Security Directory

A

AS Veselības centru apvienība

dubultupoliklinika.lv

68

Veselības centru apvienība (VCA) operates as a major healthcare provider in Latvia, offering a wide range of outpatient medical services through its polyclinics, including the Dubulti location. The website reflects a professional healthcare service provider with clear information on services, contact details, and multilingual support. The technical infrastructure is based on Joomla CMS with modern web technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers could be improved. Privacy compliance is strong, with a comprehensive cookie and privacy policy and a designated Data Protection Officer contact. Overall, the website supports the business's credibility and trustworthiness in the healthcare sector.

A

Akciju sabiedrība “DIĀNA”

majaiundarzam.lv

47

Mājai un Dārzam is a well-established Latvian retail chain specializing in garden, household, and building materials, operating 19 physical stores across Latvia and an online presence via the partner e-commerce platform zum.lv. The company offers a variety of services including project department consultations, loyalty programs, product delivery, leasing options, and gift cards, targeting both individual and corporate customers. The website is professionally designed using WordPress with multilingual support and integrates modern marketing and analytics tools such as Facebook Pixel and Google Analytics with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. WHOIS data was unavailable due to query limits, limiting domain legitimacy verification. Overall, the website and business appear credible and professionally managed.

S

Salaspils veselības un sociālās aprūpes centrs

salaspilsvc.lv

47

Salaspils veselības un sociālās aprūpes centrs is a public healthcare and social care provider located in Salaspils, Latvia. The organization offers a range of medical and social services including rehabilitation, family doctor services, social care for elderly and disabled persons, and vaccination programs. The website serves as an information portal for patients and the local community, providing contact details, service descriptions, news updates, and partner information. The entity appears to be a medium-sized, government or municipally affiliated healthcare institution with a focus on community health and social welfare. Technically, the website is built on WordPress using Bootstrap for responsive design, enhanced with accessibility features such as font size and contrast controls. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, and uses Yoast SEO for search engine optimization. The site is served over HTTPS with no visible security challenges or WAF blocks, indicating a secure and accessible digital presence. From a security perspective, the site employs HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected in the HTML source, and no dedicated security or incident response policies are published. The WHOIS data could not be retrieved due to query limits, limiting domain registration trust analysis. Overall, the security posture is moderate with room for improvement in security headers and transparency. The overall risk assessment is low, with the website representing a legitimate public healthcare service. Strategic recommendations include enhancing security headers, publishing incident response and data protection officer information, and maintaining compliance with privacy regulations. The website demonstrates good content quality, technical implementation, and business credibility, supporting its role as a trusted community healthcare resource.

L

Līvu Akvaparks

akvaparks.lv

47

Līvu Akvaparks is a prominent water park located in Jūrmala, Latvia, recognized as one of the largest in Northern Europe. The business offers a variety of leisure services including water park attractions, spa treatments, accommodation, and food and beverage options. The website is primarily in Latvian and targets families, tourists, and local visitors seeking recreational activities. The business model centers on hospitality and entertainment services with a strong regional market presence. Technically, the website employs a traditional tech stack featuring jQuery, jQuery UI, Bootstrap, and Google Maps API. While the site is mobile-optimized and well-structured, some technologies are outdated, and there is room for modernization. Performance is moderate, and SEO and accessibility are basic but functional. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but no explicit security headers were detected in the HTML source. The use of older JavaScript libraries may introduce vulnerabilities. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism is present. No incident response or security policy pages were found. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website is professional, content-rich, and trustworthy for its audience, but improvements in security headers, updated libraries, and enhanced privacy compliance would strengthen its posture. The absence of WHOIS data is a limitation but does not currently indicate suspicious activity.

A

Abavas Laivas

abavaslaivas.lv

44

Abavas Laivas is a small Latvian company specializing in boat rentals and nature tourism services, including canoe, kayak, and motorboat rentals, guided routes on local rivers and lakes, and accommodation options such as sauna houses and tent sites. The company targets nature lovers and tourists seeking outdoor recreational experiences in Latvia. The website is built on WordPress using Elementor and Bootstrap, providing a professional and user-friendly interface with good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable due to query limits, but the website content and contact information indicate a legitimate local business. Overall, the site is well-structured, compliant with privacy regulations, and trustworthy for its audience.

FotoBarons.lv is a Latvian-based printing and photo production company operating under the legal entity SIA "Minapa". The company offers a broad range of services including printing, copying, photo printing, photo souvenirs, calendar production, and stamp making. Their market position is that of a local retail and service provider targeting general consumers and businesses in Latvia. The website is professionally designed, mobile-optimized, and built on the Pixlpark Web-to-Print platform, indicating a moderate level of digital maturity. The site integrates modern JavaScript libraries such as Swiper and Bootstrap for enhanced user experience. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No WHOIS data was available due to query limits, limiting domain trust verification. Overall, the website is functional, trustworthy, and safe for general audiences.

S

Stargorod

stargorod.lv

15

Stargorod is a well-established hospitality business operating a Czech brewery and restaurant in Riga, Latvia. The company emphasizes traditional Czech brewing methods and offers unique beer varieties exclusive to its Riga location. The website reflects a mature business with a focus on tourism and local clientele, supported by a network of related locations in other cities. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and tracking tools like Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied and CSRF tokens present, but lacks explicit security headers and published security policies. Privacy compliance is addressed through a privacy policy and cookie consent mechanism, though GDPR-specific details are minimal. Overall, the website is professional and trustworthy, with good content quality and user experience, but could improve in security transparency and WHOIS data availability.

S

SIA PLASTIX

envo.lv

43

ENVO is a Latvian-based e-commerce business specializing in the sale of packaging materials such as envelopes, tapes, boxes, and protective fillers. The company operates an online store targeting both business and retail customers primarily within Latvia. Established in 2008 under the legal entity SIA PLASTIX, ENVO positions itself as a reliable local supplier offering competitive pricing and a broad product range. The website is professionally designed with clear navigation and is mobile-optimized, supporting a positive user experience. The presence of social media links and contact information further supports customer engagement and trust. Technically, the website leverages common web technologies including OpenCart CMS, jQuery, Bootstrap, and various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is served over HTTPS with no visible blocking or WAF interference, indicating a secure and accessible infrastructure. However, security headers are not explicitly detected, and there is no visible security policy or incident response information published, which could be improved. From a security and privacy perspective, the site implements a cookie consent banner and provides a privacy policy in Latvian, indicating basic GDPR compliance. Contact details and physical address are clearly presented, enhancing business credibility. The absence of WHOIS data due to query limits limits domain registration verification, but the website content and business information appear consistent and legitimate. Overall, the site demonstrates a moderate to good security posture with room for enhancement in security best practices and transparency. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure or security.txt file, and enhancing incident response visibility to strengthen trust and compliance.

L

Latvijas Nacionālā Opera un Balets

opera.lv

46

Latvijas Nacionālā Opera un Balets is the official national opera and ballet company of Latvia, providing a comprehensive platform for cultural performances including operas, ballets, and concerts. The website serves as a portal for event information, ticket sales, artist details, and organizational news, targeting a broad audience of cultural enthusiasts and the general public. The institution holds a prominent position in Latvia's cultural landscape, offering a rich repertoire and educational programs. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring a responsive and user-friendly experience across devices. The presence of cookie consent and privacy policy pages indicates compliance with GDPR regulations. Security-wise, while HTTPS is implied and tracking mechanisms are responsibly managed, the site lacks visible security headers and formal security policies, suggesting room for improvement in hardening its security posture. Overall, the website is professionally maintained, trustworthy, and provides a safe, family-friendly environment for users.

R

Rimi Olimpiskais centrs

olimpiskais.lv

59

Rimi Olimpiskais centrs is a well-established sports and leisure center based in Riga, Latvia, offering a variety of services including swimming lessons, fitness facilities, children's parties, and online product sales. The website is built on the Magento platform, leveraging modern web technologies such as jQuery, Bootstrap, and Owl Carousel to provide a responsive and user-friendly experience. The site is professionally designed with clear navigation and good mobile optimization, targeting local families and sports enthusiasts. Security posture is moderate with HTTPS enforced and secure login forms, but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, the site presents a trustworthy and professional online presence for its business.

S

SIA "Gundega 108"

navayoga.lv

52

Nava Yoga, operated by SIA "Gundega 108", is a small yoga and wellness studio based in Riga, Latvia. The business offers a wide range of yoga classes, events, therapies, massages, and beauty care services targeting a general audience interested in health and wellness. The website is multilingual, supporting Latvian, English, and Russian, and actively promotes events and blog content to engage visitors. The company maintains a professional online presence with clear contact information and social media integration. Technically, the website is built on the PyroCMS platform and leverages common web technologies such as jQuery, Bootstrap, Owl Carousel, and tracking tools like Google Analytics and Facebook Pixel. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Security is adequate with HTTPS enforced and form validation, but lacks advanced security headers and published security policies. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of a security policy, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in security maturity. Privacy compliance is basic but includes a cookie consent banner and links to terms and privacy-related pages. WHOIS data could not be retrieved due to query limits, but the website content and contact details suggest a legitimate small business operation. Overall, Nava Yoga presents a trustworthy and professional online presence suitable for its business scope. Strategic improvements in security policies, privacy transparency, and technical enhancements would further strengthen its digital maturity and risk posture.

Z

ZiziBum SIA

zizibum.lv

49

ZiziBum SIA operates a family-oriented party and children's playroom studio located in Riga, Latvia. The business specializes in hosting children's birthday and name day parties, offering a spacious play area with various attractions and a dedicated celebration room. Their market position is that of a local small business catering to families and event organizers in the Riga area. The website reflects a professional and consistent brand image with clear business and contact information, including social media presence and embedded Facebook feed. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook SDK, with integration of reCAPTCHA v3 for form security and a cookie consent mechanism to comply with privacy regulations. However, no WHOIS data was available due to query limits, limiting domain registration verification. Security posture is moderate with HTTPS usage and privacy policies in place, but lacks visible HTTP security headers and explicit security policies. Overall, the website is safe, family-friendly, and well-structured, with room for improvement in security hardening and WHOIS transparency.

M

MINTO

mintomebeles.lv

52

The website mintomebeles.lv represents a small Latvian furniture business named MINTO specializing in manufacturing and retail of kitchen furniture, built-in wardrobes, window blinds, and ready-made furniture. The business model focuses on custom furniture production with leasing options through InCredit and InBank. The website is built on Joomla CMS with Bootstrap and jQuery, indicating a moderate level of technical maturity. However, the site lacks HTTPS usage, security headers, and privacy or cookie policies, which are critical for modern web security and compliance. Google Tag Manager is used for analytics, but no explicit privacy compliance mechanisms are present. Overall, the security posture is weak, and contact information is not clearly provided, which may impact user trust. The site content is safe and appropriate for a general audience.

M

Marmors Group

marmorsgroup.com

46

Marmors Group is a Latvian metal trading and steel construction company with over 25 years of market presence. The group consists of two companies, MARMORS Ltd and TETRALIA Ltd, offering a range of services including metal trade, steel structure manufacturing, CNC plasma and gas cutting, screw piles, and logistics. The website reflects a medium-sized B2B industrial business targeting construction and metal trade clients primarily in Latvia. Technically, the site is built on Joomla CMS with common web technologies and includes Google Analytics for user tracking. The site is mobile-optimized and provides clear navigation and contact information. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

O

Olimpiskais centrs "Limbaži"

oclimbazi.lv

50

Olimpiskais centrs "Limbaži" is a local government sports and recreation center based in Limbaži, Latvia. The website serves as an information hub for sports facilities, events, and community sports teams, targeting local residents and sports enthusiasts. The business model focuses on providing sports infrastructure and organizing sports competitions and events. The site is built on WordPress with a Bootstrap framework, integrating Google Analytics and Facebook SDK for visitor tracking. The technical infrastructure is modern and mobile-optimized, though some accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

Reāls Piedzīvojums is a Latvian event organization company specializing in team building, sports games, adventure games, birthday parties, and corporate event management since 2010. The company targets families, schools, companies, and organizations, offering over 40 event programs and 350 attractions. The website is built on Joomla CMS with a variety of JavaScript libraries and tracking tools integrated, including Google Analytics and Facebook Pixel. While the site is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and cookie policies and security headers, which are areas for improvement. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site presents a moderate security posture with no critical vulnerabilities detected and is suitable for general audiences.

B

Biedrība Ūdenszīmes

udenszimes.lv

51

Biedrība Ūdenszīmes is a Latvian non-profit organization dedicated to fostering creativity and improving quality of life in rural areas, particularly focusing on the Sēlija region. Their activities include organizing community projects, educational seminars, and cultural events aimed at rural women and older adults. The website serves as a platform to communicate these initiatives and engage the local community. Technically, the site is built on WordPress with Bootstrap and jQuery, providing a moderate level of performance and mobile responsiveness. However, the use of an outdated jQuery version and absence of security headers indicate potential security weaknesses. The site lacks formal privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and trustworthy for its community purpose but would benefit from improved security and privacy measures.

V

Viesnīca Latvija, SIA

espariga.com

52

ESPA Rīga is a medium-sized hospitality business operating a five-star SPA and wellness center located in central Riga, Latvia. The company offers a range of premium services including massages, manicure and pedicure, pool and sauna access, and fitness facilities. It is positioned as one of the largest internationally recognized wellness centers in the Baltic region, with a strategic partnership with Radisson Blu hotel enhancing its market presence. The website content is professionally presented, targeting a general audience seeking relaxation and wellness services. Technically, the website employs modern web technologies such as Google Analytics, Facebook Pixel, Hotjar, Bootstrap, and FontAwesome, with media assets hosted on Amazon S3. The site is mobile optimized and demonstrates good SEO practices.

R

Antique and vintage ancient furniture Rokoko.lv

rokoko.lv

51

The website rokoko.lv is an e-commerce platform specializing in the sale of antique and vintage furniture and related decorative items. The business appears to target general consumers interested in unique and historical furniture pieces. The site uses OpenCart CMS and integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, and Trustpilot. However, the site lacks visible privacy, cookie, and terms of service policies, and no explicit contact information is present in the analyzed HTML content. The WHOIS data could not be retrieved due to query limits, limiting the ability to verify domain registration details and trustworthiness. Technically, the site uses modern frameworks like Bootstrap and FontAwesome but shows only basic mobile optimization and accessibility features. Security headers and SSL configuration details are not available, indicating potential areas for improvement in security posture.

S

SIA "Spektrs Security"

spektrsshooting.com

51

GunRange.lv operates as a modern shooting range located in Latvia, positioning itself as the most advanced facility in the Baltic states. The company offers a variety of shooting experiences including individual packages, thematic parties, corporate events, and interactive shooting systems. The business targets adults interested in shooting sports and corporate clients seeking team-building activities. The website reflects a professional and consistent brand image with clear contact details and social media presence, supporting its credibility in the hospitality sector. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Slick Carousel, Swiper, and OpenLayers for mapping. It uses Google Fonts and integrates Google Analytics for visitor tracking. The site is mobile-optimized with responsive design elements and clear navigation. However, some SEO and accessibility features could be improved for better performance and compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. No forms collecting personal data were detected on the homepage, reducing immediate risk exposure. The absence of WHOIS data limits domain legitimacy verification, but the visible company registration and contact information support authenticity. Overall, GunRange.lv presents a solid business and technical foundation with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

I

ID Mēbeles

idmebeles.lv

46

ID Mēbeles is a Latvian-based furniture retailer operating primarily through an e-commerce platform complemented by a physical showroom in Riga. The company offers a wide range of furniture products for various home and office spaces, targeting Latvian consumers seeking quality and affordable furniture. Their business model combines online sales with in-person consultation and showroom experience, supported by delivery services across Latvia. The website is well-structured, visually appealing, and provides comprehensive product information, customer testimonials, and clear contact details, enhancing trust and user engagement. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring responsive design and moderate performance. The presence of cookie consent mechanisms and privacy policies indicates attention to privacy compliance. However, security headers are not visibly implemented, suggesting room for improvement in security hardening. The site uses HTTPS, which is a fundamental security requirement. From a security perspective, the site shows good practices such as encrypted connections and no exposed sensitive data in the HTML. The cookie consent banner with granular controls supports GDPR compliance. The absence of WHOIS data limits domain registration verification, but the website content and business information appear consistent and legitimate. No signs of malicious activity or suspicious content were detected. Overall, the website presents a professional and trustworthy online presence for a medium-sized retail business. Strategic recommendations include enhancing security headers, conducting regular vulnerability assessments, and possibly publishing a security.txt file to improve vulnerability disclosure transparency. These steps would strengthen the security posture and further build customer trust.

L

LLC AUTOTERM

autoterm.com

10

LLC AUTOTERM is a Latvia-based manufacturer specializing in diesel-powered independent heating systems for vehicles, including air heaters, liquid heaters, boilers, and portable heaters. The company has a strong market presence with over 1100 partners across more than 35 countries, offering competitive pricing and European quality certifications. Their business model includes direct sales, partnerships, and an online shop, targeting vehicle owners, commercial operators, and marine transport sectors. The website reflects a medium-sized enterprise with a well-established domain since 2002 and consistent branding. Technically, the website is built on OctoberCMS and utilizes modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel. It integrates analytics tools like Google Analytics and Yandex Metrika, though it lacks visible cookie consent mechanisms. The site is mobile-optimized with good navigation and content quality, though SEO and accessibility could be further improved. From a security perspective, the site uses HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced protection. There is no published security policy or incident response contact, and no cookie consent banner, indicating partial privacy compliance. The WHOIS data is consistent and supports the legitimacy of the business. Overall, the website is professional and trustworthy but would benefit from improved security headers, privacy compliance enhancements, and explicit security policies to strengthen its security posture and regulatory adherence.

N

Nord Solar

nordsolar.lv

41

Nord Solar is a medium-sized Estonian company specializing in comprehensive solar panel solutions for residential and commercial customers. The company leverages the Autarco brand to provide high-quality solar parks with guaranteed kWh production backed by Lloyd’s of London insurance, positioning itself as a market leader in Estonia. Their offerings include solar panels, inverters, battery solutions, electric vehicle chargers, and monitoring services, supported by financing options. The website is built on WordPress with modern technologies and good SEO practices, providing a professional user experience. Security posture is adequate with HTTPS and some security practices, but lacks explicit security headers and formal privacy or cookie policies. The domain registration is consistent and trustworthy, with no blocking or WAF detected. Social media presence and customer testimonials enhance credibility. Overall, the site is well-positioned but could improve privacy compliance and security headers to strengthen trust and compliance.

D

Dome Hotel

domehotel.lv

60

Dome Hotel is a luxury 5-star spa hotel located in the heart of Riga's Old Town, Latvia. The website presents a professional and elegant image, showcasing the hotel's accommodation, spa, restaurant, and event hosting services. The business targets tourists and business travelers seeking premium hospitality experiences. The site integrates multiple third-party marketing and analytics tools, reflecting a mature digital marketing strategy. Technically, the website uses modern frameworks such as Bootstrap and includes tracking via Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and CSRF tokens present, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data could not be retrieved due to query limits, limiting domain registration transparency. Overall, the website is trustworthy and professionally maintained, supporting a legitimate hospitality business.

R

Riga Shooting Range

rigashootingrange.com

49

Riga Shooting Range is a small hospitality business operating a licensed indoor shooting range in Riga, Latvia. It offers a variety of shooting packages targeting tourists and local adults seeking unique entertainment experiences such as bachelor parties and birthdays. The website is professionally designed with clear navigation and relevant content, supporting multiple languages and featuring a booking form for customer convenience. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, Google Analytics, and Hotjar, hosted by a reputable provider. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The domain is well-established since 2012, consistent with the business history, and WHOIS data shows no privacy protection or suspicious patterns. Overall, the website is functional and credible but could improve privacy compliance and security practices.

R

Red Fox Tours

redfoxtours.eu

33

Red Fox Tours is a well-established local Latvian tourism company based in Riga, offering a variety of day tours, activities, airport transfers, and stag party packages. With approximately 9 years of experience, the company has positioned itself as a leading travel service provider in Latvia, supported by strong customer reviews on TripAdvisor and active social media presence. The website reflects a professional and consistent brand image targeting tourists seeking authentic and diverse experiences in Riga and surrounding areas. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could enhance performance and accessibility further. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. There is no privacy or cookie policy present, which poses compliance risks especially under GDPR. Contact information is clearly provided, but incident response and vulnerability disclosure mechanisms are absent. The use of third-party tracking scripts without explicit consent mechanisms also raises privacy concerns. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and establishing incident response contacts.

O

Obec Hradište pod Vrátnom

hradistepodvratnom.sk

55

Obec Hradište pod Vrátnom operates an official municipal website serving the local community in Slovakia. The site provides timely local government announcements, event information, and public service updates primarily targeting residents and visitors of the village. The website is built on Joomla CMS, utilizing common web technologies such as jQuery and Bootstrap, and is hosted likely by Websupport based on DNS information. The site is mobile responsive with a clear navigation structure and good content relevance for its audience. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and cookie consent mechanisms. No contact emails or phone numbers are explicitly provided, which may limit direct communication channels. The domain registration data is consistent and trustworthy, supporting the legitimacy of the website.

B

BAU-STAV a.s.

baustav.cz

52

BAU-STAV a.s. is a well-established construction company based in the Karlovy Vary region of the Czech Republic, with nearly 30 years of experience. The company offers a comprehensive range of construction-related services including project design, construction work, steel constructions, locksmith work, transport, and roofing. It primarily serves clients in the Karlovy Vary and Central Bohemia regions but is capable of undertaking projects throughout the Czech Republic. The company is part of the SUAS GROUP, which is disclosed transparently on the website. Technically, the website uses a custom CMS built on the Gambik framework and incorporates modern JavaScript libraries such as jQuery, Bootstrap, and Fancybox. The site is mobile-optimized with good navigation and SEO practices. However, a visible server-side PHP fatal error indicates some backend instability and potential information leakage, which poses a security risk. The site uses HTTPS and Google Analytics with consent settings that deny ad and analytics storage by default, showing some privacy awareness. From a security perspective, the site lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data reduces domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, limiting the company's security posture visibility. Overall, BAU-STAV a.s. presents a credible and professional business front with room for improvement in backend stability, security best practices, and privacy compliance to enhance trust and reduce risk.

R

Rozdělov 1924, s.r.o.

restauraceletna.cz

63

Restaurace Letná Kladno is a small hospitality business operating a restaurant with a focus on quality menus including children's, lunch, seasonal, and thematic offerings. They emphasize unique cooking technology using a Josper grill and operate a local farm producing dairy and vegetable products, integrating farm-to-table concepts. The website is built on Joomla CMS with Gridbox builder, featuring modern frontend technologies and good mobile optimization. Security posture is strong with HTTPS and security headers, and a cookie consent mechanism is implemented. However, the absence of a privacy policy and terms of service pages, along with missing WHOIS data, reduces overall trust and compliance confidence. Contact information and social media presence are clearly provided, supporting business credibility.

F

Fix Software

kladenskymesic.cz

51

Kladenský měsíc is a local monthly news publication serving the residents of Kladno and its surrounding areas in the Czech Republic. The website provides current news, cultural, sports, health, and societal information relevant to the local community. The business operates as a small media outlet with a focus on regional content and community engagement. The website is developed and maintained by Fix Software, a Czech software company, indicating a professional backing for the digital platform. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for scripting, FontAwesome for icons, and Google Analytics for visitor tracking. Hosting is provided by Active24, a known Czech hosting provider, and the domain registration is consistent with the website's regional focus. The site demonstrates good design quality, clear navigation, and mobile optimization, although accessibility features are basic. From a security perspective, the site uses HTTPS, but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No direct contact emails or phone numbers are present on the main page, limiting immediate user contact options. The absence of a vulnerability disclosure policy or security.txt file suggests limited formal security communication. Overall, the security posture is moderate but could be improved with better compliance and security best practices. The overall risk is low given the nature of the content and business, but strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

T

TOI TOI, sanitární systémy, s r.o.

toitoi.cz

51

TOI TOI, sanitární systémy, s r.o. is a leading Czech company specializing in mobile sanitary technology solutions including rental and sale of mobile toilets, mobile fencing, construction cabins, and sanitary trailers. The company targets businesses and event organizers requiring hygienic and safety solutions for construction sites and mass events. Their market position is strong within the Czech Republic, supported by a professional website with clear service offerings and contact information. Technically, the website uses modern libraries such as jQuery, Bootstrap, and Font Awesome, with additional UI enhancements like WOW Slider and cookie consent mechanisms. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no dedicated security or incident response pages are present. Privacy compliance is good with GDPR-aligned privacy and cookie policies. WHOIS data is unavailable publicly due to CZ NIC policies, which slightly impacts trust but is common for this domain space. Overall, the website is professional, trustworthy, and well-maintained, with room for security improvements.

G

Geodézie Kladno s.r.o.

geodeziekladno.cz

48

Geodézie Kladno s.r.o. is a Czech geodetic company established in 2005, specializing in cadastral surveying, construction and engineering network measurements, digital mapping, GPS measurements, and consulting services. The company serves municipalities, government agencies, energy companies, and private clients, with a small team of eight employees. Their website reflects a professional and consistent brand image with clear contact information and references from reputable clients. Technically, the site is built on Joomla CMS with Gridbox builder, using modern web technologies including Bootstrap and Google Maps API. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms were detected, and no analytics or tracking scripts suggest minimal user tracking. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

C

C.E.I.S. CZ

ceis.cz

46

C.E.I.S. CZ is a Czech Republic-based company specializing in energy consulting, project design, and engineering services with over 20 years of experience. Their offerings include energy audits, building energy performance certifications, emission measurements, and comprehensive project management services including subsidy and public procurement management. The website targets businesses and public entities seeking to improve energy efficiency and comply with regulatory requirements. Technically, the website employs modern frontend technologies such as Bootstrap and Google Fonts, and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a clear navigation structure and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract significantly from the professional presentation. Overall, the website is functional, professional, and provides relevant business information with moderate privacy compliance and security measures.

W

WISNAR groupe mondiale s.r.o.

wisnar.cz

66

WISNAR groupe mondiale s.r.o. is a Czech travel agency specializing in organized sightseeing tours primarily within Europe and the Mediterranean region. With over 31 years of experience, the company targets individual travelers, student groups, educators, and various organizations, offering both first minute and last minute travel packages. Their market position is strong within the Czech Republic, supported by extensive customer testimonials, insurance against insolvency, and official licensing. The website provides a comprehensive online booking system, detailed travel information, and multiple contact channels, reflecting a mature digital presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, cookie management, and user interaction. The site is mobile-optimized and demonstrates good SEO practices. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a GDPR-compliant cookie consent mechanism. However, some security headers are not explicitly detected, suggesting room for improvement in hardening the site against common web threats. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the website's professional content and business information support its credibility. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and conducting regular security audits to sustain trust and compliance.

3

3xTOP.cz

3xtop.cz

52

3xTOP.cz operates as a niche outdoor sports club in the Czech Republic, focusing on unique mountain peak challenges completed within 24 hours. The website provides detailed information about the club, routes, events, and partner collaborations, targeting outdoor enthusiasts and cyclists. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, but uses an outdated jQuery version which poses security risks. The site employs Google Analytics and Tag Manager for user tracking but lacks visible privacy and cookie policies, indicating compliance gaps. Security posture is moderate with HTTPS enabled but missing security headers and outdated libraries. WHOIS data is unavailable, reducing domain trustworthiness. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and technical modernization.

H

Hotel Gong Štramberk

hotel-gong.cz

53

Hotel Gong Štramberk is a family-run hospitality business located in Štramberk, Czech Republic, offering a variety of accommodation options, restaurant services, and tourism packages. The website is professionally designed with clear navigation, multilingual support (Czech and English), and comprehensive information about rooms, packages, and local tourism. The business holds a recognized quality certificate from Hotel.cz, indicating a reputable market position in the local hospitality sector. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Complianz for GDPR compliance, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and WHOIS data transparency slightly reduce trustworthiness. Overall, the site is safe, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

O

OC Frýda a.s.

ocfryda.cz

53

OC Frýda a.s. operates a regional shopping center in Frýdek-Místek, Czech Republic, offering a variety of retail stores, gastronomy options, and entertainment services. The website reflects a well-established retail business with partnerships with major brands such as H&M, Billa, and New Yorker. The site targets general consumers and families seeking shopping and leisure experiences. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Swiper.js, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and Google reCAPTCHA integration, with a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data and lack of explicit security policies or incident response information are notable gaps. Overall, the site is professional, user-friendly, and trustworthy, though improvements in security transparency and WHOIS data availability are recommended.

L

LUMIS

ca-lumis.cz

55

LUMIS is a Czech-based travel agency specializing in offering a wide range of holiday packages with departures from multiple Central European airports including Prague, Ostrava, Brno, and Katowice. The company targets travelers seeking convenient and diverse vacation options, including last minute and first minute deals, with a focus on popular destinations such as Greece, Egypt, and Turkey. The website demonstrates a professional and user-friendly design, featuring rich content, clear navigation, and integration with partner travel services. Technically, the site employs modern web technologies and tracking tools, ensuring a responsive and engaging user experience. Security posture is solid with HTTPS and cookie consent mechanisms, although there is room for improvement in security headers and public security policies. The absence of WHOIS data is a notable concern for domain legitimacy, warranting further monitoring. Overall, LUMIS presents a credible and functional online presence in the travel sector.

Silver B.C., s.r.o. is a Czech-based company specializing in event production and public relations, particularly for music festivals and large cultural and sports events. Established in 2000, the company offers a range of services including event organization, crisis communication, social media management, and advertising campaigns. The website reflects a professional service provider targeting businesses and organizations in the Czech Republic. Technically, the website is built on WordPress 4.9.2 with common plugins such as WPBakery and Slider Revolution, hosted likely by WEDOS, a Czech hosting provider. While the site is functional and mobile-optimized, it uses outdated software versions which may pose security risks. Security posture is moderate with HTTPS enabled but lacking security headers and updated components. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. Overall, the website is moderately trustworthy but requires improvements in security and compliance to enhance its risk profile.

F

Florbalová škola Bohemians

fbsbohemians.cz

55

Florbalová škola Bohemians is a prominent floorball sports club based in Prague, Czech Republic, catering to a wide age range from children to adults. The club organizes teams, training, and various leisure activities including camps and school clubs, positioning itself as one of the largest floorball organizations in the country. The website reflects a professional digital presence with a focus on youth sports and community engagement. Technically, the site employs modern frontend technologies such as jQuery, Bootstrap, and various tracking and analytics tools, ensuring a responsive and user-friendly experience. However, the absence of visible privacy and cookie policies, along with missing contact information, indicates gaps in compliance and transparency. Security posture is moderate with HTTPS enforced but lacking security headers and explicit data protection disclosures. The WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and branding appear consistent and legitimate. Overall, the site is functional and well-designed but would benefit from enhanced privacy compliance and security best practices.

F

FBC Liberec

fbcliberec.cz

43

FBC Liberec is a local sports club focused on floorball activities in the Liberec region of the Czech Republic. The website serves as an informational portal for the club's activities, training sessions, and recruitment. The business operates primarily as a community sports organization with a small scale and local market presence. The domain age of over 20 years supports the legitimacy and established nature of the club. Technically, the website is built with basic HTML and CSS, utilizing Bootstrap for styling. There is no evidence of advanced CMS or frameworks. The site shows moderate performance and basic mobile optimization but lacks accessibility features and modern security practices such as HTTPS and security headers. No analytics or tracking technologies are detected, indicating minimal digital marketing or user tracking. From a security perspective, the absence of HTTPS and security headers is a significant concern. No privacy or cookie policies are present, and no contact or incident response information is provided. The site does not collect user data via forms, reducing exposure but also limiting engagement capabilities. Overall, the security posture is weak and requires improvements to meet modern standards. The overall risk is moderate given the nature of the site as a local sports club with limited sensitive data handling. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile and accessibility features, and providing clear contact and security incident response information to enhance trust and compliance.

F

FBC ČPP Bystroň Group Ostrava

fbcostrava.cz

48

FBC ČPP Bystroň Group Ostrava is a Czech floorball club with an active online presence providing detailed information about its teams, schedules, history, and partnerships within the Czech floorball community. The website serves as a hub for fans and players, offering access to league standings, match results, and youth academy details. The club participates in prominent Czech floorball leagues such as the Livesport Superliga and ČEZ Extraliga, indicating a competitive market position within the sport. Technically, the website is built on WordPress with common plugins and libraries, including jQuery, Alpine.js, and Bootstrap, and integrates tracking tools like Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and features a professional design with clear navigation, although accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The absence of WHOIS registrant data reduces transparency but is likely due to privacy protection services. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced privacy and security practices.

F

Florbal Vary, z.s.

florbalkv.cz

55

Florbal Vary, z.s. is a small regional sports club based in Karlovy Vary, Czech Republic, specializing in floorball. The club focuses on youth development and community engagement, aiming to be a leading floorball club in western Czechia. Their website provides information about teams, training, events, and partnerships, reflecting a well-organized sports organization with a family-friendly environment. Technically, the website uses modern frontend technologies including Alpine.js, Bootstrap, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and visible privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

S

Slovácko

slovacko.cz

35

Slovácko.cz is a regional tourism and cultural promotion website focused on the Moravian Slovakia area in the Czech Republic. It provides visitors with information about local folklore, history, culture, wine, gastronomy, nature, sports, and adrenaline activities. The site targets tourists and visitors interested in exploring this region, offering accommodation listings, event calendars, and cultural site promotions. The business model centers on regional tourism enhancement and visitor engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for social sharing, video popups, and user ratings. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and structured data implementation, indicating a mature digital presence. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA for form protection. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, suggesting room for improvement. No exposed sensitive data or vulnerabilities were found in the HTML content. Privacy compliance is basic, with a cookie policy and consent mechanism present but no clear privacy policy or terms of service found. Overall, the website presents a professional and trustworthy front for regional tourism promotion but lacks some compliance and transparency elements such as a visible privacy policy and WHOIS data. Strategic improvements in security headers and privacy documentation would enhance trust and compliance.

B

Bratislava Region Tourism

gob.sk

45

Bratislava Region Tourism is the official regional tourism organization for the Bratislava self-governing region in Slovakia. It focuses on promoting tourism, cultural events, and activities within the region, targeting both domestic and international visitors. The organization supports cultural, social, and sports life while preserving natural and cultural heritage. The website serves as a portal for event information, accommodation, activities, and practical tourist information. Technically, the website uses modern frontend technologies including Bootstrap and jQuery, with embedded YouTube videos and social media integration. The site is mobile optimized and provides a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response information. WHOIS data confirms the domain is legitimate and consistent with the business purpose. Overall, the website is professional and trustworthy but could improve in privacy compliance and security transparency.

S

Swanky

swanky.cz

56

Swanky is a small, community-focused business based in Ostrava, Czech Republic, specializing in organizing sports camps and training sessions for children, primarily in inline skating and skateboarding. They also offer birthday party event hosting and equipment rental services. The website reflects a well-structured and professionally designed platform targeting families and youth interested in recreational sports activities. The company maintains partnerships with local government bodies and regional organizations, enhancing its community presence and trustworthiness. Technically, the website employs a moderate technology stack including jQuery, Nette Framework, Bootstrap, and popular JavaScript libraries for UI and animation. It uses HTTPS and includes cookie consent mechanisms, Facebook Pixel, and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. From a security perspective, the site shows good baseline practices such as HTTPS and cookie consent but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the presence of clear contact information, partner logos, and privacy policies supports a positive security posture. Overall, Swanky presents a trustworthy and professional online presence suitable for its local community business model. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and compliance.

T

TLAČOVÁ A INFORMAČNÁ KANCELÁRIA ZÁHORIE

ozahori.sk

40

The website ozahori.sk operates as a regional eMagazín providing news, cultural, historical, and event information focused on the Záhorie region and Myjavské kopanice area in Slovakia. It serves a local audience interested in regional developments and cultural heritage, positioning itself as a small but important media outlet within its niche. The business model centers on content publishing and regional information dissemination, supported by partnerships with related regional sites. Technically, the site is built on WordPress CMS with a modern tech stack including Bootstrap, jQuery, and various UI libraries. It is hosted on vaswebhosting.sk and uses HTTPS for secure communication. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and technical modernization. From a security perspective, the site benefits from HTTPS and up-to-date WordPress core but lacks important security headers such as Content-Security-Policy and HSTS. No cookie consent mechanism is present despite GDPR compliance documentation, indicating a compliance gap. No critical vulnerabilities or exposed sensitive data were detected, but security posture could be enhanced by implementing recommended headers and consent mechanisms. Overall, the site is trustworthy and professional with clear contact information and a consistent brand presence. The domain registration is stable and consistent with the business history. Strategic recommendations include adding cookie consent, improving security headers, and enhancing accessibility to strengthen compliance and security posture.

H

Hotel Albrecht

hotelalbrecht.sk

56

Hotel Albrecht is a boutique hotel and restaurant located in Bratislava, Slovakia, offering a luxury and personalized hospitality experience with 12 unique rooms and suites. The website reflects a well-established business with a domain registered since 2007, consistent with the hotel's history. The site uses modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, indicating a mature digital infrastructure. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy document, although explicit security policies and incident response information are absent. The security posture is strong with HTTPS, DNSSEC, and no visible vulnerabilities, but could be improved by adding security headers and incident response details. Overall, the website is professional, trustworthy, and well-positioned in the boutique hospitality market.

R

RT TORAX, s.r.o.

rt-torax.cz

54

RT TORAX, s.r.o. is a well-established automotive company based in the Moravian-Silesian region of the Czech Republic, specializing in the sale and leasing of new and used vehicles, primarily from brands such as ŠKODA, AUDI, VW, and SEAT. The company also offers authorized servicing and additional services including insurance and extended warranties. Their market position is stable and long-term, supported by partnerships and a comprehensive service offering. The website reflects a professional business model targeting both individual and corporate customers seeking automotive solutions and leasing options. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various marketing and analytics tools such as Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR. However, it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence, aligning with the company's business claims. Overall, RT TORAX's digital presence is professional and trustworthy, with room for improvement in formalizing security policies and enhancing accessibility. The company demonstrates good privacy compliance and business credibility, making it a reliable entity in the automotive leasing and sales sector.