Security Directory

M

Městská knihovna v Praze

mlp.cz

55

Městská knihovna v Praze operates as a major public library serving the city of Prague, offering a wide range of cultural and educational services including lending books, music, films, and artworks, as well as hosting cultural events and providing free e-book downloads. The website is professionally designed, multilingual, and provides user account functionality. Technically, the site uses established JavaScript libraries and APIs, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks some advanced security headers and uses an outdated jQuery version. WHOIS data is unavailable, which slightly impacts trust but the official city affiliation and professional presentation support legitimacy. Overall, the site is a reliable public service portal with room for security and technical improvements.

P

Prague City Tourism

prague.eu

69

Prague City Tourism operates an official and comprehensive tourism website for the city of Prague, providing extensive information on cultural sites, events, accommodation, and visitor services. The website targets tourists and visitors, offering e-commerce capabilities for tickets and city passes. Technically, the site is built on WordPress with WooCommerce and uses modern SEO and accessibility practices, including Google Tag Manager and Cookiebot for consent management. Security posture is strong with HTTPS and security headers, though privacy and terms policies are not explicitly found. Overall, the site is professional, trustworthy, and well-optimized for user experience and search engines.

B

Botanická zahrada hlavního města Prahy

botanicka.cz

61

Botanická zahrada hlavního města Prahy operates as a public botanical garden located in Prague, Czech Republic. It offers a wide range of services including public garden access, educational programs for schools and groups, seasonal exhibitions, an e-shop, and event hosting. The garden is positioned as a leading botanical institution in Prague, focusing on plant conservation, biodiversity, and public education. The website is professionally designed with clear navigation and rich content, targeting a general audience including families, students, and visitors interested in nature and botany. Technically, the site uses modern web technologies such as Alpine.js and integrates multiple analytics and marketing tools including Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a cookie consent banner and privacy policy present. Contact information is clearly provided, enhancing business credibility. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and official contact details support its legitimacy.

P

Prague Zoo

zoopraha.cz

57

Prague Zoo operates as a prominent zoological garden in the Czech Republic, offering visitor services, educational programs, and active animal conservation efforts. The website serves as an official English-language portal providing comprehensive information about the zoo, including visitor guidance, animal exhibits, and multimedia content. The organization targets tourists, educators, conservation supporters, and the general public, positioning itself as a leading non-profit institution in the hospitality and conservation sectors. Technically, the website is built on Joomla CMS with a moderate performance profile. It integrates modern JavaScript libraries such as MooTools and accessibility tools including screen reader support and text-to-speech functionalities. The site employs HTTPS with Google reCAPTCHA for form security and Google Tag Manager for analytics and marketing. While the site is accessible and well-structured, it lacks some security headers that could enhance its security posture. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent mechanisms, and anti-bot protections. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, Prague Zoo's website is professional, user-friendly, and secure, though the missing WHOIS information slightly diminishes domain trust. Strategic recommendations include improving security headers, verifying domain registration details, and maintaining up-to-date CMS and plugin versions to mitigate potential vulnerabilities.

M

Městská policie hl. m. Prahy

mppraha.cz

46

The website mppraha.cz is the official online presence of the Municipal Police of Prague, providing comprehensive information about their organizational structure, police units, public services, news, recruitment, and contact details. It serves residents and visitors of Prague with authoritative content related to public safety and law enforcement. The site is well-branded, consistent, and maintained with regular updates and official communications. Technically, it is built on Joomla CMS with modern web technologies including Leaflet for maps and integrates social media and analytics tools. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The domain is longstanding and consistent with the official entity, enhancing trustworthiness. Overall, the site is professional, secure, and compliant with privacy regulations.

D

Dopravní podnik hl. m. Prahy, akciová společnost

dpp.cz

62

Dopravní podnik hl. m. Prahy, akciová společnost (DPP) is the primary public transportation operator in Prague, Czech Republic, managing metro, tram, and bus services. The website serves as a comprehensive portal for passengers, providing schedules, ticketing information, service updates, and customer support. The company maintains a strong market position as the main public transit provider in the city, targeting daily commuters and visitors. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and analytics tools, with good mobile optimization and accessibility. The presence of structured data enhances SEO and content discoverability. Security measures include HTTPS enforcement and CSRF tokens on forms, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, reflecting GDPR adherence. However, the absence of a security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and user-friendly, though the lack of WHOIS data reduces domain trustworthiness. Strategic improvements in security headers and transparency around incident response would enhance the security and compliance profile.

M

mawis

mawis.eu

68

MAWIS is a specialized service provider focused on delivering digital solutions for municipal and governmental infrastructure management in the Czech Republic. Their offerings include cadastral data services, urban planning tools, and public infrastructure management, targeting government agencies and municipalities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress, utilizing common plugins such as WooCommerce, Rank Math SEO, and Complianz GDPR for compliance and e-commerce functionality. The site employs modern web technologies including Google Tag Manager and Google Fonts, ensuring a moderate performance and good mobile optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations. However, explicit security policies and incident response information are absent, and security headers are not evident, suggesting room for improvement in security hardening. Overall, the website presents a trustworthy and compliant digital presence with moderate technical sophistication. Strategic enhancements in security policies and technical security controls would further strengthen its posture.

T

Technická správa komunikací hlavního města Prahy, a.s.

tsk-praha.cz

56

Technická správa komunikací hlavního města Prahy, a.s. (TSK Praha) is a large public company responsible for managing and maintaining the transportation infrastructure of Prague, including roads, bridges, tunnels, greenery, cycling paths, and parking facilities. The company operates under the ownership of the City of Prague and aims to improve the quality of life in the city through efficient infrastructure management and development. Their website reflects a professional and comprehensive digital presence with detailed information about their activities, projects, and public services. The technical infrastructure of the website is built on WordPress with modern plugins such as Yoast SEO, WPForms, and Instagram Feed integration. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security measures include HTTPS enforcement, security headers, Google reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the website lacks explicit incident response contact information and a vulnerability disclosure policy, which are recommended for enhanced security transparency. Privacy compliance is robust, with clear privacy and cookie policies and user consent mechanisms. Overall, TSK Praha presents a trustworthy and professional online presence consistent with its role as a public infrastructure manager. Strategic recommendations include publishing incident response contacts, establishing a vulnerability disclosure program, and enhancing security policy disclosures to further strengthen trust and security posture.

H

Hlavní město Praha (implied by branding and domain)

portalprazana.cz

66

Portál Pražana is the official digital public service portal for the City of Prague, providing residents with online access to a wide range of municipal services including document issuance, social care, transport registrations, and payment of local fees. The platform is designed to facilitate convenient and efficient interactions with city administration, reducing the need for physical visits to offices. The website is well-branded with official Prague city logos and uses a Czech language interface targeting local citizens. Technically, the site employs modern web technologies including Polymer framework and ES modules, hosted behind Cloudflare for DNS and CDN services, ensuring good security and performance. The site is mobile optimized and includes privacy-conscious analytics via Plausible. Security headers and HTTPS are properly configured, reflecting a mature security posture. While privacy and cookie policies are clearly presented with consent mechanisms, the site lacks explicit terms of service, security policy, and vulnerability disclosure pages. No direct contact information such as emails or phone numbers are visible, which is typical for government portals relying on authenticated user portals for communication. Overall, the website demonstrates a strong digital maturity and security posture appropriate for a government service portal, with recommendations to enhance transparency around incident response and vulnerability disclosures to further build trust.

P

Prettysocial Media

prettysocialmedia.nl

52

Prettysocial Media is a Netherlands-based advertising agency specializing in placing branded content on Facebook and Instagram through a network of over 350 influential publishers. Their business model leverages the authority of publishers to enhance campaign effectiveness, targeting brands and companies seeking social media advertising solutions. The website reflects a professional and consistent brand image with clear contact information and case studies showcasing their work. Technically, the site is built on WordPress using modern themes and plugins, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. Privacy compliance is addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a trustworthy and credible business presence with room for improvement in security transparency and terms of service documentation.

V

Vlad Gerasimov

vlad.studio

48

Vlad.studio is a digital art project by Vlad Gerasimov, offering a wide range of digital artworks including wallpapers, e-cards, puzzles, and Facebook covers since 1998. The website serves a niche audience interested in digital art and creative content, with a business model combining free access and premium paid content via Paddle payment integration. The site also promotes UX/UI design services through a related domain. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and jQuery, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and secure form handling, but lacks some security headers and explicit privacy/cookie policies, which are compliance gaps. The WHOIS data is unavailable due to unsupported TLD or privacy protection, but the site's content and social media presence support its legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences.

Bluehost is a leading web hosting and domain registration company, now partnered with Fast Domain to provide enhanced hosting and domain services. The website presents a professional and comprehensive offering targeting individuals and businesses seeking reliable hosting solutions. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and multiple analytics and marketing tools with appropriate consent mechanisms. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers could be further confirmed. The WHOIS data for the domain is unavailable, likely due to registry policies or privacy, but the brand's market presence and website professionalism support legitimacy. Overall, Bluehost demonstrates a mature digital presence with extensive service offerings and good compliance practices.

Bluehost Inc. operates a comprehensive web hosting and domain registration platform, serving a broad audience from beginners to professional agencies. The website highlights a partnership with Hostmonster and offers a wide range of hosting solutions including shared, VPS, dedicated, and cloud hosting, alongside professional services such as website design and marketing. The company is positioned as a leading enterprise in the technology sector with a strong brand presence and multiple subsidiary hosting brands. Technically, the site leverages modern technologies including Adobe Experience Manager, various analytics and marketing pixels, and robust consent management tools, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie security flags, and ADA compliance scripts, though explicit security headers could be more visible. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

C

CzechTourism

czechtourism.cz

63

CzechTourism is the official national tourism organization of the Czech Republic, focused on promoting the country as a travel destination through various marketing activities and projects. The website serves as a digital platform to communicate these efforts to tourists and industry stakeholders. Technically, the site employs modern frontend technologies such as Vue.js and integrates Google services like Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied and reCAPTCHA usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site appears trustworthy and professional, but the absence of WHOIS data and privacy documentation slightly reduces confidence.

J

Jonak

jonak.fr

71

Jonak is a French e-commerce retailer specializing in high-end women's footwear. The website showcases a broad collection of fashionable shoes and accessories, targeting women seeking trendy and premium products. The brand maintains a consistent and professional online presence with clear navigation, structured data, and integration of modern web technologies such as Vue.js, jQuery, and Google Maps API. The site supports customer engagement through social media and offers customer service contact options. Technically, the website is well-implemented with HTTPS and performance optimizations, though explicit privacy and terms of service pages are not clearly identified in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by adding explicit security headers and a vulnerability disclosure policy. WHOIS data is unavailable, which slightly reduces domain trust verification. Overall, Jonak presents a credible and professional e-commerce platform with room for enhanced privacy and security transparency.

C

CzechCrunch

cc.cz

48

CzechCrunch is a well-established Czech media website founded in 2002, serving as a primary source of inspiration and information for modern individuals in the Czech Republic. It focuses on business, startups, lifestyle, travel, and technology news. The site offers a variety of content formats including articles, podcasts, newsletters, and events, supported by advertising revenue. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Alpine.js, and multiple analytics and advertising integrations. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and security headers, but lacks published security policies and incident response information. Privacy compliance is weak due to missing visible privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

Sunheron is a travel-focused website designed to assist users in selecting their next holiday destination. The site leverages modern web technologies such as React and Gatsby, providing a visually appealing and responsive user experience. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and age, which impacts overall trustworthiness. The website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers and the presence of tracking scripts like Google Tag Manager and Hotjar, indicating moderate user tracking but limited privacy compliance. Overall, the site appears functional and professionally designed but requires improvements in transparency, security, and legitimacy verification.

H

Hovor od Ježíška | Originální vánoční překvapení pro děti

hovorodjeziska.cz

56

Hovor od Ježíška is a Czech-based online service offering personalized Christmas phone calls from Santa (Ježíšek) to children. The service allows parents to customize the call with the child's name, age, and specific praise or advice, creating a magical holiday experience. The website is professionally designed, mobile-optimized, and includes rich structured data such as reviews and FAQs, enhancing user trust and SEO. The business targets families with children primarily in the Czech Republic and operates a niche market position with a clear value proposition. Technically, the site uses modern frameworks like Next.js and integrates payment processing via GoPay, along with marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, which impacts domain trustworthiness, but the website content and business model appear legitimate and professional. Overall, the site demonstrates a mature digital presence with room for improvement in security and privacy compliance.

P

Pozdrav od Ježíška, s.r.o.

pozdravodjeziska.cz

54

Pozdrav od Ježíška, s.r.o. operates a specialized e-commerce platform offering personalized Christmas postcards with custom messages from Ježíšek, targeting children and families primarily in the Czech Republic. The service includes selecting original postcard designs, writing or choosing pre-written messages, and postal delivery, with a strong charitable component supporting the Fond ohrožených dětí. The website demonstrates a consistent brand presence and positive customer feedback, positioning it as a trusted niche player in its market segment. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, TikTok Pixel, Facebook Pixel, and Sentry for error monitoring. The site is mobile-optimized with good SEO practices and moderate performance. However, explicit CMS or hosting details are not disclosed. From a security perspective, the site enforces HTTPS and uses some best practices like error monitoring and consent management for cookies and tracking. Nonetheless, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. The absence of WHOIS data reduces transparency but does not currently impact the operational legitimacy of the site. Overall, the website is professional, user-friendly, and trustworthy for its intended audience, with moderate technical maturity and a solid privacy compliance posture. Strategic improvements in security policies and transparency would further strengthen its risk profile.

N

Next analytica

nextanalytica.io

62

Next analytica is a Czech-based technology company specializing in server-side tracking solutions designed to enhance marketing campaign performance by increasing data accuracy and speed. Their offerings include proprietary server-side analytics products, Looker Studio reporting, margin import tools, and web analytics consulting. The company targets marketing professionals, e-commerce platforms, and agencies, positioning itself as a trusted provider with a strong regional presence and a medium-sized team of experts. Technically, the website is built on Webflow CMS, leveraging modern cloud infrastructure primarily hosted on Microsoft Azure and AWS, with integrations to Google Tag Manager, Facebook Pixel, and other marketing tools. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, provides cookie consent mechanisms compliant with GDPR, and uses server-side tracking to improve data control. However, it lacks explicit security headers and published incident response policies. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in security transparency and accessibility.

M

Metrák, s.r.o.

metrak.cz

55

Metrák, s.r.o. operates an online platform for ordering waste container rentals and construction material deliveries across the Czech Republic. The company leverages a large network of over 450 local suppliers and nearly 3,000 containers to provide fast and reliable service. Their website offers a user-friendly interface with online pricing, ordering, and payment capabilities, targeting both individual and business customers. The business is well-positioned in the transportation and logistics sector with strong customer trust signals including high ratings on Google and Firmy.cz. Technically, the website is built on modern web technologies including Next.js and React, with integration of multiple analytics and marketing tools such as Google Tag Manager, Facebook SDK, and Smartlook. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some improvements could be made in explicit security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and does not expose sensitive data. While no critical vulnerabilities were detected, the absence of published security policies and incident response contacts suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces domain registration trust but is mitigated by the professional presentation and external trust indicators. Overall, Metrák.cz presents a credible, professional, and functional online service with moderate risk. Strategic enhancements in privacy compliance and security transparency would further strengthen their position and customer confidence.

D

DOBRÝ ANDĚL, nadace

dobryandel.cz

61

DOBRÝ ANDĚL is a Czech non-profit foundation dedicated to providing regular monthly financial support to families with children suffering from serious illnesses such as cancer. The foundation operates transparently with clear donation channels and public trust indicators. Their website is professionally designed using WordPress and integrates modern web technologies including SEO plugins, Algolia search, and interactive elements like sliders and live chat. The site is well-optimized for mobile and provides comprehensive information for donors and recipients alike. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall business credibility remains high due to transparent operations and clear contact information.

Pecka.TV is a Czech-based internet television service operated by VELUS Invest SE, offering affordable IPTV packages with over 160 channels, including popular Czech and international content. The service emphasizes flexibility with no contracts, multi-device support, and features such as ad skipping and cloud DVR. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Cookiebot for consent management. Social media presence is active on Facebook, Instagram, and YouTube. Security posture is good with HTTPS and consent mechanisms, though some security headers and policies are not explicitly published. The domain registration is consistent with the business profile and country, indicating legitimacy. However, explicit privacy policy and terms of service documents were not found in the provided content, which could be improved for compliance and trust.

T

Telly s.r.o.

telly.cz

67

Telly s.r.o. operates a modern television subscription service targeting the Czech market, offering TV packages with promotional discounts and a focus on family entertainment. The company is positioned as a medium-sized telecommunications provider founded in 2019, with a clear digital presence and active marketing efforts. The website is built on WordPress and integrates multiple analytics and advertising technologies, including Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, supported by a comprehensive cookie consent mechanism ensuring GDPR compliance. The technical infrastructure is modern and well-optimized for mobile and SEO, hosted with Active24 and using Cloudflare DNS services. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, though improvements in security headers and published security policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ž

Živina

zivina.cz

55

Živina.cz is a Czech e-commerce platform specializing in quality food products designed for easy and tasty cooking. The company emphasizes fresh and farm-sourced ingredients, targeting general consumers interested in convenient cooking solutions. The website presents a professional and consistent brand image with a clear focus on retail food products, supported by a loyalty program and wholesale options. Technically, the site is built on the Shoptet platform, utilizing modern JavaScript libraries and multiple marketing and analytics integrations, ensuring a moderate to good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. The lack of WHOIS data limits domain trust assessment but does not detract from the site's apparent legitimacy and professionalism.

M

Mama Labels

mamalabels.cz

59

Mama Labels is an e-commerce retailer specializing in personalized name stickers and labels for children's clothing, shoes, school supplies, and toys. The company targets parents and caregivers seeking durable, water-resistant labeling solutions for children attending school, kindergarten, or daycare. The website is professionally designed, mobile-optimized, and offers multiple language versions for regional markets, indicating a mature digital presence. Technically, the site runs on PrestaShop CMS and integrates various marketing and analytics tools such as Google Tag Manager, Hotjar, and Facebook Pixel, with user consent mechanisms in place. Security posture is strong with HTTPS and security headers implemented, though no explicit security or incident response policies are published. WHOIS data is unavailable, limiting domain trust analysis, but the website content and business presentation suggest legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

N

Národní pedagogický institut České republiky

gramotnosti.pro

62

Gramotnosti.pro život is a Czech educational project website operated by the National Pedagogical Institute of the Czech Republic. It focuses on promoting literacy skills including reading, mathematical, and digital literacy for teachers and schools. The site offers a rich collection of educational resources, online lessons, videos, and strategic planning tools to support literacy development in preschool and primary education. The website is well-branded, professionally designed, and targets educators and educational professionals in the Czech Republic. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates with YouTube and Facebook for video content and social engagement. Google Analytics is used for visitor tracking. Security posture is moderate with HTTPS implied but lacks explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a GDPR consent modal for personal data processing. WHOIS data is limited due to TLD restrictions but the domain is consistent with the educational purpose and affiliation with a government institute. Overall, the website is trustworthy, content-rich, and serves as a valuable resource for its target audience.

V

Velké výzkumné infrastruktury ČR

vyzkumne-infrastruktury.cz

64

Velké výzkumné infrastruktury ČR is a government-supported platform providing unique research infrastructure services for science, research, and innovation in the Czech Republic. The website serves as an information hub for large research infrastructures, supported by the Ministry of Education, Youth and Sports of the Czech Republic (MŠMT). It targets research organizations, academic institutions, and innovative enterprises, offering access to advanced scientific facilities and resources. The site is professionally maintained with multilingual support and regularly updated content related to research projects, events, and international collaborations. Technically, the website is built on WordPress with common plugins for sliders, multilingual content, and RSS aggregation, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website's affiliation with Czech government entities and research organizations supports its legitimacy. Overall, the site is a reliable resource for the Czech research community with moderate technical and security maturity.

D

DigiKoalice

digikoalice.cz

63

DigiKoalice is a Czech national coalition platform dedicated to advancing digital skills and employment opportunities. It operates as a government-affiliated educational platform supported by the Ministry of Education, Youth and Sports and the National Pedagogical Institute of the Czech Republic. The platform connects schools, ICT companies, and non-profit organizations to foster digital literacy and innovation in education. It offers resources such as event calendars, courses, best practice examples, and strategic documents to support digital education across the Czech Republic. Technically, the website is built on WordPress 6.8.3, leveraging modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, well-structured, and uses a cookie consent mechanism compliant with GDPR principles. Hosting appears to be managed through REG-WEBGLOBE with DNS services by Ignum, consistent with Czech-based operations. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs cookie consent for user privacy. However, it lacks explicit security headers and does not publicly disclose security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity. Overall, DigiKoalice presents a professional, secure, and privacy-conscious platform serving the Czech educational sector. Strategic recommendations include enhancing security headers, publishing formal security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

The website vzdelavanivdatech.cz serves as an official educational data visualization platform operated by the Czech School Inspectorate (Česká školní inspekce ČR). It provides comprehensive visual data and insights related to the Czech education sector, including secondary school entrance exams, regional schooling, higher education, and EU funding. The platform targets stakeholders within the education ministry and related organizations, offering a centralized resource for educational data. Technically, the site employs modern frontend technologies such as Bootstrap 5 and Google Tag Manager, hosted on Forpsi infrastructure. It is mobile-optimized with a clean, professional design and consistent branding aligned with government standards. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are lacking. Overall, the site demonstrates high business credibility and trustworthiness with transparent WHOIS data and official contact information.

N

Národní pedagogický institut České republiky

rvp.cz

56

The website rvp.cz is a professionally maintained educational portal operated by the Národní pedagogický institut České republiky, serving educators primarily in the Czech Republic. It offers a wide range of teaching materials, expert articles, webinars, and community resources aimed at improving teaching quality and supporting educators. The portal is well-established, with a domain age dating back to 2004, reflecting its longstanding presence in the educational sector. The business model is non-profit and government-affiliated, focusing on educational content and community engagement rather than commercial activities. Technically, the site employs a modern technology stack including Bootstrap 5, jQuery, Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. It uses a custom CMS hosted by REG-WEBGLOBE, with good mobile optimization and moderate performance. The site implements cookie consent mechanisms compliant with GDPR and provides clear privacy and terms of service documentation. Security best practices such as HTTPS enforcement and secure login forms with OAuth social login options are in place, though explicit security headers like Content-Security-Policy could be more visible. From a security perspective, the portal demonstrates a mature posture with no detected vulnerabilities or exposed sensitive data. The use of reCAPTCHA and cookie consent indicates attention to user privacy and bot mitigation. However, the absence of a public security policy or incident response page and lack of a security.txt file suggest areas for improvement in transparency and vulnerability disclosure. Overall, rvp.cz is a trustworthy, high-quality educational resource with strong compliance and security foundations. It effectively serves its target audience of educators with relevant content and community tools. Strategic recommendations include enhancing security header visibility, publishing formal security policies, and expanding accessibility features to further improve compliance and user experience.

Č

Česká školní inspekce ČR

kvalitniskola.cz

46

The website kvalitniskola.cz serves as a methodological portal developed by the Czech School Inspectorate (Česká školní inspekce ČR) to support schools and educational institutions in the Czech Republic. It provides tools, guidelines, and resources aimed at school directors and teachers to facilitate continuous quality improvement and self-evaluation processes. The portal is positioned as a national educational support platform with government affiliation, enhancing its credibility and trustworthiness. Technically, the site is built on ASP.NET WebForms with Kentico CMS, utilizing Bootstrap and jQuery for responsive design and interactivity. Google Analytics is integrated for visitor tracking, and cookie consent mechanisms are implemented to comply with privacy regulations. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and includes CSRF tokens in forms, indicating attention to secure data handling. However, it lacks advanced security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected. The absence of WHOIS data is consistent with CZ NIC's privacy policies and does not detract from the site's legitimacy. Overall, the portal is a professionally maintained government resource with a solid security posture and compliance with privacy norms. Strategic improvements could include enhanced security headers, published security policies, and improved accessibility compliance to further strengthen trust and resilience.

N

Národní pedagogický institut České republiky

projektsypo.cz

52

The website projektsypo.cz serves as a professional development support system for teachers and school directors in the Czech Republic. It is affiliated with the Národní pedagogický institut České republiky, a national pedagogical institute, indicating a government or non-profit educational focus. The platform offers resources such as webinars, methodical cabinets, ICT support, and podcasts, targeting educators and schools with beginning teachers. The project SYPO was officially ended in June 2023, but the site continues to provide valuable archived and ongoing educational content. Technically, the site is built on Joomla CMS with a modern front-end stack including Bootstrap, jQuery, and various UI libraries. It integrates Google Analytics and Google Tag Manager for tracking, along with other third-party scripts. The site is mobile-optimized and has good navigation and content structure, though accessibility features are basic. No explicit security headers were detected, and privacy and cookie policies are not clearly presented, which is a compliance gap. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding strongly suggest legitimacy as an educational government-affiliated project. No adult or unsafe content is present, and the site is safe for general audiences. Overall, the site is a well-structured educational resource with moderate technical maturity and some privacy compliance shortcomings. Strategic improvements in privacy disclosures, security headers, and WHOIS transparency would enhance trust and compliance.

N

Národní pedagogický institut České republiky

infoabsolvent.cz

51

Infoabsolvent.cz is an authoritative Czech educational information portal operated by the Národní pedagogický institut České republiky. It provides comprehensive guidance on secondary and higher vocational education, career choices, and labor market integration for graduates. The portal serves students, parents, educators, and career advisors with a variety of resources including school and field selection tools, labor market statistics, and aptitude testing. Technically, the site uses a modern ASP.NET MVC framework with common JavaScript libraries and Google Tag Manager for analytics, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements could be made by adding security headers and publishing explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with its public service mission.

VICTORIA Vysokoškolské sportovní centrum MŠMT is a Czech government-affiliated organization focused on elite sports training and support for university-level athletes and coaches. The website serves as an informational portal showcasing sports disciplines, athlete profiles, news, and social media integration. The organization operates under the Ministry of Education, Youth and Sports of the Czech Republic, positioning itself as a national center for sports excellence and education. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with Google Fonts and embedded Vimeo videos. The site is mobile-optimized with good navigation and content structure, though some SEO and accessibility features could be enhanced. No CMS or hosting provider details are evident from the source. Security posture is moderate with HTTPS usage implied but no explicit security headers detected. No forms or sensitive data collection points are visible on the homepage, reducing immediate risk. Privacy compliance is basic with a privacy policy linked but no cookie consent mechanism present. WHOIS data is unavailable, typical for government domains in the Czech Republic, but this limits domain trust verification. Overall, the website is professional and trustworthy for its intended audience, but improvements in security headers, privacy compliance, and WHOIS transparency would strengthen its posture and user trust.

N

Národní akreditační úřad pro terciární vzdělávání

nauvs.cz

63

Národní akreditační úřad pro terciární vzdělávání is the official Czech governmental accreditation authority for tertiary education, established in 2016 and transforming from the previous National Accreditation Office for Higher Education. The website serves as an informational portal providing official documents, accreditation decisions, and contact information. The organization operates under Czech law and is led by a statutory chairman. The website is primarily targeted at higher education institutions, government bodies, and the public interested in education accreditation in the Czech Republic. Technically, the website is built on Joomla CMS with Bootstrap and jQuery libraries, hosted likely by a Czech provider (Websupport). The site is moderately optimized for performance and mobile devices, with a consistent and professional design. However, it lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers such as CSP or HSTS. There is no privacy policy or cookie consent mechanism, which may pose compliance risks under GDPR. No vulnerability disclosure or security contact information is provided. Overall, the security posture is moderate but could be improved with standard best practices. The website content is safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business profile, showing consistency and legitimacy. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving accessibility, and establishing a vulnerability disclosure process.

The domain csicr.cz is registered since 2000 with Czech-based registrar REG-INTERNET-CZ and uses Czech name servers, indicating a legitimate Czech entity. However, the website currently serves only a 404 error page with no accessible content, metadata, or business information. There are no privacy, cookie, or terms of service policies present, and no contact information or social media links are available. The technical infrastructure appears minimal with no detected CMS, frameworks, or analytics tools. Security posture is weak due to lack of HTTPS and security headers information. Overall, the site is non-functional and lacks essential compliance and security features, resulting in a low trust and credibility score.

O

OP JAK

opjak.cz

64

OP JAK is the official web portal for the Jan Amos Komenský Operational Program, a government-funded initiative focused on research, development, and education in the Czech Republic. The website serves as a comprehensive information hub for grant calls, projects, seminars, and news related to the program. It targets research organizations, educational institutions, and applicants seeking funding opportunities. The site maintains a strong market position as an authoritative source for this EU co-financed program. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and utilizes several plugins for event management, SEO, and cookie compliance. The infrastructure is hosted by Active24, with SSL properly configured ensuring secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, minor backend PHP warnings and the absence of explicit security headers suggest areas for improvement. No critical vulnerabilities or malicious content were detected. Privacy policies and cookie policies are comprehensive and accessible. Overall, OP JAK presents a trustworthy and professional online presence with moderate technical sophistication and good compliance posture. Strategic improvements in backend code hygiene and security headers would enhance its security posture further.

C

Centrum pro zjišťování výsledků vzdělávání

cermat.cz

56

Centrum pro zjišťování výsledků vzdělávání (CZVV) is a Czech governmental organization responsible for conducting and managing nationwide educational assessments, including maturita exams, unified entrance exams, and final exams. The website serves as an official portal providing information and resources for students, schools, and educational authorities. It maintains a strong market position as an authoritative entity in the Czech education sector, offering key services related to educational testing and data analysis. Technically, the website is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and FontAwesome. It integrates Google Custom Search Engine for site search functionality. The site is mobile-optimized with a moderate performance profile and basic accessibility features. The presence of cookie consent and privacy policy indicates attention to privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is typical for government domains, but the domain's .gov.cz TLD and consistent content strongly support legitimacy. Overall, the website is professional, trustworthy, and well-suited for its governmental educational purpose. Strategic improvements in security headers and explicit security policies could enhance its security posture further.

Q

QCM

qcm.cz

66

QCM is a Czech Republic-based IT company specializing in digital solutions for public procurement management and electronic communication. Established in 2001, it has developed a suite of software products and services used by major public institutions and private entities involved in public procurement. The company offers products such as E-ZAK, PVU, Qlex, and Portál dodavatele, alongside training, administration, and legal advisory services. Their market position is strong within the Czech public sector, supported by a medium-sized team and a large client base exceeding 15,700 users. Technically, the website is built on modern web technologies including JavaScript frameworks, Google Fonts, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, fast-loading, and uses HTTPS with reCAPTCHA for form security. The CMS appears to be Puxdesign, indicating a custom or specialized platform. SEO and accessibility are well implemented, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS and uses standard security measures such as CAPTCHA and cookie consent banners. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear GDPR policy and cookie management. Overall, QCM presents a trustworthy and professional online presence with a mature business model focused on government digitalization. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

C

Conviu

biddingtools.cz

52

Conviu is a Czech-based company specializing in comprehensive e-commerce solutions, focusing on automated bidding, feed management, and marketing automation for online shops. The company holds a strong market position with over 3,000 e-shop clients and partnerships with major platforms like Heureka, Zboží.cz, and Shoptet. Their services include automated bidding strategies, feed editing, supplier integration, AI-powered copywriting, and marketplace connectivity, targeting e-commerce businesses seeking efficiency and automation. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and reCAPTCHA v3, ensuring a robust digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS and consent-based tracking, though some security headers could be improved. The absence of WHOIS data limits domain transparency but does not detract from the evident legitimacy and professionalism of the business. Overall, Conviu presents a trustworthy and technologically mature platform for e-commerce automation.

S

SROVNAME, s.r.o.

srovname.cz

53

Srovnáme.cz is a Czech Republic based e-commerce price comparison platform operated by SROVNAME, s.r.o. It connects consumers with tens of thousands of e-shops, offering price comparison, product availability monitoring, and quality reviews. The website positions itself as the third largest price comparison site in the Czech market, targeting general consumers looking for smart shopping solutions. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and Nette framework, with extensive use of third-party analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Admitad affiliate programs. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the business presence and content quality support legitimacy. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements and improved transparency in domain registration.

Luigi's Box is a Czech Republic-based logistics and storage service provider specializing in e-commerce fulfillment and retail storage solutions. The company targets e-commerce businesses and retail customers, offering integrated digital platforms for efficient logistics management. The website reflects a medium-sized business with a consistent brand presence and professional content tailored to its market segment. Technically, the site employs modern JavaScript lazy loading techniques and Google Tag Manager for analytics, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and professional, though WHOIS data is unavailable, limiting domain registration trust analysis.

B

BaseLinker Sp. z o.o.

baselinker.com

69

Base.com, operated by BaseLinker Sp. z o.o., is a mature and established e-commerce integration platform founded in 1994, offering extensive marketplace and sales management solutions. The company targets e-commerce sellers and businesses seeking automated order processing and bulk listing capabilities across major marketplaces such as Amazon, eBay, Etsy, Shopify, and Magento. The website reflects a professional and consistent brand presence with good content quality and clear business focus. Technically, the site employs modern tracking and marketing technologies including Google Tag Manager, Hotjar, and Cookiebot, with Cloudflare DNS providing reliable hosting infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and demonstrates good digital maturity.

Alza.cz is a leading e-commerce retailer primarily serving the Czech Republic and neighboring countries, specializing in consumer electronics and related products. The company has a long-standing market presence since 2004 and operates a large-scale online retail platform. The website is currently protected by Cloudflare's security mechanisms, including a Turnstile CAPTCHA challenge, which restricts direct content access and limits full analysis. The technical infrastructure leverages Cloudflare for security and performance, indicating a mature approach to protecting the site from bots and attacks. However, the visible content is minimal due to the security challenge, and no explicit privacy or cookie policies are presented on the challenge page. Security posture is strong in terms of HTTPS and WAF usage, but lacks visible security headers and incident response information. Overall, the site demonstrates a solid business foundation but requires improved transparency and accessibility for compliance and user trust.

N

NetDirect

fastcentrik.cz

67

FastCentrik is a Czech-based e-commerce platform offering rental e-shop solutions tailored for entrepreneurs and small to medium businesses. The platform emphasizes ease of use, affordability, and comprehensive customer support, positioning itself as a reliable partner for online business startups. The website demonstrates a mature digital infrastructure with integrations for marketing, analytics, and customer engagement tools, reflecting a modern and professional online presence. Security measures such as HTTPS, reCAPTCHA, and cookie consent mechanisms are implemented, though some security headers could be enhanced. Overall, the platform shows strong business credibility and technical competence, suitable for its target market.

The website allegro.cz currently serves as a regional domain likely related to the Allegro e-commerce platform targeting Czech users. However, the provided HTML content is fully blocked by a security challenge page from captcha-delivery.com, indicating the presence of a Web Application Firewall or bot mitigation service preventing access to the actual site content. Due to this blocking, no meaningful metadata, business information, or user-facing content is accessible for analysis. The domain WHOIS data is consistent with a legitimate registration by REG-IPMIRROR and uses name servers from allegro.pl, supporting the legitimacy of the domain as part of the Allegro brand's regional presence. From a technical perspective, the site employs advanced bot mitigation technology, but this also limits the ability to assess the site's technical infrastructure, security headers, or compliance policies. No privacy, cookie, or terms of service policies are detectable in the blocked content. No contact information or social media links are visible. The security posture cannot be fully evaluated, but the presence of a WAF indicates a proactive security approach. Overall, the site appears legitimate and part of a known e-commerce brand, but the blocking prevents a comprehensive security, compliance, and business analysis. The risk is low given the brand association, but the lack of accessible content limits trust and transparency assessment.

The analyzed webpage is a minimal media player page hosted on the domain player.bcast.fm, serving a podcast episode. The page contains mostly scripts related to advertising and tracking, with no visible business or contact information, privacy or cookie policies, or security disclosures. The technical infrastructure includes usage of Amazon Cloudfront CDN and JavaScript XMLHttpRequest for dynamic content loading. The site lacks SEO metadata, structured data, and accessibility features, indicating a low level of digital maturity. Security posture is weak due to absence of visible security headers and no confirmation of HTTPS usage in the provided content. Overall, the site presents a low trust profile with minimal content and poor compliance with privacy and security best practices.

H

Heureka Group

heureka.group

65

Heureka Group is a technology and e-commerce service provider focused on supporting e-shops and partners with solutions to enhance online sales and customer experience. The website presents a professional image with clear navigation and business-oriented content targeting B2B clients in the Czech Republic and surrounding regions. The technical infrastructure includes modern analytics and A/B testing tools such as Google Analytics, Google Tag Manager, and Visual Website Optimizer, indicating a mature digital marketing approach. The website is accessible without any WAF or security blocking, uses HTTPS, and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response policies are not publicly visible, suggesting room for improvement in security transparency. Overall, the site demonstrates a solid security posture with no apparent vulnerabilities or suspicious content, supporting a trustworthy business presence.