technice

spst-stineni.cz

46

Svaz podnikatelů ve stínicí technice (SPST) is a Czech trade association representing manufacturers and businesses in the shading technology sector. Formed in 2018 by the fusion of two entities, it provides certification, industry news, events, and resources to its members and the wider professional community. The website reflects a medium-sized organization with a clear focus on industry advocacy and networking. Technically, the site is built on Joomla CMS, using common JavaScript libraries and Google Analytics for tracking. It is mobile-optimized and presents a professional design with good navigation. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks advanced security headers and explicit privacy or cookie policies, indicating compliance gaps. WHOIS data is missing, which raises concerns about domain legitimacy, though the active and professional website mitigates some risk. Overall, the site is safe, trustworthy, and serves its business purpose effectively.

E

Přístup odepřen

egd.cz

50

The website www.egd.cz is currently inaccessible and displays an access denied message in Czech, indicating that the visitor's network has been flagged for suspicious activity or is outside the supported region. The site lacks any meaningful content, metadata, or business information, and no WHOIS data is available for the domain, suggesting possible suspension or privacy protection. Due to these factors, a comprehensive analysis of the business, technical infrastructure, and security posture is not feasible. The absence of HTTPS, security headers, privacy policies, and contact information further limits trust and credibility assessment.

Městská policie Znojmo operates as the official municipal police service for the city of Znojmo, Czech Republic. The website provides comprehensive information about public safety, police services, crime prevention, and contact details. It targets local citizens and visitors seeking assistance or information related to municipal policing. The business model is government-based, focusing on public order and safety. The site maintains a consistent brand presence with official social media channels and clear service offerings. Technically, the site uses common web technologies such as jQuery, Bootstrap, and FontAwesome, hosted on a Czech hosting provider. While the site is mobile-optimized and well-structured, minor technical issues like duplicate jQuery versions and malformed resource links exist. Security posture is moderate with a basic Content-Security-Policy header but lacks advanced security headers and vulnerability disclosures. No privacy or cookie policies were found, indicating a gap in compliance. Overall, the site is trustworthy and professional but could improve in privacy and security practices.

H

H&M spol. s r.o.

ham.cz

57

H&M spol. s r.o. is a well-established family-owned manufacturing and retail company based in the Czech Republic, specializing in custom plastic, aluminum, and wooden windows and doors, as well as winter gardens and shading technology. The company holds a strong market position with over 100 references and a notable showroom in Prague, targeting residential and commercial customers seeking high-quality custom products. The website reflects a professional business model focused on manufacturing and retail within the construction and home improvement sectors. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Seznam tracking scripts, alongside a cookie consent mechanism indicating GDPR awareness. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found, but recommendations include implementing security headers and publishing a vulnerability disclosure policy to enhance security posture. Overall, the website is trustworthy, professionally designed, and compliant with basic privacy and cookie regulations. The domain WHOIS data confirms a long-standing registration consistent with the company's history, supporting legitimacy. Strategic improvements in security transparency and compliance documentation would further strengthen the company's digital maturity and trustworthiness.

R

REALSANT s.r.o.

realsant.cz

56

REALSANT s.r.o. is a Czech Republic based real estate development company with over 25 years of experience, specializing in residential and commercial property development, project management, and property services. The company operates as part of the PKS group, which enhances its market position and credibility. Their website presents a professional and comprehensive overview of their services, projects, and corporate information, targeting investors, buyers, and commercial clients in the real estate sector. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting good compliance with GDPR requirements. Security posture is generally strong with HTTPS and reCAPTCHA usage, though the absence of certain security headers and lack of incident response information suggest areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall professional presentation and detailed business information mitigate concerns. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and verifying domain registration details to improve trust and compliance.

H

Heidelberg Materials

heidelbergcement.com

77

Heidelberg Materials is a global leader in the building materials industry, specializing in cement, aggregates, ready-mixed concrete, and asphalt. The company operates in approximately 50 countries and emphasizes sustainability, digital innovation, and business transformation to maintain its market leadership. The website reflects a mature digital presence with comprehensive corporate, investor, sustainability, and career information. Technically, the site is built on Drupal 11 with modern frontend technologies and includes analytics and cookie consent mechanisms. Security posture is strong with HTTPS and bot management cookies, though explicit security headers and incident response contacts are not clearly published. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site content and branding. Overall, the site is well-designed, accessible, and trustworthy, targeting industry professionals, investors, and job seekers.

OC Convent is a retail shopping center located in Žďár nad Sázavou, Czech Republic, offering a variety of retail stores including supermarkets, pharmacies, and specialty shops. The website presents a professional and user-friendly interface built on WordPress with common plugins and libraries. The technical infrastructure is modern and mobile-optimized, supporting a good user experience. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the site content and business information appear legitimate and consistent with a local retail center. Overall, the website is safe, professional, and serves its target audience effectively.

P

PKS stavby a.s.

pksstavby.cz

54

PKS stavby a.s. is a well-established Czech construction company with over 50 years of tradition and a strong market position among the top 20 construction firms in the Czech Republic. The company offers comprehensive construction services including building and engineering projects, supported by in-house production capabilities and a workforce of approximately 600 employees. The website reflects a professional corporate presence with clear business information, references, and media coverage. Technically, the site is built on WordPress and employs modern web technologies such as Google Analytics, Facebook Pixel, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and explicit consent mechanisms. Overall, the website and domain registration data align well, supporting the legitimacy and credibility of the business.

P

PKS holding a.s.

pks.cz

51

PKS holding a.s. is a large Czech holding company specializing in construction, manufacturing of windows and doors, developer and engineering activities, and leasing commercial spaces. The company operates multiple subsidiaries and serves both private and public investors, positioning itself as a strong regional player with a diversified portfolio. The website reflects a professional and consistent brand image with clear service offerings and references to major projects. Technically, the site uses xartCMS, integrates Google Tag Manager for analytics, and employs Mapy.cz for mapping services. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced, but lacks some advanced security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, but the website's content and linked domains indicate legitimacy. Overall, the site is safe, professional, and business-focused with no adult or questionable content.

T

Trans Technik SRL

trans-technik.ro

45

Trans Technik SRL is a Romanian company specializing in the distribution of materials and subassemblies for automotive bodyworks, representing a Czech company with nearly 30 years of experience. Their product range includes materials for vehicle superstructures, aluminum and steel profiles, door kits, tarpaulin systems, hydraulic systems, and more, targeting businesses in the transportation and automotive sectors. The website is built on WordPress with WooCommerce, using modern plugins and standard analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS and security headers implemented, though formal security policies and incident response contacts are absent. Privacy compliance is basic with a privacy policy and cookie consent present. Overall, the website is professional and trustworthy, supporting a small-sized business with a clear market focus.

T

ThePay, a.s.

thepay.eu

64

ThePay, a.s. operates a professional payment gateway platform targeting e-commerce merchants primarily in the Czech Republic and Slovakia. The company offers a variety of modern payment methods including card payments, PSD2-compliant payments, QR codes, Apple Pay, and Google Pay, supporting multiple currencies and recurring payments. The website reflects a mature business with over 3,000 clients and emphasizes ease of use with automated tariffs and fast implementation. Technically, the site uses modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Leady.cz, and is served over HTTPS with cookie consent mechanisms in place. However, the absence of explicit privacy policy and terms of service pages, as well as missing security headers, indicates room for improvement in privacy compliance and security posture. Overall, the site is well-designed, mobile-optimized, and trustworthy with PCI DSS certification displayed, but could benefit from enhanced transparency and security best practices.

W

World Standards Day

worldstandardsday.org

54

World Standards Day is an annual global event promoting awareness of the importance of international standardization to foster sustainable development and global partnerships. The website serves as an informational and advocacy platform supported by major standards organizations IEC, ISO, and ITU. It provides resources, event details, and community engagement opportunities to a broad international audience interested in standards and sustainable development goals. Technically, the site uses modern web technologies including a CMS (Jahia), Google Fonts, Usercentrics for cookie consent, and Vimeo for video content, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, professionally maintained, and aligned with its mission, though WHOIS data is privacy protected and unavailable for detailed domain registration analysis.

I

International Gas Union

wgc2028.com

63

The website www.wgc2028.com serves as the official platform for the 30th World Gas Conference scheduled in Milan, Italy in June 2028. It is operated under the International Gas Union brand, a recognized entity in the global energy sector. The site provides event details, venue information, and calendar integration options, targeting industry professionals and stakeholders in the gas and energy sectors. The business model revolves around event organization and industry advocacy, positioning itself as a key player in the energy conference market. Technically, the website is built using modern web technologies including React and Next.js, hosted on Vercel, and managed via DatoCMS. It demonstrates good performance, mobile optimization, and accessibility standards. Privacy compliance is addressed through Cookiebot consent management and a dedicated privacy policy page. Analytics are implemented via Google Tag Manager, reflecting moderate user tracking. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and security policies to strengthen its credibility and compliance posture.

I

International Gas Union

igrc2027.com

64

The website www.igrc2027.com serves as the official platform for the International Gas Union's IGRC2027 event, focusing on the global gas industry's role in building sustainable and secure societies. The site targets industry professionals and stakeholders, providing event information and promoting the gas sector's importance. The business model centers on industry association and event hosting, positioning itself as a key global player in the energy sector. Technically, the site is built on a modern React and Next.js framework, hosted on Vercel, and integrates Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain suggests either a new registration or privacy protection, which slightly impacts trust but is mitigated by the professional and consistent branding aligned with the International Gas Union. Overall, the site is trustworthy, compliant, and professionally maintained, with recommendations to enhance transparency around security policies and domain registration details.

I

IGU

lng2026.com

64

LNG2026 is a professionally developed event website representing the 21st International Conference & Exhibition on Liquefied Natural Gas, scheduled in Doha, Qatar in February 2026. The site serves as a comprehensive platform for industry professionals, offering detailed information on conference programs, sponsorship, exhibition opportunities, and networking. The business is positioned as a premier global LNG event organized under the International Gas Union (IGU), targeting energy sector stakeholders worldwide. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and various marketing pixels, hosted likely via GoDaddy infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design. However, there is room for improvement in security headers and privacy compliance mechanisms. Security posture is solid with HTTPS enforced and domain registration protections in place, but lacks advanced DNS security (DNSSEC) and visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

M

Ministerstvo průmyslu a obchodu

narodniportal.cz

54

The website 'Oficiální portál Rady Kvality ČR' is an official Czech government portal managed by the Ministry of Industry and Trade. It serves as a national information hub focused on quality management and corporate social responsibility (CSR) in the Czech Republic. The portal provides comprehensive information about the Quality Council of the Czech Republic, national quality policies, CSR initiatives, national awards, and related events. It targets organizations, businesses, and the general public interested in quality and CSR standards within the country. Technically, the site is built on WordPress 6.8.2 with modern plugins such as Yoast SEO Premium for search optimization, Google Tag Manager and Google Analytics for visitor tracking, and WP 2FA Premium for enhanced security. The site employs responsive design, lazy loading for images, and cookie consent mechanisms compliant with GDPR. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses two-factor authentication plugins, indicating a good security posture. However, no explicit security headers were detected in the HTML source, and there is no publicly available incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is strong with a clear privacy policy and cookie consent banner. Overall, the website presents a trustworthy and professional government portal with good content quality and technical implementation. The lack of WHOIS data is noted but is consistent with government domain policies. Strategic recommendations include adding security headers, publishing incident response policies, and enhancing accessibility compliance to further strengthen the site's security and trustworthiness.

I

innogy Energo

innogy-energo.cz

67

innogy Energo is a major energy company operating in the Czech Republic, providing natural gas, electricity, and related services to approximately 1.7 million customers. The company emphasizes its extensive operational footprint with over 4000 employees and multiple service offerings including CNG filling stations, photovoltaics, and electromobility solutions. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service information. Technically, the site leverages modern technologies such as Sitecore CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and policies are not visible. Privacy compliance is well addressed with detailed cookie and privacy policies and a consent banner. Overall, the site demonstrates a solid security posture with room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data slightly impacts trust but is mitigated by the professional presentation and official contact details.