Security Directory

G

GoOut

goout.net

76

GoOut.net is an established online platform specializing in cultural event listings and ticket sales, primarily serving the Czech Republic and surrounding regions. Founded in 2010, it offers users comprehensive information about concerts, festivals, theatre, exhibitions, and parties, positioning itself as a key player in the regional cultural media sector. The website provides inspiration and ticketing services for various cultural venues including theatres, cinemas, galleries, clubs, and museums. Technically, the site leverages modern JavaScript frameworks such as Nuxt.js, integrates reputable third-party services for analytics and advertising, and employs Cloudflare for DNS management. The presence of a detailed cookie consent mechanism powered by Cookiebot demonstrates a commitment to privacy compliance and user consent management. Security-wise, the site enforces HTTPS and domain registration protections but could improve by enabling DNSSEC and publishing explicit security policies. Overall, the website is professionally designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

P

Pražská teplárenská a.s.

ptas.cz

59

Pražská teplárenská a.s. is a leading energy company specializing in the supply of heat and hot water in Prague and its surroundings. With a tradition dating back to 1897 and a modern operational history of over 30 years, the company is a key player in the Czech heating market and is part of the Veolia group. Their services target households, developers, and existing customers, offering comprehensive heating solutions, energy audits, and infrastructure management. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to their audience. Technically, the site employs modern web technologies including Google Tag Manager and reCAPTCHA, ensuring user interaction security and analytics capabilities. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. The lack of WHOIS data limits domain registration trust verification, but the consistent branding and business information strongly support legitimacy. Overall, the site presents a trustworthy and professional corporate image with good compliance to privacy regulations.

Č

Čistý festival

cistyfestival.cz

55

Čistý festival is a well-established Czech non-profit project focused on promoting waste sorting and recycling at festivals and majáles events since 2008. It motivates hundreds of thousands of visitors annually to engage in environmentally responsible behavior, making events cleaner and more enjoyable. The project also supports emerging musical talents through its REC.stage competition, enhancing its cultural impact. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it leverages WordPress with modern frameworks like Bootstrap and Leaflet.js for interactive maps, and integrates privacy-conscious analytics and consent management. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Overall, the site demonstrates strong compliance with GDPR and privacy standards, with clear contact channels and social media engagement. The absence of WHOIS data slightly reduces domain trust but is likely due to privacy protection, which is reasonable for this type of organization.

T

Rozcestník - trideni.cz

trideni.cz

41

The website trideni.cz serves as an informational portal focused on waste sorting and recycling in the Czech Republic, providing users with regional navigation to localized waste management resources. The site targets residents interested in environmental sustainability and recycling practices. Technically, the site uses Bootstrap 3.3.6 for styling and includes Google Analytics with consent denied by default, indicating some privacy awareness. However, the site lacks modern security headers and comprehensive privacy documentation, which limits its compliance and security posture. The absence of WHOIS data raises concerns about domain registration legitimacy, although the site content itself appears safe and appropriate for general audiences. Overall, the site is functional but would benefit from enhanced security, privacy, and business transparency measures.

S

Samosebou.cz

samosebou.cz

41

Samosebou.cz is an educational website dedicated to promoting waste sorting and recycling awareness primarily in the Czech Republic. The platform offers a variety of content including articles, infographics, interactive dictionaries, and competitions aimed at educating the general public about proper recycling practices. The site targets environmentally conscious individuals and communities interested in sustainable waste management. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as Bootstrap and jQuery. It integrates analytics and user behavior tracking tools like Google Analytics and Hotjar, and implements cookie consent mechanisms to comply with privacy regulations. Security-wise, the site enforces HTTPS and shows good SSL configuration but lacks explicit security headers and publicly available security policies. The absence of WHOIS data for the domain reduces the trustworthiness score, although the website content and technical setup appear professional and legitimate. Overall, the site provides valuable environmental education content with a moderate to good security posture and privacy compliance.

J

Jak třídit – Informace ze světa třídění, recyklace a využití odpadů

jaktridit.cz

42

Jaktridit.cz is a Czech Republic-based informational and educational website dedicated to waste sorting, recycling, and environmental awareness. It serves as a comprehensive resource for the general public, providing detailed guides, interactive tools, and an e-shop for materials supporting waste sorting efforts. The website is well-established in its niche, with consistent branding and high-quality content tailored to a broad audience interested in ecological topics. Technically, the site is built on WordPress with modern web technologies such as Bootstrap, jQuery, and Lightbox2. It employs Google Tag Manager and analytics tools for tracking and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, offering a smooth user experience. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates solid fundamentals with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and does not publish a security policy or incident response information. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly impacts trustworthiness. Overall, Jaktridit.cz presents a trustworthy, professional, and user-friendly platform with strong content quality and privacy practices. Strategic improvements in security headers, transparency on incident response, and WHOIS data availability would enhance its security posture and business credibility.

E

EKO-KOM, a.s.

zodpovednafirma.cz

48

Zodpovědná firma is a Czech educational initiative focused on promoting responsible waste sorting and corporate social responsibility among companies. Organized by EKO-KOM, a.s., an authorized packaging company, it offers free educational materials, employee training, and certification to participating firms. The project has a solid market presence with over 259 companies involved, supported by recognized partners and a clear mission to improve environmental practices in workplaces. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular JavaScript libraries for enhanced user experience. It is mobile optimized and integrates multimedia content such as Vimeo videos and e-learning links. The site employs HTTPS and cookie consent mechanisms, reflecting a good level of digital maturity. From a security perspective, the site benefits from HTTPS and does not expose sensitive data. However, it lacks explicit security headers and published security policies or incident response plans, which could be improved. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies. No critical vulnerabilities or suspicious content were detected. Overall, the website represents a trustworthy, professional non-profit project with a clear environmental and educational focus. Strategic improvements in security policy transparency and technical security headers would enhance its posture further.

E

EKO-KOM, a.s.

tonda-obal.cz

40

Tonda Obal is an educational website focused on teaching children about waste sorting and recycling, supported by the Czech company EKO-KOM, a.s. The site targets children of various age groups, parents, and teachers through dedicated subdomains and offers games, coloring pages, and informative content. The business model centers on environmental education and awareness, positioning itself as a niche resource within the Czech Republic's educational and non-profit sectors. Technically, the website uses a combination of Bootstrap 3, jQuery Mobile, and Google Analytics, hosted likely by Active24. The site is mobile-optimized and performs moderately well, though it uses somewhat dated frontend frameworks. The cookie consent mechanism is implemented, reflecting some GDPR compliance efforts, but lacks a formal privacy policy and terms of service pages. From a security perspective, the site enforces HTTPS and uses cookie consent with default denial of analytics tracking. However, it lacks security headers and explicit contact information for incident response or data protection officers. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent and mature, supporting the site's legitimacy. Overall, the website is a trustworthy, child-safe educational platform with good content quality and moderate technical implementation. Improvements in privacy documentation, security headers, and contact transparency would enhance compliance and security posture.

E

EKO-KOM, a.s.

branarecyklace.cz

38

The website www.jaktridit.cz/brana-recyklace/ is a Czech non-profit platform dedicated to promoting recycling awareness through a traveling exhibition called 'Brána recyklace'. The exhibition showcases a wide range of products made from recycled materials, aiming to educate the public on the importance of waste sorting and recycling. The site is operated by EKO-KOM, a recognized organization in the Czech Republic, with production managed by ex voto spol s r.o. The content is rich, professionally presented, and targets a general audience interested in environmental sustainability. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, OwlCarousel, Slick Carousel, Lightbox, and Google Maps API. It is mobile responsive with good SEO and accessibility basics. The site uses HTTPS and implements cookie consent mechanisms, reflecting a good level of privacy compliance. However, no advanced security headers were detected, and no incident response or vulnerability disclosure information is provided. From a security perspective, the site shows a solid posture with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and contact details appear trustworthy and professional. The site integrates Google Tag Manager and Seznam tracking scripts, indicating moderate user tracking. Overall, the website is a credible, well-maintained educational resource with good technical implementation and privacy practices. The main risk lies in the lack of WHOIS transparency, which should be addressed to enhance trustworthiness. Strategic recommendations include adding security headers, publishing a vulnerability disclosure policy, and ensuring WHOIS data availability.

R

RAAB Computer s.r.o.

raabkey.cz

50

RAAB Computer s.r.o. operates the RaabKey website, providing modular access control systems primarily for residential and commercial properties in the Czech Republic. The company has a strong market position as a Czech manufacturer with over 20 years of experience and hundreds of references. Their product offerings include RFID readers, chips, code keypads, and a web-based management application, targeting both B2B and B2C customers. The website is professionally designed with clear navigation and relevant content tailored to their audience. Technically, the site uses common JavaScript libraries and frameworks, with basic mobile optimization and SEO practices in place. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but lacks explicit security policies or vulnerability disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

RAAB Computer s.r.o.

raab.cz

64

RAAB Computer s.r.o. is a regional Czech internet service provider offering stable wireless and optical internet connections, IPTV, VoIP telephony, and various IT-related services including PC sales and servicing. The company targets residential and business customers primarily in 77 towns and municipalities across Czech regions such as Holešov and Bystřice pod Hostýnem. The website presents a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the site uses a moderate technology stack with jQuery, bxSlider, and FontAwesome, and is optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and incident response information. WHOIS data is unavailable, which reduces transparency and slightly impacts trustworthiness. Overall, the website is functional, trustworthy, and business-focused with room for security and compliance improvements.

K

AdZilla: The Ad-Eating Dino of Solana

karlovarsky-kraj.cz

54

AdZilla is a small-scale cryptocurrency project centered around a Solana-based meme coin featuring a dinosaur mascot that 'eats' online ads. The website provides clear instructions for users to create a wallet, acquire Solana tokens, and swap them for the ADZILLA token via decentralized exchanges. The business model focuses on engaging both crypto and non-crypto users through creative advertising campaigns and token ecosystem participation. The site is moderately well designed with good mobile optimization and user experience, but lacks comprehensive privacy, cookie, and security policies. No contact information or formal business credentials are provided, which limits trust and credibility. Technically, the site uses standard web technologies and integrates with popular Solana wallets and exchanges, but lacks advanced security headers and HTTPS verification details.

M

město Tábor

visittabor.eu

50

The website www.visittabor.eu serves as the official tourism portal for the city of Tábor, Czech Republic. It provides comprehensive information about the city's attractions, culture, accommodation, sightseeing, gastronomy, and practical visitor details. The site targets tourists and visitors interested in exploring Tábor and the South Bohemian region. The business model is government-supported tourism promotion, positioning itself as a key regional tourism information source with official city branding and certifications such as A.T.I.C. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and tracking tools like Google Analytics and Adform. It uses the Nette Framework CMS inferred from form structures and AJAX usage. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are missing, and there is no explicit security policy or incident response information published. The use of third-party tracking scripts is transparent with user consent. Overall, the security posture is good but could be enhanced with additional headers and documented policies. The overall risk assessment is low, with the site demonstrating legitimacy through official contact information, consistent branding, and certifications. The lack of WHOIS data is due to registry privacy policies and does not detract from trustworthiness. Strategic recommendations include implementing security headers, publishing a security policy, enhancing accessibility, and adding a vulnerability disclosure mechanism to further strengthen security and compliance.

J

Jihočeská plavební společnost s.r.o.

jihoceskaplavebni.cz

46

Jihočeská plavební společnost s.r.o. is a small regional transportation company specializing in passenger boat services and sightseeing cruises on the Vltava and Lužnice rivers in South Bohemia, Czech Republic. The company offers scheduled boat rides, group bookings, and online ticket sales, targeting tourists and local residents. Their website is built on WordPress with WooCommerce and Tickera plugins, indicating a moderate level of digital maturity with e-commerce capabilities. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS and bot protection via Google reCAPTCHA, but lacks some security headers and explicit security policies. The absence of WHOIS data reduces domain transparency and trust slightly, but the presence of clear contact information, social media links, and partner logos supports legitimacy. Overall, the website is professional and trustworthy with room for security and compliance improvements.

Z

Zoo Liberec

zooliberec.cz

57

Zoo Liberec is a well-established zoological garden in the Czech Republic, founded in 2000, offering a wide range of animal exhibits, educational programs, and conservation initiatives. The website reflects a mature digital presence with multilingual support and e-commerce capabilities for ticketing and merchandise. Technically, the site is built on WordPress with modern plugins and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a clear GDPR policy and cookie management. Overall, the site is trustworthy, professional, and serves its audience effectively.

D

Dokempu.cz – Objevujte kempy v České republice i zahraničí

dokempu.cz

55

Dokempu.cz is an online guide specializing in campsites and glamping locations primarily in the Czech Republic, targeting outdoor enthusiasts and families seeking nature-based vacations. The website positions itself as the largest campsite directory in the region, offering categorized listings and user reviews to facilitate easy campsite discovery. Technically, the site is built on modern web technologies including React and Next.js, with integration of Google Analytics and Tag Manager for user tracking and marketing purposes. The site is mobile optimized and SEO friendly, providing a good user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks several security headers and formal privacy and terms of service documentation, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the site content and structure suggest a professional operation. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced compliance and security transparency.

T

Top-Pojištění.cz

top-pojisteni.cz

68

Top-Pojištění.cz is an online insurance comparison platform primarily serving consumers in the Czech Republic. The website offers services such as mandatory car insurance (povinné ručení), comprehensive car insurance (havarijní pojištění), travel insurance, and home insurance. The platform aims to provide users with a quick and clear comparison of insurance options to save time and money. Technically, the site employs modern frontend frameworks like Bootstrap and integrates multiple marketing and analytics tools including Google Tag Manager, Google Analytics, Cookiebot for consent management, and Visual Website Optimizer for A/B testing. The website is accessible, mobile-optimized, and uses HTTPS, indicating a baseline of security and professionalism. However, the absence of publicly available WHOIS data and lack of visible privacy and terms of service pages reduce the overall trust and compliance posture. Security headers are not evident, and no explicit security or incident response policies are published. Overall, the site presents a functional and professional front for its business but would benefit from enhanced transparency and security practices.

K

Karavanista.cz

karavanista.cz

56

Karavanista.cz is a specialized retailer and service provider focused on equipment and accessories for caravans and motorhomes, primarily serving customers in the Czech Republic. The company offers a comprehensive e-commerce platform alongside installation and repair services, positioning itself as a trusted niche player with over seven years of market presence. The website is professionally designed with clear navigation, detailed product categories, and active customer engagement through a blog and testimonials. Technically, the site leverages the Shoptet e-commerce platform with common web technologies such as jQuery and integrates multiple analytics and marketing tools including Google Analytics and Facebook SDK. Security posture is adequate with HTTPS enforced and CSRF protections in place, though improvements in security headers and library updates are recommended. Privacy compliance is strong, featuring GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Overall, the website presents a credible and professional business front with moderate technical maturity and a good security baseline.

B

Školní batohy, cestovní kufry, tašky přes rameno, brašny | Bagalio.cz

bagalio.cz

63

Bagalio.cz is an e-commerce retail website specializing in school backpacks, travel suitcases, shoulder bags, and briefcases, targeting primarily the Czech Republic market. The website is part of a broader network of localized partner sites serving Central and Eastern European countries. The business appears to be medium-sized, established since 2016, and positioned as a leading retailer in its niche within the Czech Republic. The site uses Magento 2 as its e-commerce platform and integrates multiple third-party extensions and analytics tools to enhance user experience and marketing capabilities. Technically, the website is well-structured with good mobile optimization and moderate performance, leveraging Cloudflare DNS and New Relic monitoring for operational insights. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy and security policies publicly available on the site. No contact information or incident response details are found, which could impact user trust and compliance. Overall, the site is professional and functional but would benefit from enhanced transparency and security documentation.

M

MegaUbytko.cz

megaubytko.cz

56

MegaUbytko.cz is an online platform specializing in accommodation listings and direct bookings primarily in the Czech Republic and Slovakia. It offers a wide variety of lodging options including cottages, pensions, apartments, hotels, and private stays, targeting travelers seeking verified and affordable accommodations. The platform supports multiple languages and provides a user-friendly interface with search and booking functionalities. Technically, the website is built on modern frameworks such as Next.js and React, leveraging cloud CDN services for performance and scalability. Analytics and marketing tools like Google Tag Manager and Snowplow are integrated for data-driven insights. Security posture is strong with HTTPS enforcement and security headers, although explicit privacy and legal policies are not clearly presented. The absence of WHOIS data limits domain trust evaluation, but the website's professional design and content suggest a legitimate business. Strategic recommendations include publishing comprehensive privacy and terms of service pages, enhancing accessibility, and providing clear contact information for security and support purposes.

Č

Český hosting

cesky-hosting.cz

78

Český hosting is a Czech Republic-based web hosting and domain registration provider targeting both beginners and professionals. The company offers web hosting services, domain registration and management, and expert consultancy in hosting. It positions itself as a reliable provider with a high customer satisfaction rating and a strong local market presence. The website is professionally designed, mobile-optimized, and uses modern marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, but security policies and incident response information are not disclosed. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not negate the legitimacy of the business based on website content and customer reviews. Overall, the site is safe, professional, and well-positioned in the Czech hosting market.

T

THINline s.r.o.

websynergy.cz

66

WebSynergy, operated by THINline s.r.o., is a Czech-based technology service provider specializing in custom web design, e-commerce solutions, and digital marketing. With over 20 years of experience and more than 500 projects completed, the company targets businesses seeking modern, responsive websites and effective online marketing strategies. Their offerings include proprietary CMS technology, hosting services, and comprehensive website management. The website reflects a professional and trustworthy business with clear contact information and client testimonials, positioning them as a reputable player in the Czech web services market. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Google Analytics, reCAPTCHA v3, and Visual Website Optimizer for marketing and analytics purposes. The site is hosted on a Czech hosting provider and uses a proprietary CMS platform. Performance and mobile optimization are excellent, with good SEO and accessibility features. However, some security headers are missing, and no explicit security policy or incident response information is published. Security posture is solid with HTTPS enforced and secure form handling via reCAPTCHA, but improvements are recommended in HTTP security headers and transparency around security policies. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Overall, WebSynergy demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

M

Mailchimp

mailchi.mp

80

Mailchimp is a leading marketing automation and email marketing platform, serving primarily small to medium businesses and marketers. Owned by Intuit Inc., it offers a SaaS-based subscription and freemium business model with a strong market position as a top email marketing solution. The platform leverages AI and real-time behavioral data to enhance customer conversion and engagement. The website reflects a mature digital infrastructure with integrations of advanced analytics and marketing tools, demonstrating high digital maturity and performance. Security posture is strong with HTTPS enforcement, security headers, and certifications such as SOC 2 Type II and ISO 27001, although minor improvements like enabling DNSSEC and publishing a security.txt file could enhance security transparency. Overall, the website is professional, privacy compliant, and trustworthy, supporting Mailchimp's reputation as a reliable enterprise-grade service.

L

Latinotype

latinotype.com

54

Latinotype is a Chile-based type foundry established in 2010, specializing in font design, licensing, and custom typography services. It holds a strong market position with a portfolio of over 5,000 fonts used globally in advertising, branding, and digital design. The website demonstrates a mature digital presence with professional design, clear navigation, and multimedia content showcasing their products and clients. Technically, the site is built on WordPress with modern plugins and includes privacy-conscious analytics (Matomo) and spam protection (Google reCAPTCHA). Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a concern and should be investigated to confirm domain legitimacy. Overall, the site is professional and trustworthy, serving a specialized audience of designers and branding professionals.

T

Tino Digital Agency

tino.design

67

Tino Digital Agency is a professional UI/UX design and web/mobile development agency primarily serving clients in the USA market, with a focus on fintech, healthcare, energy, and crypto sectors. The company offers comprehensive services including research and strategy, UX/UI design, and full-cycle development. Their portfolio includes notable clients and projects, supported by multiple industry awards and high client satisfaction ratings. Technically, the website is built on modern frameworks such as Next.js and React, hosted by Hosting Ukraine LLC, and optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the business demonstrates strong credibility and professionalism, though privacy compliance and security transparency could be enhanced.

C

Candid

guidestar.org

60

Candid operates GuideStar, a leading nonprofit data platform providing comprehensive information on over 1.8 million IRS-recognized tax-exempt organizations. The platform serves donors, grantmakers, nonprofits, and businesses by offering nonprofit profiles, Seal of Transparency, research tools, and API access. The website is professionally designed, mobile-optimized, and integrates advanced analytics and marketing technologies such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Visual Website Optimizer. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies are not publicly disclosed. WHOIS data is unavailable due to privacy or query failure, but the domain and website content align with a legitimate, established nonprofit entity. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

W

WhitePress sp. z o.o.

whitepress.com

64

WhitePress sp. z o.o. operates an international content marketing platform that automates the creation, publishing, and analysis of content for marketers, publishers, and copywriters. The platform supports SEO and link building across thousands of portals worldwide and offers native copywriting services to ensure content quality. The website is professionally designed, supports multiple languages, and maintains active social media channels, positioning WhitePress as a reputable player in the digital marketing technology sector. Technically, the website uses modern JavaScript, Google Tag Manager, and Google Analytics for tracking and performance monitoring. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some accessibility features could be improved, and explicit cookie consent mechanisms are not detected. From a security perspective, the site enforces HTTPS and shows no visible vulnerabilities or exposed sensitive data. Security headers are not explicitly detected in the provided data, and no incident response or security policy information is published. The WHOIS data is unavailable, which limits domain registration transparency but does not detract from the site's professional appearance and trust signals. Overall, WhitePress presents a low-risk profile with a solid business model and technical foundation. Strategic improvements in security headers, privacy compliance transparency, and accessibility would enhance its security posture and user trust.

B

BR Numismatika v.o.s.

brnumismatika.cz

62

BR Numismatika v.o.s. operates a specialized e-commerce platform focused on numismatics and phaleristics, offering coins, medals, banknotes, orders, decorations, and antiques. The company targets collectors and investors interested in these collectibles, providing services such as authenticity assessment, expert consultation, coin cleaning, and certification mediation. The website is professionally designed with clear navigation and good content quality, supporting both Czech and English languages to reach a broader audience. Technically, the site is built on the Prestashop platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cloudfront CDN, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and cookie consent mechanisms to enhance privacy compliance. WHOIS data is not publicly available, likely due to privacy protection, which is common for small retail businesses. Overall, the website presents a trustworthy and professional front for its niche market.

R

RAYNET s.r.o.

raynet.cz

70

RAYNET s.r.o. operates a leading Czech CRM software platform, RAYNET CRM, designed to help sales professionals and managers streamline business processes and improve customer relationship management. Founded in 2004, the company has established a strong market presence with over 21,000 active users and a high customer satisfaction rating. Their SaaS business model focuses on delivering cloud-based CRM solutions with mobile support and extensive integrations. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business users primarily in the Czech Republic.

M

Mutiara Pearl, s.r.o.

buka.cz

51

Buka Jewelry, operated by Mutiara Pearl, s.r.o., is a specialized retailer of authentic pearl jewelry based in the Czech Republic. The company emphasizes handcrafted pearl jewelry sourced directly from trusted suppliers in Japan, China, Indonesia, and French Polynesia, ensuring quality and authenticity. Their business model combines an e-commerce platform with a physical store in Prague, targeting consumers seeking elegant and certified pearl products. The website is professionally designed, multilingual, and offers a seamless shopping experience with clear product categorization and customer service support. Technically, the website leverages modern e-commerce technologies including the Upgates platform, Google Analytics 4, Google Tag Manager, Facebook Pixel, and Smartsupp Live Chat, indicating a mature digital infrastructure. The site is optimized for performance and mobile responsiveness, with good SEO and accessibility practices. Security is well-handled with HTTPS and consent management for cookies, although explicit security headers and incident response disclosures are lacking. From a security perspective, the site shows a good posture with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. No dedicated security policy or vulnerability disclosure mechanisms are publicly available, which could be improved to enhance trust. Overall, Buka Jewelry presents a trustworthy and professional online presence for a niche luxury retail business. Strategic improvements in domain registration transparency and security disclosures would further strengthen their security posture and business credibility.

Správa a údržba silnic Jihomoravského kraje is a regional government organization responsible for the maintenance and management of roads in the Jihomoravský region of the Czech Republic. The website provides comprehensive information about their services including summer and winter road maintenance, public tenders, and contact details. The organization is well-established with a domain registered since 2001, reflecting a stable presence in the transportation sector. The site targets local residents, businesses, and public institutions requiring road maintenance services or information. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery. It integrates Google services including Fonts, Analytics, and reCAPTCHA for security and user experience enhancements. The site is mobile optimized and includes accessibility features, although some improvements could be made. Performance is moderate with good SEO practices in place. From a security perspective, the site uses HTTPS with a valid SSL configuration and employs Google reCAPTCHA v2 Invisible on its contact form to prevent spam. However, no explicit security headers were detected, and there is no visible security or incident response policy published on the site. The cookie consent mechanism complies with GDPR requirements, providing an opt-out approach. Overall, the website is professional, trustworthy, and serves its public service function effectively. Recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security posture and user trust.

M

MAS Slavkovské bojiště, z.s.

slavkovskebojiste.cz

53

MAS Slavkovské bojiště, z.s. is a local action group operating as a non-profit organization focused on regional development in the Slavkovské bojiště area of the Czech Republic. The organization facilitates partnerships among municipalities, entrepreneurs, associations, and citizens to promote community projects and manage grants. The website serves as an official information portal providing updates on projects, funding opportunities, and organizational documents. The presence of logos from government and EU entities, as well as membership in national MAS associations, supports its legitimacy and regional influence. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap 5, Swiper.js, and Photoswipe, indicating a contemporary and responsive design. The site is mobile optimized and accessible, with a cookie consent mechanism implemented to comply with privacy regulations. However, explicit privacy and terms of service pages are not found, and no security.txt or incident response information is published. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible HTTP security headers and detailed privacy policies, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the website content and external affiliations suggest a trustworthy entity. Overall, MAS Slavkovské bojiště presents a professional and credible online presence for a regional non-profit organization, with recommendations to enhance privacy disclosures, security headers, and domain registration transparency to strengthen trust and compliance.

D

Dobrovolný svazek obcí Šlapanicko

dsoslapanicko.cz

55

Dobrovolný svazek obcí Šlapanicko is a voluntary association of 27 municipalities in the Czech Republic focused on regional cooperation and public infrastructure projects, particularly cycling path development and waste management. The organization operates as a non-profit entity serving local communities with transparent contact information and EU co-financed projects, positioning itself as a trusted regional government partner. The website is built on the Vismo CMS platform, utilizing modern JavaScript libraries including Vue.js and Mustache.js, and integrates Google services such as reCAPTCHA v3 and Translate for enhanced user experience and security. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and spam protection on forms, though formal security policies and incident response contacts are absent. Privacy compliance is basic with cookie policy present but lacking explicit consent mechanisms. Overall, the domain registration is consistent with the business age and purpose, indicating a legitimate and trustworthy online presence.

M

Město Šlapanice

slapanice.cz

50

Město Šlapanice operates an official municipal website providing comprehensive information and services to residents and visitors of the town located in the Czech Republic. The site offers news updates, event calendars, contact details, and access to various municipal services, positioning itself as a key communication channel for local governance. The website is well-structured, professionally designed, and targets a general audience including citizens and local stakeholders. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Maps API, ensuring responsive design and interactive features. The presence of cookie consent mechanisms and a privacy policy indicates attention to GDPR compliance and user privacy. Security posture is adequate with HTTPS enforced and anonymized analytics, though the absence of certain security headers suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the official nature and content quality support legitimacy. Overall, the website demonstrates a mature digital presence suitable for a municipal government entity.

R

Raab Computer s.r.o.

affc-jmk.cz

59

The website www.affc-jmk.cz represents the Audit Family Friendly Community initiative focused on supporting municipalities in the Jihomoravský kraj region of the Czech Republic. The platform provides audit services aimed at improving family life conditions through systematic analysis and implementation of selected measures. The site is professionally designed, with clear navigation and relevant content primarily in Czech, targeting local government bodies and communities. Social media presence on Facebook, Twitter, and YouTube supports outreach and engagement. Technically, the website uses common web technologies such as jQuery, FontAwesome, Fancybox, Remodal, and BxSlider for UI components and interactivity. The site is mobile optimized with good SEO practices but lacks visible advanced security headers and analytics tools. Cookie consent is implemented, indicating attention to privacy compliance, though no explicit terms of service or incident response policies are present. From a security perspective, the site is accessible without WAF or blocking mechanisms detected. However, the absence of WHOIS data for the domain reduces transparency and trust slightly. No critical vulnerabilities or exposed sensitive data were found, but security headers and SSL configuration details are not visible in the provided data. Privacy policies and cookie usage are clearly stated, supporting GDPR compliance. Overall, the website presents a trustworthy and professional front for a regional government/non-profit audit initiative. The main risks relate to limited domain registration transparency and lack of explicit security policies. Strategic improvements in security headers, incident response information, and WHOIS transparency would enhance trust and compliance.

V

VODÁRENSKÁ AKCIOVÁ SPOLEČNOST, a.s.

vodarenska.cz

55

VODÁRENSKÁ AKCIOVÁ SPOLEČNOST, a.s. is a well-established Czech water utility company founded in 1998, providing comprehensive water supply and sewage services across multiple regional divisions. The company maintains a professional and content-rich website offering customer portals, emergency notifications, and detailed service information targeted at residential customers, municipalities, and business clients. The website is built on WordPress with modern plugins and integrates Google Maps and social media for enhanced user engagement. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the domain registration data aligns with the company's claims, supporting legitimacy and trustworthiness.

E

ENVIPARTNER, s.r.o.

portalobce.cz

44

The website www.portalobce.cz serves as a comprehensive digital platform for municipal services in the Czech Republic, offering a suite of modules including flood management, GIS mapping, strategic planning, and citizen engagement tools. The business is positioned as an important player in the government sector, targeting both public administration and citizens with specialized digital solutions. The platform integrates multiple applications and services, some developed locally, enhancing municipal governance and public safety. Technically, the website employs a modern frontend stack with Bootstrap, jQuery, Font Awesome, and integrates third-party analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, the absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data is unavailable, which raises concerns about domain transparency and trustworthiness. No direct contact information or incident response channels are provided, limiting user trust and security communication. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

H

Hasičský záchranný sbor Jihomoravského kraje

krizport.cz

47

The website www.krizport.cz serves as the official crisis management portal for the South Moravian Region in the Czech Republic, operated by the regional Fire Rescue Service. It provides timely and reliable information on emergency preparedness, current crisis situations, and public safety advice targeted at both the general public and professionals. The portal includes public and restricted sections, emphasizing its role as a trusted government resource. Technically, the site is built on Drupal 10 CMS, leveraging modern web technologies including Google Analytics for visitor tracking and the Foundation framework for responsive design. The site is well-structured, mobile-optimized, and accessible, with clear navigation and consistent branding. Cookie consent mechanisms are implemented, reflecting compliance with privacy regulations. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced security headers and does not publish explicit security or incident response policies. The absence of WHOIS data for the domain is a notable gap, potentially impacting trust, though the official nature of the content mitigates concerns. No vulnerabilities or suspicious content were detected. Overall, the portal demonstrates a solid digital presence with good content quality and security posture suitable for a government information service. Strategic improvements include enhancing security headers, publishing security policies, and clarifying domain registration details to strengthen trust and compliance.

G

Girsberger Mountain Rescue Technology

girsberger-elektronik.ch

62

Girsberger Mountain Rescue Technology is a specialized Swiss company focused on providing innovative mountain rescue and avalanche safety solutions. Their offerings include training systems and products designed to enhance safety in alpine environments. The company targets professionals and organizations involved in mountain rescue and alpine safety, positioning itself as a niche technology provider in this sector. The website is built on the Wix platform, leveraging modern JavaScript technologies and error monitoring tools, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though there is room for improvement in security headers and privacy compliance. Overall, the website is professional and trustworthy but lacks critical compliance documents such as privacy and cookie policies.

A

AirWork & Heliseilerei GmbH

air-work.com

43

AirWork & Heliseilerei GmbH is a Swiss-based company specializing in engineering, equipment, and services for the helicopter industry. Established in 1999, the company offers a range of solutions including load lifting devices, maintenance, expert training, and documentation tailored to helicopter operations. Their market position is that of a specialized niche provider with recognized certifications such as EASA Part 21 G and ISO 9001:2015, supporting their credibility in the aerospace sector. Technically, the website employs modern frontend technologies like Swiper.js for interactive sliders and Google Fonts for typography, likely running on a CMS such as OctoberCMS or a custom PHP framework. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Hosting and domain registration are consistent with the business profile, with DNS hosted on webland.ch and domain registered through COREhub, S.R.L. From a security perspective, the site uses HTTPS but lacks important security headers and does not implement DNSSEC, which are areas for improvement. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be a risk factor. The absence of tracking and analytics scripts suggests minimal user tracking, which is positive for privacy. Overall, the website is professional and trustworthy with strong business credibility but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing incident response contacts.

Arc'teryx Equipment is a leading global brand specializing in high-performance outdoor clothing, technical outerwear, and accessories, targeting outdoor enthusiasts and professionals in climbing, skiing, and alpine sports. The website demonstrates a strong market position with a premium brand image and comprehensive multi-regional support, reflecting a mature e-commerce and retail business model. Technically, the site leverages modern frameworks such as Next.js and React, integrates advanced search capabilities via Algolia, and employs industry-standard analytics and consent management tools like Adobe Launch and OneTrust. The site is well optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. Security posture is robust with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and secure digital presence aligned with the brand's reputation.

A

ARVA

arva-equipment.com

53

ARVA is a European company specializing in avalanche safety equipment, including avalanche airbags, transceivers, and backpacks, with over 40 years of expertise. The company targets mountain sports enthusiasts and professionals, offering both products and services such as maintenance, rental, and cartridge refills. Their website reflects a mature digital presence built on Prestashop and React technologies, integrating multiple marketing and analytics tools to engage users and track performance. Security posture is solid with HTTPS and secure AJAX calls, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, but the website content and branding strongly indicate a reputable business. Overall, the site is professional, content-rich, and user-friendly, but could enhance trust by publishing privacy and terms policies and improving transparency around data protection.

P

Pigeon Mountain Industries, Inc.

pmirope.com

72

PMI Rope, operated by Pigeon Mountain Industries, Inc., is a well-established manufacturer and retailer specializing in life safety ropes, gear, and equipment for vertical applications such as rescue, climbing, and rope access. With over 40 years of industry experience, the company serves a specialized audience including rescuers, climbers, and technicians. Their business model combines product manufacturing with e-commerce sales and training services, positioning them as a niche leader in safety and rescue equipment. The website reflects a professional and consistent brand image with comprehensive product offerings and educational resources. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern JavaScript libraries and marketing tools. It is hosted behind Cloudflare DNS and CDN services, ensuring good performance and availability. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies or consent mechanisms, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

B

Bell Textron Inc.

bellflight.com

67

Bell Textron Inc. is a leading manufacturer of vertical lift aircraft, including commercial and military rotorcraft. The company has a rich history spanning approximately 90 years and operates as a subsidiary of Textron Inc. Their website showcases a comprehensive portfolio of products and services, including innovative rotorcraft technologies, training, maintenance, and support. The site targets aviation professionals, military clients, and commercial customers globally. Technically, the website employs modern JavaScript frameworks, multimedia content, and integrates with marketing and analytics platforms such as Google Tag Manager and HubSpot. The hosting infrastructure leverages Akamai CDN and service workers for performance optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and corporate affiliations. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen security transparency.

B

Breeze-Eastern, LLC

breeze-eastern.com

49

Breeze-Eastern, LLC is a specialized aerospace manufacturing company focused on designing and producing helicopter rescue hoists, winches, cargo hooks, and weapons handling systems for both military and civilian operators. The company holds a unique market position as the world's only dedicated helicopter hoist and winch provider and is recognized as the largest cargo hook OEM globally. Their offerings include comprehensive OEM training and customer support, emphasizing operational safety and efficiency. The website reflects a medium-sized enterprise with a professional and consistent brand presence, targeting aerospace operators worldwide. Technically, the website is built on a modern WordPress CMS platform with popular plugins such as WPBakery Page Builder and Popup Maker. It uses HTTPS with good SSL configuration and integrates multimedia content including YouTube videos. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses AJAX with nonce tokens for form validation, indicating attention to secure data handling. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate and professional. Overall, Breeze-Eastern's website presents a credible and professional digital presence aligned with its aerospace manufacturing business. Strategic improvements in security policy transparency, WHOIS data availability, and enhanced accessibility would further strengthen its security posture and trustworthiness.

CMC PRO is a specialized company focused on manufacturing and distributing professional rescue equipment and providing rescue training courses. Their product portfolio includes rescue harnesses, ropes, pulleys, and hardware tailored for firefighters, search and rescue teams, and other rescue professionals. The company positions itself as a trusted provider in the rescue and safety industry with a medium-sized operational scale and a history dating back to at least 2012. Technically, the website is built on WordPress and leverages modern web technologies including Gravity Forms for data collection, HubSpot for marketing automation, and Microsoft Clarity for user behavior analytics. The site is mobile-optimized with good SEO practices and uses HTTPS with strong security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, implementing security headers, and avoiding exposure of sensitive data. However, there is no publicly available security policy or incident response information, which could be improved to enhance transparency and trust. The absence of WHOIS domain registration data is a concern and warrants verification to confirm domain legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The risk profile is moderate due to the WHOIS data gap and limited published security policies. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to strengthen security posture and business credibility.

H

Harken Safety & Rescue

harkenindustrial.com

64

Harken Safety & Rescue is a specialized division of Harken, Inc., focusing on manufacturing and distributing industrial safety and rescue equipment designed for rope access, fall protection, arborist work, commercial marine, and material handling sectors. The company leverages over 50 years of experience in sailing equipment technology to produce durable, lightweight, and efficient products that enhance safety and operational efficiency. Their market position is strong within niche industrial safety markets, supported by a portfolio of subsidiary brands and comprehensive product support resources. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Iubenda for cookie consent management. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and rich content. Privacy compliance is robust with GDPR-aligned policies and explicit cookie consent mechanisms. Security posture is solid with HTTPS enforced, use of reCAPTCHA on forms, and anonymized analytics tracking. However, the absence of WHOIS transparency and lack of explicit security policies or incident response contacts are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Harken Safety & Rescue, though enhancing WHOIS transparency and publishing security incident response information would further strengthen trust and compliance.

I

Immoos GmbH | Bergungs- und Sicherheitssysteme

immoos.ch

52

Immoos GmbH is a Swiss-based company specializing in evacuation and safety solutions, particularly in rescue technology for cable cars and industrial installations. Established in 1997, the company has a strong international presence, serving customers in around 60 countries. Their product portfolio includes personal protective equipment, fall protection systems, and specialized rescue devices. The website reflects a professional and well-structured digital presence, supporting multiple languages and e-commerce capabilities. Technically, the site is built on WordPress with modern libraries like Bootstrap and jQuery, and it employs SEO best practices through Rank Math. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in headers and incident response transparency. Overall, the site is trustworthy and aligns well with the company's business claims.

K

KONG spa

kong.it

50

KONG spa is a well-established Italian manufacturer specializing in personal protective equipment (PPE) such as carabiners, helmets, harnesses, and safety gear for outdoor activities, professional rescue, and work at height. With a history dating back to 1830, the company holds a strong market position supported by exclusive distribution partnerships and a comprehensive product catalog. The website reflects a mature digital presence with modern technologies, good mobile optimization, and clear navigation. Security posture is solid with HTTPS, form validation, and consent management, though some security headers could be enhanced. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, KONG spa demonstrates high business credibility and professionalism.

Mammut is a well-established Swiss outdoor brand specializing in high-quality outdoor clothing, footwear, and equipment for activities such as hiking, climbing, skiing, and trail running. The website serves as an official e-commerce platform targeting outdoor enthusiasts and athletes, offering a broad product range and curated collections. The brand emphasizes Swiss design heritage dating back to 1862, positioning itself as a premium player in the outdoor retail market. Technically, the website is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. It integrates consent management via Usercentrics and uses Google Tag Manager for analytics, reflecting a mature digital infrastructure. The site is well-structured with comprehensive metadata, structured data, and SEO best practices. From a security perspective, the site enforces HTTPS, implements multiple security headers, and manages user consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration details is notable and should be monitored, though it does not currently detract from the site's legitimacy. Overall, Mammut's website demonstrates a strong security posture, excellent user experience, and compliance with privacy regulations. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party library updates to sustain security and compliance.