Medium-risk security reports

Hightouch operates as a composable customer data platform (CDP) and AI decisioning provider, focusing on enabling marketers and enterprises to leverage data for personalization and targeting. The company positions itself as a technology-driven SaaS platform with a mature market presence, supported by a professional and well-structured website. The technical infrastructure is modern, utilizing Next.js and Chakra UI frameworks, hosted on AWS, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional and trustworthy, with a high AI score reflecting strong content quality and business credibility but moderate privacy compliance.

ElDiario.es is a prominent Spanish digital newspaper focused on current affairs, politics, and economic analysis. It operates a subscription-based business model with a paywall to monetize its content. The website demonstrates a mature digital presence with professional branding and high-quality content targeted at a general audience interested in independent journalism. Technically, the site employs modern JavaScript frameworks, integrates multiple advertising and tracking services, and shows good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic, with a consent management platform present but no explicit privacy or cookie policies detected in the provided HTML. WHOIS data is restricted by the Spanish registry, limiting domain registration transparency. Overall, the site is legitimate and trustworthy but could improve transparency and security practices.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Restaurant Falken is a small hospitality business based in Liestal, Switzerland, specializing in fresh lunch menus, including burgers, salads, and desserts. The restaurant emphasizes an alcohol-free environment and offers catering and take-away services. The website is built on WordPress using Elementor and Astra theme, reflecting a modern and responsive design with good SEO practices. The presence of a cookie consent banner and detailed cookie preference modal indicates compliance awareness with GDPR regulations, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response contact information. Overall, the website is professional and trustworthy, serving its local audience effectively.

Pro Natura Zentrum Champ-Pittet is a Swiss non-profit environmental organization focused on nature conservation, environmental education, and visitor engagement through exhibitions, protected natural areas, and a restaurant. The website reflects a well-established regional center with clear business objectives centered on public education and nature preservation. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates privacy compliance tools such as Usercentrics for cookie consent. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

Pro Natura Zentrum Aletsch is a Swiss non-profit nature conservation and education center located in the Alps near the Aletsch Glacier. The organization offers visitor experiences including nature center visits, accommodation, dining, guided excursions, and educational programs targeting families, schools, and nature enthusiasts. The website is professionally designed with clear navigation, multilingual support, and strong branding consistency. Technically, it is built on Drupal 10, uses modern web technologies, and integrates consent management and analytics tools responsibly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a trustworthy and credible organization with a strong focus on environmental education and conservation.

PCI Proxy is a technology company specializing in secure payment data management solutions. Their platform enables organizations to build and control payment flows securely by leveraging tokenization and compliance offloading, thereby minimizing PCI scope and preventing vendor lock-ins. The company targets businesses that require robust payment data security and compliance solutions, offering key services such as a Universal Token Vault and 3-D Secure authentication. The website demonstrates a professional digital presence with good mobile optimization and clear navigation, supported by modern web technologies including Webflow CMS, Google Analytics, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and use of trusted third-party services support a positive risk assessment. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer contact and legal information to strengthen trust and compliance.

Tier&Technik is a well-established international trade fair focused on livestock farming, agricultural production, specialty crops, and agricultural technology, held in St. Gallen, Switzerland. The event targets agricultural professionals, exhibitors, and industry stakeholders primarily from Switzerland and neighboring countries. The website reflects a professional and consistent brand presence, providing comprehensive information about the event, exhibitors, and related news. It leverages modern web technologies including Bootstrap, Usercentrics for privacy compliance, and Google Analytics for visitor insights. Multimedia content such as videos and images enhance user engagement. Security posture is solid with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence aligned with its business objectives.

Gastia is a specialized trade fair and experiential event organizer focused on the hospitality industry in Switzerland, particularly targeting hoteliers, restaurateurs, and catering professionals. The website promotes the upcoming event scheduled for March 2026, highlighting its role as a regional leader in hospitality trade fairs with a strong emphasis on quality, regionality, and knowledge transfer. The business operates under the parent company OLMA Messen St. Gallen, which lends credibility and stability to its operations. The site provides rich multimedia content, including videos, photo galleries, and news articles, to engage its professional audience. Technically, the website employs modern web technologies such as ES modules, Bootstrap for UI components, Splide.js for carousels, and Usercentrics for GDPR-compliant cookie consent management. Google Analytics is used for visitor tracking, and the site is served over HTTPS with good SSL configuration. The site is mobile-optimized with a clear navigation structure and good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a reputable cookie consent platform, but lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. WHOIS data confirms the domain's legitimacy with consistent registrant information matching the business profile. Overall, Gastia's website is professional, trustworthy, and well-suited for its target audience. It demonstrates a solid digital presence with moderate tracking and compliance measures. Strategic improvements in security transparency and accessibility could further enhance its posture and user trust.

BAYO Solutions AG operates a specialized cloud-based CRM platform tailored for insurance brokers, fiduciary companies, and law firms primarily in Switzerland. Their solution focuses on enhancing customer relationship management and secure data exchange, positioning them as a niche player in the Swiss financial and legal technology sectors. The website reflects a professional and consistent brand image with clear contact channels and partner affiliations. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with Google Tag Manager for analytics. The CMS identified is MoveCMS, indicating a custom or specialized content management approach. Security-wise, the site enforces HTTPS and displays a CyberSeal certification, signaling adherence to cybersecurity best practices. However, there is room for improvement in publishing explicit security policies and headers. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR through visible privacy and cookie policies.

RULEMATCH AG operates a specialized spot cryptocurrency trading venue based in Switzerland, leveraging Nasdaq technology to serve banks, securities firms, and institutional clients. The company positions itself as a market operator focused on interbank trading and settlement of digital assets, emphasizing market integrity, AML/CFT compliance, and ultra-low latency trading. The website reflects a professional and modern digital presence with comprehensive trading documentation and news insights, targeting a niche institutional audience. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Iubenda for cookie and privacy management, and Google Tag Manager for analytics. Security posture is solid with HTTPS and obfuscated contact details, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the presence of regulatory identifiers and professional content. Overall, RULEMATCH demonstrates a mature digital infrastructure suitable for its specialized financial services market.

The website www.linsi.foundation appears to be a small-scale foundation or non-profit entity hosted on the Wix platform. The site content is minimal and lacks detailed business descriptions, contact information, or policy disclosures. The technical infrastructure is based on Wix's standard technology stack, including core-js and polyfills, indicating a modern but basic setup. Security posture is weak due to the absence of security headers and lack of visible privacy or cookie policies. The WHOIS data is unavailable due to a malformed response, which limits the ability to verify domain legitimacy and registrant details. Overall, the site presents a low trust profile with limited business credibility and compliance indicators.

QuickFrame operates a sophisticated video creation and insights marketplace platform that connects brands with vetted video professionals to produce high-quality video content across multiple styles and objectives. The company has established itself as a trusted partner with preferred partnerships with major digital advertising platforms such as Meta, LinkedIn, TikTok, and MNTN. Their platform supports end-to-end video production workflows including concept development, bid management, collaboration, and final delivery. Technically, the website is built on WordPress and leverages a modern tech stack with extensive analytics and marketing integrations, hosted on AWS infrastructure. The site is well-optimized for SEO, mobile, and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, QuickFrame presents a professional, trustworthy, and business-focused online presence with room for minor security and privacy enhancements.

The website p-h-s-druck.eu is currently a parked domain hosted by IONOS SE and managed via SedoParking services. There is no active business content, company information, or contact details available on the site. The site primarily displays a cookie consent modal referencing external privacy and cookie policies hosted on SedoParking and IONOS domains. Technically, the site uses basic HTML and JavaScript with scripts loaded from SedoParking for parking functionality. There is no evidence of HTTPS or security headers, and no forms or data collection mechanisms are present. The security posture is minimal, with no incident response or security policies disclosed. Overall, the domain appears inactive as a business website and serves as a placeholder or for future use.

FAKTOR VIER is a small, professional web agency based in Luzern, Switzerland, specializing in WordPress and WooCommerce development for custom websites and online shops. The company positions itself as a local expert with a focus on delivering tailored digital solutions to businesses and individuals seeking e-commerce and website services. The website reflects a good level of digital maturity, leveraging modern technologies such as WordPress, WooCommerce, Yoast SEO, and Font Awesome Pro icons, alongside cookie consent mechanisms to comply with privacy regulations. The technical infrastructure is sound, with moderate performance and good mobile optimization, although hosting details are not explicitly disclosed. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit security policies indicates room for improvement. Privacy compliance is partial due to the lack of a published privacy policy and terms of service, which are critical for GDPR adherence. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation to strengthen compliance and user trust.

AGC Inc. is a large multinational enterprise specializing in manufacturing and technology sectors including glass, electronics, chemicals, life sciences, and ceramics. The company positions itself as an innovator with a strong focus on sustainability and corporate governance. The website is professionally designed, content-rich, and targets a broad audience including investors, customers, and partners. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies added. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site reflects a mature digital presence consistent with a large enterprise, though WHOIS data is missing or obscured, which slightly impacts trust assessment.

AGC Automotive is a leading global supplier specializing in automotive glazing solutions with a history spanning over 60 years. The company positions itself as a world leader in automotive glass, offering a broad range of products including automotive replacement glass, glass for transport vehicles, and mobility solutions such as displays, antennas, and sensors. The website reflects a mature enterprise with a strong focus on innovation and sustainability, aligned with the AGC Group's corporate philosophy. Technically, the website employs modern JavaScript frameworks and integrates multimedia content via YouTube APIs, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, though improvements can be made by implementing security headers and explicit cookie consent mechanisms. The absence of WHOIS data raises concerns about domain registration transparency, warranting further verification. Overall, the website is professional, trustworthy, and well-structured, targeting automotive industry professionals and partners.

AGC Glass Europe is a leading European manufacturer and marketer of flat glass products serving the construction, automotive, and solar power sectors. The company operates under the global AGC brand with a strong presence across Europe and a workforce of approximately 13,000 employees. The website targets architects, specifiers, distributors, and other stakeholders in the glass and construction industries, offering extensive product information, technical support, and digital tools such as a glass configurator. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates marketing and analytics tools like Google Tag Manager and Visual Website Optimizer. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and policies could be improved. The WHOIS data is unavailable or indicates the domain may not be registered, which is a concern for domain legitimacy, but the website content and branding strongly suggest a legitimate business entity. Overall, the site is professional, well-structured, and compliant with privacy regulations.

Mary Kay InTouch Czech Republic is a dedicated online portal for independent Mary Kay beauty consultants in the Czech Republic, providing continuous access to business tools, product ordering, and training resources. The site is part of the global Mary Kay brand ecosystem, leveraging Salesforce Community Cloud technology to deliver a secure and integrated user experience. The platform integrates multiple trusted payment gateways and analytics services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and strict Content-Security-Policy headers, although explicit privacy and terms of service documentation are not directly linked on the login page. Overall, the site demonstrates a professional and trustworthy presence aligned with Mary Kay's global standards.

AQUA MARIA Marienbad is a small luxury mineral water company based in the Czech Republic, specializing in low mineralization mineral water suitable for everyday drinking and spa carbonic baths. The website is built on WordPress using the Divi theme and incorporates Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The site design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and business credibility. Security posture is basic with HTTPS enabled but missing security headers and incident response information. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices.

The website rudolfuvpramen.cz represents BHMW a.s., a small hospitality business operating the Mariánskolazaňský Rudolfův pramen, a healing spring in Mariánské Lázně, Czech Republic. The site provides information about the spring's healing properties, targeting general audiences interested in wellness and spa treatments. The business appears to have a local/regional market position with a focus on health and wellness services. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Google Analytics for tracking and Tawk.to for live chat support. The site is moderately optimized for mobile and SEO, with good content quality and consistent branding. Security-wise, HTTPS is enabled and no sensitive data is exposed, but the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. Overall, the site is professional and trustworthy but lacks some critical compliance documentation.

Główny Instytut Górnictwa - Państwowy Instytut Badawczy (GIG-PIB) is a well-established Polish government research institute specializing in mining engineering, environmental engineering, and related industrial services. With a century of experience, it offers a broad portfolio including laboratory testing, certification, environmental monitoring, and training. The institute serves industry, government, and research sectors, positioning itself as a key player in sustainable regional development. Technically, the website is built on Drupal 7 with modern frontend technologies such as Bootstrap and jQuery. It integrates Google Analytics and Tag Manager for tracking, though it lacks a cookie consent mechanism. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and incident response contact information, which are areas for improvement. The absence of a cookie consent banner may pose GDPR compliance risks. Overall, the website is professional, trustworthy, and content-rich, with strong business credibility. Strategic enhancements in privacy compliance and security headers would further strengthen its posture.

The website slaskie.pl serves as the official online portal for the Marshal's Office of the Silesian Voivodeship in Katowice, Poland. It provides comprehensive information about regional government activities, public services, cultural events, and regional development initiatives. The site targets residents and stakeholders within the Silesian region, offering access to news, administrative resources, and social media engagement. The business model is that of a government public service entity, positioning itself as the authoritative source for regional information and services. From a technical perspective, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and various JavaScript libraries for enhanced user experience such as DataTables and FullCalendar. The site is hosted by OVH SAS, a reputable provider, and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. Security-wise, the site benefits from HTTPS encryption and a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers like Content-Security-Policy and Strict-Transport-Security, which are recommended to enhance protection. No incident response or vulnerability disclosure information is provided, indicating an area for improvement in security transparency. Overall, the website is trustworthy and professional, with a high legitimacy score based on WHOIS data and content consistency. It effectively serves its government function with good content quality and user experience. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing security policies to strengthen its security posture and compliance.

Moravskoslezské energetické centrum, p. o., is a Czech regional public organization founded in 2014, specializing in energy consulting, management, and clean mobility development for the Moravskoslezský kraj region. The organization provides expert advisory services to regional public institutions and municipalities, focusing on energy savings, renewable sources, and strategic regional development. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response details. Overall, the site is trustworthy, compliant with GDPR, and well-positioned as a regional energy consultancy.

Moravskoslezské Investice a Development, a.s. (MSID) operates as a regional development agency focused on the Moravskoslezský kraj in the Czech Republic. The company aims to foster regional growth by supporting municipalities, businesses, and environmental initiatives. Their services include investment facilitation, marketing the region, environmental support, and managing land offers. The website is professionally designed, content-rich, and targets regional stakeholders including local governments, investors, and residents. The business model centers on regional development and sustainability, positioning MSID as a key player in the local government and real estate sectors. Technically, the website is built on WordPress with modern front-end technologies such as Tailwind CSS, Swiper.js, and DotLottie animations. SEO is well implemented with Yoast SEO plugin and structured data. The site is mobile optimized and uses analytics tools like Microsoft Clarity and Google Tag Manager. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses secure forms with consent checkboxes for newsletter subscriptions. However, it lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent. Overall, MSID's website demonstrates a mature digital presence with strong business credibility and good technical implementation. Strategic improvements in privacy compliance and security headers would further strengthen their security posture and trustworthiness.

Městská knihovna Tábor is a municipal library serving the community of Tábor, Czech Republic, offering a wide range of services including physical and electronic book lending, cultural events, educational programs, and community engagement activities. The website reflects a well-structured public service platform targeting a broad audience including children, adults, seniors, and foreigners. The business model is consistent with a government-funded institution focused on public access to knowledge and culture. Technically, the website employs modern JavaScript libraries, including jQuery and Google Analytics, and integrates a third-party payment widget for ticket sales. The site is mobile-optimized with a moderate performance profile. However, some technical improvements are recommended, such as implementing security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site uses HTTPS and restricts Google Analytics data collection by default, indicating a privacy-conscious approach. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and structure suggest a trustworthy municipal entity. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a solid digital presence for a public library with room for technical and privacy enhancements. Strategic recommendations include improving security headers, adding cookie consent, and enhancing transparency around data protection to strengthen user trust and compliance.

NTG AGRI s.r.o. is a Czech-based company specializing in animal nutrition and consulting services for farm animals. Established in 2012, the company offers a range of products including premixes, mineral-vitamin supplements, milk replacers, and silage inoculants, alongside comprehensive advisory services aimed at optimizing farm production. The website reflects a professional and consistent brand presence, targeting agricultural businesses and farmers in the Czech Republic. Technically, the site is built on WordPress with Elementor and uses modern web technologies, hosted likely by WEDOS. Security posture is good with HTTPS enforced, though lacking some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

IPEXO is a Czech-based IT service provider specializing in cybersecurity, cloud services, website and e-shop development, and digital marketing. The company targets businesses seeking comprehensive internet solutions to enhance security, online presence, and customer acquisition. The website demonstrates a professional design with clear navigation and multiple interactive contact forms protected by Google reCAPTCHA, indicating a moderate level of digital maturity and security awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. The site lacks explicit security policies and incident response information, which are critical for trust in cybersecurity services. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

EGE, spol. s r.o. is a Czech-based medium-sized company specializing in the development, manufacturing, installation, and servicing of energy-related equipment, including encapsulated conductors, arc suppression reactors, and steel constructions. With over 30 years of experience, the company serves industrial and energy sectors, offering full-service solutions and maintaining a strong market presence supported by certifications and EU-funded projects. The website reflects a professional business model targeting B2B clients in energy and manufacturing industries. Technically, the website employs modern web technologies such as Google Tag Manager and Google Analytics, with responsive design and basic accessibility features. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate GDPR compliance, although some SEO and accessibility improvements are possible. From a security perspective, the site shows good practices like HTTPS enforcement and cookie consent but lacks some security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain trustworthiness, but the website content and business information appear legitimate. Overall, the website is safe, professional, and compliant with privacy regulations, though domain registration transparency should be improved to enhance trust. Strategic recommendations include adding security headers, publishing incident response details, and enhancing SEO and accessibility.

KOH-I-NOOR Mlada Vozice is an established manufacturing company specializing in aerosol valves and plastic accessories, with a history spanning 75 years. The company offers project concept, design, and testing services, targeting industrial clients and manufacturers in the aerosol product sector. Their market position is that of a reputable and experienced manufacturer based in the Czech Republic. Technically, the website is built on WordPress using modern plugins such as Elementor and WooCommerce, supported by Google Tag Manager for analytics. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Kalas.cz is a Czech-based e-commerce website specializing in cycling apparel and sportswear for men, women, and children. The company boasts over 30 years of experience in manufacturing quality cycling clothing, positioning itself as a reputable brand within the Czech and Slovak markets. The website offers a broad range of products including jerseys, shorts, vests, and accessories, along with options for custom designs. The business model focuses on direct online sales supported by a professional and user-friendly website. Technically, the website employs modern web technologies such as JavaScript ES modules, Google Tag Manager, and SmartEmailing for marketing and analytics. The site is mobile-optimized with good SEO practices and a responsive design. However, some security best practices like explicit security headers and a published security policy are missing, which could be improved. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, indicating a baseline compliance with privacy regulations such as GDPR. The absence of WHOIS data for the domain is a concern, as it limits the ability to verify domain legitimacy and ownership, slightly reducing trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Kalas.cz presents as a professional and trustworthy e-commerce platform with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration information to bolster trust and compliance.

Pagebuilder.cz is a Czech-based technology company offering a proprietary content management system designed for easy website creation and management. The company positions itself as a small, customer-focused provider delivering cloud-hosted, modern CMS solutions that are simpler and more secure than traditional platforms like Wordpress or Joomla. The website is professionally designed, mobile-optimized, and integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel. However, it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is generally good with HTTPS and cloud hosting, but missing security headers and incident response information are areas for improvement. WHOIS data is unavailable, which reduces transparency but the site content and contact details support legitimacy.

Schweizerische Bodensee-Schifffahrt AG operates two harbor facilities in Romanshorn, Switzerland, providing mooring and maintenance services for private sailing and motor boats. The company holds a regional position in transportation and harbor management on Lake Constance, offering additional services such as boat lifting and radar training. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation tailored to boat owners and visitors. Technically, the site employs modern web technologies and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, though some security headers are not explicitly detected in the HTML source. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-maintained, supporting the company's business objectives effectively.

Kornhaus Romanshorn operates as a specialized event venue located on the shores of Lake Constance in Switzerland. The business offers rental spaces for private and corporate events including weddings, seminars, and Christmas parties, complemented by gastronomy and apartment services. The website reflects a niche hospitality business with a strong regional presence and partnerships with local service providers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, indicating a solid technical foundation. However, the absence of a cookie consent mechanism and explicit incident response contacts suggests areas for compliance and security improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Ristorante Porto is a small hospitality business offering Italian cuisine at the Bodensee region in Switzerland. The website presents a professional and consistent brand image with a focus on local restaurant services. The technical infrastructure is based on WordPress with Elementor, integrating modern analytics and marketing tools such as Google Tag Manager and Matomo. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and well-positioned locally, but should enhance compliance and security documentation to improve trust and regulatory adherence.

Restaurant Hafen is a small hospitality business located in Romanshorn, Switzerland, offering restaurant dining, terrace seating, catering, and event hosting services. The website positions itself as an award-winning local restaurant with a focus on regional and fresh market dishes, appealing to a general audience interested in quality gastronomy. The business model centers on hospitality services with additional catering and event offerings, supported by partnerships with related local businesses.

Schweizerische Bodensee-Schifffahrt AG operates as a regional transportation and tourism company specializing in ferry and cruise services on Lake Constance (Bodensee). The company offers a variety of services including scheduled ferry routes, themed experience trips, event hosting such as weddings and corporate charters, and hospitality through partner restaurants. Their market position is that of a key regional player in transportation and tourism, targeting general audiences including tourists and local residents. The website reflects a professional and consistent brand image with good content quality and clear navigation.

Friendly LLC is a Swiss software company specializing in privacy-focused web analytics and marketing automation solutions. Their flagship products, Friendly Analytics and Friendly Automate, provide businesses with tools to optimize websites and automate marketing workflows while ensuring compliance with Swiss data protection laws (nFADP) and the EU GDPR. The company positions itself as a Swiss alternative to Google Analytics and HubSpot, emphasizing data residency in Switzerland and high data protection standards. Their market position is strengthened by certifications such as ISO 27001 and ISO 9001, and labels like 'swiss made software' and 'swiss hosting'. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO Premium and Matomo Analytics configured for privacy (cookies disabled). The site is well-optimized for performance, mobile responsiveness, and accessibility. The company uses Mautic for marketing automation and integrates with common CRM systems. Hosting is implied to be Swiss-based, supporting their data protection claims. From a security perspective, Friendly LLC demonstrates strong practices including HTTPS enforcement, ISO certifications, and data hosting in Switzerland. However, the site lacks visible cookie consent mechanisms and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The use of privacy-friendly analytics and transparent business practices further enhance their security posture. Overall, Friendly LLC presents a trustworthy, professional, and privacy-conscious business with a strong Swiss identity. Strategic recommendations include implementing cookie consent banners, publishing incident response policies, and enhancing security headers to further improve compliance and trust.

SEO Media is a Latvian digital marketing agency specializing in SEO, web development, PPC management, advertising media, and content creation services. The company targets businesses seeking to improve their online visibility and organic search results. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions. Technically, the site runs on WordPress with popular plugins such as Yoast SEO and KingComposer, and uses Cloudflare for DNS and likely CDN services. Analytics and marketing tools include Google Analytics and Facebook Pixel, with GDPR-compliant cookie consent mechanisms in place. Security posture is good with HTTPS and IP anonymization, but lacks explicit security headers and public security policies. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations.

JM Holding is a Latvian digital agency specializing in website development, e-commerce solutions, SEO optimization, and online advertising services including Google Ads. The company targets businesses and individuals seeking to establish or improve their online presence. The website is professionally designed using WordPress and Elementor, with integrated Google Analytics and reCAPTCHA for analytics and security. While the technical infrastructure is modern and the site is mobile optimized, there are gaps in privacy compliance such as missing privacy and cookie policies. Security posture is adequate with HTTPS and reCAPTCHA but lacks security headers and formal security policies. Contact information is clearly provided, enhancing business credibility. Overall, JM Holding presents as a legitimate and professional small-sized technology service provider in Latvia.

The website valterscapital.com is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by the Cloudflare error 526 page. This prevents any meaningful content or business information from being accessed or analyzed. The domain is very new, registered in March 2024, and uses Cloudflare for DNS and CDN services. However, the lack of a valid SSL certificate and absence of any privacy, cookie, or contact information significantly undermine the site's credibility and security posture. No business description or services are presented, and no forms or tracking technologies are detected, indicating a minimal digital footprint at this time. From a technical perspective, the site relies on Cloudflare but suffers from critical SSL misconfiguration that blocks user access. There is no evidence of modern CMS, frameworks, or analytics tools. The site lacks SEO optimization and accessibility features, and no security headers are detected. The WHOIS data is consistent with a legitimate registrar but shows a very recent domain age, which may not align with any claims of an established business. Security-wise, the primary concern is the invalid SSL certificate causing the site to be blocked by Cloudflare, which is a critical issue. No other security policies, incident response contacts, or certifications are found. The absence of privacy and cookie policies also indicates non-compliance with GDPR and other privacy regulations. Overall, the security posture is poor, and the site is not currently trustworthy for visitors or customers. Given these findings, the overall risk assessment is high. The site should urgently address the SSL certificate issue to restore accessibility, implement standard security headers, and publish privacy and cookie policies. Adding clear business and contact information will improve trust and compliance. Until these issues are resolved, the site remains inaccessible and lacks credibility.

responsiblo s.r.o. operates a specialized smart education platform targeting businesses in regulated sectors such as alcohol, gambling, tobacco, pharmaceuticals, and financial services. The platform offers interactive, customizable educational content designed to promote responsible product use and help companies meet CSR and regulatory compliance requirements. The company is positioned as an innovative leader in responsible business education with a focus on leveraging AI and machine learning for tracking and analytics. Technically, the website uses modern web technologies including Vue.js and is well-optimized for mobile and SEO, though some security headers and cookie consent mechanisms are missing. The security posture is solid with HTTPS enabled and no exposed sensitive data, but improvements in DNS security and explicit security policies are recommended. Overall, the website is professional, trustworthy, and mature-audience oriented due to the nature of the industries served.

Projekt LIFE COALA is a government-backed environmental initiative focused on increasing climate resilience and sustainable development in the Moravian-Silesian region of the Czech Republic. The project is co-financed by the European Union LIFE program and involves multiple regional government and institutional partners. The website provides detailed information about project activities, partners, events, and public engagement efforts. The target audience includes local residents, farmers, public authorities, and stakeholders interested in climate adaptation. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, accessible, and well-structured with good SEO practices. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the EU co-financing and partner ecosystem provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and serves its public mission well. Strategic improvements in security headers, cookie consent, and domain registration transparency would enhance its security posture and compliance.

TESSEA is a Czech national membership network dedicated to social entrepreneurship, connecting and supporting social enterprises across the Czech Republic. The website serves as a platform to present these enterprises and advocate for their interests. The organization appears to be well-established since 2015, with a clear focus on social economy sectors. The website is built on Joomla CMS with a moderate technical infrastructure including Google Analytics and reCAPTCHA for security and analytics purposes. The site is GDPR compliant with a cookie consent mechanism and a comprehensive privacy policy. Security posture is adequate with HTTPS enforced and some security best practices in place, though improvements are recommended in security headers and updating legacy frameworks. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, TESSEA presents a professional and trustworthy digital presence aligned with its business mission.

Federace nábytkových bank a reuse center is a Czech non-profit federation uniting furniture banks and reuse centers across the Czech Republic. The organization focuses on environmental sustainability by promoting reuse as an alternative to waste disposal. Their services include networking reuse operators, providing expert consultation for new reuse centers, organizing training, and fostering partnerships with public and private sectors. The website is professionally designed, content-rich, and optimized for SEO, targeting reuse operators, NGOs, public administration, and the general public interested in sustainability. Technically, the site runs on WordPress with modern plugins and supports HTTPS with secure form handling. However, the absence of WHOIS data and cookie consent mechanisms slightly reduce trust and privacy compliance scores. Overall, the site demonstrates a strong commitment to its mission with good digital maturity and security posture.

DIFFERENT.VISION is a small Czech Republic based web development agency operated by provocation s.r.o., founded in 2018. The company specializes in creating websites and applications, targeting businesses or individuals seeking web presence and custom applications. The website is minimalistic, providing basic contact information and service description without extensive content or policies. Technically, the site uses modern web standards including HTTPS, Google Fonts, and Google Analytics for tracking. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The domain registration data is consistent with the business location and entity, indicating legitimacy. Overall, the digital maturity is moderate with room for improvement in security and compliance.

Flight Safety Foundation is a well-established, independent non-profit organization dedicated to advancing aviation safety globally through research, education, advocacy, and publishing. With over 80 years of history, it holds a strong market position as a trusted leader in the aviation safety sector, serving aviation professionals and stakeholders worldwide. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand presence supported by partnerships with major aviation and aerospace companies. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO. It leverages Amazon AWS for hosting and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is secure, professional, and trustworthy, with minor improvements recommended in security headers, DNS security, and privacy consent mechanisms to further strengthen its posture.

Rango Exchange is a technology-driven platform specializing in cross-chain decentralized exchange (DEX) and bridge aggregation. It enables users to swap assets across more than 70 blockchains seamlessly, leveraging smart routing over 100+ DEXs and bridges. The platform targets DeFi users, developers, and crypto wallets, offering APIs, SDKs, and widgets for integration. Rango positions itself as a leading universal cross-chain aggregator with a strong ecosystem of partners and investors. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and optimized for performance and mobile use. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though some security headers and policies could be more explicit. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, Rango Exchange presents a professional, trustworthy, and technically mature presence in the DeFi space.

Studio KUTULULU, s. r. o. is a small Czech graphic design studio specializing in branding, web design, and related creative services. The website is professionally designed, multilingual, and targets a general audience primarily in the Czech Republic. The business presents itself clearly with contact details and a portfolio of projects, indicating a niche local market position. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses popular plugins for SEO, multilingual support, and GDPR compliance. The site is mobile optimized and performs moderately well. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. It uses Facebook Pixel and Google Analytics for marketing and analytics, reflecting moderate user tracking. However, no explicit security policies or incident response information are published, and no WHOIS data is available due to privacy protection or domain registration issues. Despite this, the site shows no signs of malicious activity or vulnerabilities in the visible content. Overall, the website demonstrates a good security posture with room for improvement in publishing security policies and adding security headers. The business credibility is supported by clear contact information and professional presentation. The lack of WHOIS data slightly reduces trust but is common for small businesses. Strategic recommendations include enhancing security headers, publishing incident response info, and maintaining regular audits of third-party scripts.

Dry January is a Swiss-based non-profit campaign focused on encouraging individuals to abstain from alcohol during January. The website serves as an informational and engagement platform offering event details, partner programs, and merchandise sales to support the campaign. It targets a general audience with an emphasis on health and alcohol awareness. The site is built on Drupal 10 with Commerce 2, integrating modern web technologies and analytics tools such as Matomo and Google Tag Manager. The technical infrastructure is solid, with good mobile optimization and secure HTTPS implementation. However, the site lacks critical privacy and cookie policies, which impacts GDPR compliance and user trust. Security posture is generally good but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but should address compliance gaps to enhance user confidence and legal adherence.