Security Directory

B

BPA sport marketing a.s.

hokej.cz

53

Hokej.cz is the official Czech ice hockey web portal operated by BPA sport marketing a.s., providing comprehensive coverage of Czech hockey leagues, national teams, and international tournaments. The site offers news, live scores, player statistics, ticketing links, and video content, targeting hockey fans primarily in the Czech Republic. Technically, the website employs modern JavaScript frameworks including React and React Query, integrates Google Analytics and Gemius for analytics, and uses a consent management platform for GDPR compliance. The site is well-structured, mobile-optimized, and secured with HTTPS and standard security headers. However, explicit privacy policy and terms of service pages were not found in the provided content, and no direct contact information is visible, which slightly impacts privacy compliance and business credibility scores. Overall, the website presents a professional and trustworthy media platform with moderate to good technical and security posture.

B

Bowel Cancer UK

bowelcanceruk.org.uk

61

Bowel Cancer UK is the UK's leading charity dedicated to bowel cancer awareness, support, research funding, and campaigning. The organization provides comprehensive information and resources for patients, families, carers, and health professionals. Their market position is strong within the UK healthcare charity sector, focusing on bowel cancer specifically. The website reflects a mature digital presence with clear navigation, professional design, and extensive content tailored to their audience. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and a CMS likely based on MODX, with e-commerce functionality powered by Shopify. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, professional, and compliant with privacy regulations. The WHOIS data query was unsuccessful due to querying a subdomain, but metadata and content support legitimacy. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining GDPR compliance.

E

eStudio.cz

estudio.cz

47

eStudio.cz is a Czech Republic-based small technology service provider specializing in comprehensive web design, e-commerce solutions, online marketing, and reliable web hosting. The company emphasizes long-term client relationships and offers strategic marketing and integration with information systems. Their market position is supported by over 90% client retention beyond nine years, indicating strong customer satisfaction and business stability. The website content is professionally presented, targeting businesses seeking digital presence and growth through modern online tools. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, reCAPTCHA, Swiper.js, and Smartlook for session recording. It is built on the Reflex-eshop CMS platform, optimized for mobile devices, and includes GDPR-compliant cookie consent mechanisms. Performance is moderate with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and anti-bot measures on forms, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with clear cookie consent and a privacy policy page. Business credibility is supported by clear contact information, client references, and professional content. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security headers and transparency around incident response. The absence of WHOIS data reduces domain trust slightly but does not detract from the business legitimacy based on website content.

EASYDOT CREATIVE is a Greek-based small technology company specializing in website construction, eShop development, and digital marketing services. Established in 2011, it holds a strong market position in Greece as a reliable and professional digital solutions provider. The website is well-designed, mobile-optimized, and rich in relevant content targeting businesses and professionals seeking digital transformation. Technically, the site runs on WordPress with a modern theme and integrates multiple JavaScript libraries and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though formal security policies and incident response contacts are absent. Privacy compliance is robust with clear cookie consent and privacy policy presence. Overall, the site demonstrates high professionalism and trustworthiness with no blocking or suspicious content detected.

Z

Zentiva Group, a.s.

zentiva.cz

76

Zentiva Group, a.s. is a well-established pharmaceutical company specializing in the production and distribution of generic medicines primarily serving the Czech Republic and surrounding regions. The website presents a professional image with clear branding and a focus on quality generics. The company targets healthcare professionals and consumers seeking affordable pharmaceutical products. The digital presence includes integration with Google Tag Manager and Cookiebot for analytics and privacy compliance, reflecting a mature digital infrastructure. Technically, the website employs modern JavaScript libraries and frameworks such as Modernizr and Select2, uses Google Fonts for typography, and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences effectively. However, the absence of certain security headers and lack of published security or incident response policies indicate areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professionally maintained, with a strong compliance posture regarding privacy and user consent. The lack of WHOIS data due to privacy protection is typical for corporate domains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

Č

Česká lékařská společnost J. E. Purkyně ve společnosti STAPRO s. r. o.

casopiskbm.cz

50

The website casopiskbm.cz serves as the official online platform for the medical journal 'Klinická biochemie a metabolismus', published by the Czech Medical Society J. E. Purkyně in cooperation with STAPRO s.r.o. The journal focuses on clinical biochemistry, metabolism, and related medical fields, targeting healthcare professionals and researchers. The site provides access to current and archival issues, manuscript submission, and editorial information, positioning itself as a niche but reputable scientific publication with a legacy dating back to 1971. Technically, the website is built on the Actavia engine CMS and employs legacy JavaScript libraries such as jQuery 1.12.4, along with modern utilities like Headroom.js and Modernizr. Hosting is provided by WEDOS, a Czech registrar and hosting provider. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. The presence of Google Analytics indicates moderate user tracking without visible cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks modern security headers and uses outdated JavaScript libraries, which could pose vulnerabilities. No explicit privacy or cookie policies are present, and GDPR compliance is not clearly demonstrated. The WHOIS data aligns well with the website's claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the site is a credible and professional medical journal platform with room for improvement in security practices, privacy compliance, and technical modernization. Strategic enhancements in these areas would strengthen trust and user protection.

M

MEFANET

mefanet.cz

50

MEFANET is a collaborative educational network project focused on medical and healthcare faculties in the Czech Republic and Slovakia. It aims to enhance cooperation and resource sharing among faculties through modern ICT tools, providing a platform for electronic educational materials, conferences, and a dedicated medical education journal. The website reflects a medium-sized, regionally focused educational initiative with a clear target audience of students and educators in healthcare fields. Technically, the site employs common modern web technologies including Google Analytics and Facebook SDK, with good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

I

Institut postgraduálního vzdělávání ve zdravotnictví

ipvz.cz

60

Institut postgraduálního vzdělávání ve zdravotnictví (IPVZ) is a Czech educational institution specializing in postgraduate training and continuing education for healthcare professionals including doctors, dentists, pharmacists, and non-medical healthcare workers. The website serves as a comprehensive portal offering course catalogs, client registration, certification information, and additional services such as hotel and congress facilities. IPVZ holds a strong position in the Czech healthcare education sector with a clear focus on professional development and specialization. Technically, the website is built on ASP.NET WebForms with legacy jQuery and modern frontend libraries, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and CSRF protections, though improvements are recommended in HTTP security headers and updating legacy libraries. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trust. Overall, IPVZ presents a professional, secure, and user-friendly platform for healthcare education in the Czech Republic.

S

Solen Software, s.r.o.

crossref.cz

50

The website crossref.cz serves as an educational and informational portal focused on the CrossRef system, DOI identifiers, and scientific databases, primarily targeting the Czech academic and research community. It provides clear explanations about CrossRef as a reference linking system and DOI as a persistent digital identifier, linking to official CrossRef and DOI websites. The site is operated by Solen Software, s.r.o., a Czech company, and uses a Czech hosting provider, reflecting a consistent regional focus. From a technical perspective, the site employs legacy JavaScript libraries such as jQuery 1.7.2 alongside modern analytics tools like Google Analytics and Google Tag Manager. The content is well-structured with professional design and navigation, though mobile optimization and accessibility are basic. The site uses the Actavia editorial system and is hosted on Aerohosting servers. Performance is moderate, with no critical technical issues detected. Security posture is moderate but could be improved. The site lacks HTTPS confirmation in the provided data, no explicit security headers were detected, and no privacy or cookie policies are present, indicating gaps in compliance with GDPR and modern security best practices. No forms or sensitive data collection points reduce immediate risk, but the absence of contact and incident response information limits transparency. Overall, the website is a legitimate, niche educational resource with consistent WHOIS data and a stable domain age. However, it would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

S

Solen Software, s.r.o.

solensoftware.cz

49

Solen Software, s.r.o. is a Czech Republic based small technology company specializing in the development of custom internet applications with a strong focus on editorial systems for scientific publishing. Their flagship product, Actavia, supports comprehensive workflows for scientific journals including DOI management and integration with CrossRef and other citation databases. The company has an established web presence since 2012 and operates multiple related domains supporting their core business. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.2 and includes Google Analytics and Tag Manager for tracking, but lacks modern security headers and visible privacy or cookie policies, indicating room for compliance and security improvements. No contact emails or phone numbers are explicitly provided on the main site, which may impact user trust and support accessibility. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is professional and content-rich but requires enhancements in privacy compliance, security posture, and contact transparency.

Sdružení praktických lékařů České Republiky (SPL ČR) is a professional association serving general practitioners in the Czech Republic. The website provides member-exclusive content, public information, and resources related to healthcare and professional development. It supports member registration, communication, and discussion forums, positioning itself as a key national association in the healthcare sector. Technically, the site is built on WordPress with a Bootstrap-based theme and common plugins for community and form management. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and multi-factor authentication. Privacy and cookie policies are present, though cookie consent mechanisms are missing. No terms of service or vulnerability disclosure policies were found. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, but could improve security and privacy compliance aspects.

H

Hotel AGH Rožnov p. R.

hotel-agh.cz

57

Hotel AGH Rožnov p. R. is a well-established hospitality business located in Rožnov pod Radhoštěm, Czech Republic, with a history dating back to 1783. The hotel offers accommodation, dining, event hosting including conferences and weddings, and various stay packages targeting tourists and business travelers. The website reflects a professional and consistent brand image with clear service offerings and customer trust indicators such as high customer ratings and certifications. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, providing a good user experience with mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Overall, the website is safe, accessible, and trustworthy but could improve in privacy compliance and security transparency.

S

SNOTY, s.r.o.

snoty.cz

48

SNOTY, s.r.o. is a Czech small business established in 1995 specializing in manufacturing promotional confectionery products such as hygienically packaged sugars, chocolate-covered almonds, biscuits, lollipops, and chocolates with custom advertising prints. The company holds a strong and stable market position in the Czech Republic, serving a diverse range of business customers seeking promotional items. The website is professionally designed with clear navigation and good mobile optimization, leveraging common web technologies including Bootstrap, jQuery, and Google Analytics. Security measures include Google reCaptcha integration, but lack of visible security headers and missing privacy and cookie policies indicate room for improvement. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with the business claims. Overall, the site presents a moderate security posture and good business credibility.

S. A. B. Medical is a Czech Republic-based company specializing in the import and distribution of high-quality medical materials and equipment, with a focus on radiology, cardiology, urology, neonatology, and specialized cancer treatment devices. The company claims over 29 years of market presence, positioning itself as a trusted partner for healthcare professionals and institutions. Their website reflects a professional and well-structured digital presence, utilizing modern web technologies such as UKit and Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and provides clear navigation and comprehensive product catalogs. Security-wise, the website employs HTTPS and a cookie consent mechanism but lacks visible advanced security headers and explicit privacy or terms of service pages, which are recommended for compliance and trust. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, warranting further investigation. Overall, the company demonstrates a solid business and technical foundation but should enhance transparency and security practices to improve trust and compliance.

S

Svenska Barnmorskeförbundet

barnmorskeforbundet.se

52

Svenska Barnmorskeförbundet is a well-established professional association for midwives and midwifery students in Sweden, with a history dating back to 1886. The organization focuses on promoting professional development, knowledge advancement, and research within reproductive, perinatal, and sexual health. Their website serves as a hub for members and the public, offering information about the association, membership, publications, events, and advocacy positions. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience of healthcare professionals in midwifery.

S

Solen Software, s.r.o.

actavia.cz

49

Actavia.cz presents a specialized editorial system designed for scientific journals, offering comprehensive management of the entire publication workflow including peer review, DOI management, and web content administration. The business is positioned as a niche technology provider focused on academic publishing, with a small company size and a history dating back to 2009. The website is professionally designed with clear navigation and detailed descriptions of modular services tailored to editorial needs. Technically, the site uses legacy JavaScript libraries and custom CMS solutions hosted likely on Aerohosting infrastructure, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by updating libraries, adding security headers, and implementing privacy and cookie policies. No contact information or privacy compliance indicators are present, which impacts trust and compliance scores. WHOIS data is consistent and supports legitimacy. Overall, the site is safe, professional, and targeted at scientific publishing professionals.

Č

Česká lékařská společnost J. E. Purkyně

czechurol.cz

50

The website czechurol.cz serves as the official online presence of the Czech Urological Society's medical journal, publishing peer-reviewed articles and research in the field of urology. It targets medical professionals and experts in medicine and pharmacy, providing access to current and archival journal issues. The site is supported by the Czech Medical Society J. E. Purkyně and powered by the Actavia editorial system. The domain is well-established since 2006, reflecting a stable and credible publication history. Technically, the website employs a traditional web stack with jQuery, Modernizr, and a custom editorial platform. Hosting is provided by Aerohosting, a Czech hosting provider, ensuring regional consistency. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No major technical flaws were detected, though some modernization could improve user experience. From a security perspective, the site uses HTTPS but lacks important security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. No vulnerabilities or exposed sensitive data were found, but the use of an outdated jQuery version and absence of incident response contacts are notable gaps. Overall, the website is a trustworthy and professional resource for its niche audience but would benefit from enhanced privacy compliance, security hardening, and technical modernization to maintain and improve its standing in the healthcare publishing sector.

H

HARTMANN – RICO a.s.

zivotsestomii.cz

10

The website www.zivotsestomii.cz represents a healthcare-focused business under the brand Dansac, operated by HARTMANN – RICO a.s. It specializes in the development, manufacturing, and distribution of ostomy care products, targeting stomy patients and their families in the Czech Republic. The site offers comprehensive educational content, product information, and customer support, positioning itself as a trusted resource in the stomy care market. Technically, the site employs modern JavaScript frameworks, cookie consent management via Cookiebot, and analytics tools including Google Analytics and Sitecore Engagement Analytics. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are missing and should be implemented to enhance protection. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms in place. However, the WHOIS data for the domain is unavailable, limiting the ability to fully verify domain legitimacy and registration details. Overall, the site is a credible and professional platform with minor technical and security improvements recommended.

T

TWIPLA

session-replays.io

72

TWIPLA is a technology company specializing in website analytics solutions, focusing on session recordings and visitor behavior analysis to help businesses optimize user experience and conversion rates. Positioned as a privacy-conscious alternative to mainstream analytics platforms, TWIPLA offers a comprehensive suite of tools including event tracking, heatmaps, and visitor communication features. The company targets businesses and website owners seeking detailed insights into user interactions with their websites. The website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and various carousel libraries to deliver a responsive and user-friendly experience. The site demonstrates good SEO practices, accessibility, and mobile optimization, reflecting a mature digital infrastructure. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Security posture is solid with HTTPS enforced and privacy best practices observed; however, the absence of published security policies and vulnerability disclosure mechanisms suggests room for improvement. The missing WHOIS domain registration data raises concerns about domain legitimacy, although the professional presentation and structured data indicate a credible business presence. Overall, TWIPLA presents a trustworthy and professional analytics service with strong privacy focus. Strategic recommendations include enhancing transparency around security policies and verifying domain registration details to strengthen trust and compliance.

C

Czech Health Technology Institute, z. s.

czechhealth.cz

45

Czech Health Technology Institute (CHTI) is a Czech non-profit organization founded in 2023, focused on identifying and supporting innovative healthcare technology solutions to improve healthcare delivery and quality. The organization collaborates with government ministries, academic institutions, and private sector partners to implement humanitarian programs, complex healthcare solutions, centers of excellence, and educational initiatives, particularly supporting healthcare development in Ukraine. The website reflects a professional and consistent brand presence with clear communication of its mission, team, partners, and contact information. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, ensuring good mobile optimization and user experience. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, though it lacks a dedicated privacy policy and terms of service pages, which are important for full compliance. Analytics and marketing tools such as Google Analytics, Google Tag Manager, Incomaker, and Facebook Pixel are used with user consent. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. WHOIS data is consistent with the organization's claims, indicating legitimacy. Overall, the site scores well on professionalism and business credibility but should improve privacy and security documentation. Strategic recommendations include publishing a privacy policy and terms of service, enhancing security headers, and providing incident response and vulnerability disclosure information to strengthen trust and compliance.

E

European Federation of Tank Cleaning Organisations

eftco.org

60

The European Federation of Tank Cleaning Organisations (EFTCO) operates as a non-profit federation representing over 630 tank cleaning depots across 25 European countries. It focuses on promoting reliable, trustworthy, and environmentally friendly tank cleaning services through standardization and collaboration with related European federations. The EFTCO Cleaning Document (ECD) is a key service that provides traceable and multilingual documentation of tank cleaning processes, supporting supply chain safety and compliance. The website targets industry professionals, transport companies, and regulatory bodies, positioning EFTCO as a unique and authoritative federation in its niche. Technically, the website employs a traditional tech stack including jQuery 1.8.3, Modernizr, and Bootstrap, with Google Analytics for visitor tracking. While the site is accessible and well-structured with good content quality and navigation, some technical debt is evident due to the use of outdated JavaScript libraries and missing modern security headers. The cookie consent mechanism is implemented, but privacy and terms of service pages are not found, indicating partial privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent, but lacks visible security headers and uses an outdated jQuery version that may expose it to vulnerabilities. The WHOIS data is malformed and unavailable, limiting trust verification of domain registration details. No incident response or security policies are publicly disclosed. Overall, the security posture is moderate but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment suggests the website is legitimate and professional but has gaps in privacy compliance and security best practices. Strategic recommendations include updating technical components, enhancing security headers, publishing privacy and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

I

Independent Publishers Guild

independentpublishersguild.com

67

The Independent Publishers Guild (IPG) is a UK-based membership organization dedicated to supporting the independent publishing community. The website serves as a comprehensive portal offering membership benefits, events such as the Independent Publishing Awards, a jobs board, training resources, and industry news. The IPG positions itself as the UK's largest publishing community for independent publishers, emphasizing support, diversity, and sustainability within the sector. The organization is registered in the UK with a clear company registration number and charity status, reinforcing its legitimacy and non-profit nature. Technically, the website is built on a mature ASP.NET Web Forms platform utilizing Telerik UI controls, jQuery, and modern web fonts. It integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and accessibility features, although some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling practices including anti-forgery tokens. However, DNSSEC is not enabled, and security headers are absent, which are areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. No incident response or security policy pages were found, suggesting an opportunity to enhance transparency and preparedness. Overall, the IPG website presents a professional, trustworthy, and content-rich platform for its target audience. The security posture is solid but could benefit from additional hardening measures. The business credibility is high, supported by clear registration details and consistent branding. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security policy to further strengthen trust and compliance.

James Hardie Europe GmbH operates the Bodenplaner website, providing building materials and related services under the Fermacell brand. The company is a large multinational with a strong presence in Europe and the USA, serving a broad audience including customers, suppliers, architects, and contractors. The website offers a floor planning tool and comprehensive privacy information, reflecting a mature business with established GDPR compliance. Technically, the site uses common web technologies such as Google Analytics with IP anonymization, Google Tag Manager, and video.js, but lacks advanced CMS or modern frameworks. Security posture is moderate with cookie consent implemented but missing explicit security headers and DNSSEC. The domain is well-established since 2008, consistent with the company's history, and uses a reputable registrar without privacy protection, enhancing trust. Overall, the website is professional, GDPR-compliant, and trustworthy, though improvements in security headers, mobile optimization, and incident response transparency are recommended.

I

ING

ing.com

76

ING is a large, established global financial institution of Dutch origin, providing a broad range of banking and financial services with a strong emphasis on sustainability and corporate governance. The website serves multiple audiences including customers, investors, and the general public, offering comprehensive information on corporate strategy, compliance, and sustainability initiatives. The digital infrastructure employs modern web technologies and analytics tools, supporting a professional and accessible user experience. Security posture is strong with HTTPS enforced and CSRF protections, though explicit security headers and incident response contacts could be improved. Overall, the website reflects a mature and credible financial services brand with a high level of professionalism and trustworthiness.

Ц

Централен депозитар за хартии од вредност АД Скопје

cdhv.mk

57

The website for Централен депозитар за хартии од вредност АД Скопје serves as the official online presence of the central securities depository in North Macedonia. It provides comprehensive information and services related to securities registration, clearing, custody, and reporting for market participants. The site targets investors, issuers, and financial institutions within the country, positioning itself as a critical infrastructure entity in the national capital market. The business is well-established with a domain age of over a decade, reflecting stability and legitimacy. Technically, the website is built on ASP.NET Web Forms with a reliance on older JavaScript libraries such as jQuery 1.11.1 and uses common plugins like Flexslider and Modernizr. Hosting is managed via Neotel, a local provider, with HTTPS enabled ensuring secure communications. The site implements a cookie consent mechanism and uses Google Analytics for visitor tracking, indicating a moderate level of digital maturity. However, some modernization opportunities exist, particularly updating JavaScript libraries and enhancing security headers. From a security perspective, the site enforces HTTPS and has basic privacy and cookie policies in place. There is no evidence of advanced security policies, incident response contacts, or vulnerability disclosure mechanisms. The use of outdated libraries and absence of security headers present moderate risks. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting trustworthiness. Overall, the website is professional, content-rich, and trustworthy for its intended audience. Strategic improvements in security practices and technical modernization would enhance its posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

R

Registar vrijednosnih papira u Federaciji Bosne i Hercegovine d.d. Sarajevo

rvp.ba

51

The Registar vrijednosnih papira u Federaciji Bosne i Hercegovine d.d. Sarajevo operates as the official securities registry for the Federation of Bosnia and Herzegovina. The website provides comprehensive information and services related to securities registration, dividend payments, corporate actions, and shareholder data management. It serves a specialized audience including shareholders, issuers, financial institutions, and government entities, positioning itself as an authoritative source in the Bosnian financial sector. Technically, the website employs a standard ASP.NET MVC framework with common libraries such as jQuery, Bootstrap, and Modernizr. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The design is professional and consistent, with clear navigation and relevant content. From a security perspective, the site uses HTTPS but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and functional, with room for improvement in security best practices, privacy compliance, and accessibility. Strategic enhancements in these areas would strengthen the site's security posture and user trust.

S

S.A. TROX Belgium/TROX Belgium N.V.

trox.be

70

S.A. TROX Belgium/TROX Belgium N.V. is a medium-sized manufacturing company specializing in air handling and ventilation products, serving primarily B2B clients in Belgium and connected globally through the TROX Group. Their website is professionally designed, multilingual, and provides comprehensive product and service information, including digital tools like the myTROX portal and TROX Academy for customer engagement and training. The technical infrastructure is modern, leveraging Scrivito CMS, jQuery, and Google reCAPTCHA for security and user experience. Security posture is strong with HTTPS, multiple security headers, and spam protection on forms. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. WHOIS data is restricted, which is typical for privacy reasons, but no suspicious patterns are detected. Overall, the website reflects a mature digital presence aligned with the company's business operations.

FiXart, operated by Viktor Nevrla, is a small Czech Republic-based web design and digital services provider specializing in creating websites and e-shops with custom CMS solutions. The company offers end-to-end services including design, coding, CSS template creation, and basic SEO, targeting local businesses and individuals primarily in Prostějov. The website reflects a professional and consistent brand image with clear contact information and a focus on usability and content clarity. Technically, the site uses older JavaScript libraries such as jQuery 1.8.3 and integrates Google Analytics for visitor tracking. While the site is functional and moderately optimized for performance and SEO, it lacks modern security headers and explicit privacy or cookie policies, which are compliance gaps. The WHOIS data confirms the domain's legitimacy and long-standing registration since 2008, consistent with the business's maturity. Overall, the website is safe, professional, and trustworthy but would benefit from security and privacy improvements.

S

SIA BT 1

bt1.lv

56

SIA BT 1 is a leading international exhibition organizer based in Latvia, specializing in trade fairs and events primarily in the Baltic region. The company offers a broad range of services including event organization, venue rental, and additional support services such as stand construction and catering. Their website reflects a professional and consistent brand presence with multilingual support and clear event information targeting businesses and professionals interested in exhibitions. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, and FancyBox, integrated with Google Tag Manager and Facebook Pixel for analytics and marketing. While the site is mobile-optimized and accessible at a basic level, some outdated libraries and lack of explicit security headers indicate areas for technical improvement. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, the absence of a visible security policy, incident response contacts, and terms of service pages suggests gaps in comprehensive security and compliance documentation. The WHOIS data supports the legitimacy of the domain and company registration, reinforcing business credibility. Overall, the website presents a trustworthy and professional front for BT 1's business operations but would benefit from technical and security enhancements to strengthen its posture and compliance.

Střední podnikatelský stav, z.s. is a Czech non-profit organization established in 2001 focused on supporting medium-sized businesses through lobbying, organizing competitions such as Exportér roku and Talenty pro firmy T-PROFI, and promoting vocational education initiatives. The organization targets medium-sized entrepreneurs in the Czech Republic, aiming to improve the business environment and workforce qualifications. The website reflects a consistent and professional brand image with clear business information and contact details. Technically, the site is built on WordPress with common JavaScript libraries and moderate performance and mobile optimization. Security posture is basic with HTTPS usage but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Analytics tools like Google Analytics and Tag Manager are used, indicating moderate user tracking without explicit consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

C

Chart.js | Open source HTML5 Charts for your website

chartjs.org

55

Chart.js is an open source JavaScript charting library designed for modern web development, offering flexible and simple charting solutions. It enjoys a strong community presence with contributions hosted on GitHub, positioning itself as a popular tool for developers and designers needing data visualization capabilities. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site leverages modern web technologies including HTML5 Canvas, Google Analytics, and Typekit fonts, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and Content-Security-Policy headers present, although there is room for improvement in privacy compliance and incident response transparency. Overall, the site is trustworthy and well-maintained, suitable for its target audience of developers and technical users.

W

Webtrh.cz

webtrh.cz

38

Webtrh.cz is a well-established Czech online marketplace and community platform founded in 2006, focused on connecting businesses, freelancers, and entrepreneurs. It offers a broad range of services including business offers and demands, project and domain sales, job listings, forums, contract templates, and a milestone escrow payment system to secure transactions. The platform targets Czech-speaking business users seeking a trusted environment for commercial and professional interactions. Technically, the site is built on WordPress with modern JavaScript libraries and is hosted behind Cloudflare, ensuring good performance and security. Analytics tools like Google Tag Manager and Microsoft Clarity are used for user behavior insights. Security posture is strong with HTTPS, security headers, and escrow protections, though explicit cookie consent and security policies are absent. Overall, the site demonstrates a mature digital presence with a solid reputation in its market niche.

Amalthea z. s. is a Czech non-profit organization dedicated to supporting families and children through social, educational, and therapeutic services primarily in the Pardubice region. The organization focuses on preventing child placement outside of families, supporting substitute families, and providing education to both professionals and the public. The website reflects a well-structured and content-rich platform targeting families, social workers, and educators. Technically, the site uses common web technologies including Google Analytics and jQuery, but some components like jQuery are outdated, and security headers are missing, indicating room for improvement in security posture. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, showing awareness of GDPR requirements. However, the absence of WHOIS data and lack of explicit contact information on the site slightly reduce trustworthiness. Overall, the site is professional and trustworthy but would benefit from enhanced security measures and clearer business contact details.

S

STŘED, z.ú.

stred.info

49

STŘED, z.ú. is a Czech non-profit organization providing social, preventive, and therapeutic services primarily targeting children, families, and educational professionals in the Vysočina region. The organization operates a community center and offers a range of supportive services with a focus on human values such as openness, professionalism, and trustworthiness. The website reflects a well-established regional presence with over 20 years of operation and partnerships with reputable organizations. Technically, the website uses a mix of legacy and modern JavaScript libraries including jQuery 1.10.2, Google Analytics, and Swiper.js, indicating moderate digital maturity. The site is mobile-optimized and SEO-friendly but could improve accessibility and update outdated libraries. Security posture is moderate; while HTTPS is presumably enabled, no security headers were detected and the use of an outdated jQuery version poses potential risks. Privacy compliance is basic with a cookie consent banner but no explicit privacy policy page found. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

A

Authentic Creatives, LLC

iphotos.com

55

iPHOTOS.com, operated by Authentic Creatives, LLC, is a well-established digital media platform founded in 1996 that offers over 5 million royalty-free stock photos, vector illustrations, clipart, fonts, sounds, and HD videos. The website targets creative professionals, educators, marketers, and general users seeking affordable and diverse digital assets through subscription-based memberships. It maintains a strong market position supported by its integration with sister sites such as Clipart.com and AnimationFactory.com. The business model focuses on licensing digital media with budget-friendly pricing options and instant downloads.

T

Tlačová agentúra Slovenskej republiky

vtedy.sk

9

Vtedy.sk is a Slovak historical media platform operated by the Tlačová agentúra Slovenskej republiky (TASR), the national press agency. The website serves as a public memory gallery offering historical articles, photo galleries, and video content focused on Slovak history and culture. It targets a general audience interested in educational and cultural content. The platform maintains consistent branding and is integrated with partner sites such as teraz.sk and tablet.tv. The business model centers on content publishing and archival media services within the media industry in Slovakia.

P

Polstrin

hotelmezisvy.cz

48

Polstrin boutique hotel Mezi švy is a small boutique hotel located in Hradec Králové, Czech Republic, offering uniquely designed rooms with custom-made furniture by the parent company Polstrin, a traditional Czech upholstery manufacturer. The hotel emphasizes a modern, artistic interior design and provides a contactless check-in experience. The website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various UI libraries, reflecting a moderate level of digital maturity. While the site is well-designed and user-friendly, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website presents a trustworthy and professional image with clear contact details and social media presence.

P

Plzeňský Prazdroj, a.s.

prazdroj.cz

45

Plzeňský Prazdroj, a.s. is a leading Czech brewery producing well-known beer brands such as Pilsner Urquell, Gambrinus, Velkopopovický Kozel, and Radegast. The company operates a professional website that serves as a hub for brand information, career opportunities, sustainability initiatives, and customer engagement. The site targets general and mature audiences interested in Czech beer culture and hospitality. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and privacy-conscious tracking configurations, though some security headers could be improved. The absence of WHOIS data limits domain registration transparency but is consistent with privacy protection practices common for large enterprises. Overall, the website reflects a mature digital presence aligned with the company's market position.

N

Nitriansky samosprávny kraj

unsk.sk

67

Nitriansky samosprávny kraj operates as a regional government authority in Slovakia, providing governance, public administration, and various electronic services to its residents. The website serves as an official portal offering information about the region, its governance structure, public notices, and access to services. The site targets residents, local government officials, and stakeholders interested in regional affairs. Technically, the website employs a traditional web stack with jQuery, Bootstrap, and other common JavaScript libraries, delivering a responsive and navigable user experience. Security-wise, the site uses HTTPS and implements cookie consent, but lacks visible advanced security headers and formal incident response or vulnerability disclosure policies. Overall, the website is legitimate, well-branded, and trustworthy, with room for improvement in security and compliance documentation.

A

Aetna, spol. s r. o.

aetna.cz

64

Aetna, spol. s r. o. is a Czech strategic and creative agency established in 1992, specializing in brand building, content marketing, and communication strategies for a diverse clientele including global companies, traditional Czech brands, startups, and B2B firms. The website showcases a professional portfolio with extensive client references and award recognitions, positioning Aetna as a reputable player in the media and marketing industry within the Czech Republic. Technically, the site employs modern web technologies such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and various font and UI libraries, indicating a mature digital infrastructure. However, some areas such as explicit privacy policies, terms of service, and security headers are missing or minimal, suggesting room for improvement in compliance and security posture. Overall, the security posture is moderate with no critical vulnerabilities detected, but the absence of published security policies and incident response contacts limits transparency. The domain's WHOIS data confirms a long-standing and consistent registration, reinforcing the business's legitimacy. Strategic recommendations include enhancing privacy and security disclosures, implementing security headers, and publishing incident response information to improve trust and compliance.

V

Vega TEAM

vegateam.cz

42

Vega TEAM is a Czech Republic-based internet studio specializing in creating successful websites, e-shops, internet marketing, custom software, and mobile applications. Established since 1999, the company targets businesses seeking professional digital solutions and offers a broad range of services including web development, marketing, consulting, and maintenance. The website reflects a professional and consistent brand image with clear service offerings and client engagement channels. Technically, the site uses common web technologies such as jQuery, FlexSlider, Google Analytics, and Zopim Live Chat, indicating a moderate level of digital maturity. However, mobile optimization and accessibility are basic, and performance is moderate. Security posture is average with no visible HTTPS confirmation or security headers detected in the provided data, and no privacy or cookie policies are published, indicating compliance gaps. WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

H

HOSTINGSOLUTIONS s.r.o.

web-snadno.online

76

HOSTINGSOLUTIONS s.r.o. operates the Web Snadno Online platform, providing an intuitive SaaS web editor and hosting service targeted primarily at individuals, freelancers, and small businesses in the Czech Republic. The platform offers over 200 professional templates, domain registration, SSL certificates, and email hosting, positioning itself as a comprehensive solution for easy website and e-shop creation. Technically, the website employs modern frameworks such as Bootstrap and integrates popular analytics and marketing tools like Google Analytics and Facebook Pixel, ensuring a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-optimized for performance and SEO, with transparent business information and customer support channels. Strategic improvements in security policy publication and header implementation would further enhance trust and compliance.

P

POLSTRIN DESIGN

polstrin.cz

45

POLSTRIN DESIGN is a Czech family-owned company specializing in the manufacturing and retail of upholstered furniture, including sofas, armchairs, beds, and accessories. With a history dating back to 1957, the company positions itself as a trusted and experienced player in the Czech furniture manufacturing industry. Their business model includes standard production, custom orders, and interior design services, targeting general consumers and businesses seeking quality furniture solutions. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the website is built on WordPress using modern technologies such as jQuery, Google Analytics, Facebook Pixel, and WPBakery Page Builder. It demonstrates good mobile optimization, SEO practices, and moderate performance. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. From a security perspective, the site enforces HTTPS and employs cookie consent controls but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall security posture is solid for a medium-sized manufacturing business. Overall, POLSTRIN DESIGN presents a credible and professional digital footprint with room for improvement in security transparency and WHOIS data availability. Strategic enhancements in security headers, incident response disclosures, and WHOIS transparency would further strengthen trust and compliance.

Smithers is a well-established global provider of scientific testing, consulting, certification, market intelligence, and cybersecurity services. The company serves a broad range of industries including energy, transportation, healthcare, agricultural science, and manufacturing. Their website reflects a mature business with a large scale and a history dating back to 1925. The company emphasizes trusted expertise, high-touch service, and comprehensive certifications such as ISO 27001, CMMC, and NIST 800-171. Technically, the website is built on a modern CMS (Kentico) with JavaScript frameworks and includes features like carousels and search forms, indicating a good level of digital maturity. Security posture is strong with HTTPS and secure forms, though the absence of visible security headers and WHOIS data are minor concerns. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website projects professionalism and trustworthiness, supporting Smithers' market position as a leader in their domain.

The website www.cech-cal.eu represents the Cech Čalouníků a Dekoratérů a Truhlářů, a Czech non-profit trade guild established in 1998. It serves as an industry association for manufacturers, suppliers, sellers, authorized persons, and vocational schools related to upholstery, decoration, and woodworking. The site provides information about membership, events, publications, and educational resources, positioning itself as a recognized entity within the Czech manufacturing and craft sectors. The business model focuses on membership services and industry support rather than commercial sales. Technically, the website employs a moderately modern tech stack including Bootstrap 3.3.7, jQuery 1.12.4, Font Awesome, and various JavaScript plugins for UI elements like sliders and carousels. Google Analytics and Tag Manager are used for visitor tracking. The site is mobile responsive with good navigation and content relevance, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS but lacks explicit security headers such as CSP or HSTS. No privacy or cookie policies are present, and no consent mechanisms are implemented, indicating compliance gaps with GDPR and related regulations. No forms or data collection fields were found on the homepage, reducing immediate data exposure risks. WHOIS data is unavailable due to EURid privacy policies, but the domain appears legitimate and consistent with the business claims. Overall, the website is professional and trustworthy for its target audience but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in security headers, privacy disclosures, and cookie consent would strengthen its posture and user trust.

A

Asociace komunikačních agentur (AKA)

ferovytendr.cz

46

Férový tendr is a Czech Republic based initiative by the Asociace komunikačních agentur (AKA) aimed at improving the transparency and efficiency of tender processes in the marketing and communication industry. The website provides detailed principles, guidelines, and resources to support fair tendering practices, targeting marketing agencies and clients. The platform is supported by numerous industry partners and includes tools such as brief verification and certified advisors to enhance tender quality. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is strong with HTTPS and form protections, though some security headers are missing. Privacy compliance is moderate due to lack of explicit privacy and cookie policies. WHOIS data is unavailable, which slightly impacts trust but the site content and partner ecosystem indicate legitimacy.

Offpark s.r.o. operates a family-oriented outdoor activity business based in the Šumava region of the Czech Republic, offering services such as rope parks, terrain scooters, rafting, and paintball. The company targets families, schools, and corporate groups seeking adventure and team-building experiences in nature. The website reflects a professional and consistent brand image with clear contact details and partner affiliations, indicating a stable regional market presence. Technically, the site uses common JavaScript libraries and Google Fonts, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site scores well on content quality and business credibility but should address privacy and security enhancements.

G

Galledia AG

galledia.ch

51

Galledia AG is a Swiss media company providing integrated services across print, digital, publishing, and event management sectors. Positioned as a significant regional player, it serves both large enterprises and SMEs with tailored communication solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on Drupal 9 with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence. Strategic improvements in security headers and privacy compliance would enhance overall risk posture.

Č

Česká pošta

ceskaposta.cz

68

Česká pošta is the national postal operator of the Czech Republic, providing a comprehensive range of postal, financial, and eGovernment services. The website reflects a mature and well-established organization with a broad service portfolio targeting both individual consumers and businesses. The site is professionally designed with clear navigation and multilingual support, indicating a focus on accessibility and user experience. Technically, the site is built on the Liferay CMS platform, utilizing common JavaScript libraries such as jQuery and Modernizr, and implements HTTPS with good security practices including cookie consent mechanisms and session management. However, some security headers are not explicitly detected, and no public incident response or vulnerability disclosure information is available, which could be improved to enhance transparency and security posture. Overall, the website is trustworthy and aligns with the expectations for a government-affiliated postal service, though the lack of WHOIS data limits domain registration transparency. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and adding a security.txt file to improve security maturity and stakeholder trust.