Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
54,151–54,200 of 99,066
Manufacturing · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
aaareklama.cz is a Czech Republic-based small business specializing in the production and printing of advertising materials including lighted advertising, banners, company signs, orientation systems, engraving, and vehicle wraps. The company targets businesses and organizations primarily in Prague and surrounding areas, offering a broad portfolio of signage and printing services. The website is built on WordPress and employs modern plugins and technologies to deliver a professional user experience. While the site is well-structured and content-rich, it lacks privacy and cookie policies, which are important for compliance with data protection regulations. Security measures such as HTTPS and Google reCAPTCHA are implemented, but the absence of security headers and WHOIS transparency reduces the overall security posture. The domain WHOIS data is unavailable, which raises some concerns about registration legitimacy but does not necessarily indicate malicious intent. Overall, the website presents a credible business presence with room for improvement in privacy compliance and security hardening.
SPOROS Consulting s.r.o.sporos.cz
Finance · Czech Republic
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
SPOROS Consulting s.r.o. is a well-established Czech accounting and tax advisory firm operating since 2000. The company offers comprehensive services including tax consulting, bookkeeping, payroll management, and company address rental, primarily targeting small and medium-sized businesses in Prague and the Czech Republic. Their website reflects a professional image with clear service descriptions and contact options, supporting their market position as a trusted local service provider. Technically, the website is built on WordPress with the Divi theme and includes modern features such as cookie consent management compliant with GDPR. However, the use of outdated WordPress and jQuery versions introduces potential security risks that should be addressed. Security posture is moderate with HTTPS enforced and secure form handling, but lacks advanced security headers. Overall, the site is compliant with privacy regulations and provides transparent contact information, though it lacks explicit terms of service and security policy disclosures.
GOLD SERVICE s.r.o.goldservice.cz
Transportation · Czech Republic
68Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
GOLD SERVICE s.r.o. is a well-established Czech logistics and freight forwarding company with over 30 years of experience. The company offers a comprehensive range of services including road, sea, and air transport, customs declarations, warehousing, and specialized logistics solutions. Their market position is that of a reliable local partner with a family business approach and a medium-sized operational scale. The website is professionally designed, multilingual, and provides clear contact information and customer testimonials, enhancing trustworthiness. Technically, the website uses a custom CMS developed by eBRÁNA s.r.o., employs modern web technologies such as responsive design, Google Fonts, and JavaScript libraries for enhanced user experience. Hosting is provided by WEDOS, consistent with the domain registrar. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are minimal and could be improved to enhance protection. No explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are evident. No suspicious or vulnerable scripts were detected. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen their security posture.
BONVIN, s.r.o.ubytovani-valtice.cz
Hospitality · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website represents a small family-run hospitality business, BONVIN, s.r.o., operating the Penzion Moravský Sommelier in Valtice, Czech Republic. It offers accommodation with a unique wine cellar experience, targeting wine enthusiasts, tourists, and cyclists exploring South Moravia. The site is well-structured, professionally designed, and provides clear contact and business information, enhancing trust and user engagement. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is good with HTTPS and anti-bot measures, though additional security headers and policies could improve resilience. The absence of WHOIS data reduces domain trustworthiness, but the website content and business details appear legitimate and consistent with a hospitality service provider. Overall, the site is functional, user-friendly, and compliant with GDPR cookie consent requirements.
- Vinařství V & M Zborovský, v.o.s.
zborovsky.cz
Retail · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Vinařství V & M Zborovský, v.o.s. is a small Czech winery established in 2001, specializing in quality wine production and sales through both physical vinotéka and an e-commerce platform. The company emphasizes traditional and modern winemaking techniques with a focus on terroir and sustainability. Their market position is strengthened by multiple awards and a loyal regional customer base. Technically, the website uses a custom CMS with common JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and includes essential compliance features like cookie consent and age verification for alcohol sales. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response disclosures. WHOIS data is missing, which slightly reduces trust but the website content and contact information appear legitimate and professional. Overall, the site is well-structured for its business purpose but could improve security and transparency aspects.
Hotel Kurdějovhotelkurdejov.cz
Hospitality · Czech Republic
72Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Hotel Kurdějov is a hospitality business based in the Czech Republic, specializing in hotel accommodation, conference facilities, teambuilding events, and wine-related experiences. The website presents a professional image with clear navigation and a focus on corporate clients and event organizers. The technical infrastructure is built on WordPress with modern performance and monitoring tools, including New Relic and Google Tag Manager. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the website is trustworthy and well-maintained, supporting the business's market position in South Moravia.
- Odtahové vozy s.r.o
odtahovevozy.eu
Transportation · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Odtahové vozy s.r.o is a Czech-based company specializing in professional towing equipment and vehicles. Founded in 2021, it serves towing companies in the Czech Republic and Slovakia as an official representative of several reputable brands. The company offers a broad range of towing vehicles, accessories, and custom products through its website and e-shop, positioning itself as a trusted supplier in the transportation sector. The website is well-structured, professionally designed, and provides clear contact channels, enhancing customer engagement and trust. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. It features responsive design and basic accessibility, with a moderate performance profile. The site enforces HTTPS and includes a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site demonstrates good practices such as secure forms and user consent management but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators were found, and the domain appears consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security and user trust.
MOTO OLOMOUC R&V s.r.o.bartonmotors.cz
Transportation · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MOTO OLOMOUC R&V s.r.o. is a Czech small business founded in 2020 specializing in the sale and servicing of motorcycles, scooters, electric scooters, and quads, primarily under the Barton Motors brand. The company targets both children and adult riders, offering a range of vehicles and branded rider equipment. Their market position is that of a reliable and professional partner with a strong focus on customer service and quality products. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Google services, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies are missing. The absence of WHOIS data reduces domain trust, but the website content and contact information appear legitimate and professional. Overall, the site is well-designed and user-friendly, supporting the company’s business goals effectively.
- ASN Hakr Brno
hakrbrno.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ASN Hakr Brno is a Czech Republic-based company specializing in automotive accessories such as roof racks, roof boxes, bike and ski carriers. The company operates both online and through physical stores located in Brno, Ostrava, and Prague, positioning itself as a regional leader in this niche retail market. Their business model combines e-commerce with direct retail sales, supported by extended warranties and installation services, enhancing customer trust and satisfaction. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to automotive consumers and businesses. Technically, the website employs the MooTools JavaScript framework alongside modern tracking tools like Google Tag Manager and Seznam tracking scripts. While the site is mobile-optimized and SEO-friendly, it uses somewhat dated JavaScript libraries, which may pose future maintenance challenges. The site implements HTTPS and a comprehensive cookie consent mechanism, demonstrating good privacy compliance. However, the absence of explicit security headers and missing WHOIS domain registration data slightly detract from the overall technical maturity. From a security perspective, the website shows a solid posture with HTTPS enforcement, secure forms, and no visible vulnerabilities or exposed sensitive data. The cookie consent mechanism aligns with GDPR requirements, and certifications such as ISO and DEKRA bolster trust. Nonetheless, the lack of a published security policy or incident response contact channels indicates room for improvement in transparency and preparedness. The missing WHOIS data is a concern for domain legitimacy verification, though the website's content and contact information support its authenticity. Overall, ASN Hakr Brno presents a trustworthy and professional online presence with good business credibility and security practices. Strategic enhancements in security headers, domain transparency, and incident response documentation would further strengthen their digital maturity and customer confidence.
- TTiberina Group
tiberinagroup.com
Manufacturing · Italy
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Tiberina Group is a medium-sized manufacturing company based in Umbertide, Italy, specializing in automotive and industrial product and process solutions. The company emphasizes customer focus, innovation, sustainability, and quality management, positioning itself as a regional player with a commitment to continuous improvement and employee development. Their website reflects a professional corporate presence with multilingual support and detailed sections on their values, products, innovation, sustainability, and careers. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and qTranslate-X for multilingual content. It employs Google Analytics with IP anonymization and a cookie consent mechanism, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized with good navigation and content relevance, though accessibility features could be improved. From a security perspective, the site uses HTTPS with no visible exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and published security or incident response policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or data unavailability, which impacts trustworthiness. Overall, the website presents a solid business front with good content and technical implementation but would benefit from enhanced security practices and transparency regarding domain registration details.
- AApache2 Debian Default Page: It works
archaiabrno.cz
Other
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website archaiabrno.cz currently serves only the default Apache2 Debian welcome page, indicating that the web server is installed and operational but no custom business content or branding has been deployed. There is no evidence of active business operations, contact information, or compliance documentation on the site. The domain is registered since 2002 with a known registrar, suggesting legitimacy of the domain ownership, but the lack of content and security measures indicates the site is either under development or abandoned. From a technical perspective, the site runs on Apache2 on a Debian Linux platform, but no modern web technologies, CMS, or frameworks are detected. The site lacks HTTPS information and security headers, which are critical for secure web operations. There are no analytics or tracking scripts, and no privacy or cookie policies, indicating minimal digital maturity. Security posture is weak due to the absence of HTTPS, security headers, and exposure of the default server page. No incident response or vulnerability disclosure information is present. The site does not appear to be blocked or protected by any WAF or security challenge mechanisms. Overall, the site scores low on content quality, security, privacy compliance, and business credibility. It is recommended to replace the default page with actual business content, implement HTTPS, add security headers, and publish privacy and cookie policies to improve trust and compliance.
- Vvilemwalter.cz - úvodní stránka
vilemwalter.cz
Other · Czech Republic
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website vilemwalter.cz is a small, niche informational site focused on historical and cultural content related to the city of Brno and the Moravia region in the Czech Republic. It offers resources such as historical sacral architecture, old maps, photographs, and directories, along with some sales of books and exlibris. The site appears to be a personal or hobby project, founded in 2004, with a modest but relevant content offering for enthusiasts and researchers interested in local history. From a technical perspective, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site lacks mobile optimization and advanced accessibility features, and performance is moderate. There is no evidence of HTTPS usage or security headers, which indicates a weak security posture. No privacy or cookie policies are present, and no analytics or tracking technologies are detected, suggesting minimal user data collection. Security evaluation reveals significant gaps, including the absence of HTTPS, security headers, and formal privacy compliance. The site does not provide incident response contacts or security policies. However, no vulnerabilities or malicious content were detected. The domain registration is consistent with the website's age and content, registered since 2004 with no privacy protection, supporting legitimacy. Overall, the site is safe and suitable for general audiences but requires improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.
PREVENT, S.R.O.prevent.cz
Education · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
PREVENT, S.R.O. is a well-established Czech company specializing in occupational safety (BOZP), fire protection (PO), and occupational health services (PLS). With over 28 years of market presence and a client base exceeding 5,500 companies, PREVENT offers comprehensive consulting, training, and e-learning solutions tailored to workplace safety and health compliance. Their market position is strong, supported by ISO 9001 and ISO 27001 certifications, and a professional digital presence including multiple subsidiary service platforms.
Other
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.eskoleni.cz is currently inaccessible in full form, with WHOIS data indicating no registration entries found. This suggests either the domain is not registered, is under privacy protection, or access is restricted by security mechanisms. Due to the lack of accessible content, no meaningful business overview, technical infrastructure details, or security posture can be reliably assessed. The absence of privacy policies, contact information, and business details further limits the ability to evaluate the website's credibility and compliance. Overall, the site appears blocked or restricted, resulting in a low trust and analysis score.
Element Arvalelementarval.com
Transportation
67Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Element Arval is a global alliance specializing in fleet management solutions, managing over 4.5 million vehicles across 55 countries. The alliance leverages nearly three decades of partnership to deliver harmonized and customized fleet services, positioning itself as a worldwide leader in the transportation sector. Their business model focuses on strategic partnerships and tailored global fleet strategies to meet diverse client needs. Technically, the website is built on WordPress with Bootstrap and integrates modern tools such as Google Analytics and 6Sense for marketing and analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. Overall, the site is professional and trustworthy, with clear business focus and compliance with privacy regulations.
Other · Poland
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website autoplay.pl currently displays a minimal maintenance page with no substantive content, metadata, or user interaction elements. The domain is registered since 2005 with OVH SAS, indicating a stable and legitimate registration history. However, the website lacks critical elements such as privacy policies, cookie consent mechanisms, contact information, and security headers, which limits its operational maturity and trustworthiness. The technical infrastructure appears basic, with only a single CSS stylesheet linked and no visible scripts or analytics tools. Security posture is weak due to the absence of HTTPS confirmation and security headers, although no explicit vulnerabilities were detected from the provided data. Overall, the site is in a placeholder state, limiting its business and security evaluation.
Technology · Poland
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website iot.pl is a Polish-language technology portal specializing in Internet of Things (IoT) and smart home technologies. It provides news, articles, and guides related to smart tech, networks, computers, and electronics. The site targets technology enthusiasts and users interested in IoT and smart home solutions within Poland. The business model centers on content publishing and community engagement via social media platforms such as Facebook and YouTube. Founded in 2008, the portal has a consistent brand presence and good content quality.
Aftermarket.pl Limitedsmartbike.pl
Technology · Poland
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Aftermarket.pl Limited operates the largest domain marketplace in Poland, providing a platform for buying, selling, and auctioning internet domains. The company also offers complementary services such as hosting, mail, website creation, and SSL certificates, targeting businesses and individuals interested in domain trading. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript features, service workers, and integrates Google Analytics and HelpCrunch for analytics and customer support. Security measures include HTTPS enforcement, CSRF tokens, and cookie consent mechanisms, although explicit security headers and a dedicated security policy are absent. Privacy compliance is strong with comprehensive GDPR-aligned policies and cookie management. WHOIS data for the domain smartbike.pl is unavailable from the official .pl registry, which is common for domains listed on aftermarket platforms but warrants cautious consideration. Overall, the site demonstrates a mature digital presence with moderate risk due to WHOIS data gaps.
Česká poradnaceskaporadna.cz
Other · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Česká poradna is an established Czech online platform serving as a comprehensive business directory and marketplace. It offers a catalog of companies, experts, services, products, articles, and a request-for-offers system, targeting businesses and consumers primarily in the Czech Republic. The platform is supported by the parent company Evropská databanka s.r.o., indicating a solid market presence and partnership ecosystem. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including Czech, Slovak, and English.
- EEvropská databanka
nabidka.net
Other · Czech Republic
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.nabidka.net operates as a comprehensive business offers catalog under the brand Evropská databanka, targeting Czech and Slovak markets. It provides categorized listings of verified companies and their product/service offers, serving both business and consumer audiences. The platform integrates modern web technologies including Google Analytics 4, Microsoft Clarity, Google reCAPTCHA, and Bootstrap for responsive design. While the site demonstrates good content quality, navigation, and mobile optimization, it lacks explicit privacy and terms of service documentation, and no direct contact information is found in the provided content. Security posture is moderate with HTTPS enforced and some security best practices observed, but missing key security headers and incident response contacts. Critically, WHOIS data for the domain is unavailable or indicates the domain is unregistered, raising concerns about domain legitimacy despite professional site appearance.
Media · Czech Republic
54Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Tenisportal.cz is a Czech-language tennis news and live results portal offering comprehensive coverage of ATP and WTA tennis events, including news articles, live scores, rankings, statistics, and betting tips. The website targets tennis fans and sports bettors primarily in the Czech Republic. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, with a responsive design optimized for mobile devices. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service pages. The absence of WHOIS data limits domain trust verification, though the website content and structure indicate a legitimate business. Overall, the site provides a professional user experience with good content relevance and navigation clarity.
- OpenSubtitles.org
opensubtitles.org
Technology
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
OpenSubtitles.org operates a large, multilingual subtitle database platform providing free subtitle downloads and uploads for movies and TV series. The website targets a broad audience of movie and TV content consumers worldwide, offering advanced search features, API support, and community engagement through forums and blogs. The business model includes free access with optional VIP membership for ad removal. Technically, the site uses a mature stack with jQuery and various third-party scripts, including Google reCAPTCHA for login security and Cloudflare Insights for performance monitoring. Security posture is moderate with HTTPS enforced but missing some recommended security headers. The WHOIS data is malformed and incomplete, limiting domain trust verification. Overall, the site is functional, content-rich, and safe for general audiences but could improve privacy compliance and security headers.
Education · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Jihočeská vědecká knihovna v Českých Budějovicích is a well-established regional scientific library serving the South Bohemia region of the Czech Republic. The institution offers a broad range of services including lending of books, periodicals, DVDs, audio CDs, access to digital libraries, and online databases. It also supports educational and cultural activities targeting readers, students, schools, and other libraries. The library operates under the auspices of the Jihočeský kraj (South Bohemian Region) and has a domain age consistent with its long history since 1995. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript with jQuery, and integrates social media SDKs like Facebook. The site is hosted with a Czech registrar and uses HTTPS with a good SSL configuration. While the site is mobile responsive at a basic level and includes accessibility features, there is room for improvement in security headers and cookie consent mechanisms. SEO and navigation are well implemented, supporting a positive user experience. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and secure login forms. However, it lacks explicit published security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance and user trust. No vulnerabilities or suspicious content were detected. The WHOIS data is transparent and consistent with the library’s identity, supporting high legitimacy. Overall, the website is professional, trustworthy, and serves its educational mission effectively. Strategic improvements in privacy compliance and security policy transparency would enhance its security posture and user trust.
EITBeitb.eus
Media · Spain
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
EITB is the Basque public radio and television broadcaster providing a wide range of news, sports, cultural, and entertainment content primarily in the Basque language. The website serves as a comprehensive digital platform for live streaming, multimedia content, and regional news, targeting the Basque-speaking population and those interested in Basque culture. The site is professionally designed with consistent branding and rich content, reflecting its position as a leading regional public media entity. Technically, the website employs modern JavaScript frameworks, video players, and integrates multiple advertising and analytics services, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS, privacy management tools, and consent mechanisms, though it could improve by adding more security headers and publishing a vulnerability disclosure policy. The WHOIS data is privacy protected, which is typical for such organizations, and no suspicious patterns were detected. Overall, the website is trustworthy, well-maintained, and compliant with GDPR regulations.
Other
59Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website lednicko-valticky-areal.cz is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content served by nginx. The domain uses Cloudflare name servers, indicating possible protection by a Web Application Firewall (WAF) or misconfiguration causing access denial. The WHOIS data is suspicious, showing a domain creation date set in the future (April 28, 2025), which is invalid and undermines trust in the domain's legitimacy. No business information, contact details, or content are available to analyze the company's operations or services. Due to the lack of accessible content, no metadata, scripts, or security headers could be evaluated, preventing a full security and compliance assessment.
- 5502 Bad Gateway
svetubytovani.cz
Other
52Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website svetubytovani.cz is currently inaccessible, returning a 502 Bad Gateway error indicating a server-side issue. Due to the lack of accessible content, no meaningful business information, metadata, or contact details can be extracted. The domain is registered since 2010 with the registrar REG-GRANSY, suggesting a mature domain age but the website itself appears down or misconfigured. The absence of privacy policies, cookie consent mechanisms, or terms of service further limits the ability to assess compliance or business credibility. Technically, no scripts, frameworks, or technologies are detectable from the minimal HTML content provided. Security posture cannot be properly evaluated due to lack of accessible content and headers. Overall, the site currently presents a high risk due to unavailability and lack of transparency.
- MMTD Consulting
mtdconsulting.pl
Government · Poland
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
MTD Consulting is a Polish consulting firm specializing in assisting clients with acquiring European Union grants and funding. The company positions itself as an expert in the field, providing real data on funds obtained for clients, emphasizing transparency and trust. The website is professionally designed using WordPress and integrates common web technologies such as Bootstrap, jQuery, and Google Maps API. Security measures include HTTPS and Google reCAPTCHA to protect forms, but the site lacks advanced security headers and formal privacy or cookie policies, indicating areas for compliance improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website is accessible, well-structured, and targets Polish businesses seeking EU funding.
Biuro Rekordówbiurorekordow.pl
Other · Poland
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Biuro Rekordów is a specialized Polish company focused on certifying national records and providing consulting services for Guinness World Records. Established in 2014, it serves individuals and organizations aiming to set or verify records, offering official certification and advisory services. The website reflects a niche market position with a clear business model centered on record certification and event consulting. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.
- RROOVEE S.A.
suwer.pl
Transportation · Poland
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website suwer.pl represents a modern urban bike rental system operating in Suwałki, Poland, managed by ROOVEE S.A. The service offers 160 bikes across 17 stations, including standard, electric, and tandem bikes. The platform supports multiple languages and integrates with a dedicated mobile app for seamless rental and payment experiences. The business is positioned as a local transportation solution with EU co-financing, indicating public sector support and legitimacy. Technically, the site uses standard web technologies including jQuery, Google Maps API, and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, providing clear contact information and user support channels.
- RROOVEE S.A.
plock.bike
Transportation · Poland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Płocki Rower Miejski is a municipal bike rental service operated by ROOVEE S.A., offering a fleet of approximately 310 bikes across 31 stations in Płock, Poland. The service targets local residents and visitors, providing flexible bike rental options via a dedicated mobile application and SMS. The platform integrates with local city cards (PłocKArta) to offer benefits such as free initial ride time. The website is professionally designed with clear navigation, accessibility features, and multilingual support, reflecting a mature digital presence for a recently founded business (2023). Technically, the site uses modern web technologies including Google Maps API and FontAwesome, but relies on an outdated jQuery version and lacks some advanced security headers and DNSSEC, indicating room for technical improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no explicit security or incident response policies are published. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy, safe, and well-aligned with its business purpose.
Nextbike Polska S.A.zielonogorskirowermiejski.pl
Transportation · Poland
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Zielonogórski Rower Miejski is a bike-sharing service operated under Nextbike Polska S.A., providing urban mobility solutions in Zielona Góra, Poland. The service offers bike rentals via a mobile app, supporting multiple languages and providing clear user guidance. The website is professionally designed with good content quality and clear navigation, targeting residents and visitors seeking alternative transportation. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is basic with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and functional with room for security and compliance enhancements.
- CCzeladzki Rower Miejski
czeladzkirower.eu
Transportation · Poland
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Czeladzki Rower Miejski operates a local urban bike rental system in Czeladź, Poland, offering 50 modern bikes distributed across 4 stations. The service is integrated with the Roovee mobile application, enabling users to rent, pay, and manage rides conveniently. The business targets local commuters and visitors seeking flexible urban mobility solutions. The website demonstrates a solid digital presence with clear service descriptions, pricing, and user support contacts. Technically, the site uses modern web technologies including Google Maps API and FontAwesome, with responsive design and accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.
- RROOVEE S.A.
zarskierowery.bike
Transportation · Poland
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Żarskie Rowery is a localized urban bike rental service operating in Żary, Poland, managed by ROOVEE S.A. The service offers modern city bikes accessible via a dedicated mobile application and web panel, enabling users to rent and park bikes flexibly within designated zones. The business targets urban commuters and visitors seeking convenient, technology-enabled transportation solutions. The website reflects a consistent brand identity and provides clear user guidance, contact information, and partner affiliations, positioning it as a trustworthy local mobility provider. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google Maps API for interactive mapping. Hosting is managed via home.pl with standard performance and mobile optimization. However, the site lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. The WHOIS data confirms domain legitimacy and alignment with the business entity, supporting trustworthiness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and incident response information reduces the overall security maturity. Privacy compliance is partial, with a privacy policy available but no cookie consent or explicit GDPR compliance indicators. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices. Strategically, the business should prioritize implementing security headers, cookie consent, and publishing security policies to improve compliance and user trust. Enhancing analytics and marketing transparency could also support growth. The current risk level is moderate with no critical issues detected.
- RROOVEE S.A.
srem.bike
Transportation · Poland
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Śremski Rower Miejski (ŚRM) is a localized urban bike rental service operating in Śrem, Poland, managed by ROOVEE S.A. The service offers modern city bikes accessible via a dedicated mobile application or SMS, providing flexible rental and parking options within a defined service zone. The business targets urban commuters and visitors seeking convenient, eco-friendly transportation. The website is professionally designed with clear navigation and multilingual support, reflecting a focused and user-friendly digital presence. Technically, the site uses standard web technologies including Bootstrap, jQuery, FontAwesome, and Google Maps API, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website and domain registration data align well, indicating a legitimate and operational business.
- RROOVEE S.A.
torun.bike
Transportation · Poland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Toruński Rower Miejski, operated by ROOVEE S.A., is a medium-sized transportation service providing a bike-sharing system in Toruń, Poland. The service offers 360 standard bikes across 70 stations with options for short and long-term rentals, supported by a dedicated mobile application. The website is professionally designed, accessible, and provides comprehensive user information including pricing, FAQs, and legal documents. The business is well-positioned locally with partnerships including Orange and Autopay, enhancing its credibility and operational capabilities. Technically, the site employs modern web technologies such as Google Maps API and FontAwesome, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a trustworthy and professional business with a solid digital presence.
- RROOVEE S.A.
prm.bike
Transportation · Poland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Polkowicki Rower Miejski (PRM) is a localized urban bike sharing service operating in Polkowice, Poland, managed by ROOVEE S.A. The service offers modern city bikes equipped with GPS and electronic locks, enabling users to rent bikes via a dedicated mobile app or SMS. The business model focuses on flexible, stationless bike rentals with clear pricing and deposit structures. The website is professionally designed, providing clear user guidance, contact information, and partner acknowledgments, positioning PRM as a trusted local transportation option. Technically, the website employs a modern but basic tech stack including Bootstrap, FontAwesome, jQuery, and Google Maps API. The site is mobile optimized and accessible with a cookie consent mechanism and privacy policy in place. However, some security best practices are missing such as DNSSEC and HTTP security headers, and the use of an outdated jQuery version poses potential risks. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks published security policies or incident response contacts. The WHOIS data is consistent and transparent, reinforcing legitimacy. Overall, the site scores well on business credibility and privacy compliance but has room for improvement in security hardening. Strategically, PRM should focus on enhancing security posture by enabling DNSSEC, adding security headers, updating libraries, and publishing security policies. These steps will improve trust and resilience while maintaining a user-friendly and privacy-respecting service.
- Rosické TS, příspěvková organizace
rosickets.cz
Government · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Rosické TS is a municipal contributory organization established by the city of Rosice in 2007 to provide essential public services such as city cleaning, waste management, public lighting maintenance, and road upkeep. The organization serves the local community and operates under the governance of the city council. The website reflects this public service role with clear contact information and descriptions of services offered. Technically, the website uses legacy JavaScript libraries like jQuery and MooTools, with a moderate performance profile and basic mobile optimization. Security posture is moderate with HTTPS usage implied but lacks advanced security headers and published privacy policies. The absence of WHOIS data reduces domain trust, but the website content and contact details support legitimacy. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.
- Středisko volného času Rosice - RUBIKO
svcrubiko.cz
Education · Czech Republic
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Středisko volného času Rosice - RUBIKO is a local leisure and educational center based in Rosice, Czech Republic, providing a variety of programs such as courses, camps, workshops, and community events primarily targeting children, youth, and families. The organization operates as a non-profit entity focused on youth education and leisure activities within the local community. The website reflects this mission with clear navigation and relevant content about their services and upcoming events. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Google Maps API, and Google Analytics, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements, although it lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and contact information support its legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving its community effectively.
- Oblastní muzeum v Lounech
archeoskanzenbrezno.cz
Education · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Archeoskanzen Březno is an archaeological open-air museum affiliated with the regional museum in Louny, Czech Republic. It offers educational programs, prehistoric-themed events, and summer camps aimed at students and adults interested in archaeology and cultural heritage. The website provides detailed event calendars and program descriptions, targeting a general audience with an interest in education and culture. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and employs Google Tag Manager for analytics. The site is mobile-optimized and presents a clear navigation structure with good content quality. Security-wise, the site uses HTTPS with a good SSL configuration but lacks important security headers and privacy/cookie policies, which impacts compliance and security posture. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural institutions. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and privacy compliance measures.
- TAPEX EU s.r.o.
tapexeu.cz
Manufacturing · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TAPEX EU s.r.o. is a well-established Czech manufacturing company specializing in packaging materials, operating since 2003 with a strong market presence in the Czech and Slovak markets. The company offers a broad range of packaging products including adhesive tapes, protective edges, foils, and specialized packaging solutions, supported by significant warehouse capacity and EU-funded innovation projects. Their website reflects a professional business-to-business orientation with clear product offerings and contact channels. Technically, the site is built on Drupal 7 with legacy libraries, indicating a need for modernization but currently functional and moderately optimized for mobile and SEO. Security posture is adequate with HTTPS and cookie consent mechanisms, though the use of outdated CMS and libraries presents potential risks. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the company demonstrates credible business operations with transparent contact information and trust signals such as EU funding and quality assurances.
BIKAbika.cz
Retail · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
BIKA is a Czech-based wholesale distributor specializing in office supplies, cleaning products, and refreshments, targeting primarily business customers within the Czech Republic. The company positions itself as a reliable supplier with a focus on B2B sales and delivery under substitute fulfillment regimes. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site leverages modern frontend technologies such as React and Ant Design, ensuring a responsive and user-friendly experience. The presence of privacy and cookie policies indicates attention to regulatory compliance, particularly GDPR. Security-wise, the site enforces HTTPS and includes essential security headers, though it lacks a dedicated security policy or vulnerability disclosure page. The absence of WHOIS data due to privacy protection slightly impacts trust but does not overshadow the overall legitimacy suggested by the website content and structure. Strategic recommendations include enhancing transparency around security policies and incident response, improving accessibility features, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.
SOLLAU CZ s.r.o.sollau-cz.cz
Manufacturing · Czech Republic
57Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
SOLLAU CZ s.r.o. is a Czech company specializing in supplying materials and products for the plastics industry, including plastic shredders, magnetic separators, and recycling technologies. The company positions itself as a trusted partner with 15 years of experience, offering comprehensive services from material supply to testing and equipment servicing. Their market focus is primarily on the Czech Republic and surrounding regions, targeting plastic processors and manufacturers. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies such as jQuery and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS data reduces domain trust but the website content and business information appear professional and credible. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security transparency and domain registration verification.
- AArchaia Brno
brno1645.cz
Other · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website brno1645.cz is an educational and cultural project presenting virtual 3D models of the city of Brno as it appeared during the 1645 Swedish siege. The project is small-scale and niche, targeting history enthusiasts and the general public interested in historical reconstructions. The site offers downloadable models for use with Google Earth and provides historical context and updates. The business model is non-commercial, focusing on cultural heritage dissemination. Technically, the website is simple, built with basic HTML and CSS without modern frameworks or CMS. It lacks advanced technical features such as responsive design, accessibility enhancements, or SEO optimizations. No analytics or tracking scripts are present, indicating minimal digital maturity. Performance is moderate given the static nature of the content. From a security perspective, the site lacks HTTPS enforcement and security headers, which lowers its security posture. There are no privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address. No forms or user input mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the website is safe and trustworthy for its intended educational purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance user trust and protection.
Pilotmedia s.r.o.pilotmedia.cz
Media · Czech Republic
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Pilotmedia s.r.o. is a Czech Republic-based media company specializing in video production, digital software development, and marketing services. Established in 2009, the company serves businesses seeking professional media content and digital solutions to enhance their market presence. Their website showcases a portfolio of notable clients and long-term collaborations, reflecting a stable market position. Technically, the website uses standard web technologies including jQuery and jwplayer, with analytics powered by Google Analytics and Piwik (Matomo). The site is served over HTTPS with asynchronous script loading, indicating moderate digital maturity. However, privacy and cookie policies are absent, and security headers are not detected, suggesting room for improvement in compliance and security posture. Overall, the website is professional, content-rich, and trustworthy, but would benefit from enhanced privacy compliance and security best practices.
Mediatex s.r.o.mediatex.sk
Telecommunications · Slovakia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mediatex s.r.o. is a Slovak telecommunications service provider specializing in premium tariff services with direct contractual and technical connections to all major operators and integrators of mobile and fixed networks in Slovakia. Their key offerings include audiotex, premium SMS, SMS micro-payments, and SMS marketing services tailored to business customers and partners. The company has been established since 2007, indicating a stable presence in the telecommunications market. The website reflects a professional and consistent brand image with good content quality and clear service descriptions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Slider Revolution, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile optimized and demonstrates good SEO practices. Hosting details are not explicitly disclosed but DNS points to Microsoft Online servers. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No security headers were detected in the provided data. Privacy compliance is basic with cookie consent implemented but no detailed GDPR statements or data protection officer contact found. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website and domain registration data indicate a legitimate and credible business with a good market position in Slovakia's telecommunications sector. Strategic recommendations include enhancing security transparency, publishing privacy and incident response policies, and improving accessibility and GDPR compliance to strengthen trust and compliance posture.
Government · Slovakia
56Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Výskumný ústav vodného hospodárstva (VÚVH) is a well-established Slovak government research institute specializing in sustainable water management, environmental protection, and water quality improvement. With over 70 years of history, it offers a broad range of services including hydrological research, river morphology, water protection, laboratory services, and professional training. The website reflects a mature digital presence with comprehensive content targeting professionals, researchers, students, and the general public interested in water management. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS, cookie consent, and some security best practices, though explicit security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies. Overall, the site projects high trustworthiness and professionalism.
- FFleetcor Poland sp. z o. o.
fleetcor.pl
Energy · Poland
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Fleetcor Poland sp. z o. o. operates as an authorized distributor of fuel cards and telematics solutions, primarily serving businesses with vehicle fleets across Poland and Europe. Their offerings include Shell and MOL fuel cards, telematics via Carnet, and additional services like videotolling, providing clients with centralized and digital fleet expense management. The company leverages a broad network of over 26,000 fuel stations in Europe, positioning itself as a comprehensive mobility partner for various business sizes. Technically, the website is built on modern frameworks such as Next.js and React, integrating multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, Hotjar, and Marketo. The site is mobile-optimized and employs cookie consent management via Cookiebot, reflecting a mature digital infrastructure. Hosting details are not explicit, but domain registration is managed by GoDaddy, a reputable registrar. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA v3 to protect forms. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and privacy compliance is supported by clear privacy and cookie policies. Overall, the website presents a professional and trustworthy digital presence aligned with its business objectives. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further strengthen compliance and user trust.
- FFleetcor Deutschland GmbH
fleetcor.eu
Energy · Germany
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Fleetcor Deutschland GmbH operates a professional website offering modern fleet management solutions tailored for German and European companies. The company provides a range of services including fuel cards, charging cards, telematics, and digital fleet management tools. The website positions Fleetcor as an authorized Shell partner with extensive acceptance networks across Europe, targeting businesses of all sizes. The technical infrastructure is modern, leveraging Next.js and React frameworks, and integrates multiple marketing and analytics tools with a cookie consent mechanism to comply with privacy regulations. Security posture is solid with HTTPS and bot protection, though some security headers could be enhanced. Overall, the website is professional, trustworthy, and well-optimized for its target audience.
FLEETCOR Czech republic s.r.o.fleetcor.cz
Energy · Czech Republic
73Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
FLEETCOR Czech republic s.r.o. operates as a leading provider of international fuel card solutions, including the Shell Card, targeting business clients requiring fleet management and fuel payment services. The company is part of the global FLEETCOR Technologies group, listed on NYSE, with a strong market position in energy and transportation sectors. The website reflects a professional and business-focused approach, offering tailored solutions for corporate clients. Technically, the site is built on Drupal 8, leveraging modern web technologies such as Google Tag Manager and Cookiebot for consent management, ensuring compliance with GDPR and cookie regulations. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the website is trustworthy, compliant, and professionally maintained, supporting the company's business credibility and digital maturity.
Artelartel-solutions.biz
Transportation · France
75Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Artel is a French company founded in 2017 specializing in telematics solutions, likely targeting businesses in transportation and fleet management sectors. The website analyzed is primarily a login portal for their telematics platform, indicating a B2B service model focused on vehicle tracking and fleet management. The company's market position appears niche, serving specialized telematics needs. Technically, the website uses AngularJS and Angular Material frameworks and is hosted on AWS infrastructure, suggesting a modern but somewhat dated frontend technology stack. The site lacks public-facing content such as privacy policies, cookie consent mechanisms, or terms of service, which limits transparency and compliance visibility. Security posture is basic with no detected security headers or advanced protections, and no incident response or vulnerability disclosure information is available. Overall, the website is functional but lacks comprehensive security and privacy features, which could impact trust and compliance.