Security Directory

B

BioVendor – Laboratorni medicina a.s.

biovendor.com

55

BioVendor – Laboratorni medicina a.s. is a Czech Republic-based biotechnology company specializing in the development and manufacturing of immunoassays, recombinant proteins, antibodies, and endotoxin-removal products. Positioned as part of the larger BioVendor Group, the company serves research laboratories and healthcare professionals internationally, offering a broad portfolio of diagnostic and research products. Their business model focuses on innovation and reliable laboratory diagnostics, supported by multiple subsidiary brands and joint projects. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the website employs a moderate technology stack including jQuery, Slick slider, Google Tag Manager, and Microsoft Clarity for analytics and user tracking. The site is mobile-optimized with good SEO and accessibility basics, though some modern security headers are missing. Performance is moderate, and the site uses Adobe Typekit fonts for consistent branding. Privacy and cookie policies are present with GDPR compliance, and contact information is clearly provided. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and public security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is incomplete or unavailable, which slightly reduces trustworthiness, but the overall business credibility and professionalism mitigate this concern. Overall, the website is a reliable and professional digital presence for BioVendor R&D, with recommendations to enhance security headers and publish explicit security policies to improve trust and compliance further.

Z

ZNOVÍN ZNOJMO, a. s.

znovin.cz

50

ZNOVÍN ZNOJMO, a. s. is a medium-sized Czech company specializing in the production and retail of traditional Moravian wines. The company operates a comprehensive e-commerce platform offering a wide range of wines, complemented by wine tourism services and loyalty programs. Their market position is that of an established regional wine producer with a focus on quality and customer engagement. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for wine consumers and tourists. Technically, the site uses modern JavaScript libraries and tracking tools, with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement and age verification for alcohol sales, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the business demonstrates credibility and trustworthiness with clear contact information and social media presence.

A

Albi

albi.cz

54

Albi.cz is a well-established Czech e-commerce retailer specializing in board games, children's educational products, gifts, and premium scented candles. The company has a strong market presence in the Czech Republic with a domain registered since 1998, indicating long-term business operations. The website targets a general audience including families and gift buyers, offering a broad product catalog with clear navigation and professional design. Technically, the website employs modern tracking and analytics technologies such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Smartlook. Hosting is provided by Active24, a known Czech hosting provider. The site is mobile optimized and performs moderately well, though explicit CMS or frameworks are not detected, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS and implements reCAPTCHA for bot protection. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no public security policy or incident response contacts are provided. Cookie consent mechanisms are present, but no formal privacy policy or terms of service links were found in the analyzed content, indicating room for improvement in privacy compliance. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy documentation, security header implementation, and incident response transparency would enhance the security posture and compliance standing.

F

FG Forrest, a.s.

fg.cz

74

FG Forrest, a.s. is a well-established Czech internet agency specializing in custom e-commerce solutions, websites, and intranets with over 27 years of experience. The company positions itself as a trusted partner for online business, serving a broad range of clients including major corporations. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content showcasing their services, client testimonials, and industry awards. Technically, the site employs modern technologies such as Google Tag Manager, LinkedIn Insight, and Plausible Analytics, and is built on their proprietary CMS and e-commerce platform Edee.one. Security posture is strong, evidenced by HTTPS enforcement, ISO 27001 certification, and cookie consent mechanisms. However, the absence of WHOIS data limits domain registration trust analysis. Overall, FG Forrest demonstrates a robust digital maturity and business credibility suitable for their market segment.

Reactdatepicker.com is a specialized website offering a simple and reusable datepicker component for React developers. The site is branded and crafted by HackerOne, a reputable company known for security and open source contributions. The website provides extensive code examples, documentation, and badges indicating active maintenance and testing. The target audience is primarily developers seeking UI components for React applications. The business model revolves around open source software distribution and community engagement. Technically, the site uses modern frontend technologies including React, TypeScript, Font Awesome, and Google Fonts, delivering a fast and mobile-optimized experience with good accessibility and SEO basics. Security posture is moderate; while the domain is secured with transfer and update prohibitions and uses HackerOne name servers, DNSSEC is not enabled and no security headers were detected in the provided data. Privacy compliance is low due to absence of privacy and cookie policies. No contact information or incident response details are published on the site. Overall, the domain registration is consistent with the website content and company branding, indicating high legitimacy and trustworthiness.

V

Vercel

nextjs.org

71

Next.js by Vercel is a leading full-stack React framework designed for building high-quality web applications. The website reflects a mature and professional technology company with a strong market position supported by Vercel. The platform offers a comprehensive set of features including built-in optimizations, advanced routing, server actions, and dynamic HTML streaming, targeting web developers and enterprises. The technical infrastructure is modern, leveraging React and Next.js frameworks, hosted on Vercel's platform, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though there is room to improve by publishing explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with the business claims.

T

Toyota European Union

toyota-europe.com

74

Toyota Motor Europe operates a comprehensive and professionally designed website serving as the primary digital presence for Toyota's automotive business across Europe. The site emphasizes Toyota's mission of delivering mobility and happiness through its products and services. It targets a broad European audience including consumers and business clients interested in Toyota vehicles, dealer locations, and financing options. The website is part of a larger ecosystem of localized Toyota sites across multiple European countries, reinforcing Toyota's strong market position in the transportation sector. Technically, the site leverages modern enterprise-grade technologies such as Adobe Experience Manager, Adobe Launch, and Datadog RUM for performance monitoring and analytics, ensuring a robust and scalable infrastructure. The use of privacy-conscious analytics and consent mechanisms indicates a mature approach to data privacy and compliance.

P

Platforma VIZE 0, z. ú.

vize0.cz

59

Platforma VIZE 0 is a Czech non-profit organization dedicated to improving road safety and reducing fatalities and serious injuries on Czech roads. The platform actively engages in education, advocacy, and public awareness campaigns, targeting drivers, cyclists, motorcyclists, and pedestrians. Their projects include practical safety tools and virtual reality experiences to educate the public. The website reflects a well-established presence since 2018, with consistent branding and a clear mission. Technically, the site uses modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and is hosted likely by Wedos, a Czech hosting provider. The site is mobile-optimized and SEO-friendly, with good user experience and navigation. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but there is room for improvement in security headers and incident response transparency. Overall, the platform demonstrates a strong commitment to privacy compliance and trustworthy communication.

E

EthicalAds

ethicalads.io

65

EthicalAds is a specialized advertising network focused on software developers, leveraging AI-powered contextual targeting to deliver relevant ads while prioritizing user privacy. The company operates under the parent organization Read the Docs, which adds credibility and stability to its market presence. EthicalAds emphasizes transparency, privacy compliance, and a developer-centric approach, distinguishing itself in the ad network space by avoiding third-party tracking and cookie usage. The website content is professional, well-structured, and optimized for both desktop and mobile users, reflecting a mature digital presence. From a technical perspective, EthicalAds employs modern web technologies including Pelican as a static site generator, Bootstrap for responsive design, and privacy-friendly analytics via Plausible. The site is fast, accessible, and SEO-optimized, with no detected security vulnerabilities or exposed sensitive data. However, explicit security headers are not evident, and there is no public security policy or vulnerability disclosure mechanism, which could be improved to enhance trust and security posture. Security-wise, the site enforces HTTPS and avoids third-party tracking scripts, aligning well with privacy regulations such as GDPR. The absence of cookie banners is justified by the lack of cookies or tracking pixels. WHOIS data is unavailable due to privacy protection, which is common for businesses valuing registrant confidentiality. Overall, EthicalAds demonstrates a strong security and privacy posture appropriate for its business model. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security and compliance. EthicalAds is well-positioned as a trustworthy, privacy-conscious ad network serving the developer community.

S

SIMPLO s.r.o.

easycookie.io

53

EasyCookie is a small technology company (SIMPLO s.r.o.) providing GDPR cookie consent management solutions primarily targeting website owners and digital agencies. Their SaaS platform offers features such as automatic cookie scanning, customizable consent banners, multi-language support, and integration with Google Consent Mode v2 to help clients maintain compliance with privacy regulations. The website is professionally designed with clear navigation, responsive layout, and transparent pricing plans including a free tier to attract new users. Technically, the site uses modern web technologies including Google Tag Manager, JavaScript, and Laravel backend inferred from cookies. The site is served over HTTPS with a good SSL configuration, though some security headers are missing. The cookie consent mechanism is implemented with detailed cookie categorization and user consent options. Analytics tools like Google Analytics and Hotjar are used for user behavior tracking, with moderate user tracking levels. From a security perspective, the site demonstrates good practices such as CSRF protection and HTTPS enforcement. However, the absence of a published privacy policy, terms of service, and incident response contacts are notable gaps. The WHOIS data is not publicly available due to privacy protection, which is common for small SaaS providers but slightly reduces transparency. No signs of malware or phishing were detected, and the content is safe for general audiences. Overall, EasyCookie presents a trustworthy and functional GDPR compliance solution with room for improvement in privacy transparency and security header implementation. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen trust and compliance posture.

Č

Česká národní banka

cnb.cz

63

Česká národní banka (ČNB) is the central bank of the Czech Republic, serving as the primary authority for monetary policy, financial market supervision, issuance of currency, and crisis resolution. The website reflects its authoritative role with comprehensive information on monetary policy, financial stability, regulatory oversight, statistics, and public education. It targets a broad audience including the general public, financial institutions, media, and researchers. The business model is governmental and regulatory, positioning ČNB as a key institution in the Czech financial ecosystem. Technically, the website is built on the OpenCms platform, utilizing modern web technologies such as jQuery, Google Analytics, and Google reCAPTCHA Enterprise for security and analytics. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and bot protection, though explicit security headers could be more visible. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is robust with detailed privacy and cookie policies, GDPR adherence, and user consent management. Business credibility is high, supported by clear contact information, official branding, and trust signals such as social media presence and legal disclosures. Overall, the website is a secure, professional, and trustworthy digital presence for the Czech National Bank, effectively supporting its mission and stakeholder engagement.

P

Property Xpress

htif.eu

45

The Hotel & Tourism Investment Forum (HTIF) website represents a professional event platform focused on the hospitality industry in Bulgaria, targeting hotel owners, investors, executives, and related professionals. It is positioned as the largest and most influential hospitality conference in Bulgaria and one of the most attended in Europe, offering detailed agendas and speaker profiles for its upcoming 2025 event. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Hosting is provided by SuperHosting.BG Ltd., a reputable provider. Security posture is adequate with HTTPS enabled and Google Analytics tracking implemented with opt-out options; however, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. Overall, the site is safe, professional, and trustworthy but should enhance privacy compliance and security configurations.

W

William H. Coleman, Inc.

cancuntravelmart.com

45

Cancun Travel Mart is a well-established tourism event organizer specializing in connecting international tour operators and buyers with suppliers from Cancun and other Mexican destinations. Managed by William H. Coleman, Inc., the event has a strong market position as a premier Mexican Caribbean tourism business development platform with over three decades of history. The website reflects a professional digital presence built on WordPress with Elementor, featuring good design quality, clear navigation, and mobile optimization. However, it lacks critical privacy and cookie policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies. Contact information is comprehensive and transparent, enhancing business credibility.

W

Websupport

websupport.se

66

Websupport is a well-established Swedish web hosting and domain registration provider founded in 2013 and part of the larger team.blue group. The company offers a comprehensive suite of services including domain registration, web hosting packages, email solutions such as Business Mail, and website building tools like WordPress and Website Builder. Positioned as one of Europe's largest web hosting providers, Websupport targets individuals and businesses seeking reliable online presence solutions. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

W

Websupport.sk

websupport.sk

67

Websupport.sk is a leading Slovak technology company specializing in domain registration, web hosting, cloud servers, and website building services. With a market-leading position and over 20 years of experience, it serves a broad audience ranging from small bloggers to enterprises. The company is part of the Team.Blue group and operates multiple regional subsidiaries, indicating a strong European presence. The website reflects a mature digital infrastructure with modern technologies such as WordPress, Alpine.js, and advanced consent management tools, ensuring compliance with GDPR and user privacy standards. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

W

Websupport Magyarország

websupport.hu

67

Websupport Magyarország is a well-established Hungarian technology company specializing in domain registration, web hosting, VPS, SSL certificates, business email, and website builder services. With over 20 years of experience and a strong regional presence as part of the team.blue group, it serves a broad audience ranging from individuals to businesses seeking reliable online presence solutions. The website reflects a professional and user-friendly design, optimized for mobile and accessibility, with clear navigation and comprehensive service offerings. Technical infrastructure leverages modern web technologies including WordPress, Alpine.js, and Tailwind CSS, supported by robust analytics and marketing tools integrated with GDPR-compliant consent management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Overall, the site demonstrates a mature digital presence aligned with industry best practices.

P

Placed

placed.com

70

Placed is a technology company specializing in location intelligence and online to offline attribution services, providing businesses with insights into consumer location data and ad intelligence. The company was acquired by Foursquare in 2019, which is reflected in the website content and linked legal documents. The website is professionally designed, mobile optimized, and uses modern analytics and marketing tools such as Google Tag Manager and Marketo. Privacy and terms of service are linked to Foursquare's legal pages, indicating integration with the parent company's compliance framework. However, the lack of WHOIS data and absence of direct contact information slightly reduce trustworthiness. Security posture is generally good with HTTPS and CSRF tokens, but could be improved by adding explicit security headers and a cookie consent mechanism.

F

Foursquare

swarmapp.com

62

Swarm by Foursquare is a well-established location-based social networking service that enables users to check in and track places. The company has a strong market presence with a mobile app available on iOS and Android platforms. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and Yoast SEO. Privacy and terms of service pages are present and comprehensive, indicating good compliance with data protection regulations such as GDPR. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. No incident response or vulnerability disclosure policies are publicly available. Overall, the website is trustworthy, safe, and provides a good user experience.

T

Trakkr

trakkr.ai

67

Trakkr is a technology startup offering a SaaS platform that provides real-time monitoring and visibility of brand mentions across major AI language models such as ChatGPT, Claude, and Gemini. The platform targets businesses and marketing teams seeking to optimize their AI search presence and gain competitive intelligence. The website is built on the Bubble.io platform, leveraging Cloudflare for DNS and CDN services, and integrates PostHog for analytics tracking. The design and content quality are good, with clear messaging and modern UI elements, although no explicit privacy or cookie policies are present on the main page. Security posture is solid with HTTPS enforced and domain transfer locked, but DNSSEC is not enabled, and no security.txt or incident response contacts are published. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility, suitable for a small tech startup.

O

Obec Občov

obecobcov.cz

52

Obec Občov operates an official municipal website serving the local community of Občov in the Czech Republic. The site provides comprehensive information about the municipality, including official notices, local government activities, practical information, crisis management, and contact details. It targets residents and visitors seeking authoritative local information. The business model is typical for a small government entity focused on public service and community engagement. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

H

Hodslavice

hodslavice.cz

46

The website www.hodslavice.cz serves as the official online presence of the municipality of Hodslavice in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, and community organizations. The site is well-structured with clear navigation and includes contact details prominently in the header. Technically, the site employs HTTPS, uses Google Analytics for traffic analysis, and integrates an accessibility toolbar to enhance usability for users with disabilities. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy for its intended audience but would benefit from enhanced privacy disclosures and security best practices.

O

Obec Bitozeves

bitozeves.cz

48

Obec Bitozeves operates an official municipal website serving the local community of Bitozeves and its surrounding villages in the Czech Republic. The site provides comprehensive information about local government activities, public notices, events, and contact details. It targets residents and visitors seeking municipal services and updates. The business model is that of a government information portal, focusing on transparency and community engagement. Technically, the website employs a custom CMS platform likely provided by Galileo Corporation, utilizing modern JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and PhotoSwipe for interactive and responsive design. The site is mobile optimized and features a cookie consent mechanism, indicating some level of privacy compliance. However, the absence of a dedicated privacy policy page and security headers suggests room for improvement in security and compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and a vulnerability disclosure policy. No WHOIS data is available, which reduces domain trustworthiness, though the website content and official contact information support legitimacy. There are no signs of malware, phishing, or adult content, and the site maintains a safe content rating. Overall, the website is functional, professional, and trustworthy for its intended purpose but would benefit from enhanced security practices, explicit privacy documentation, and improved WHOIS transparency to strengthen its credibility and compliance posture.

Sdružení obcí povodí Morávky is a regional municipal association located in the eastern part of the Moravian-Silesian region of the Czech Republic. The organization serves ten member municipalities and focuses on providing information about local governance, tourism, community events, and regional projects. The website acts as an information hub for residents and visitors, promoting local attractions, cycling routes, educational trails, and public notices. The association positions itself as a key regional player in community development and tourism promotion within the Silesian area. Technically, the website is built on the IPO CMS platform by Antee s.r.o., utilizing jQuery, jQuery UI, Owl Carousel, Google reCAPTCHA, and Matomo analytics. The site is mobile responsive with good navigation and content structure. HTTPS is enforced, and privacy-conscious analytics settings are used. However, some JavaScript libraries are outdated, and no explicit security headers were detected, indicating room for security improvements. From a security perspective, the site demonstrates basic best practices such as HTTPS and cookie consent but lacks a published privacy policy, security headers, and incident response contacts. The WHOIS data is unavailable, which reduces domain trustworthiness and should be investigated further. No vulnerabilities or malicious content were detected. Overall, the site is safe and trustworthy but would benefit from enhanced transparency and security hardening. The overall risk is moderate with recommendations to improve privacy compliance, update technical components, and publish security policies to strengthen trust and regulatory adherence.

M

Město Police nad Metují

policenm.cz

50

Město Police nad Metují operates an official municipal website serving the residents and visitors of Police nad Metují in the Czech Republic. The site provides comprehensive information about local government operations, social services, cultural events, tourism, public tenders, and administrative forms. It targets local citizens and tourists seeking official and practical information about the city. The business model is that of a government entity providing public services and transparency through digital channels. Technically, the website employs a mix of established JavaScript libraries including jQuery, Bootstrap, Swiper, and others, indicating a moderately modern and maintainable infrastructure. The site is mobile-optimized with a clear navigation structure and uses cookie consent mechanisms to comply with privacy regulations. However, the CMS appears custom or proprietary, and no major analytics or tracking tools are detected, reflecting a privacy-conscious approach. From a security perspective, HTTPS is enforced, and cookie consent is implemented, but no explicit security headers were detected in the provided data. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and structure strongly support its authenticity as an official municipal site. No vulnerabilities or security incidents were observed, and the site does not engage in advertising or extensive user tracking. Overall, the website presents a trustworthy and professional digital presence for the municipality, with room for improvement in security header implementation and domain registration transparency. Strategic recommendations include enhancing security headers, verifying domain registration details, and publishing explicit security and incident response policies to further strengthen trust and compliance.

M

Městský úřad Aš

muas.cz

46

The website muas.cz serves as the official municipal portal for the city of Aš in the Czech Republic. It provides residents and visitors with access to city news, public services, contact information, and various online tools such as forms and event calendars. The site is positioned as a trusted government resource with a clear focus on local governance and community engagement. The target audience primarily includes local citizens and stakeholders interested in municipal affairs. Technically, the website is built on the vismoWeb5 CMS platform, utilizing standard web technologies including HTML5, CSS3, and JavaScript. It incorporates accessibility features and mobile optimization, along with multilingual support via Google Translate. The site demonstrates moderate performance and good SEO practices, although some improvements could be made in security header implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response information, and does not implement a cookie consent mechanism despite having a cookie policy. No vulnerabilities or malicious content were detected. Overall, the security posture is solid but could benefit from enhanced transparency and technical controls. The domain registration aligns well with the municipal identity, showing consistency and legitimacy. The site links to several trusted partner domains related to local government and services. There are no signs of blocking or WAF interference, and the content is safe for general audiences. Strategic recommendations include adding security and incident response policies, implementing cookie consent, and enhancing security headers to improve compliance and trust.

T

Telraam - Smart traffic counters for all transport modes - indoor and outdoor models.

telraam.net

54

Telraam is a specialized technology company offering AI-powered, privacy-friendly traffic counting devices and data services for various transport modes including pedestrians, cyclists, cars, and heavy vehicles. The company provides both indoor and outdoor models, complemented by an intuitive dashboard and an open API for data integration. Their market position is niche, targeting citizens, municipalities, and urban planners interested in mobility data. The website employs a modern technical infrastructure with popular JavaScript libraries such as jQuery, Leaflet for mapping, Chart.js for data visualization, and Luxon/Moment for date-time handling. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No CMS or hosting provider details were identified. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No explicit privacy or cookie policies were found, indicating gaps in privacy compliance. Contact is primarily via a contact form, with no direct emails or phone numbers visible. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance security and compliance.

P

Pěšky městem, z. s.

peskymestem.cz

50

Pěšky městem is a Czech non-profit organization dedicated to making cities safer and more pleasant for pedestrians, advocating walking as the best mode of transport for short distances. The organization runs various projects focused on school safety, urban mobility, and sustainable transport, supported by educational campaigns and events. Their website reflects a professional and consistent brand image, with comprehensive content and clear calls to action for community involvement and donations. Technically, the site is built on WordPress with modern plugins and tools, including GDPR compliance and analytics integrations, hosted by a Czech hosting provider. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

D

Dutch Cycling Embassy

dutchcycling.nl

44

Dutch Cycling Embassy is a medium-sized organization established in 2011, dedicated to sharing Dutch cycling expertise and technology globally to promote cycling as a sustainable and efficient mode of transport. The website positions the organization as a leading authority in cycling infrastructure, behavior, and policy, targeting governments, urban planners, and cycling advocates worldwide. The business model focuses on knowledge dissemination, consultancy, and networking through various programs and expertises. Technically, the website is built on WordPress with modern SEO and cookie compliance plugins, featuring good mobile optimization and moderate performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though lacks published security policies and advanced security headers. Overall, the site is professional, trustworthy, and content-rich, but could improve privacy transparency and incident response readiness.

Č

České vysoké učení technické v Praze

cvut.cz

64

České vysoké učení technické v Praze (ČVUT) is a large, well-established technical university in the Czech Republic, recognized as one of the oldest and largest technical universities in Europe. The institution provides a broad range of higher education programs including bachelor, master, and doctoral studies, alongside active research and lifelong learning services. The website targets students, researchers, academic staff, and the general public interested in technical education and research. The business model is that of a public university focused on education and research services.

O

Ostravská univerzita

osu.cz

69

Ostravská univerzita is a large public university based in the Czech Republic, providing a wide range of higher education programs, research activities, and community services. The institution serves students, applicants, researchers, and alumni with comprehensive academic offerings and support services. The website reflects a well-established educational entity with consistent branding and a strong digital presence across multiple faculties and service domains. Technically, the website employs a traditional web stack with jQuery and jQuery UI libraries, along with Lightbox and FontAwesome for UI elements. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. Security measures include HTTPS enforcement and a Content Security Policy, although some additional headers could enhance security posture. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the use of an outdated jQuery version and absence of explicit terms of service are areas for improvement. The WHOIS data is unavailable, which limits domain trust assessment but the official content and certifications support legitimacy. Overall, the website is professional, trustworthy, and well-suited for its educational mission. Strategic recommendations include updating JavaScript libraries, enhancing security headers, and publishing clear terms of service to further strengthen compliance and user trust.

N

NOHO a. s.

noho.cz

66

NOHO a. s. is a Czech-based family-owned real estate developer focused on creating sustainable housing and renewable energy projects, primarily in Hradec Králové. The company positions itself as an innovator in community energy and sustainable urban development, with multiple award-winning projects such as Cihlovka 1 and 2 and the Kukleny neighborhood. Their business model integrates real estate development with community and energy solutions, targeting environmentally conscious residents and stakeholders. Technically, the website is built on Webflow with modern JavaScript libraries and analytics tools, providing a fast, mobile-optimized, and accessible user experience. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not currently detract from the website's professional presentation and trustworthiness. Overall, NOHO demonstrates a mature digital presence aligned with its business goals.

A

artEcho, s.r.o.

earch.cz

48

EARCH.cz is a Czech online magazine focused on architecture, design, and technology, operated by artEcho, s.r.o. The website offers a rich variety of content including articles, videos (EARCH.tv), job listings, and a catalog of firms and products related to the architecture industry. It maintains partnerships with several industry players, enhancing its market position as a reputable media outlet in the Czech Republic. The site targets architects, designers, and enthusiasts interested in modern architecture and related technologies. Technically, the website employs a modern technology stack including Laravel Livewire, Google Tag Manager, Google Adsense, and Plausible Analytics. The site is mobile-optimized with good SEO practices and moderate performance. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS with CSRF protection on forms, but lacks published security policies, incident response contacts, or vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security headers, explicit privacy and cookie consent mechanisms, and transparency in domain registration. Strategic improvements in these areas would strengthen its security posture and compliance with GDPR requirements.

V

Via Aurea, s.r.o.

cityone.cz

49

CityOne is a Czech Republic-based platform operated by Via Aurea, s.r.o., focused on smart city solutions, projects, and expert networking. The website serves as a marketplace and information hub for smart city initiatives, covering sectors such as energy, transportation, ICT, and public services. It targets municipalities, urban planners, technology providers, and citizens interested in smart city development. The platform offers project showcases, product listings, expert profiles, news articles, and event calendars, facilitating collaboration and knowledge sharing in the smart city ecosystem. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Google reCAPTCHA, and Google Maps API. The site is mobile-optimized with good navigation and content structure, though it appears to use a custom or proprietary CMS. Performance is moderate, and accessibility features are basic. Security best practices such as HTTPS and cookie consent mechanisms are implemented, but security headers are not detected, indicating room for improvement. From a security perspective, the site shows a good posture with encrypted connections and form protections via reCAPTCHA. However, the absence of WHOIS registrant data and lack of explicit privacy and security policies reduce overall trust. No vulnerabilities or malicious content were detected. Privacy compliance is partially addressed through cookie consent, but no dedicated privacy policy page was found. Overall, CityOne presents a professional and trustworthy platform for smart city stakeholders, but it would benefit from enhanced transparency in domain registration, explicit privacy and security policies, and improved security header implementation to strengthen its security posture and compliance.

S

Správa železnic, státní organizace

spravazeleznic.cz

60

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, contractors, and job seekers, providing comprehensive information about projects, services, and organizational structure. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the website is built on the Liferay CMS platform and utilizes modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a focus on user engagement and data-driven insights. The site is mobile-optimized and performs moderately well. From a security perspective, the site enforces HTTPS and includes privacy and cookie policies compliant with GDPR. However, no explicit security headers were detected in the provided data, and no vulnerability disclosure or security.txt files were found. The absence of WHOIS data limits domain trust verification, but the official nature and content quality suggest legitimacy. Overall, the website presents a professional and trustworthy digital front for a major government transportation entity, with room for improvement in security header implementation and domain registration transparency.

M

Městský ateliér prostorového plánování a architektury, příspěvková organizace

mappaostrava.cz

52

Městský ateliér prostorového plánování a architektury (MAPPA) is a municipal organization focused on urban planning, architecture, and sustainable development in Ostrava, Czech Republic. The website presents a professional and comprehensive overview of their projects, news, and data applications, targeting local residents, urban planners, and stakeholders. The organization emphasizes vitality, livability, and sustainability in city development. Technically, the website uses modern web technologies including embedded GIS maps, JavaScript libraries like Swiper.js, and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website content and contact information strongly indicate legitimacy. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

L

Loxper

loxper.com

58

Loxper is a Czech Republic-based digital platform offering entertaining and educational travel routes and stories about interesting places. The website is built on the Wix platform and targets general audiences interested in travel and local exploration. The business model revolves around providing a mobile application and curated content to enhance travel experiences. Technically, the site uses modern web technologies and common marketing tools such as Google Tag Manager and Facebook Pixel, hosted on Wix infrastructure. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal privacy or incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence suggests legitimate operations. Overall, the site is user-friendly and content-rich but would benefit from improved transparency and compliance documentation.

I

INPRO

i2000.cz

45

INPRO is a Czech Republic-based education and training service provider specializing in courses, seminars, and consultancy. The website presents a professional and consistent brand image focused on expanding educational opportunities beyond traditional schooling. The target audience includes individuals and organizations seeking professional development and training services. Technically, the website is built on WordPress using the Avada theme and supports multilingual content via WPML. It employs Google Analytics and Tag Manager for user tracking and includes Google reCAPTCHA for form security. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks comprehensive security headers and a visible privacy policy. The absence of WHOIS data limits domain trust assessment, but the website content and structure suggest a legitimate business. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms pages. Overall, the site is safe, well-designed, and functional, but could improve transparency and security practices.

O

OSN Česká Republika

osn.cz

59

The website osn.cz serves as the official United Nations Information Centre for the Czech Republic, providing comprehensive information about the UN's activities, priorities, and agencies. It targets a broad audience including government institutions, NGOs, schools, media, and the general public interested in UN affairs. The site is well-branded, consistent, and professionally maintained, reflecting its authoritative role as a UN representation. Technically, the site is built on WordPress with modern frameworks like UIkit and performance optimizations such as WP Rocket caching and lazy loading. It uses Cloudflare DNS and enforces HTTPS, ensuring good security fundamentals. However, explicit security headers and privacy policies are not evident, indicating room for improvement in security posture and privacy compliance. Analytics via Google Tag Manager and Google Analytics are used moderately, with basic privacy compliance. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. Overall, the site is trustworthy, safe, and professionally operated, with a mature domain consistent with its long-standing presence.

C

CIVINET Česká a Slovenská republika, z.s.

civinet.cz

45

CIVINET Česká a Slovenská republika, z.s. is a non-profit network affiliated with the European CIVITAS initiative, focused on promoting sustainable urban mobility in Czech and Slovak cities. The organization facilitates knowledge sharing, networking, educational events, and supports participation in international projects to improve local transport systems. The website reflects a professional and consistent brand presence with clear information about services and upcoming events. Technically, the site is built using modern frameworks such as Gatsby and React, with good mobile optimization and SEO practices. However, security posture could be improved by implementing security headers and verifying SSL configurations. Privacy compliance is well addressed with clear cookie consent and privacy policy pages. Overall, the site presents a trustworthy and credible resource for stakeholders in sustainable mobility.

L

Landa Ruhmkorf s.r.o.

landaruhmkorf.cz

47

Landa Ruhmkorf s.r.o. is a small Czech architectural firm specializing in landscape architecture and public space design. Founded in 2020 by Lukáš Landa and Simona Rühmkorf, the company positions itself as a conceptual and urbanism-integrated landscape architecture studio. Their website showcases project portfolios, team information, and collaborations with other architecture and design firms, indicating a professional and niche market presence. Technically, the website is built on the Cargo platform, uses modern web standards, and is mobile optimized, though it lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are compliance gaps. No forms or analytics scripts are detected, reducing privacy risks but also limiting marketing insights. Overall, the domain registration aligns well with the business information, supporting legitimacy and trustworthiness.

P

Pavel Hnilička Architects+Planners, s.r.o.

phap.cz

55

Pavel Hnilička Architects+Planners, s.r.o. is a small architectural firm based in Prague, Czech Republic, specializing in architectural design, urbanism, and planning services. The company presents a professional online presence with a portfolio of projects and clear contact information, targeting clients interested in architectural and urban planning services in the local market. The website is built on WordPress using modern technologies such as Bootstrap and jQuery, with good mobile optimization and SEO practices. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

A

Ateliér XTOPIX

xtopix.cz

44

Ateliér XTOPIX is a Czech architectural studio specializing in a wide range of projects including reconstruction of houses and brownfields for cultural purposes, new construction of schools and kindergartens, urbanism, and revitalization of central squares and public spaces in heritage zones. The website presents a professional portfolio showcasing various projects with rich visual content and clear navigation. Technically, the site is built on Joomla CMS using modern frameworks like UIkit and jQuery, with a responsive design and cookie consent mechanism implemented. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. The absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. Overall, the site is well-maintained and serves its target audience effectively.

D

David Navrátil

younick.cz

49

The website www.younick.cz represents a small-scale freelance business operated by David Navrátil, specializing in graphic design, including logo creation, print materials, and website development. The site is professionally designed using modern web technologies such as Webflow and integrates Google Analytics for visitor tracking. The business targets clients seeking personalized design and web services primarily in the Czech Republic. Contact information is clearly provided, enhancing business credibility. Technically, the site is built on a modern platform with good mobile optimization and basic SEO practices. However, the absence of security headers and privacy policies indicates room for improvement in security and compliance. The WHOIS data is unavailable, which limits the ability to verify domain registration legitimacy and age, slightly reducing trustworthiness. Security posture is moderate with HTTPS enabled but lacking advanced security headers and privacy compliance mechanisms. No critical vulnerabilities were detected in the visible content. Overall, the site is safe for general audiences and does not contain any adult or questionable content. Recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and improving WHOIS transparency to enhance trust and compliance.

S

Středisko společných činností AV ČR, v. v. i.

academia.cz

57

Nakladatelství Academia is a leading Czech academic publisher affiliated with the Czech Academy of Sciences, specializing in scientific monographs, translations, popular science literature, encyclopedias, dictionaries, language textbooks, and fiction. The website reflects a mature digital presence with a modern CMS (OpenCms), responsive design, and privacy-conscious analytics (Plausible). The content is rich, professionally curated, and targeted at academics, students, and the general public interested in science and culture. Contact information and privacy policies are clearly presented, supporting GDPR compliance. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website demonstrates a strong market position and credible business operations within the education and media sectors.

C

Center for Economic Research and Graduate Education – Economics Institute

cerge-ei.cz

64

CERGE-EI is a reputable academic institution specializing in graduate economics education and research based in Prague, Czech Republic. It offers PhD and Master's programs and is affiliated with Charles University and the Czech Academy of Sciences, positioning itself as a leading center for economic research and graduate education in the region. The website reflects a strong academic focus with extensive research publications, events, and educational resources targeting graduate students, researchers, and academics worldwide. Technically, the site is built on Joomla CMS with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for tracking. It features a cookie consent mechanism and privacy policy aligned with GDPR requirements. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious content or blocking mechanisms.

A

AUTONOVA BRNO s.r.o.

autonova.cz

48

AUTONOVA BRNO s.r.o. is an established automotive dealership and service provider based in Brno, Czech Republic, specializing in Škoda and Volkswagen vehicles as well as KTM and GasGas motorcycles. With over 50 years of experience and integration into the VIG group, the company offers a comprehensive range of services including new and used vehicle sales, servicing, financing, insurance, and vehicle inspections. The website reflects a professional and consistent brand image targeting consumers and businesses in the transportation sector within the Czech market. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high trustworthiness and business credibility, though WHOIS data is unavailable, limiting domain registration verification.

A

AUTONOVA BRNO s.r.o.

gasgasbrno.cz

46

AUTONOVA BRNO s.r.o. operates as an authorized dealer and service provider for GASGAS motorcycles in Brno, Czech Republic. The company offers a range of new motorcycles, original parts, accessories, and test rides for select models. Positioned as a specialized retailer in the transportation sector, the business targets motorcycle enthusiasts and riders seeking GASGAS products. The website reflects a professional retail model with clear contact channels and up-to-date product information. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA and Google Tag Manager, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and consent mechanisms, though additional security headers and incident response details could enhance trust. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear credible and consistent with an established small business. Overall, the site is well-structured, GDPR compliant, and provides a positive user experience with good SEO and mobile optimization.

R

REMspace Inc

remspace.net

49

REMspace Inc operates as a specialized research center focusing on REM sleep, lucid dreaming, sleep paralysis, and out-of-body experiences. The company provides educational content, free ebooks, videos, and offers a lucid dreaming mask and a mobile app to enhance user experience. Positioned as a leading entity in its niche, REMspace targets individuals interested in sleep technologies and consciousness exploration. The website is professionally designed, multilingual, and provides clear contact information including physical address and social media channels. Technically, the site is built on WordPress with WooCommerce, uses modern JavaScript libraries like Swiper.js, and integrates analytics tools such as Google Tag Manager and Yandex Metrica. Security posture is good with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Privacy compliance is adequate with policies published but lacks active cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, suitable for its audience and business goals.

A

Alive Platform

aliveplatform.com

69

Alive Platform is a technology company offering a suite of integrated business applications focused on card management, insurance, marketing, and portal services. The platform targets organizations requiring specialized management tools and provides access to multiple applications via a centralized portal. The company appears to have been established around 2010, indicating a mature presence in its niche market. Technically, the website is built with standard HTML and CSS, utilizing Google Fonts for typography. Hosting is likely on Amazon AWS infrastructure, inferred from DNS nameservers. The site is functional but basic, with minimal content on the landing page primarily serving as a navigation hub to subdomains hosting individual applications. Mobile optimization and accessibility are basic, and no advanced frameworks or CMS are detected. From a security perspective, the site uses HTTPS and has a domain status of OK, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are published, and no contact or incident response information is provided, which limits transparency and compliance with privacy regulations. No analytics or advertising scripts are detected, indicating minimal user tracking. Overall, the website is moderately trustworthy and functional but would benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and regulatory adherence.

I

International University Sports Federation

fisu.net

52

The International University Sports Federation (FISU) operates a comprehensive and professionally designed website serving as the official portal for university sports worldwide. The site provides news, event calendars, results, educational programs, and support resources targeting universities, sports federations, media, and event organizers. Recognized by the International Olympic Committee, FISU holds a strong market position as a global leader in university sports. The website demonstrates a mature digital infrastructure built on WordPress with modern technologies such as Yoast SEO, Swiper.js, Google reCAPTCHA, and Google Tag Manager, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though explicit security headers and a published security policy are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data reduces transparency but is common for such organizations. Overall, the website is trustworthy, professional, and well-maintained, supporting FISU's mission effectively.