Security Directory

M

Magistrát města Olomouce

olomouc.eu

64

The website www.olomouc.eu serves as the official information portal for the statutory city of Olomouc in the Czech Republic. It provides residents and visitors with news, updates, and public information related to city governance and events. The site is clearly positioned as a government entity, with branding and content consistent with an official municipal portal. The target audience includes local citizens, tourists, and stakeholders interested in city affairs. Technically, the website employs a custom CMS named CMSOl, built with PHP, SQL, and VanillaJS, supplemented by older versions of jQuery and jQuery UI. It integrates modern tools such as Google Tag Manager and CookieHub for analytics and cookie consent management. The site uses FontAwesome 6 Pro for iconography and includes scripts for calendar event handling. While the technology stack is functional, the use of outdated jQuery versions suggests potential security risks and modernization opportunities. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, indicating awareness of privacy compliance. However, no explicit privacy policy or terms of service pages were detected in the provided content, and security headers were not identified. The absence of a security.txt file or vulnerability disclosure information limits transparency in incident response. The WHOIS data for the domain is unavailable, which restricts full legitimacy verification, but the website's official nature and consistent branding mitigate concerns. Overall, the website presents a professional and trustworthy front for the city government, with good content quality and user experience. Strategic improvements in security headers, updated libraries, and explicit privacy documentation would enhance its security posture and compliance standing.

S

SocGeoStudio, s.r.o.

socgeo.cz

58

SocGeoStudio, s.r.o. is a Czech-based social-geographical consultancy specializing in supporting municipalities, institutions, and businesses with strategic planning and sustainable regional development. Their services include sociogeographical analysis, participatory processes, traffic data collection, and support for affordable rental housing projects. The company positions itself as an interdisciplinary expert team collaborating with urbanists, architects, and transport specialists, leveraging modern technologies and partnerships with universities and NGOs. The website is professionally designed, hosted on Webflow, and employs modern web technologies including Google Analytics and reCAPTCHA with privacy-conscious configurations such as IP anonymization. However, the absence of WHOIS data limits domain legitimacy verification, and the site lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and trust. Security posture is generally good with HTTPS and reCAPTCHA, but missing security headers and incident response information are areas for improvement. Overall, the website presents a credible and professional business presence with moderate risk due to incomplete compliance and domain registration transparency.

N

Nadace Partnerství

nadacepartnerstvi.cz

65

Nadace Partnerství is the largest Czech ecological foundation, established in 1991, supporting communities and organizations across the Czech Republic through grants, education, and expert advice focused on nature and sustainable development. The website is professionally designed, well-structured, and provides comprehensive information about their services, campaigns, and projects. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates Google Tag Manager and Analytics, and employs reCAPTCHA for form security. The security posture is good with HTTPS and consent-based cookie management, though some security headers could be improved. WHOIS data is missing, which slightly reduces trust but the website content and external references strongly support legitimacy. Overall, the site is a trustworthy, well-maintained digital presence for a reputable non-profit ecological organization.

Národní síť Zdravých měst ČR operates as a non-profit association dedicated to improving quality of life, health, and sustainable development in Czech municipalities and regions. The organization offers membership services, educational programs, events, and a data platform to support strategic urban management and public participation. With over 147 members and more than 30 years of history, it holds a strong position in the Czech public sector and is certified by the UN-WHO Healthy Cities program. Technically, the website is built on a custom CMS (ActionApps TOOLKIT) and uses modern JavaScript libraries such as jQuery, Popper.js, and Tippy.js. The site is HTTPS secured and loads analytics scripts asynchronously, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are good, though accessibility features could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No WHOIS data is available, which reduces domain trustworthiness, though the website content and social media presence strongly suggest legitimacy. There are no detected vulnerabilities or exposed sensitive data. Overall, the website is professional and content-rich, serving a clear public interest mission. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and security posture.

R

RENTEL a.s.

rentel.cz

57

RENTEL a.s. is a Czech-based company specializing in interactive e-learning courses and smart applications designed to develop employees and manage corporate education. Established in 1999, the company has a strong market presence with a proprietary educational portal launched in 2004. Their offerings include multilingual and multimedia courses, webinars, and blended learning solutions, targeting organizations such as firms, government offices, and hospitals. The website demonstrates a mature digital infrastructure built on WordPress with the Divi theme, integrating multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance their stance. Overall, the site is professional, well-branded, and compliant with GDPR, reflecting a trustworthy and credible business.

C

Centrum.cz: Fandíme dobrému obsahu

centrum.cz

57

Centrum.cz is a prominent Czech internet portal providing a variety of services including email, news, weather updates, horoscopes, and lottery information. It aggregates content from reputable Czech media sources such as Aktuálně.cz and Maxa.cz, positioning itself as a major player in the Czech online media landscape. The portal targets a general audience with a focus on delivering timely and relevant content in the Czech language. Technically, the website leverages modern web technologies including React and Next.js frameworks, supported by multiple third-party analytics and advertising platforms. The site demonstrates good mobile optimization and SEO practices, although accessibility features appear basic. Security posture is solid with HTTPS enforced and use of privacy and consent management SDKs, but lacks visible comprehensive privacy and cookie policies, which impacts privacy compliance scoring. The absence of WHOIS data limits domain registration trust assessment, but the website's branding and content quality suggest legitimacy. Overall, Centrum.cz is a well-established media portal with a mature digital presence but could improve transparency around privacy and security policies.

G

GlobeWeb Czech s. r. o.

webczech.cz

47

GlobeWeb Czech s. r. o. operates the Webczech.cz website, providing a comprehensive e-commerce platform tailored primarily for Czech and Slovak markets. Their business model centers on subscription-based e-shop solutions with additional services such as domain registration, web hosting, email, and technical support. The company positions itself as a leading e-shop provider in the Czech Republic, supported by positive customer testimonials and independent user ratings. Technically, the website employs a traditional web stack including jQuery, Bootstrap, Google Analytics, and Facebook Pixel, with good mobile optimization and moderate performance. While HTTPS is enforced, the absence of security headers and use of an outdated jQuery version present potential security risks. Privacy compliance is partially addressed with a privacy policy and GDPR readiness, but lacks a cookie consent mechanism. Security posture is moderate with secure forms and no visible vulnerabilities, but improvements are recommended in security headers and updated libraries. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced security practices and improved privacy compliance to strengthen its risk profile.

A

ASP Group s.r.o.

tgbmotor.cz

58

ASP Group s.r.o. operates as the official importer and distributor of TGB utility four-wheelers in the Czech and Slovak Republics. The company offers a range of high-quality utility ATVs, supported by warranty services and accessories. Their market position is solidified by exclusive distribution rights and a focus on premium product offerings. The website is professionally designed, targeting consumers and businesses interested in utility vehicles within the region. Technically, the website employs a moderately modern stack including Bootstrap and jQuery, with integration of Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience, although some technical debt is evident with the use of an outdated jQuery version and missing security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of security headers and vulnerability disclosure policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the presence of clear contact information and social media presence supports legitimacy. Overall, the website presents a trustworthy and professional front for the business, with moderate technical and security maturity. Strategic improvements in security headers, updated libraries, and domain registration transparency would enhance the security posture and trustworthiness further.

D

DriveSpace CZ

drivespace.cz

50

DriveSpace CZ is a small technology company based in Cheb, Czech Republic, specializing in creating elegant and modern websites, e-shops, and providing online marketing services including SEO and PPC. They also offer web hosting and 24/7 technical support, positioning themselves as a regional expert in web solutions. The company demonstrates a professional online presence with clear contact information and active social media engagement. Technically, the website uses modern web technologies such as jQuery, Google Fonts, and analytics tools including Google Analytics and Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and consistent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

Q

Qwentès Italia Srl

qwentes.it

57

Qwentès Italia Srl is a small, specialized digital consultancy and software development studio based in Milan, Italy, founded in 2002. The company focuses on delivering strategic consulting and digital transformation services, helping businesses innovate through design, coding, and technology solutions including mobile apps, UX/UI, APIs, and both front-end and back-end development. Their market position is that of a trusted, experienced boutique studio serving companies seeking digital innovation. Technically, the website is built with modern web standards, uses HTTPS with DNSSEC enabled for domain security, and integrates Google Analytics for user insights. The site is mobile optimized and well-structured, though no CMS or advanced frameworks are detected. Security posture is solid with HTTPS and DNSSEC but lacks visible HTTP security headers and published security policies. Privacy compliance is strong, leveraging iubenda for privacy and cookie policies with GDPR compliance. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and safe for general audiences.

D-EDGE is a technology and marketing company focused on providing solutions to the hospitality industry, specifically targeting hoteliers. Their offerings include central reservation systems, booking engines, channel management, big data analytics, hotel website design, and digital marketing services. The company serves a large client base of approximately 17,000 hoteliers, positioning itself as an established player in the hotel technology market. The website content is minimal but clearly communicates the business purpose and directs users to the main corporate site for more information. Technically, the website employs Microsoft Application Insights for telemetry and monitoring, indicating some level of digital maturity in tracking performance and usage. The site is mobile responsive with basic design quality and SEO optimization. However, there is a lack of advanced security headers and no visible cookie consent mechanisms, which suggests room for improvement in security and privacy compliance. From a security perspective, the site is accessible without WAF or blocking mechanisms detected. The absence of WHOIS data due to unsupported TLD or privacy protection limits transparency but does not inherently indicate malicious intent. No contact information or security policies are provided, which could hinder incident response and user trust. Overall, the security posture is moderate but could be enhanced by implementing standard security headers, visible privacy controls, and contact channels for security incidents. The overall risk assessment indicates a legitimate business with a moderate security and privacy posture. Strategic recommendations include improving transparency by publishing contact and security policies, enhancing security headers and SSL configurations, and implementing cookie consent mechanisms to align with GDPR and other privacy regulations.

Q

Quicktext

quicktext.im

57

Quicktext is a specialized AI and big data solutions provider focused on the hospitality industry, offering advanced tools such as AI virtual assistants, structured hotel data analytics, and SEO optimization to boost direct bookings and operational productivity. The company holds a strong market position with global recognition, multiple industry awards, and a high client recommendation rate. Technically, the website demonstrates a mature digital infrastructure with modern analytics, responsive design, and good SEO practices. Security posture is robust, evidenced by ISO 27001 certification, HTTPS enforcement, and security headers, although incident response and vulnerability disclosure policies could be more explicit. Overall, Quicktext presents a trustworthy and professional online presence with comprehensive business and contact information.

F

Foursquare

foursquare.com

71

Foursquare is a mature, enterprise-level technology company specializing in geospatial technology and location intelligence. Founded in 2002, it offers a comprehensive platform that serves marketers, spatial analysts, and developers with products ranging from attribution and audience targeting to developer APIs and geospatial analytics. The company holds a strong market position as an industry leader with a well-established brand and a suite of advanced location-based services. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure, and optimized for performance and mobile use. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the website reflects a professional, trustworthy, and technically mature digital presence.

A

Asociace hotelů a restaurací České republiky z.s.

ahrcr.cz

48

Asociace hotelů a restaurací České republiky z.s. (AHR ČR) is a Czech national association representing hotel and restaurant operators. The organization advocates for industry interests, monitors legislation, provides member information and consultation, offers exclusive training, and facilitates networking opportunities. The website is professionally designed, primarily in Czech, targeting hospitality professionals. Technically, the site uses a custom CMS (Artoo), integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs HTTPS with a cookie consent mechanism indicating GDPR compliance. However, the absence of WHOIS data and security headers slightly reduces trust from a security perspective. Overall, the site is functional, informative, and trustworthy for its intended audience.

H

Hotel Atlantis

hotel-atlantis.cz

73

Hotel Atlantis is a medium-sized hospitality business located near Brno, Czech Republic, offering modern accommodation, wellness facilities, congress and event hosting, and gastronomy services. The website presents a professional and comprehensive digital presence with clear navigation, booking capabilities, and multilingual support. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and a third-party booking engine, ensuring a functional and user-friendly experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though the absence of WHOIS data and security policy pages slightly reduce trust. Overall, the site is well-structured and compliant with GDPR, targeting tourists and business travelers seeking comfort and wellness near Brno.

T

TrustYou GmbH

trustyou.com

70

TrustYou GmbH operates as a leading hospitality AI platform headquartered in Germany, offering advanced AI-driven solutions such as Customer Experience Platform (CXP), Customer Data Platform (CDP), and AI Agents to enhance guest experiences and optimize bookings. The company positions itself as a market leader in hospitality technology, serving global hospitality brands since 2008. Their digital presence is professional, leveraging modern web technologies and compliance tools to ensure a seamless user experience. The website is well-structured, mobile-optimized, and integrates essential analytics and marketing tools, reflecting a mature technical infrastructure. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although explicit security policies and vulnerability disclosure channels are not publicly available. The absence of WHOIS domain registration data is a notable gap, warranting further verification. Overall, TrustYou presents a credible and professional business with a solid digital footprint and good security hygiene.

W

Websupport.sk

websupport.eu

67

Websupport.sk is a leading Slovak technology company specializing in domain registration, web hosting, cloud servers, and website building services. With a strong market position and over 20 years of experience, it serves a broad audience ranging from individual bloggers to enterprises. The company operates multiple regional sister sites, indicating a mature and expansive business model. Technically, the website is built on WordPress with modern frameworks and integrates advanced consent management and analytics tools, reflecting a high level of digital maturity. Security posture is strong with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

W

Websupport.cz

websupport.cz

68

Websupport.cz is a well-established technology company specializing in domain registration, web hosting, and website building services primarily targeting Central European customers. As part of the team.blue group, it leverages a broad regional presence with subsidiaries in Hungary, Slovakia, and Sweden. The company offers a comprehensive portfolio including WordPress hosting, business email, SSL certificates, and server solutions, positioning itself as a market leader with nearly 20 years of experience and over 210,000 satisfied customers. The website reflects a mature digital infrastructure with modern technologies, strong branding, and excellent user experience.

R

renault

renault.cz

69

Renault Česká republika operates as the official local website for Renault in the Czech Republic, offering a comprehensive range of new, used, and commercial vehicles. The site targets consumers interested in Renault's automotive products, including electric and hybrid models. The business is positioned as a major automotive brand with a strong market presence supported by the global Renault Group. The website provides detailed vehicle information, configuration options, and promotional content tailored to the Czech market. Technically, the website employs a modern React framework with optimized images and responsive design, ensuring excellent mobile usability and good SEO practices. Integration with Google Analytics and Tag Manager indicates a mature digital marketing and analytics setup. Cookie consent is managed via OneTrust, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security policies or incident response contacts. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and official branding strongly indicate legitimacy. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security header implementation. The overall risk is low, with recommendations to enhance security headers, publish security policies, and provide clear contact information for security incidents to further strengthen trust and compliance.

K

Kling Bohemia

klingwash.cz

43

Kling Bohemia operates a modern contactless car wash service with locations in Prostějov and Šternberk, Czech Republic. The business offers seven distinct washing programs including active foam washing, underbody cleaning, waxing, and polishing. Their model includes a customer card system for prepaid credits, targeting vehicle owners seeking quality and affordable car wash solutions. The website is professionally designed with clear navigation and relevant content, supporting a positive user experience. Technically, the site employs common JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism indicating GDPR compliance awareness. However, no WHOIS data was retrievable, limiting domain trust verification. Security posture is moderate with room for improvement in HTTP security headers and incident response transparency. Overall, the site is functional, secure, and compliant for a small local business.

A

Autoservis Brno

autodily-servis.cz

49

Autoservis Brno is a local automotive service provider based in Brno, Czech Republic, offering a wide range of services including car repairs, tire services, vehicle inspection preparation, towing, and sale of auto parts. The company emphasizes comprehensive vehicle care with 18 years of experience, targeting vehicle owners in the Brno region. The website is professionally designed with clear navigation and detailed service descriptions, supporting a positive user experience. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics for tracking. It is mobile optimized and performs moderately well. However, there is no evidence of a CMS or advanced hosting details. Security practices include HTTPS usage and cookie consent mechanisms, but lack explicit security headers and detailed security policies. The security posture is moderate with no critical vulnerabilities detected, but the absence of WHOIS data and security policy information reduces overall trust. Privacy compliance is basic with GDPR-related policies present. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but would benefit from improved security headers, verified WHOIS data, and enhanced transparency on security and incident response to strengthen trust and compliance.

A

AVIMA BRNO s.r.o.

avima.cz

44

AVIMA BRNO s.r.o. is a small regional company based in Brno, Czech Republic, specializing in the retail and wholesale of automotive spare parts for commercial vehicles such as AVIA, IVECO, DAF, MERCEDES, and RENAULT. Their product range includes batteries, filters, brakes, oils, and various automotive accessories, supported by an e-commerce platform for customer convenience. The company targets automotive service providers and vehicle owners seeking reliable parts in the region. Technically, the website employs modern front-end technologies including jQuery, Bootstrap, and Swiper.js, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and provides a clear navigation structure, contributing to a positive user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and documented incident response policies, indicating room for improvement in security posture. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small business profile. Overall, the site is functional, professional, and safe for general audiences.

A

Autoskla Stavarič s.r.o.

autoskla-stavaric.cz

40

Autoskla Stavarič s.r.o. is a small, established Czech company specializing in automotive glass services including repairs, replacements, tinting, and coding, serving primarily the Prostějov and Litovel regions. The website reflects a professional local business with clear service offerings and physical locations. Technically, the site uses common web technologies such as jQuery, Noty.js, and Google Analytics, but some components like jQuery are outdated, posing potential security risks. The site is accessible without WAF or blocking mechanisms and includes a cookie consent banner, though lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS implied but no visible security headers or advanced protections. WHOIS data is unavailable, which limits domain legitimacy verification and reduces trust. Overall, the site is functional and trustworthy for its business purpose but would benefit from improved security and compliance documentation.

S

SEOMAX.cz

seomax.cz

50

SEOMAX.cz is a Czech-based small technology service provider specializing in custom web development, e-shop creation, SEO optimization, and internet marketing services. The company targets businesses and individuals seeking modern, responsive websites and effective online marketing solutions. Their market position is supported by a portfolio of over 200 web projects and a client base exceeding 180 customers, indicating a stable presence in the local market. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and responsive design principles, ensuring good user experience across devices. However, no CMS or backend platform was explicitly detected. Security posture is moderate with HTTPS usage implied but lacking visible security headers and explicit security policies. Cookie consent is implemented, supporting GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the professional website content and active social media presence support business credibility. Overall, the site is well-structured, user-friendly, and business-focused.

D

Direct Pojišťovna

direct.cz

73

Direct Pojišťovna is a Czech Republic-based insurance company offering a variety of insurance products including auto, property, pet, travel, and business insurance. The company positions itself as a fast, online, and customer-friendly insurer with a strong market presence, serving over 500,000 clients. Their business model focuses on direct online sales and customer self-service via a mobile app and web platform. The website is professionally designed, mobile-optimized, and provides clear navigation and trust signals such as customer testimonials and transparent policies. Technically, the site uses modern frameworks like Next.js and React, integrates consent management, and employs Google Tag Manager for analytics. Security posture is strong with HTTPS and security headers, but lacks explicit published security policies or incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the overall business credibility remains high based on website content and external references.

S

Slavia pojišťovna a.s.

slavia-pojistovna.cz

57

Slavia pojišťovna a.s. is a well-established Czech insurance company with a long tradition, offering a broad range of insurance products including auto, health, travel, home, and business insurance. The company targets both families and entrepreneurs, providing online and offline services supported by a network of physical branches across the Czech Republic. The website reflects a mature digital presence with multilingual support and mobile applications for Android and iOS, enhancing customer accessibility and engagement. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite for marketing and analytics. It employs service workers for progressive web app capabilities and uses SVGs and responsive design for optimal performance and mobile experience. SEO and accessibility are well addressed with structured data and clear navigation. From a security perspective, the site enforces HTTPS and uses consent-based tracking mechanisms. While explicit security headers are not fully confirmed, the site shows good security hygiene with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable gap, reducing transparency about domain registration, but the overall business legitimacy is supported by consistent branding, detailed contact information, and regulatory compliance indications. Overall, Slavia pojišťovna presents a professional and trustworthy online presence suitable for its industry. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and compliance.

H

Hasičská vzájemná pojišťovna

hvp.cz

45

Hasičská vzájemná pojišťovna (HVP) is a Czech insurance company offering a range of insurance products including personal, citizen, business, vehicle, and organizational insurance. The website is professionally designed using TYPO3 CMS and targets individuals and organizations within the Czech Republic. It provides clear navigation and relevant content about its insurance services, supported by a cookie consent mechanism and a comprehensive privacy policy compliant with GDPR requirements. The technical infrastructure includes modern web technologies such as Google Tag Manager and EasyCookie.io for analytics and cookie management. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and detailed security or incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and presentation support legitimacy. Overall, the site is functional, secure, and compliant, but could improve transparency and contact availability.

A

AXA Partners CEE

axa-assistance.cz

64

AXA Partners CEE operates a professional insurance assistance website focused on travel, auto assistance, and health insurance services primarily targeting customers in the Czech Republic and Europe. The company leverages a modern digital infrastructure including ASP.NET WebForms and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. The website demonstrates good content quality, clear navigation, and consistent branding aligned with the AXA Group. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The absence of WHOIS data reduces domain transparency and trust slightly but is offset by the professional presentation and clear contact information. Overall, the site is a reliable digital presence for AXA's insurance assistance services.

Servisní pojišťovna a.s. is a Czech insurance company that has recently transferred its entire insurance portfolio to Hasičská vzájemná pojišťovna, a.s. The website serves primarily as an official notification platform to inform clients about this transfer, providing detailed contact information and instructions for claims and policy management. The business operates in the finance sector with a focus on insurance services, targeting existing clients undergoing the transition. Technically, the website is a simple, static HTML page with basic CSS styling, lacking advanced frameworks or CMS platforms. It is moderately optimized for mobile and accessibility but lacks modern SEO and security features. Security posture is minimal, with no visible HTTPS enforcement or security headers, and no incident response or vulnerability disclosure information is provided. Overall, the site is functional for its purpose but would benefit from enhanced security and privacy compliance measures.

A

Allianz pojišťovna

allianz.cz

68

Allianz pojišťovna is a major insurance provider in the Czech Republic, offering a range of insurance products including auto, property, life, and travel insurance. It operates as part of the global Allianz Group, which serves millions of clients worldwide. The website reflects a professional and well-established business with a clear focus on customer insurance needs in the Czech market. The digital infrastructure is built on Adobe Experience Manager, integrating advanced marketing and analytics tools such as Adobe DTM, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing strategy. The site is GDPR compliant with a robust cookie consent mechanism implemented via OneTrust, ensuring privacy adherence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given the brand recognition and professional presentation. Overall, the site is trustworthy, well-structured, and suitable for its target audience.

The website www.csob.cz appears to represent a financial institution, likely a bank given the domain and sector indication. However, the website content is inaccessible due to a security mechanism such as a Web Application Firewall (WAF) or anti-bot challenge, which prevents full content analysis. The WHOIS data is unavailable, indicating privacy protection or domain registration restrictions. This limits the ability to verify registrant details and domain age. The technical infrastructure shows presence of obfuscated JavaScript likely used for bot mitigation. Security posture is basic with no visible security headers or HTTPS validation in the provided data. Privacy and cookie policies are not detectable, and no contact or business information is exposed in the accessible content. Overall, the site appears legitimate but cannot be fully assessed due to access restrictions.

G

Generali Česká pojišťovna

generaliceska.cz

48

Generali Česká pojišťovna is a leading insurance company in the Czech Republic, offering a broad range of insurance products including life, health, property, vehicle, and travel insurance. The company positions itself as a trusted partner for individuals and families, emphasizing safety and peace of mind. The website reflects a mature digital presence with modern technologies such as React and Redux, integrated with marketing and analytics tools like Google Tag Manager and Visual Website Optimizer. Privacy compliance is well addressed with comprehensive policies and consent mechanisms, aligning with GDPR requirements. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

Č

Česká podnikatelská pojišťovna, a.s., Vienna Insurance Group

cpp.cz

64

Česká podnikatelská pojišťovna, a.s., part of the Vienna Insurance Group, is a well-established insurance provider in the Czech Republic with a 30-year history. The company offers a broad range of insurance products including vehicle, life, property, travel, and business insurance, serving over 1.3 million clients and managing more than 2.4 million insurance contracts. The website reflects a professional and modern digital presence with comprehensive product information and client services accessible online. Technically, the website is built on modern frameworks such as Next.js and React, leveraging advanced analytics and tracking tools like Google Analytics and Microsoft Clarity. It is optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain registration transparency, but the strong brand presence, consistent business information, and affiliation with a reputable parent company mitigate trust concerns. Privacy and cookie policies are clearly presented with consent mechanisms, indicating good compliance with GDPR requirements. Overall, the website demonstrates a mature digital infrastructure and a strong security posture suitable for a major financial services provider. Strategic improvements could include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust further.

E

Eshop Vinařství Langr

vinolangr.cz

56

Eshop Vinařství Langr is a family-owned winery established in 1995, specializing in the production and online sale of quality wines sourced primarily from the Dolní Věstonice region in the Czech Republic. The website serves as an e-commerce platform offering a variety of white, red, rosé, and sparkling wines, targeting wine enthusiasts and consumers seeking local, artisanal products. The business model focuses on direct-to-consumer sales with an emphasis on quality and regional authenticity. Technically, the website is built on the Shoptet e-commerce platform, utilizing jQuery and Facebook SDK for marketing integrations. The site is mobile-optimized with good SEO practices and includes standard privacy and cookie consent mechanisms. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and business information appear professional and legitimate. Overall, the site presents a mature, well-structured e-commerce presence for a small family winery, with good privacy compliance and moderate security posture. Strategic improvements in domain transparency, security headers, and incident response information would enhance trust and resilience.

S

Stodola Agency

stodola.agency

61

Stodola Agency is a small marketing support and content production company based in Slovakia, serving B2B and SME clients internationally. Their services include graphic design, copywriting, social media posting, photo and video production, presentations, and website creation and management. The company emphasizes reliability, quality, quick delivery, and clear communication without retainers. Technically, the website is built on WordPress using Elementor and jQuery, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and good SSL configuration, but lacks security headers and formal privacy or cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy, though privacy compliance and security practices could be improved.

Hamburger Hafen und Logistik AG (HHLA) is a leading European logistics and transportation company specializing in the development and operation of logistical and digital hubs for future transport flows. The company operates multiple seaport terminals across Europe and a dense intermodal transport network, positioning itself as a key player in sustainable and innovative logistics solutions. The website targets customers, investors, media, and career seekers, providing comprehensive information about services, corporate governance, sustainability, and career opportunities. Technically, the site is built on TYPO3 CMS, integrates privacy-respecting Matomo analytics, and uses modern web technologies such as Bootstrap and Splide.js for UI components. The security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and explicit cookie consent mechanisms. Overall, the website reflects a mature digital presence aligned with the company's large enterprise status and strong market position.

K

kreyo s.r.o.

kreyo.cz

59

kreyo s.r.o. is a Czech creative studio specializing in branding, web design, consulting, analysis, and custom application development. Established in 2017, the company targets business clients seeking comprehensive presentation and digital growth solutions. Their market position is that of a small, professional, and experienced local service provider with a consistent brand presence and positive client testimonials. The website is built on WordPress using Oxygen Builder and incorporates modern technologies such as Lottie animations and Swift Performance AI optimizations, resulting in good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, though some security headers and explicit policies are missing. Overall, the site is trustworthy and professionally maintained, with room for improvement in security documentation and direct contact information availability.

G

GALANDR COMMUNICATION s.r.o.

galandr.com

56

GALANDR COMMUNICATION s.r.o. is a Czech-based digital marketing agency specializing in comprehensive online marketing services for websites and e-commerce platforms. Positioned among the top 5% of Google’s highest performing agencies and recognized as a Meta Business Partner and Heureka Partner, the company offers services including PPC advertising, SEO optimization, email marketing, social media marketing, web analytics, and e-shop/web development. Their target audience primarily consists of online businesses and e-commerce operators seeking to enhance their digital presence and conversion rates. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Cookiebot for tracking and compliance. The site demonstrates excellent design quality, mobile optimization, and fast performance, with a clear navigation structure and professional content presentation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers like Content-Security-Policy are not evident. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, despite strong business indicators on the site. Overall, GALANDR.COM presents a professional and trustworthy digital marketing agency with solid technical infrastructure and compliance awareness. The main risk lies in the incomplete WHOIS data, which should be monitored. Strategic recommendations include enhancing security headers, publishing a terms of service page, and adding a security.txt file to improve transparency and incident response readiness.

České dráhy, a.s. operates as the national railway company of the Czech Republic, providing comprehensive passenger rail services including ticket sales, travel planning, and specialized train offerings such as EuroCity and Railjet. The website www.cd.cz serves as a primary digital platform for customers to access schedules, purchase tickets, and obtain travel information. The site is professionally designed with clear navigation and mobile optimization, targeting general travelers within the Czech Republic and neighboring regions. From a technical perspective, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and interactive UI components such as autocomplete and carousels. The site is served over HTTPS with secure login forms and cookie consent mechanisms, indicating a mature digital infrastructure. However, some security headers are not explicitly detected, and no public security policy or incident response contact is published. Security posture is generally strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies, and GDPR compliance is indicated. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the official branding and contact information. Overall, the website presents a trustworthy and functional digital presence for a major transportation provider, with recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen trust and compliance.

The website kkkk.cz is a parked domain with no active business content or services. It primarily serves as a placeholder with advertising and domain sale links. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, with external iframes loading content from third-party domains associated with domain parking and advertising. There is no evidence of HTTPS enforcement or security headers, which weakens the security posture. Privacy and cookie policies are absent, indicating poor compliance with data protection regulations. The domain registration is recent (2022) and consistent with a parking service, with no registrant details disclosed. Overall, the site lacks business credibility and trust indicators.

D

Create a new item

dpaste.com

47

dpaste.com is a specialized online pastebin service primarily targeting programmers and developers who need to share and store code snippets with syntax highlighting and markup preview. The service offers a clean, minimalistic interface with support for a wide range of programming languages and an API for automated paste creation. The website is small in scale but has been operational since 2006, indicating a stable presence in its niche market. It leverages third-party advertising through EthicalAds and provides user support via a Freshworks widget. Technical infrastructure includes modern JavaScript libraries such as jQuery and htmx, and fonts from Google Fonts, hosted on static.dpaste.com and other external domains.

J

Jan Krejčí, Xcreative

xcreative.cz

46

Xcreative s. r. o., led by Jan Krejčí, is a Czech-based small business specializing in professional web design, development of internet and intranet applications, and graphic work. Established since 2003, the company boasts over 1,000 satisfied customers and offers services including web design, e-commerce solutions, content management systems, and custom functionality development. The website presents a premium look and feel, emphasizing mobile responsiveness and modern design elements. Technically, the site is built on WordPress with popular plugins such as Slider Revolution and WP Rocket, ensuring good performance and user experience. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy verification. Overall, the business appears credible and professional, but domain registration details should be confirmed for full trust assurance.

S

Simopt, s.r.o.

bezpecnecesty.cz

74

Bezpečné cesty.cz is a Czech Republic-based educational portal operated by Simopt, s.r.o., focused on traffic safety, driver education, and related interactive tools such as an alcohol calculator. The website serves a broad audience including drivers, parents, educators, and children, providing comprehensive multimedia content, interactive tests, and practical guidance to improve road safety awareness. It holds a strong market position as a leading Czech portal dedicated to traffic safety education. Technically, the website employs modern web technologies including Google Analytics, reCAPTCHA, and Font Awesome, hosted likely behind Cloudflare infrastructure. The site is mobile-optimized, well-structured, and performs moderately well, with good SEO and accessibility features. Privacy compliance is robust with explicit cookie consent mechanisms and a comprehensive privacy policy. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks explicit security headers and an incident response contact, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional, trustworthy, and user-friendly platform for traffic safety education. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Strategic improvements in security headers and incident response transparency would strengthen the security posture and trustworthiness.

A

ALBI Česká republika a.s.

skolashrou.cz

60

Škola s hrou is an educational initiative operated under ALBI Česká republika a.s., providing didactic tools, games, and educational resources targeted at schools and educators in the Czech Republic. The website offers program registration, workshops, and a B2B shop with discounted educational products. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not evident and WHOIS data is missing, which slightly reduces trust. Overall, the site is professional, content-rich, and trustworthy for its educational audience.

M

Ministerstvo zdravotnictví

mzcr.cz

65

The website https://mzd.gov.cz/ is the official online presence of the Ministry of Health of the Czech Republic, serving as a comprehensive portal for public health information, healthcare legislation, and government services. It targets the general public, healthcare professionals, and government officials, providing up-to-date news, policy documents, and resources related to health and safety. The site is well-branded with consistent government identity and includes official social media channels for outreach. Technically, the site is built on WordPress 6.8.2 with modern libraries such as jQuery and Bootstrap, ensuring responsive design and accessibility. It integrates Google Analytics and Tag Manager for user tracking and performance monitoring, alongside a Google Custom Search Engine for internal content search. The site uses HTTPS with strong SSL configuration, though it lacks some recommended security headers, presenting an opportunity for enhanced security hardening. From a security and compliance perspective, the site includes a cookie consent banner and a privacy policy page, indicating GDPR compliance efforts. However, there is no visible security.txt or incident response contact information, and WHOIS data is unavailable, which limits full domain legitimacy verification. Despite this, the .gov.cz domain and official content strongly support the site's authenticity. Overall, the site is professionally maintained with good content quality and user experience. Security posture is solid but could be improved with additional headers and formal vulnerability disclosure mechanisms. The absence of WHOIS data is a minor concern but likely due to registry policies rather than malicious intent. Strategic recommendations include enhancing security headers, publishing incident response details, and adding a security.txt file to improve transparency and trust.

C

CyberSoft, s.r.o.

cybersoft.cz

52

CyberSoft, s.r.o. is a Czech-based software company specializing in the development and implementation of economic information systems, primarily ERP and WMS solutions tailored for medium to large enterprises, especially in wholesale and IT sectors. Their flagship product, ERP I6, is designed for distribution and wholesale companies and supports multi-language and multi-country legislative environments. The company has been operational since 2000, demonstrating a stable market presence with a solid client base and references. Technically, the website employs modern front-end frameworks such as Bootstrap and integrates Google services for analytics and security, including Google Tag Manager and reCAPTCHA. The infrastructure is based on Microsoft technologies, with SQL Server as the backend database, supporting both desktop and web thin clients. Security-wise, the website enforces HTTPS and uses reCAPTCHA on its contact form, but lacks visible security headers and published privacy or cookie policies, which are compliance gaps. Overall, the site is professional, well-structured, and trustworthy, but could improve its privacy compliance and security posture.

Asociace Záchranný kruh is a Czech non-profit association focused on safety education, prevention, and preparation in areas of common risks and emergencies. Established since 2005, it serves children, youth, parents, and educators by developing educational projects, materials, and safety tools. The website reflects a well-structured platform with a clear mission and a broad network of partners including governmental and non-profit organizations. Technically, the site uses a CMS platform (MultiCMS), modern JavaScript libraries, and integrates Google Analytics and Adsense with proper cookie consent mechanisms. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response contacts. WHOIS data is unavailable, which reduces domain trust from a registration perspective but the website content and partner ecosystem support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR, serving as a valuable resource for safety education in the Czech Republic.

T

Toyota Česko

toyota.cz

68

Toyota Central Europe - Czech s.r.o. operates as the official Toyota branch in the Czech Republic, providing a comprehensive range of Toyota vehicles, accessories, and customer support services. The company holds a strong market position as a leading automotive brand in the region, targeting consumers seeking reliable and innovative transportation solutions. The website reflects a professional corporate presence with consistent branding and clear communication of business offerings. Technically, the website leverages Adobe Experience Manager as its CMS platform, integrating advanced analytics tools such as Google Analytics, Datadog RUM, and Adobe Launch for performance monitoring and user behavior insights. The infrastructure includes modern JavaScript libraries and content delivery networks, ensuring moderate to good performance and mobile optimization. Accessibility features are present but could be enhanced. From a security perspective, the site employs HTTPS with good SSL configuration and uses cookie consent mechanisms to comply with privacy regulations. However, explicit security headers are not clearly visible in the HTML content, and no dedicated security or incident response policies are published. The absence of WHOIS data is noted but likely due to registry restrictions rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing clear privacy and security policies, and maintaining regular audits of third-party scripts to mitigate potential vulnerabilities.

P

Platforma VIZE 0, z. ú.

platformavize0.cz

59

Platforma VIZE 0 is a Czech non-profit organization dedicated to improving road safety and reducing fatalities and serious injuries on Czech roads. The platform unites partners with a clear vision of zero road deaths and actively engages in education, advocacy, and innovative projects such as Vyprošťovák®, Virtuální dopravní zóna, and Nehoda nanečisto. Their target audience includes drivers, cyclists, motorcyclists, and the general public in the Czech Republic. The website reflects a professional and consistent brand image with clear communication of their mission and projects. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Google Analytics with privacy-conscious configurations. The site is mobile-optimized, SEO-friendly, and provides a cookie consent mechanism aligned with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS and secure form handling, with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is reasonable for a non-profit entity, though it limits domain trust verification. Overall, the site demonstrates a good security posture but could improve transparency by publishing security policies and incident response contacts. The overall risk assessment is low, with recommendations focusing on enhancing security headers, incident response readiness, and accessibility. The platform maintains a trustworthy and professional online presence suitable for its mission and audience.

K

Koop

koop.cz

66

Koop is a Czech Republic-based company specializing in energy consultancy and sustainable energy solutions. The company targets businesses and organizations seeking to improve energy efficiency and implement sustainable energy projects. The website presents a professional image with clear contact information and comprehensive privacy and cookie policies, indicating a commitment to compliance and user privacy. Technically, the site is built using modern frameworks such as Next.js and Tailwind CSS, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a published security policy and vulnerability disclosure reduces transparency. The lack of WHOIS data is a concern for domain legitimacy but does not detract significantly from the overall trust in the business based on website content. Strategic recommendations include publishing a security policy, adding vulnerability disclosure mechanisms, and enhancing accessibility features to improve compliance and user experience.