Security Directory

GRAWEB s.r.o. is a small Czech creative advertising agency specializing in marketing, graphic design, printing, and web development services. The company targets local and regional businesses seeking professional advertising and web solutions. Their website demonstrates a mature digital presence with a portfolio of client references and active social media engagement. Technically, the site uses a modern JavaScript stack with analytics and marketing tools integrated, though some security best practices such as security headers and privacy policies are missing. The security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks comprehensive security policies and vulnerability disclosures. The WHOIS data is missing or indicates the domain may be unregistered or expired, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from improved compliance and security transparency.

1

1000 dveří s.r.o.

1000dveri.cz

50

1000 dveří s.r.o. operates a Czech-based e-commerce and physical retail business specializing in interior doors and door frames. The company offers a wide range of products from well-known brands and provides installation and free measurement services. Their market position is that of a specialized local retailer with a solid customer base and over 2000 doors sold and installed annually. The website is professionally designed with good content quality and clear navigation, targeting Czech and Slovak customers seeking interior door solutions. Technically, the website runs on OpenCart CMS with a modern but slightly dated technology stack including jQuery 2.1.1, Bootstrap, and various JavaScript libraries for UI and analytics. The site is mobile optimized and uses HTTPS with Google reCAPTCHA for form security. Cookie consent mechanisms are implemented in compliance with GDPR, and analytics/tracking tools are used responsibly. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, use of reCAPTCHA, and cookie consent banners. However, some security headers are missing or not explicitly found, and the jQuery version is outdated, which could pose risks. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the website presents a low risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and library updates would enhance the security posture further.

M

Magma Sports & Timing

magmasports.es

49

Magma Sports & Timing is a small Galician company specializing in the professional timing and organization of sports events. Their website showcases a range of services including event organization, infrastructure rental, and participant timing, targeting sports event organizers and participants primarily in Spain. The company maintains a professional online presence with clear contact information and active social media links. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and various carousel and popup libraries, ensuring a responsive and user-friendly experience. However, the site lacks visible advanced security headers and explicit cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data due to query restrictions limits domain registration insights, but the website content and contact details support the legitimacy of the business. Overall, the site is well-structured and professional, with moderate technical and security maturity.

A

Angelini Pharma S.p.a.

angelinipharma.it

67

Angelini Pharma S.p.a. is a prominent pharmaceutical company based in Italy, recognized as a top player in the pharmaceutical and healthcare sector both nationally and across Europe. The company focuses on improving patient quality of life through a portfolio of market-leading brands in areas such as brain health, pain management, antibiotic therapy, and consumer healthcare products. Their business model emphasizes research and development, production, and commercialization of specialty and consumer healthcare medicines. Angelini Pharma operates internationally with multiple country-specific subsidiaries and maintains a strong brand presence supported by certifications and employer awards. Technically, the website employs modern JavaScript libraries including jQuery, Slick Carousel, and Magnific Popup, alongside Piwik PRO for analytics and consent management. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. The presence of comprehensive privacy and cookie policies with active consent mechanisms reflects a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. Analytics usage is moderate with privacy compliance well addressed. Overall, Angelini Pharma's digital presence is professional, trustworthy, and aligned with industry standards. The website effectively supports the company's business objectives and market positioning while maintaining a solid security and privacy posture.

A

Angelini Pharma Magyarország Kft.

angelinipharma.hu

60

Angelini Pharma Magyarország Kft. is a medium-sized pharmaceutical company operating in Hungary as part of the global Angelini S.p.a. group. The company focuses on brain health, oncology, pain management, and consumer health products, serving patients, healthcare professionals, and consumers. The website reflects a professional and consistent brand presence with clear navigation and relevant content in Hungarian. Technically, the site uses modern JavaScript libraries and privacy-focused analytics (Piwik PRO), with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is trustworthy and well-maintained, supporting the company's market position in the healthcare sector.

A

Angelini Pharma Hellas Μονοπρόσωπη Α.Β.Ε.Ε.

angelinipharma.gr

72

Angelini Pharma Hellas is a specialized pharmaceutical company focused on healthcare sectors including the Central Nervous System, mental health, pain management, rare diseases, and consumer health products. The company holds a strong market position as a leader in healthcare within Greece and is part of the larger Angelini S.p.a. group. Their website provides comprehensive corporate information, product details, and news updates, targeting healthcare professionals and consumers interested in pharmaceutical products. Technically, the website uses modern JavaScript libraries and analytics tools such as Piwik PRO, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

A

Angelini Pharma Deutschland GmbH

angelinipharma.de

57

Angelini Pharma Deutschland GmbH is the German subsidiary of the international pharmaceutical division of the private Italian Angelini Group. Established in Germany since 2020, the company focuses on therapeutic areas including Consumer Health and Brain Health, aiming to alleviate neurological disorders and protect mental health. The website presents a professional and consistent brand image, targeting patients, healthcare professionals, and consumers interested in pharmaceutical products. The company operates internationally with multiple subsidiaries across Europe and the USA, reflecting a medium-sized enterprise with a strong market presence. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup, alongside Piwik PRO for analytics, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though no explicit CMS or hosting provider is identified. Performance is moderate, with asynchronous loading of scripts and preconnect hints enhancing speed. From a security perspective, the site enforces HTTPS and uses analytics with anonymization options, but lacks explicit security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. However, no dedicated security policy or incident response contacts were found, and no vulnerability disclosure mechanism is published. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to strengthen security posture and stakeholder trust.

A

Angelini Pharma France

angelinipharma.fr

68

Angelini Pharma France is a medium-sized pharmaceutical company specializing in central nervous system disorders, including epilepsy and rare diseases. The company is part of the larger Angelini S.p.a. group and operates primarily in France and Italy. The website presents a professional image with clear business information, a focus on healthcare expertise, and partnerships. The digital infrastructure uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and incident response information are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The absence of WHOIS data is a concern but does not outweigh the overall legitimacy of the site. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility.

A

Angelini Pharma Česká republika s.r.o.

angelinipharma.cz

72

Angelini Pharma Česká republika s.r.o. is a medium-sized pharmaceutical company focused on the central nervous system (CNS), pain management, rare diseases, and consumer health products within the Czech Republic. It operates as a subsidiary of Angelini S.p.a., a larger parent company. The website presents a professional and consistent brand image, with comprehensive content targeting healthcare professionals and consumers. The company emphasizes research, development, manufacturing, and distribution of pharmaceutical products, positioning itself as a leading player in its sectors locally. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Piwik PRO analytics, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, reflecting compliance with privacy regulations. However, some security best practices like security headers and explicit incident response policies are not evident. From a security perspective, the site uses HTTPS and a consent management platform, but lacks visible security headers and explicit vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness slightly, though the website content and certifications support legitimacy. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF blocking. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

A

Angelini Pharma Bulgaria

angelinipharma.bg

66

Angelini Pharma Bulgaria is a pharmaceutical company focused on health solutions primarily in the central nervous system, pain, rare diseases, and consumer health sectors. The company operates with a medium-sized business model under the parent company Angelini S.p.a., serving healthcare professionals and consumers in Bulgaria and internationally. The website reflects a professional digital presence with good content quality, clear navigation, and consistent branding. Technically, the site uses modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the domain registration and WHOIS data align with the business claims, supporting legitimacy and trustworthiness.

A

Angelini Pharma

angelinipharma.at

66

Angelini Pharma is a medium-sized pharmaceutical company operating primarily in Austria with a strong focus on brain health, oncology, pain management, and consumer health products. The company maintains a professional and content-rich website that serves healthcare professionals and patients, providing information on therapeutic areas, research, and corporate responsibility. The website demonstrates a moderate level of digital maturity with modern JavaScript libraries and analytics tools such as Piwik PRO, but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and contact information is not clearly provided. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Angelini Holding S.p.A.

angeliniindustries.com

62

Angelini Industries is a large, diversified industrial group headquartered in Italy, operating primarily in healthcare, consumer goods, and industrial technology sectors. The company maintains a strong market position with a presence in 21 countries and 12 production sites, supported by a portfolio of leading brands and a commitment to sustainable growth. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including financial reports, sustainability initiatives, and corporate governance information. Technically, the site uses modern JavaScript libraries and frameworks to deliver a responsive and engaging user experience. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data reduces trust from a domain legitimacy perspective and warrants further investigation. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

N

Nadační fond Pink Bubble

pinkbubble.cz

55

Pink Bubble is a Czech non-profit foundation dedicated to supporting young people affected by cancer. The organization focuses on fulfilling personal wishes, organizing therapeutic and recreational stays, providing medical and rehabilitation aids, and supporting education and reintegration into normal life. The website reflects a well-established charity with a strong community presence, supported by partnerships with notable organizations such as Nadace ČEZ and RunCzech. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Hotjar, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

A

Apartmány PEMAG

apartmany-pemag.cz

38

Apartmány PEMAG is a small family-run hospitality business located in Mikulov, Czech Republic, offering modern, air-conditioned apartments with amenities such as wifi, parking, and outdoor leisure facilities. The website positions the business as a comfortable accommodation option for tourists visiting the South Moravia wine region. Technically, the website is built using Mobirise CMS with Bootstrap and jQuery, integrating Google Analytics and Google Ads for marketing and tracking. The site is mobile optimized and well-structured, though some accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

M

MEFANET

mefanet.cz

50

MEFANET is a collaborative educational network project focused on medical and healthcare faculties in the Czech Republic and Slovakia. It aims to enhance cooperation and resource sharing among faculties through modern ICT tools, providing a platform for electronic educational materials, conferences, and a dedicated medical education journal. The website reflects a medium-sized, regionally focused educational initiative with a clear target audience of students and educators in healthcare fields. Technically, the site employs common modern web technologies including Google Analytics and Facebook SDK, with good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

O

Oberösterreichische Multiple Sklerose Gesellschaft

multiplesklerose-ooe.at

56

The Oberösterreichische Multiple Sklerose Gesellschaft website serves as a regional non-profit platform dedicated to supporting individuals affected by Multiple Sclerosis in Upper Austria. The organization provides various services including counseling, financial support, regional groups, events, and specialized programs for newly diagnosed and young patients. The website reflects a clear mission to assist and inform its target audience with relevant and accessible content. Technically, the site is built on WordPress and leverages modern libraries such as jQuery and Bootstrap, ensuring a responsive and user-friendly experience. Cookie consent is managed professionally via Cookiebot, demonstrating compliance with GDPR requirements. Security-wise, the site enforces HTTPS, uses anonymized Google Analytics tracking, and implements cookie consent mechanisms, indicating a solid security posture. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, professionally maintained, and aligned with its non-profit healthcare mission.

A

Angelini Pharma S.p.a.

angelinipharma.com

60

Angelini Pharma S.p.a. is a large international pharmaceutical company focused on research, development, and commercialization of health solutions primarily in the Central Nervous System (CNS), Rare Diseases, and Consumer Health sectors. The company maintains a strong market position with multiple country-specific domains and a clear commitment to sustainability, ethics, and transparency. Their website reflects a professional and comprehensive digital presence targeting healthcare professionals, patients, and partners. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Slider, and Piwik PRO analytics with a consent management platform, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though no CMS or hosting provider details were explicitly detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS registration data is a concern but is mitigated by the professional appearance and extensive content. Overall, the website is trustworthy and well-maintained, though improvements in transparency around security policies and incident response would enhance trust. The domain WHOIS inconsistency warrants further verification to confirm registration legitimacy.

S

Society of Trust and Estate Practitioners (STEP)

steppca.org

64

The STEP Private Client Awards website represents a well-established professional awards platform within the private client legal and financial services industry. It serves a global audience of solicitors, lawyers, accountants, bankers, trust managers, and financial advisors, providing recognition through a rigorous judging process and high-profile events. The website content is rich, professionally presented, and consistent with the STEP brand, indicating a mature digital presence. Technically, the site is built on Drupal 11 with Bootstrap styling, leveraging modern JavaScript libraries for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices and multimedia content such as videos and image galleries. Hosting details are not explicit, but the site uses HTTPS with strong SSL configuration, ensuring secure communications. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy and terms of use, but no cookie consent mechanism is evident. Analytics usage is moderate, primarily via Google Tag Manager, with no active Google Analytics ID detected. Overall, the website is trustworthy and professional, with a strong business credibility score. The absence of WHOIS data due to privacy protection is justified for this type of organization. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response information to improve compliance and trust.

V

Via Aurea, s.r.o.

mrstici.cz

46

Památník bratří Mrštíků is a cultural and educational museum dedicated to the Mrštík brothers and Moravian rural prose, managed by the Regional Museum in Mikulov and established by JMK. The website serves as an information portal for visitors, providing details on exhibitions, events, opening hours, and educational programs. It targets a general audience including cultural visitors and schools. The business model is non-profit, focusing on cultural preservation and education within the Czech Republic. Technically, the website employs a modern tech stack including jQuery, Bootstrap, React, and various JavaScript libraries for UI and UX enhancements. The site is mobile-optimized with good SEO practices and uses Google Analytics for visitor tracking. The CMS appears to be based on the Nette Framework. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and email obfuscation implemented to reduce spam. However, the absence of security headers and lack of published security policies or incident response information indicate areas for improvement. GDPR compliance is addressed with a privacy policy and cookie consent banner. The WHOIS data is missing, which reduces domain transparency and slightly impacts trustworthiness. Overall, the website is professional, trustworthy, and serves its cultural mission well. Strategic recommendations include enhancing security headers, publishing security and incident response policies, adding a security.txt file, and improving WHOIS transparency to strengthen trust and compliance.

A

Asociace inovativního farmaceutického průmyslu

certifikat-aifp.cz

42

The website certifikat-aifp.cz represents the Asociace inovativního farmaceutického průmyslu (AIFP), a Czech association dedicated to promoting ethics in healthcare through certification and training of pharmaceutical representatives. The site offers educational resources including e-learning courses and certificate verification services, targeting healthcare professionals and pharmaceutical industry stakeholders in the Czech Republic. The domain is well-established since 2012, aligning with the organization's credibility and market presence. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.22, along with lightbox plugins for UI enhancements. The site is hosted under a Czech registrar with DNS servers ns.forpsi.net and ns.forpsi.it, indicating local hosting. The site is mobile-optimized with a responsive design and clear navigation, though accessibility features are basic. No modern CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS (implied by script variables), but no security headers were observed in the provided data. The use of outdated JavaScript libraries poses potential vulnerabilities. There is a cookie consent banner for technical cookies only, but no privacy policy or terms of service pages were found, indicating compliance gaps. Contact information is clearly presented with professional emails and phone numbers, but no incident response or security policy information is available. Overall, the website is professional and trustworthy for its niche but would benefit from updating its technical stack, enhancing security headers, and adding comprehensive privacy and security policies to improve compliance and security posture.

The website www.orlaf.cz serves as a specialized medical journal platform focused on otorhinolaryngology and phoniatrics, primarily targeting healthcare professionals in the Czech Republic. Operated by MeDitorial s.r.o., it provides access to journal articles, archives, and specialist content with controlled access via a specialist agreement form. The business model revolves around content provision and professional engagement within a niche healthcare segment. Technically, the site employs a modern JavaScript stack including jQuery, Google Tag Manager, and cookie consent tools, ensuring a responsive and user-friendly experience. The site is well-structured with SEO and accessibility considerations, though some improvements in security headers and explicit policy pages are recommended. Performance is moderate with good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, but lacks visible security headers and incident response information. The absence of WHOIS data is a notable concern, impacting domain trustworthiness, though the website content and structured data strongly indicate legitimacy. Cookie consent and privacy policy presence support GDPR compliance. Overall, the site is professional and trustworthy for its intended audience, with recommendations to enhance security transparency and domain registration clarity to further strengthen trust and compliance.

HARTMANN is a leading healthcare company specializing in medical devices, hygiene, and wound care products. The website targets healthcare professionals and medical sector stakeholders primarily in France, offering a comprehensive catalog of medical and hygiene products. The company positions itself as a market leader with a broad portfolio of key services including incontinence management, wound care, surgical sets, and diagnostics. The website is built on IBM WebSphere Portal technology and incorporates modern web technologies such as jQuery, JWPlayer, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. WHOIS data is missing, which slightly impacts trustworthiness but the overall digital presence and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance.

I

Institut vzdělávání APSS ČR

institutvzdelavani.cz

47

Institut vzdělávání APSS ČR is a well-established educational institution in the Czech Republic specializing in accredited courses and training for social service workers. The organization operates since 2010 and is affiliated with the Asociace poskytovatelů sociálních služeb ČR (APSS ČR), positioning itself as a key player in the professional development of social workers across the country. Their offerings include open courses, tailored training for organizations, and innovative virtual reality training modules. The website reflects a professional and consistent brand image with clear contact information and a focus on practical, interactive education.

C

Czech Health Technology Institute, z. s.

czechhealth.cz

45

Czech Health Technology Institute (CHTI) is a Czech non-profit organization founded in 2023, focused on identifying and supporting innovative healthcare technology solutions to improve healthcare delivery and quality. The organization collaborates with government ministries, academic institutions, and private sector partners to implement humanitarian programs, complex healthcare solutions, centers of excellence, and educational initiatives, particularly supporting healthcare development in Ukraine. The website reflects a professional and consistent brand presence with clear communication of its mission, team, partners, and contact information. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, ensuring good mobile optimization and user experience. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, though it lacks a dedicated privacy policy and terms of service pages, which are important for full compliance. Analytics and marketing tools such as Google Analytics, Google Tag Manager, Incomaker, and Facebook Pixel are used with user consent. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. WHOIS data is consistent with the organization's claims, indicating legitimacy. Overall, the site scores well on professionalism and business credibility but should improve privacy and security documentation. Strategic recommendations include publishing a privacy policy and terms of service, enhancing security headers, and providing incident response and vulnerability disclosure information to strengthen trust and compliance.

A

Asociace výrobců a dodavatelů zdravotnických prostředků

avdzp.cz

45

Asociace výrobců a dodavatelů zdravotnických prostředků (AVDZP) is a well-established Czech healthcare industry association founded in 1992. It represents over 100 Czech manufacturers and suppliers of medical devices and related services, focusing on promoting Czech healthcare solutions domestically and internationally. The association supports its members through advocacy, export assistance, participation in international trade fairs, and collaboration with government bodies and research institutions. Technically, the website uses modern web technologies including Bootstrap, jQuery, and various vendor libraries, with a responsive design and a cookie consent mechanism supporting GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security policies and vulnerability disclosures. Overall, the site is professional, trustworthy, and serves its target audience effectively, though improvements in privacy policy publication and security headers are recommended.

V

Všeobecná zdravotní pojišťovna ČR (VZP ČR)

vzpoura-urazum.cz

43

The website 'VZPoura úrazům' is a project operated by the Všeobecná zdravotní pojišťovna ČR (VZP ČR), focusing on injury prevention among children and youth through educational meetings and awareness campaigns. It holds a reputable position as a long-standing initiative within the Czech healthcare and education sectors, targeting schools and young audiences. The project leverages official branding and maintains active social media channels to engage its audience effectively. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various UI libraries, ensuring a responsive and user-friendly experience. The site is secured with HTTPS and integrates Google reCAPTCHA and cookie consent mechanisms, reflecting a good level of digital maturity. However, some security headers are missing, and there is no visible CMS or hosting provider information. From a security perspective, the site demonstrates solid practices such as encrypted connections and bot protection, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and official contact details strongly indicate legitimacy. Overall, the website is professional, content-rich, and well-targeted, with moderate technical and security maturity. Strategic improvements in security headers, transparency policies, and domain registration data would enhance trust and compliance.

P

Profitroom

profitroom.com

75

Profitroom is a technology company specializing in direct booking solutions for hotels, resorts, and hotel groups. Their website presents a professional and modern interface powered by HubSpot CMS, integrating advanced marketing and analytics tools such as Google Analytics 4, Hotjar, and Cookiebot for consent management. The company targets the hospitality industry with a B2B SaaS model focused on empowering hotels to increase direct bookings through superior technology. The website content is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and published security policies, which are recommended for enhanced trust and compliance. The absence of WHOIS data reduces transparency and slightly impacts trust, though the overall digital footprint and integrations suggest a legitimate and professional operation.

D

Digitain

paydrom.co

49

Paydrom is a payment gateway and service provider specializing in secure and quality payment solutions tailored for the iGaming industry. The company operates under the parent brand Digitain and offers a comprehensive suite of services including cashier integration, business intelligence, transaction management, refunds, risk and fraud management, and payment account management. Their market position is focused on enabling iGaming businesses to optimize payment flows and scale efficiently with a broad range of payment methods and local market coverage. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper Slider, and Font Awesome Pro, providing a responsive and visually appealing user experience. The site includes tracking via Google Tag Manager but lacks visible advanced security headers and privacy compliance mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and displays a PCI certification logo, indicating adherence to payment security standards. However, it lacks a published privacy policy, cookie consent mechanism, and incident response contact details, which are critical for GDPR compliance and overall security posture. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for its business, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

V

VZP ČR

klubpevnehozdravi.cz

43

The website klubpevnehozdravi.cz represents the Klub pevného zdraví, a health benefit club operated by VZP ČR, the largest public health insurance provider in the Czech Republic. It offers registered members various health-related benefits and discounts through partner companies. The site is well-branded with official VZP logos and provides comprehensive information about the club, its partners, and events. The target audience is primarily VZP insured persons and their families. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Maps API, providing a responsive and user-friendly experience. Security-wise, the site implements GDPR-compliant cookie consent mechanisms and uses HTTPS, but lacks visible advanced security headers. WHOIS data is unavailable, which slightly reduces domain trust, but the official branding and contact details strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a trustworthy resource for its audience.

M

MeDitorial s.r.o.

veterinarni-lekari.cz

56

The website www.veterinarni-lekari.cz is a professional information portal dedicated to veterinary healthcare professionals in the Czech Republic. Operated by MeDitorial s.r.o., it provides a comprehensive range of services including veterinary news, accredited courses, thematic articles, event calendars, and career opportunities. The site targets veterinary specialists and healthcare providers, positioning itself as a leading source of veterinary knowledge in the region. Technically, the website employs modern JavaScript libraries such as jQuery, Google Tag Manager, and Magnific Popup, ensuring a responsive and user-friendly experience. The site is mobile-optimized and includes structured data for SEO benefits. However, no CMS or hosting provider information is explicitly detected. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, no explicit security headers were detected, and no dedicated security or incident response policies are published. The absence of WHOIS data for the domain reduces confidence in domain legitimacy, though the website content and company information appear professional and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing security headers, publishing security policies, and resolving WHOIS data visibility to enhance trust and compliance.

M

MeDitorial s.r.o.

prolekarniky.cz

57

MeDitorial s.r.o. operates proLékárníky.cz, a leading Czech informational portal dedicated to healthcare professionals, particularly pharmacists. The website offers a wide range of services including news, accredited courses, professional journals, event calendars, and multimedia content, positioning itself as a key resource in the Czech healthcare sector. The business model focuses on providing specialized content and educational resources, supported by advertising and possibly sponsored content. The company has a medium-sized presence with a history dating back to 2008, reinforcing its established market position. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and OneSignal for notifications, alongside custom CMS components. The site is mobile-optimized with good SEO practices and structured data markup, ensuring accessibility and discoverability. Performance is moderate, with room for optimization. Security is robust with HTTPS enforced and CSRF protections in place, although some security headers are missing. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Security posture is solid but could be enhanced by publishing explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business information, indicating legitimacy and transparency. Overall, the site is professional, trustworthy, and well-suited for its target audience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure or security policy, and continuous monitoring of third-party scripts to maintain security and compliance standards.

M

MeDitorial s.r.o.

prosestru.cz

55

proSestru.cz is a specialized healthcare information portal operated by MeDitorial s.r.o., targeting non-physician healthcare professionals, primarily nurses in the Czech Republic. The website offers a broad range of content including news, educational courses, congress calendars, podcasts, and videos, positioning itself as a leading resource in its niche. The site demonstrates a professional digital presence with consistent branding and a good quality content offering. Technically, it employs modern JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and secure form implementations, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. However, the absence of WHOIS data limits domain legitimacy verification, which is a notable risk factor. Overall, the site is trustworthy and professionally maintained, serving a clear business purpose in healthcare media and education.

E

European University Association

eua.be

69

The European University Association (EUA) is a well-established non-profit organization representing over 900 universities across Europe. The website serves as a comprehensive platform for advocacy, events, publications, and membership services targeted at higher education institutions and stakeholders. The site is professionally designed, mobile-optimized, and includes accessibility features, reflecting a mature digital presence. Technically, it leverages Joomla CMS with modern front-end libraries and integrates multiple analytics and marketing tools while maintaining good security practices such as HTTPS and cookie consent mechanisms. However, it lacks explicit published security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, secure, and aligned with its educational mission.

E

Elias IT Solutions s.r.o.

strednica.sk

58

Strednica.sk is a hospitality and tourism website promoting accommodation, ski center, restaurant, and related services in Ždiar, Slovakia. The business is well-established since 2005 and targets tourists interested in the Belianske Tatry region. The website uses WordPress CMS with modern plugins and technologies such as Google Tag Manager and MailerLite for marketing and analytics. It demonstrates good digital maturity with multilingual support and social media integration. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are absent. No critical vulnerabilities or exposed sensitive data were found. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements. Strategic improvements include adding security headers, publishing privacy and security policies, and enhancing accessibility. The domain WHOIS data aligns well with the business claims, indicating high legitimacy and trustworthiness.

E

Elias IT Solutions s.r.o.

ebikestrachan.sk

56

E-bike Strachan is a specialized e-bike rental service operating in Ždiar, Slovakia, targeting tourists and cycling enthusiasts exploring the Belianske Tatry region. The company offers e-bike rentals, cycling route guidance, and an online reservation system. The business is positioned as a local provider with a strong focus on outdoor tourism and leisure activities. The website reflects a consistent brand identity and leverages social media channels to engage its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and MailerLite for marketing automation. The site is hosted on Websupport and uses DNSSEC for domain security. Performance and mobile optimization are good, with a clear navigation structure and SEO-friendly metadata. Cookie consent mechanisms are implemented to comply with privacy regulations. From a security perspective, the site uses HTTPS with a good SSL configuration and DNSSEC enabled. However, it lacks explicit security policies, incident response contacts, and a security.txt file. The site does not expose sensitive data and uses standard security best practices but could improve HTTP security headers and publish privacy and terms of service documents to enhance compliance and trust. Overall, the website is professional, secure, and compliant with basic privacy requirements, scoring 78/100 in AI evaluation. Strategic improvements in security policy transparency and privacy documentation are recommended to further strengthen the site's trustworthiness and regulatory compliance.

E

Elias IT Solutions s.r.o.

medvedibrloh.sk

60

Medvedibrloh.sk is the official website for Reštaurácia Medvedí brloh Strachan, a hospitality business located in Ždiar, Slovakia. The business operates as part of the larger Strachan Resort ecosystem, offering restaurant services, accommodation, ski center access, event hosting, and family recreational activities. The website targets tourists, local visitors, families, and corporate clients, positioning itself as a regional hospitality provider with a strong local presence and positive customer reviews. The business was founded in 2017 and is operated by Elias IT Solutions s.r.o. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, MailerLite for marketing, and various UI libraries like Owl Carousel and Magnific Popup. It uses WPML for multilingual support and is hosted on Websupport, a Slovak hosting provider. The site shows good mobile optimization, SEO practices, and moderate performance. Structured data is implemented for local business schema, enhancing search engine visibility. From a security perspective, the site uses HTTPS with DNSSEC enabled, indicating strong domain and transport security. Cookie consent mechanisms are implemented with granular user consent options for analytics and marketing cookies. However, explicit security headers like Content-Security-Policy and incident response contact information are missing. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website demonstrates a solid digital presence with good business credibility and privacy compliance. Recommendations include adding a dedicated privacy policy and terms of service pages, publishing a security policy, and enhancing security headers to further improve the security posture. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness.

E

Elias IT Solutions s.r.o.

chaletstrachan.sk

55

Chalet Strachan is a hospitality business based in Ždiar, Slovakia, offering accommodation, wellness, and leisure activities as part of the larger Strachan Resort group. The website is professionally designed using WordPress and integrates multiple modern technologies including Google Analytics, Tag Manager, and MailerLite for marketing automation. The business targets tourists and visitors seeking lodging and recreational experiences in the region. The domain is well maintained with DNSSEC enabled and a registration date consistent with the business's founding year. Contact information and social media presence are clearly provided, enhancing business credibility. Technically, the website employs a modern tech stack with responsive design and good SEO practices. Cookie consent mechanisms are implemented with multilingual support, reflecting attention to privacy compliance. Security posture is solid with HTTPS enforced and DNSSEC enabled, though the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or WAF blocking were detected, and the content is safe for general audiences. Overall, the website demonstrates a good balance of business professionalism, technical implementation, and basic privacy compliance. Strategic improvements include publishing comprehensive privacy and terms policies, adding security and incident response information, and enhancing accessibility features to further strengthen trust and compliance.

M

MeDitorial s.r.o.

prolekare.cz

55

proLékaře.cz is a leading Czech medical information portal primarily serving healthcare professionals, especially doctors. Operated by MeDitorial s.r.o., it offers a comprehensive range of services including medical news, accredited online courses, congress calendars, podcasts, and medical journals. The website is well-branded and positioned as the largest information source for Czech medical professionals. Technically, the site uses modern JavaScript libraries and integrates Google Tag Manager and OneSignal for analytics and notifications. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enabled and secure forms, but lacks some security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. WHOIS data is unavailable, which reduces domain transparency and trustworthiness, though the site content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but should improve privacy and security disclosures.

M

MULTA MEDIO Informationssysteme AG

multamedio.de

57

MULTA MEDIO Informationssysteme AG is a medium-sized German IT service provider specializing in tailored software solutions for Learning and Lottery sectors. With over 25 years of experience, the company offers full-service digital transformation and optimization of information processes, serving clients domestically and internationally. Their market position is strong in Germany, particularly in lottery system development and digital learning solutions. The website reflects a professional and trustworthy business with clear service offerings and a strong brand presence. Technically, the website is built on a modern stack including Pimcore CMS, Bootstrap, and various JavaScript libraries for UI and UX enhancements. It is mobile-optimized, accessible, and SEO-friendly, with good performance. The presence of cookie consent mechanisms and structured data markup indicates digital maturity and compliance awareness. Security posture is solid with HTTPS enforced and ISO 27001 certification indicated, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent management. Business credibility is high, supported by detailed contact information, certifications, and social media presence. Overall, the website and domain present a low-risk profile with strong professionalism and compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security posture.

T

Themedox

themedox.com

54

Themedox is a small digital agency specializing in web design, product design, web development, and branding services. Founded in 2010 and based in the United Kingdom, the company positions itself as an award-winning, client-focused agency with international projects. Their website showcases a professional design with a portfolio of featured projects and client testimonials, targeting professionals and businesses seeking digital agency services. Technically, the website uses modern front-end libraries such as Bootstrap, Swiper, and Font Awesome Pro, hosted via NameCheap with DNS parking. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration is transparent and consistent with the business, though the domain age is younger than the founding year, suggesting recent domain acquisition or rebranding.

E

Elias IT Solutions s.r.o.

hotelbachledka.sk

57

Grand Hotel**** Bachledka Strachan is a well-established hospitality business located in Ždiar, Slovakia, offering luxury accommodation, wellness, gastronomy, and seasonal activities. The website reflects a mature digital presence with multilingual support and a strong focus on customer experience. The business is positioned as a premier grand hotel with high customer satisfaction and a comprehensive range of services targeting tourists and travelers seeking premium lodging and relaxation experiences. Technically, the site is built on WordPress with modern libraries and integrations such as Google Tag Manager and MailerLite, supporting marketing and analytics needs effectively. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and formal security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital asset for the business.

W

WEBO

webo.nl

35

WEBO is a medium-sized Dutch company specializing in innovative timber construction products including window frames (kozijnen), timber frame elements (HSB-elementen), and scaffold-free facade elements (Steigerloos®). The company targets professionals in construction such as contractors, housing corporations, advisors, and architects. Their business model focuses on B2B manufacturing and supply with a strong emphasis on innovation and BIM integration. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, WPML for multilingual support, and LiteSpeed Cache for performance. It uses various marketing and analytics tools including HubSpot, Google Tag Manager, Visual Website Optimizer, and Leadinfo. The site is mobile-optimized and performs well with fast loading times. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks explicit security headers and published security or incident response policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. The domain registration is consistent with the business profile, indicating legitimacy. Overall, WEBO's digital presence is strong with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing security policies, and maintaining regular audits of third-party scripts.

F

Fast-Web

fast-web.cz

45

Fast-Web is a Czech-based small technology company specializing in affordable, modern, and responsive web design services. Founded in 2014, it offers a SaaS model providing website templates combined with a proprietary content management system. The company targets small businesses and individuals seeking cost-effective web solutions with SEO and analytics integration. The website demonstrates a consistent brand presence with clear pricing, demo options, and a focus on ease of use. Technically, the website employs a mature but somewhat dated technology stack centered around jQuery and various UI and animation libraries. The site is mobile-optimized and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, some JavaScript libraries are outdated, which could pose security risks. Performance is moderate, with room for modernization. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, the absence of explicit security policies, incident response contacts, and modern security headers limits the overall security maturity. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, supported by a privacy policy and cookie consent. Overall, the website is trustworthy and professional, with a solid business model and technical foundation. Strategic improvements in security policies, library updates, and incident response readiness would enhance the security posture and compliance further.

ORBE is a Czech-based small marketing and web development agency operating since 2012, offering comprehensive services including website creation, PPC advertising, SEO, influencer marketing, printed advertising, and consulting. The website is professionally designed using WordPress and Elementor, with good content relevance and clear navigation targeting small and medium businesses. Technically, the site uses modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data confirms domain legitimacy and business history. Overall, the website presents a credible business with room for improvement in privacy and security practices.

P

PRYMAT spółka z ograniczoną odpowiedzialnością

kucharek.pl

70

Kucharek is a well-established brand specializing in all-purpose seasoning and related food products, with a strong market presence in Poland, the Czech Republic, and Central/Eastern Europe. The company operates under PRYMAT spółka z ograniczoną odpowiedzialnością and is part of the PrymatGroup. Their product range includes seasoning blends, broth cubes, liquid spices, and dried vegetables, catering to consumers who value traditional cuisine and quality ingredients. The website reflects a professional and consistent brand image with clear product information and contact details. Technically, the website is built on WordPress with modern frameworks and libraries such as Yoast SEO, Google Tag Manager, and Google reCAPTCHA, hosted by OVH SAS with DNSSEC enabled. The site demonstrates good mobile optimization, SEO practices, and performance, although some accessibility features could be enhanced. Security measures include HTTPS enforcement and a comprehensive cookie consent mechanism, but additional HTTP security headers and published security policies would strengthen the posture. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned cookie consent and a detailed privacy policy. However, the absence of incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. Overall, Kucharek's website is trustworthy, professionally maintained, and compliant with key privacy regulations, supporting its business credibility and customer trust. Strategic enhancements in security headers, accessibility, and published security policies are recommended to further elevate the site's security and compliance maturity.

S

SIESTA SOLUTION s.r.o.

siestasolution.com

68

Siesta Labs is a Czech Republic-based innovation lab and startup studio founded in 2020, specializing in software development and startup incubation services. Their offerings include AI, web and mobile applications, system architecture, and business consulting. The company targets businesses and startups seeking expert digital product engineering and growth support. The website reflects a professional and consistent brand with clear navigation and relevant content for their audience. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Application Insights, and Facebook Pixel. Hosting appears to be managed via Vas-hosting, with domain registration consistent with company history. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No explicit security or incident response policies are published, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.

B

Balance 21, s.r.o.

bala21.cz

52

Balance 21, s.r.o. operates the website bala21.cz, an e-commerce platform specializing in probiotic products including kombucha-based drinks and supplements. The company targets health-conscious consumers in the Czech Republic, offering a range of probiotic beverages and capsules designed to support digestion and immunity. The website presents a professional and consistent brand image with clear business and legal information, including GDPR-compliant privacy policies and terms of service. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Hosting is provided by WEDOS, consistent with the domain registration data. Security posture is adequate with HTTPS enforced and secure forms, though some security headers are missing and no incident response or vulnerability disclosure information is published. Overall, the site is trustworthy and well-positioned in its niche market.

The website furnituretesting.eu represents a professional furniture testing laboratory operating under TZÚ, s. p., a Czech entity providing comprehensive testing services for the furniture and textile industries. The site highlights key services such as furniture testing, flammability testing, microbiology, and surface treatment testing, positioning itself as a trusted and accredited testing provider with certifications like BIFMA Compliant®. The target audience includes manufacturers and industry professionals seeking quality assurance and certification services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. WHOIS data is privacy protected, which is common for EU domains, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.

T

Twigsee s.r.o

twigsee.com

70

Twigsee s.r.o operates a SaaS platform focused on kindergarten and childcare management, providing a comprehensive application that facilitates communication between kindergartens, teachers, and parents. The company has established a strong market presence in the Czech Republic with over 250,000 users and multiple partner organizations. Their platform offers key services such as attendance tracking, digital registries, meal and fee management, GDPR compliance tools, and multimedia sharing, targeting educational institutions and families. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and Slick Carousel, and it leverages Cloudflare for SSL and CDN services. The site is well-optimized for mobile devices and includes integrations for Google Tag Manager, indicating a mature digital infrastructure. The presence of app store links for Android, iOS, and Huawei platforms further demonstrates a multi-channel approach. From a security perspective, Twigsee employs HTTPS with strong Cloudflare SSL encryption and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not clearly visible in the HTML, the overall security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration details reduces transparency and slightly impacts trustworthiness. Overall, Twigsee presents a professional, secure, and user-friendly platform with strong business credibility in the education sector. Strategic improvements in domain transparency and security header implementation would further enhance their security and compliance standing.