Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
68,001–68,050 of 99,067
- Vyškovská TV, s.r.o.
kurimskymagazin.cz
Media · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kuřimský magazín is a local media outlet operated by Vyškovská TV, s.r.o., focusing on video content related to the Kuřim region, including city council meetings and other local events. The primary distribution channel is their YouTube channel, complemented by cable TV broadcasting in Kuřim. The website serves as an informational hub with contact details and links to social media platforms. Technically, the site is built on the Webnode CMS platform, uses Amazon Cloudfront CDN for content delivery, and integrates Google Analytics and Facebook SDK for tracking and social engagement. While the site is accessible and functional, it lacks mobile responsiveness and advanced SEO or accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of privacy and cookie policies indicates non-compliance with GDPR requirements. WHOIS data is unavailable, which raises concerns about domain legitimacy, although the website content and contact information suggest a legitimate local business presence.
Wellness Kuřim s.r.o.halakurim.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Sportovní hala Kuřim is a local sports facility operated by Wellness Kuřim s.r.o., providing a variety of sports venues and services including a sports hall, inflatable summer hall, beach volleyball courts, athletic area, aquapark, fitness center, and football fields. The website targets local sports enthusiasts and community members, offering reservation systems and event information. The business operates in the hospitality sector with a small company size and a clear focus on community sports engagement. Technically, the website employs common web technologies such as Google Analytics, Facebook SDK, and Google Maps API, with a moderate performance and good mobile optimization. The site uses HTTPS and secure form submissions but lacks advanced security headers and published privacy or terms of service documents, indicating room for improvement in security and compliance maturity. Security posture is adequate with HTTPS and secure forms but missing security headers and privacy policy reduce overall security confidence. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain legitimacy and trustworthiness, although the website content and contact information appear professional and consistent. Overall, the website is functional and professional but would benefit from enhanced security practices, published privacy and terms policies, and improved transparency regarding data protection to increase trust and compliance.
- as4u.cz, s.r.o.
mladoboleslavsko.eu
Hospitality · Czech Republic
72Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.mladoboleslavsko.eu serves as the official regional tourism portal for the Mladá Boleslav area in the Czech Republic. It provides comprehensive information on tourist regions, nature, history, culture, sports, accommodation, events, and local attractions. The site targets tourists and visitors interested in exploring this region, offering services such as event calendars, photo galleries, a mobile app, and an e-shop. The business behind the site appears to be a small regional tourism promotion entity, operated by as4u.cz, s.r.o., a Czech company specializing in publishing and editorial systems.
- MMěsto Bakov nad Jizerou
zviretice.cz
Hospitality · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Zvířetice.cz is a website dedicated to promoting the historic Zvířetice castle ruins and associated tourist information center located in the Czech Republic. The site offers visitors detailed information about the castle's history, 3D reconstruction projects, guided tours, seasonal events, and visitor services such as refreshments and souvenirs. The business is municipally owned by Město Bakov nad Jizerou and supported by regional funding, positioning it as a local cultural heritage and tourism entity focused on education and family-friendly activities. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPML for multilingual support. It uses modern JavaScript libraries like jQuery and Slick Carousel for interactive elements and includes Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Performance is moderate with caching and minification evident. From a security perspective, the site enforces HTTPS and uses reCAPTCHA but does not implement key security headers such as Content-Security-Policy or X-Frame-Options. There is no visible privacy or cookie policy, indicating compliance gaps with GDPR. WHOIS data is missing or unavailable, which reduces domain trustworthiness, although the website content and municipal references support legitimacy. Overall, the site is a well-structured, content-rich platform serving its cultural tourism mission effectively but would benefit from improved privacy compliance, enhanced security headers, and transparency in domain registration to strengthen trust and security posture.
Knihovna Bakovknihovnabakov.cz
Education · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Knihovna Bakov is a local public library and museum located in Bakov nad Jizerou, Czech Republic. The institution offers a variety of cultural and educational services including book lending, audiobooks, internet access, copying services, and organizes events and exhibitions. The website is well-structured, providing detailed information about the library and museum, upcoming events, and recent news posts. The target audience primarily consists of local residents, visitors interested in regional history, and readers. The business model aligns with a public or non-profit cultural institution serving the community. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7. It uses Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and has good SEO practices. However, there is a lack of visible security headers and no explicit privacy or cookie policies, which are areas for improvement. HTTPS is properly implemented, ensuring secure communication. From a security perspective, the site shows a moderate security posture with no evident vulnerabilities in the HTML content. The absence of WHOIS data for the domain is a concern, reducing trustworthiness from a domain registration perspective. The site does not expose sensitive data and uses standard security practices but would benefit from enhanced security headers and compliance documentation. Overall, the website is a credible and professional representation of a local cultural institution but should address privacy compliance and domain registration transparency to improve trust and security posture.
- MMěsto Mnichovo Hradiště
mnhradiste.cz
Government · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Město Mnichovo Hradiště operates an official municipal website providing comprehensive information and services to residents and visitors. The site offers news, event calendars, public service details, and tourism information, positioning itself as the primary digital gateway for the city. The business model is focused on government communication and community engagement, targeting local citizens and tourists. The website reflects a small-sized government entity with consistent branding and good content quality. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Nette Framework components. It is mobile optimized and accessible, with moderate performance. The site uses HTTPS and implements cookie consent mechanisms, demonstrating awareness of privacy compliance. However, some security best practices such as security headers and incident response disclosures are missing. From a security perspective, the site maintains a good posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable anomaly, reducing domain registration trustworthiness, but the official contact information and consistent content strongly support legitimacy. Privacy policies and cookie management are well implemented, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and serves its purpose effectively. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and resilience. The risk level is low, with no critical issues detected.
- Město Bakov nad Jizerou
vcasbakov.cz
Hospitality · Czech Republic
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Volnočasový areál Bakov nad Jizerou is a municipally operated leisure and accommodation facility located in the Czech Republic. It offers a variety of recreational services including sports facilities, children's playgrounds, natural swimming areas, and seasonal accommodation options such as cottages and apartments. The website serves as an information portal for visitors and local residents, providing event calendars, booking options, and contact details. The business model is focused on community service and tourism support, positioning itself as a local hub for leisure activities. Technically, the website is built on the Public4u CMS platform and utilizes common JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized with good navigation and SEO practices. However, there is room for improvement in accessibility and performance optimization. The absence of advanced analytics or tracking scripts suggests a minimalistic approach to user data collection. From a security perspective, the site uses HTTPS but lacks important security headers that could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed through a GDPR and cookie policy page with a consent mechanism, indicating awareness of regulatory requirements. The lack of WHOIS data is a concern for domain legitimacy verification but does not directly impact the operational security of the website. Overall, the website presents a trustworthy and professional front for a local government-operated leisure facility. Strategic improvements in security headers, WHOIS transparency, and accessibility could further strengthen its digital maturity and user trust.
- SSdružení cestovního ruchu Jizerské hory
jizerske-hory.cz
Hospitality · Czech Republic
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website represents Sdružení cestovního ruchu Jizerské hory, a regional tourism association promoting the Jizera Mountains area in the Czech Republic. It serves as an informational portal with partnerships from local municipalities and ski-related businesses. The site is modest in scope, focusing on regional tourism promotion without e-commerce or complex services. Technically, the site is simple, built with basic HTML and CSS, with no detected CMS or advanced frameworks. It lacks modern SEO, accessibility, and performance optimizations but is functional and mobile responsive at a basic level. Security posture is minimal, with no HTTPS verification visible from the data, no security headers, and no privacy or cookie policies, indicating low compliance with modern privacy standards. The absence of WHOIS data reduces domain trust, though the website content and contact information appear consistent with a legitimate regional tourism entity. Overall, the site is low complexity, with moderate business credibility but requires improvements in security, privacy, and technical modernization.
- PPetr Teichman
mapy.biz
Other · Czech Republic
53Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website mapy.biz represents a small publishing entity named RAFFFAEL-art, registered to Petr Teichman in the Czech Republic since 2004. The site content is minimal, primarily consisting of images and links, with no textual descriptions, contact information, or policy documents. The technical infrastructure appears basic with no detected CMS, scripts, or modern web technologies. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site has low digital maturity and limited online presence, which impacts trust and credibility.
- město Židlochovice
koupalistezidlochovice.cz
Hospitality · Czech Republic
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Koupaliště města Židlochovice is a municipal swimming pool facility providing recreational services including multiple pools, playgrounds, and refreshment areas. The website is hosted on the Webnode platform as a subdomain, which explains the absence of WHOIS data for the subdomain. The site targets local residents and visitors, offering family-friendly leisure activities. Technically, the site uses modern web standards, is mobile optimized, and employs Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies. Overall, the site is functional and trustworthy but could improve compliance and security practices.
- Městská knihovna Židlochovice
mk-zidlochovice.cz
Education · Czech Republic
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Městská knihovna Židlochovice is a small municipal library serving the local community in Židlochovice, Czech Republic. The website provides information about library services, opening hours, events, and contact details. It targets local residents and library users, offering cultural and educational activities. The business model is public service-oriented, focusing on community engagement and education. Technically, the website is built on the Webnode CMS platform and hosted via Cloudfront CDN, ensuring reasonable performance and availability. It uses HTTPS with a valid SSL certificate and includes Google Analytics with IP anonymization for privacy. However, the site lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. From a security perspective, the site shows basic good practices such as HTTPS and anonymized analytics but lacks published security policies, incident response contacts, and cookie consent banners. The absence of WHOIS data limits domain legitimacy verification, which slightly reduces overall trust. No critical vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, the website is functional, informative, and trustworthy for its intended purpose but would benefit from enhanced security headers, privacy compliance improvements, and transparency in domain registration data.
RegioJet a.s.regiojet.cz
Transportation · Czech Republic
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
RegioJet a.s. is a well-established transportation company founded in 2009, operating primarily in the Czech Republic and across Europe. The company offers train and bus ticketing services with a strong focus on customer service and convenience. Their website reflects a mature digital presence with multilingual support, comprehensive travel options, and integration with partner services such as hotel bookings and language stays. The company holds a strong market position as a leading private transport operator in Central Europe. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the security posture is robust, though the site lacks a dedicated security policy and incident response contact information. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness. The risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response. The company demonstrates a professional and trustworthy online presence suitable for its business sector.
OPPORTUNITY, spol. s r.o.alpinecentrumbrno.cz
Transportation · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
OPPORTUNITY, spol. s r.o. operates the Alpine Store Brno, a specialized automotive dealership focusing on Alpine sports cars, with a modern showroom in Brno, Czech Republic. The company has a long history in automotive sales and racing, positioning itself as a key player in the regional luxury sports car market. The website is professionally designed, mobile-optimized, and provides clear contact information and business details. Technically, it uses modern JavaScript libraries and integrates multiple marketing and analytics tools with appropriate cookie consent mechanisms. Security posture is good with HTTPS and obfuscated emails, though some security headers could be improved. The domain is newly registered, which aligns with a new brand initiative rather than the company's founding date. Overall, the site is trustworthy and well-maintained.
daciadacia.cz
Transportation · Czech Republic
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.dacia.cz serves as the official Czech Republic portal for the Dacia automobile brand, providing comprehensive information on new and used vehicles, financing options, insurance, and after-sales services. It targets consumers in the Czech market interested in affordable and hybrid/electric vehicles. The site demonstrates a mature digital presence with modern technologies such as React, optimized images, and integration with Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy and security headers, which are recommended for enhanced compliance and protection. The absence of WHOIS data reduces domain trustworthiness, but the branding and content strongly indicate legitimacy as an official brand site. Strategic recommendations include publishing clear privacy and terms policies, adding security headers, and providing contact information for security incidents and data protection officers.
SAKO Brno a.s.resako.cz
Energy · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website resako.cz serves as an informational platform for SAKO Brno a.s., a medium-sized energy sector company focused on modernizing waste-to-energy facilities in Brno, Czech Republic. The site communicates ongoing projects and public procurement notices, targeting local residents and stakeholders. Technically, the site uses modern web standards with HTTPS and Google Fonts, but lacks advanced security headers and privacy policies. Security posture is moderate with no visible vulnerabilities but could be improved with better compliance documentation and security headers. Overall, the site is professional and trustworthy but should enhance privacy and security transparency to align with best practices.
- SSAKO Brno, a.s.
sbernydvurbrno.cz
Other · Czech Republic
71Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
SAKO Brno, a.s. operates a waste collection yard in Brno, Czech Republic, targeting businesses, entrepreneurs, tradesmen, and citizens. The company offers a wide range of waste acceptance services including sorted waste, construction debris, hazardous waste, bio waste, electronic waste, and functional appliances. The website supports online appointment booking to streamline customer service. Technically, the website uses modern JavaScript libraries such as jQuery and integrates Google Tag Manager and CookieHub for analytics and cookie consent management. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is used and cookie consent is implemented, but explicit security headers and incident response information are lacking. WHOIS data is unavailable, limiting domain trust analysis. Overall, the website is functional, professional, and compliant with GDPR cookie requirements, but could improve security posture and transparency.
Kubíček Aircraft s.r.o.kubicekaircraft.com
Transportation · Czech Republic
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Kubíček Aircraft s.r.o. is a Czech-based manufacturer specializing in ultralight aircraft, emphasizing a family tradition and quality craftsmanship. The company targets ultralight pilots and aviation enthusiasts with versatile aircraft designed for rugged and comfortable flying experiences. Their market position is niche but credible, supported by a professional website and active social media presence. Technically, the website employs modern web technologies including Alpine.js and Splide.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.
Kubíček Balloonskubicekballoons.com
Transportation · Czech Republic
63Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kubíček Balloons is a reputable hot air balloon manufacturer based in the Czech Republic, with a domain registered since 2016. The company offers innovative and reliable products tailored to pilots and balloon enthusiasts worldwide. Their website demonstrates a strong market position with a focus on quality, custom design, and proprietary polyester fabric production. Technically, the website employs modern JavaScript frameworks and libraries such as Alpine.js, Splide.js, and lightGallery, alongside Google Tag Manager and Analytics for marketing and tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site uses HTTPS with strong security headers and cookie consent mechanisms, though it lacks explicit published security policies or incident response contacts. Overall, the domain registration and website content are consistent, supporting the business's legitimacy and credibility.
Kávéeskakaveeska.cz
Government · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Kávéeska is a municipal cultural center based in Brno, Czech Republic, providing a wide range of cultural and educational events for the general public including families, children, and seniors. It operates several subsidiary cultural institutions and enjoys strong support from local and regional government bodies. The website reflects a well-established community-oriented organization with a clear focus on cultural enrichment and public engagement. Technically, the site is built on WordPress with common plugins for GDPR compliance and event management, hosted by a reputable provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and compliant with relevant privacy regulations.
DBP, s.r.o.divadlobolkapolivky.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Divadlo Bolka Polívky is a well-established theatre company based in Brno, Czech Republic, operating since 2001. The company offers a variety of theatrical performances, concerts, exhibitions, and cultural events targeting a general audience interested in arts and culture. Their business model centers on ticket sales and event hosting, supported by a professional online presence. The website reflects a consistent brand image and provides clear contact and social media information, enhancing trust and engagement. Technically, the website is built on WordPress with common libraries such as jQuery, Owl Carousel, and LightGallery. It integrates marketing and analytics tools including Google Tag Manager, Google Analytics, and Facebook Pixel. The site is hosted behind Cloudflare DNS and CDN services, ensuring good availability and SSL encryption. Mobile optimization and user experience are good, though some technical aspects like accessibility and SEO could be improved. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and uses an outdated jQuery version, which could pose vulnerabilities. No incident response or security policy pages were found, indicating room for improvement in security governance. Privacy compliance is basic but present, with GDPR-aligned cookie and privacy policies. Overall, the website is professional and trustworthy with moderate technical maturity and security posture. Strategic improvements in security headers, library updates, and enhanced compliance documentation would strengthen the site’s resilience and user trust.
Raab Computer s.r.o.auditfamilyfriendlycommunity.cz
Government · Czech Republic
66Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The Audit Family Friendly Community website serves as a national portal supporting municipal and regional efforts to improve family-friendly living conditions in the Czech Republic. The site is managed or developed by Raab Computer s.r.o., a small company specializing in web solutions. The portal provides information about the audit program, regional partners, and news updates, targeting municipalities, regional governments, and families. The business model is non-profit/governmental support with a focus on community development and audit facilitation. Technically, the website uses a traditional web stack including jQuery, FontAwesome, and several UI libraries such as Fancybox and Owl Carousel. The site is mobile-optimized with good navigation and content structure, though no CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility and SEO. Security headers and SSL configuration details are not provided, but cookie consent mechanisms are implemented. From a security perspective, the site shows basic compliance with privacy regulations, including a privacy policy and cookie consent banner. However, WHOIS data is unavailable, which raises concerns about domain registration transparency. No explicit security policies, incident response contacts, or vulnerability disclosures are found. The site does not expose sensitive data or use vulnerable libraries visibly, but security headers and SSL details should be verified and enhanced. Overall, the website is professional and trustworthy in content and design but lacks transparency in domain registration and some security best practices. Strategic recommendations include verifying domain WHOIS data, enhancing security headers and SSL configuration, and adding explicit security and incident response policies to improve trust and compliance.
Other · Czech Republic
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website oziveni.cz is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile CAPTCHA. Due to this, no substantive business content, contact information, or policy documents are visible for analysis. The domain is registered since 2005 with REG-THINLINE and uses Cloudflare for DNS and security services. The lack of accessible content prevents a full assessment of the company's business model, services, or compliance posture. Technically, the site leverages Cloudflare's security infrastructure but no further technical or CMS details are available. Security posture cannot be fully evaluated due to the blocked content, but the presence of Cloudflare indicates some baseline protection. Overall, the site is rated low in content quality and business credibility due to lack of visible information, with a security score limited by the WAF challenge.
- Daruj Kelímek | Veřejná sbírka
darujkelimek.cz
Other
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.darujkelimek.cz is a Wix-built site with minimal accessible content and no identifiable business or contact information. The absence of WHOIS data and domain registration details limits the ability to verify the legitimacy or history of the domain. Technically, the site uses standard Wix platform scripts and polyfills but lacks advanced security headers and privacy compliance mechanisms. No forms, analytics, or marketing tools are detected, indicating a low level of digital maturity. Security posture is weak due to missing security headers and lack of HTTPS verification in the provided data. Overall, the site appears to be either under development or not actively maintained, with limited trust indicators and poor content quality.
Kraj svetakrajsveta.sk
Hospitality · Slovakia
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Kraj sveta is a regional tourism promotion website focused on the Košice region in Slovakia. It offers visitors curated local experiences, bucket lists, and accommodation booking options through trusted partners like Booking.com. The website targets tourists interested in exploring the region's natural, cultural, and gastronomic attractions. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Oxygen Builder, ensuring good SEO and mobile responsiveness. However, it lacks visible privacy and cookie policies despite using tracking technologies like Google Analytics and Facebook Pixel, which poses compliance risks. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is legitimate and professionally presented but would benefit from enhanced privacy compliance and security best practices.
Košice Región Turizmusharavara.sk
Other · Slovakia
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Haravara is a family-focused digital platform dedicated to promoting children's activities, family trips, and educational events in the Košice region of Slovakia. Operated by Košice Región Turizmus, it serves as a comprehensive guide for families and schools, offering interactive content such as quizzes, games, and audio stories to engage its audience. The website is well-positioned as a regional tourism and educational resource with a clear target audience of families and educational institutions. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and SEO readiness. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with clear GDPR policies and cookie consent mechanisms in place. Overall, the site demonstrates a professional and trustworthy presence with clear business information and partner affiliations.
Košice Región Turizmusunesconadosah.sk
Hospitality · Slovakia
66Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website unesconadosah.sk serves as a regional tourism promotion platform focused on UNESCO World Heritage cultural and natural sites in Eastern Slovakia, particularly the Košice region. It highlights 18 unique heritage locations accessible within 100 minutes by car from Košice, targeting tourists and visitors interested in cultural heritage and nature. The site is managed by Košice Región Turizmus, a regional tourism organization, and provides multilingual content with language options including Slovak, English, German, Hungarian, and Polish. The business model centers on tourism promotion and regional cultural heritage awareness, supported by a mobile app and active social media presence. Technically, the website is built on WordPress 6.7.2 using the Oxygen Builder framework, enhanced with Yoast SEO Premium for search optimization and WPML for multilingual support. It integrates modern web technologies including jQuery and Google Tag Manager, and is hosted on Amazon Web Services as inferred from cookies. The site demonstrates good mobile optimization and moderate performance, with proper SEO metadata and structured data for enhanced search visibility. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism via CookieYes, categorizing cookies by necessity and purpose. While explicit security headers like Content-Security-Policy or X-Frame-Options are not explicitly found in the provided data, no vulnerabilities or exposed sensitive data were detected. The site lacks publicly available privacy policy and terms of service pages in the analyzed content, which is a compliance gap. No incident response or vulnerability disclosure information is present. Overall, the website is trustworthy and professionally maintained, with strong business credibility and good privacy compliance regarding cookie management. Recommendations include publishing clear privacy and terms policies, enhancing security headers, and improving accessibility compliance to further strengthen the security posture and user trust.
Other
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website for mntzco.com is currently non-functional, returning a 404 error with a JSON message indicating no project found for the domain. The domain is newly registered in August 2023 and hosted on Amazon AWS infrastructure. There is no visible content, metadata, or business information on the site, which suggests the business is either in a very early stage or the website is not yet deployed. The lack of privacy, cookie, or terms of service policies and absence of contact information limits the ability to assess compliance or business credibility. Security posture cannot be evaluated due to missing HTTPS and security headers. Overall, the site presents a high risk from a trust and security perspective due to minimal content and lack of transparency.
Tesco Mobiletescomobile.cz
Telecommunications · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Tesco Mobile Czech Republic operates as a well-established mobile virtual network operator offering prepaid SIM cards, affordable tariffs, and a mobile app with unique customer benefits. The website targets Czech consumers seeking cost-effective mobile communication services with strong brand recognition linked to Tesco. The digital infrastructure is built on WordPress with WooCommerce, integrating modern analytics and marketing tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and GDPR compliance via a consent management platform, although some security headers could be improved. Overall, the site reflects a professional and trustworthy telecommunications provider with clear contact channels and comprehensive legal documentation.
E-GO, s.r.o.webhouse.family
Technology · Slovakia
65Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
WebHouse, operated by E-GO, s.r.o., is a reputable Slovakian hosting and domain registration provider managing over 56,000 domains. The company offers a range of hosting plans, including shared hosting, virtual and dedicated servers, and business email services, targeting both individual and business customers. Their market position is solid within the regional technology sector, emphasizing reliability and customer care with a 100% uptime guarantee. Technically, the website employs a mature technology stack including Bootstrap, jQuery, Google reCAPTCHA, and Cookiebot for consent management. The site is mobile-optimized with good SEO and accessibility features, though some accessibility aspects could be improved. Performance is moderate, with external dependencies on Google and Facebook services for analytics and social media integration. Security posture is good with HTTPS enforced and use of reCAPTCHA to protect forms. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. However, explicit security headers like CSP and X-Frame-Options are not clearly detected and could be enhanced. No critical vulnerabilities or exposed sensitive data were found. Overall, WebHouse presents a trustworthy and professional online presence with strong privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining up-to-date third-party libraries to further strengthen security and compliance.
- WebHouse
setup.sk
Technology · Slovakia
68Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
The website setup.sk is a domain and web hosting control panel operated by WebHouse, a Slovak hosting provider established since 2003. The platform offers domain management, web hosting, DNS, email, SSL, FTP, and SSH services primarily targeting Slovak-speaking customers. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, it uses modern libraries such as jQuery and Bootstrap, integrates Cookiebot for cookie consent, and employs Google Analytics for traffic analysis. Security posture is solid with HTTPS and DNSSEC enabled, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is safe for general audiences and shows no signs of malicious content or blocking by WAFs.
Slovenská lesnícka komoraslsk.sk
Other · Slovakia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Slovenská lesnícka komora is a Slovak non-profit, non-political, and self-governing institution established by law to represent the common interests of its members in forestry policy and development. The organization targets forestry professionals and stakeholders within Slovakia, providing advocacy, education, and informational services. The website reflects a professional presence with clear branding and relevant content focused on forestry activities, education, and news. Technically, the site is built on WordPress with modern plugins and is hosted by a reputable provider with DNSSEC and HTTPS properly configured. However, it lacks some security best practices such as security headers and formal privacy and cookie policies. The security posture is solid but could be improved with additional measures and transparency. Overall, the site is trustworthy, well-maintained, and serves its intended audience effectively.
PRO POPULO Poprad, s.r.o.propopulo-poprad.sk
Other · Slovakia
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
PRO POPULO Poprad, s.r.o. is a Slovak company established in 1991, managing forestry and agricultural lands owned by the Roman Catholic Diocese of Spišské Podhradie since 1994. The company focuses on sustainable forestry, hunting management, research collaborations, and holds FSC certification, positioning itself as a trusted regional entity in land stewardship. The website is built on WordPress with Elementor, featuring a professional design and clear navigation, optimized for mobile devices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published privacy or cookie policies, indicating room for compliance improvement. Contact information is clearly provided, including a company email and physical address, enhancing business credibility. Overall, the site is safe, professional, and trustworthy, with minimal user tracking and no signs of malicious activity.
- MERIMEX s.r.o.
merimex.cz
Manufacturing · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MERIMEX s.r.o. is a Czech Republic based company specializing in the sale and servicing of forestry and material handling machinery, representing major global brands such as John Deere, Sennebogen, and Waratah. The company targets professional customers in forestry and related industries, offering new and used equipment through its main website and dedicated bazaar platform. The website reflects a medium-sized business with a consistent brand presence and a focus on product offerings and service information. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics and security. The site is mobile optimized with a good user experience and clear navigation. However, some technical improvements such as enhanced security headers and more comprehensive SEO and accessibility features could be implemented. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, but lacks visible security headers and explicit privacy or security policies. The absence of WHOIS data reduces domain trustworthiness, although the website content and branding suggest a legitimate business. No critical vulnerabilities or adult content were detected. Overall, the website presents a professional and functional digital presence with moderate security and privacy compliance. Strategic improvements in transparency, security headers, and policy disclosures would enhance trust and compliance.
Drevoburzadrevoburza.eu
Other · Slovakia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Drevoburza.eu operates as a specialized online marketplace and classified ads platform focused on forestry and wood-related products and services in Slovakia. The platform offers categorized listings including timber, pallets, wood chips, furniture, forestry services, and hunting supplies via an integrated e-shop. It targets businesses and individuals involved in the forestry sector, providing a niche regional service with moderate market presence. The website integrates social media and partner links to enhance its ecosystem. Technically, the website uses a traditional web stack with jQuery, Google Analytics, Facebook SDK, and Google Maps API. Hosting is provided by WebSupport s.r.o., a reputable Slovak hosting provider. The site is served over HTTPS, but uses some outdated libraries and lacks advanced security headers, indicating room for modernization and improved security hardening. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. From a security perspective, the site enforces HTTPS and uses input masking on phone fields, but lacks explicit security policies and incident response information. The presence of outdated jQuery versions and missing security headers represent potential vulnerabilities. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No direct company contact emails or phone numbers are published, which may impact user trust. Overall, the website is functional and professionally presented with good content quality and clear navigation. It is safe for general audiences with no adult or questionable content. The domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in security posture, contact transparency, and technical modernization would enhance trust and compliance.
PEFC Slovenskopefc.sk
Other · Slovakia
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
PEFC Slovensko operates as a national certification body supporting sustainable forest management in Slovakia. The organization provides certification services for forest owners, manufacturers, and consumers, promoting responsible sourcing and use of forest products. The website reflects a focused business model aligned with environmental sustainability and certification standards, positioning itself as a key player in the Slovak forestry certification market. Technically, the website employs a modern but straightforward technology stack including jQuery, Google Analytics, and a CMS platform (Kabernet). The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policies or incident response contacts are published. Overall, the domain registration and WHOIS data are consistent with the organization's identity, supporting legitimacy and trustworthiness.
COQUI WORLD s.r.o.coqui.shoes
Retail · Czech Republic
65Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
COQUI WORLD s.r.o. operates the website www.coqui.shoes, an e-commerce platform specializing in footwear including clogs, slippers, sandals, and accessories for women, men, and children. The brand emphasizes comfort, family orientation, and a relaxed lifestyle, supported by a multilingual website and active social media presence. The company positions itself as a medium-sized retail business with a focus on quality and sustainability. Technically, the website uses modern JavaScript libraries such as jQuery 3.7.1 and includes cookie consent mechanisms, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, with good navigation and professional design. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. However, WHOIS data is malformed and unavailable, limiting transparency about domain registration details. Overall, the website is trustworthy and professionally managed but could improve transparency and security header implementation.
- Softballová asociace České republiky
softball.cz
Other · Czech Republic
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Softball.cz is the official website of the Softball Association of the Czech Republic, providing comprehensive information about softball competitions, national teams, development projects, and an e-shop. The website targets softball players, coaches, clubs, and fans primarily within the Czech Republic but also internationally. The site is well-structured with clear navigation and regularly updated content, reflecting an active sports organization. Technically, the site uses a custom CMS with standard web technologies including JavaScript libraries like TinyMCE and tracking tools such as Google Analytics and Google Tag Manager. Hosting appears to be managed by a Czech provider, consistent with the domain's registration data. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. No WAF or blocking mechanisms were detected, and the domain's WHOIS data confirms a long-standing and legitimate presence since 1998. Overall, the site is professional and trustworthy but should enhance privacy compliance and security best practices.
Česká komora fitnesskomorafitness.cz
Other · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Česká komora fitness is a professional organization representing the Czech fitness sector, including fitness center operators, personal trainers, and group exercise instructors. Founded in 2011, it provides membership services, industry news, events, and projects to support its members and the broader fitness community. The website serves as an information hub with rich content, including news articles, event calendars, and partner showcases. Technically, the site is built on WordPress with multiple plugins for user management and event handling, integrating marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response or vulnerability disclosure mechanisms. Privacy and cookie policies are missing, representing a compliance gap. Overall, the site is professional, trustworthy, and well-positioned within its niche but could improve privacy compliance and security best practices.
Unihocunihoc.com
Retail · Denmark
71Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Unihoc is a well-established company specializing in floorball sticks and equipment, operating primarily through an e-commerce platform. The company has a strong market position as a world-leading brand in floorball gear, targeting players and teams globally. Their website showcases a comprehensive product catalog with a focus on innovation and quality. Technically, the site is built on modern frameworks like React and Next.js, hosted with reputable providers and optimized for performance and mobile use. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting a medium-sized retail business with a mature digital presence.
TUkas a.s.tukas.cz
Transportation · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
TUkas a.s. is a large, authorized automotive dealership and service provider operating in Prague, Czech Republic. The company represents seven major automotive brands including Kia, Dacia, Renault, Opel, Volvo, ŠKODA, Volkswagen, and Audi. Their business model focuses on new and used car sales, authorized servicing, and operational leasing, targeting both individual consumers and business clients. The website reflects a professional presence with clear branding and multiple partner brand logos, indicating a strong market position within the automotive retail and service sector in the region. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and includes structured data for SEO enhancement. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and branding suggest a legitimate and established business. Security posture is moderate with good SSL configuration and use of anti-bot measures, but lacks explicit security policies or incident response information. Privacy compliance is good with visible privacy and cookie policies and GDPR indicators. Overall, the website is safe for general audiences, with no adult or explicit content detected. The site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, though improvements in security headers and WHOIS transparency are recommended. Strategic recommendations include enhancing security headers, maintaining up-to-date software, improving accessibility, and publishing clear security and incident response policies to strengthen trust and compliance.
Molten USA Official Websitemoltenusa.com
—
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Sportovní oblečení | Kappakappa-sport.cz
Retail · Czech Republic
56Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website www.kappa-sport.cz is an e-commerce platform specializing in sports clothing and accessories, targeting general consumers interested in sportswear. The site presents a professional design with good content relevance and clear navigation, optimized for mobile devices. The technical infrastructure leverages modern frontend technologies including Bootstrap, jQuery, and several third-party marketing and analytics tools such as Cookiebot, Microsoft Clarity, and Google Tag Manager. Security posture is solid with HTTPS enforced and CSRF protection cookies in place, although some security headers are not explicitly detected. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service pages were not found in the provided content. The absence of WHOIS data suggests privacy protection for the domain registration, which is common for retail e-commerce sites and does not raise immediate concerns. Overall, the website demonstrates a moderate to good security and privacy posture with room for improvement in transparency and security best practices.
Yonexyonex.com
Retail
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Yonex is a globally recognized brand specializing in sports equipment for badminton, tennis, golf, running, and snowboarding. The website serves as an e-commerce platform and brand showcase, targeting sports enthusiasts and athletes. The company emphasizes technology-driven product innovation and maintains a strong market position in the sports retail sector. Technically, the website is built on Magento CMS, leveraging modern JavaScript frameworks and third-party analytics tools such as Google Analytics, Hotjar, and New Relic. The site demonstrates good mobile optimization and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and uses asynchronous loading of scripts but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and brand reputation support legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.
BABOLAT ONLINEbabolat-online.cz
Retail · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
BABOLAT ONLINE operates as the official e-commerce platform for the BABOLAT brand in the Czech Republic, specializing in tennis, badminton, and padel sports equipment. The website offers a range of products including rackets, shoes, apparel, and racket stringing services, targeting sports enthusiasts and players in the region. The business model is retail-focused with a clear emphasis on brand authenticity and customer service, supported by numerous customer reviews and detailed contact information. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Google Tag Manager, and various UI libraries to deliver a responsive and user-friendly experience. The site is mobile-optimized and includes SEO best practices such as meta tags and structured navigation. Cookie consent and GDPR compliance mechanisms are well implemented, reflecting a good level of digital maturity. From a security perspective, the site uses HTTPS for external resources and has implemented cookie consent controls, but lacks visible HTTP security headers and explicit security policies. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. No critical vulnerabilities or exposed sensitive data were detected in the content provided. Overall, BABOLAT ONLINE presents a professional and trustworthy e-commerce presence with room for improvement in security hardening and domain registration transparency. Strategic recommendations include enhancing security headers, verifying SSL configurations, and publishing incident response information to bolster user trust and compliance.
Other
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at fu-nu-ra.com currently serves as a placeholder with minimal content, displaying only a 'Not found' message. There is no visible business information, metadata, or interactive elements, indicating the site is either under construction or inactive. The domain is very recently registered (October 2024) and hosted on Amazon AWS DNS infrastructure, suggesting a new or planned venture without an established online presence. Technically, the site lacks modern web features, security headers, and privacy compliance mechanisms, which limits its digital maturity and user trust. Security posture is basic with no advanced protections or policies in place. Overall, the site presents a high risk due to lack of content, transparency, and compliance, and should be monitored for future development or potential misuse.
- VVolp Prices
voip-prices.com
Telecommunications
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
VoIP-Prices.com operates as a VoIP phone service price comparison platform targeting businesses seeking to replace, expand, or install new phone systems. The website facilitates lead generation by collecting detailed user requirements through a multi-step form and matches these with suppliers to provide competitive quotes. The business appears small and relatively new, founded around 2021, with domain registration consistent with this timeline. Technically, the site uses modern front-end frameworks like Bootstrap and jQuery and integrates Google Analytics for tracking. However, the site lacks critical privacy and cookie policies, and no consent mechanisms are present, which may expose it to compliance risks. Security posture is moderate with HTTPS implied but no DNSSEC or security headers detected. No incident response or security contact information is provided, limiting transparency in security management. Overall, the site is functional and business-focused but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Košice Región Turizmuskosiceregion.com
Hospitality · Slovakia
71Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Košice Región Turizmus operates a comprehensive tourism portal dedicated to promoting the Košice region in Slovakia. The website offers rich content including destination guides, cultural and natural attractions, event information, and travel tips aimed at tourists and visitors. The organization positions itself as a regional tourism authority, providing valuable resources to enhance visitor experience and regional visibility. The site supports multiple languages, enhancing accessibility for international tourists. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates popular analytics and marketing tools such as Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks some security headers and formal privacy and terms of service documentation. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the website content and branding appear professional and trustworthy. Overall, the site is a well-maintained regional tourism platform with moderate technical maturity and good user experience.
Kubíček Factory s.r.o.kubicekvisionair.com
Manufacturing · Czech Republic
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Kubíček Visionair, operated by Kubíček Factory s.r.o., is a leading Czech manufacturer specializing in custom inflatables with over 30 years of experience and a portfolio exceeding 20,000 products. Their market position is strong within the manufacturing sector, targeting businesses and organizations needing inflatables for events, advertising, and artistic purposes. The company emphasizes quality craftsmanship, user-friendly designs, and expert technical support. Technically, the website is modern, mobile-optimized, and uses contemporary JavaScript frameworks like Alpine.js, with Google Tag Manager and cookie consent mechanisms implemented for privacy compliance. Security posture is solid with HTTPS and cookie consent, though DNSSEC is not enabled and security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. Strategic recommendations include enhancing DNS security, adding security headers, and publishing a formal security policy and incident response contacts.
Sportovní a rekreační areál Kraví horakravihora-brno.cz
Hospitality · Czech Republic
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Sportovní a rekreační areál Kraví hora is a public sports and recreational facility located in Brno, Czech Republic, offering a variety of services including indoor and outdoor swimming pools, sauna, ice rinks, and multiple sports fields. The website serves local residents and sports enthusiasts, providing information on facility status, booking options, and events. The business operates primarily as a community-focused sports venue with a medium-sized presence in the hospitality and government sectors. Technically, the website is built on Drupal 10 CMS, utilizing modern JavaScript libraries and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized, accessible, and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible security headers and published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of public facility. Overall, the site demonstrates a good security posture but could improve transparency and technical security controls. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy policy publication, security headers, and incident response disclosures would enhance trust and compliance.
Opportunity spol. s r.o.opportunity.cz
Transportation · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Opportunity spol. s r.o. is a regional automotive dealership group operating in the Czech Republic, representing multiple well-known automotive brands including Renault, Dacia, Alpine, Seat, and Cupra. The company provides new car sales and automotive servicing, targeting customers in the Czech market. The website reflects a professional and consistent brand presence with clear contact information and multiple brand partnerships. Technically, the site uses a modern JavaScript stack including jQuery and integrates major analytics and advertising platforms such as Google Analytics, Facebook Pixel, and Adform. The site is served over HTTPS with good SSL configuration but lacks some security headers and a published privacy policy, which are areas for improvement. The WHOIS data for the domain is unavailable, which reduces domain trustworthiness, but the website content and branding appear legitimate and consistent with a medium-sized automotive dealership business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security posture to enhance trust and compliance.