Security Directory

C

Cech topenářů a instalatérů České republiky z.s.

cechtop.cz

47

Cech topenářů a instalatérů České republiky z.s. is a well-established professional guild association founded in 2000, serving the heating and plumbing industry in the Czech Republic. The organization provides a range of services including professional training, certifications, publications, and event organization, targeting industry professionals and educational institutions. The website reflects a mature digital presence with a clear focus on industry support and member services. Technically, the website is built on Drupal 10 with Bootstrap 4 and uses modern web technologies such as jQuery and Colorbox for UI enhancements. The site is hosted likely by WEDOS, consistent with the WHOIS data. It is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Cookie consent and privacy policies are implemented, indicating good privacy compliance. From a security perspective, the site uses HTTPS and has no visible security blocking mechanisms or exposed sensitive data. However, security headers are not detected and could be improved. No incident response or vulnerability disclosure policies are found. Overall, the security posture is solid but could benefit from enhancements. The domain registration data is consistent with the website content and business claims, with a long domain age supporting legitimacy. The site is free from suspicious or malicious indicators and maintains good trust signals through partner logos and comprehensive contact information.

CSTfire s.r.o. is a Czech-based company specializing in biomass combustion technology, providing environmentally friendly heating solutions primarily for industrial and agricultural clients. Their product portfolio includes small and large series biomass boilers, conveyor systems, and fuel conditioning services. The company positions itself as a CO2-neutral energy provider aiming to reduce fossil fuel dependency. Technically, the website is built on WordPress with a moderate performance profile and uses common plugins for anti-spam, gallery, and cookie consent management. Security posture is solid with HTTPS and anti-spam measures, though lacking published security policies and incident response contacts. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and business information appear professional and trustworthy. Overall, the site demonstrates good privacy compliance and user experience, with clear contact information and GDPR adherence.

N

Nutrend World

nutrendworld.cz

42

Nutrend World operates a multifaceted hospitality and wellness complex in the Czech Republic, offering services including hotel accommodation, restaurant dining, fitness, wellness, massages, and congress facilities. The website is professionally designed with multilingual support and targets a general audience interested in health, fitness, and leisure. The business appears established since 2017 with consistent domain registration data. Technically, the website is built on WordPress with modern analytics and marketing tools integrated, including Google Analytics, Matomo, Hotjar, and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks explicit privacy and terms of service pages in the provided content. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are not evident. Overall, the site is trustworthy and professionally maintained.

A

Automa – časopis pro automatizační techniku, s. r. o.

automa.cz

48

Automa.cz is the online presence of Automa – časopis pro automatizační techniku, s. r. o., a specialized Czech magazine focused on automation technology and industrial control. Established in 2000, it serves professionals and companies in the automation sector by providing industry news, technical articles, market overviews, and event calendars. The website features a professional design with clear navigation and a consistent brand identity, supported by active social media channels. Technically, the site is built on ASP.NET with common JavaScript libraries and integrates Google Tag Manager for analytics and marketing. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and well-established but would benefit from enhanced privacy and security transparency.

F

FCC průmyslové systémy s.r.o.

fccps.cz

46

FCC průmyslové systémy s.r.o. is a Czech-based technical and commercial company specializing in industrial automation, embedded computing, robotics, and machine vision solutions. With over 30 years of experience in the Czech market, the company offers a broad portfolio of products and services including industrial systems, custom machinery, and training seminars. Their market position is stable and well-established, targeting industrial enterprises seeking advanced automation technologies. The website reflects a professional digital presence with modern frontend technologies and mobile responsiveness. However, the absence of WHOIS data and explicit privacy policies indicates areas for improvement in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking advanced HTTP security headers and documented incident response. Overall, the site is trustworthy and business-focused but would benefit from enhanced security and privacy documentation.

Techfood.cz is a Czech-language website focused on manufacturing operations, likely in the food technology sector. The site is built on WordPress and uses a variety of plugins including WPBakery Page Builder and Slider Revolution to enhance content presentation. The technical infrastructure is modern but lacks some advanced security headers and privacy compliance features. The absence of WHOIS data and contact information reduces the overall trustworthiness and business credibility of the site. No privacy or cookie policies were found, indicating potential compliance gaps. The website is accessible without WAF or security challenges, and content is safe for general audiences.

M

Město Havlíčkův Brod

muhb.cz

52

The website www.muhb.cz serves as the official online presence for the city of Havlíčkův Brod, Czech Republic. It provides comprehensive information about city governance, public services, news updates, and tourist information. The site targets residents, local businesses, tourists, and public officials, offering a broad range of municipal services and resources. The business model is government/public service with a medium-sized municipal scope and a historical foundation dating back to the 13th century. Technically, the site employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and Google Analytics, built on the CPedit CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security measures include HTTPS enforcement and use of Google reCAPTCHA, though security headers are not detected, indicating room for improvement. From a security perspective, the site demonstrates good practices such as cookie consent management and secure form handling but lacks visible security headers and an incident response contact. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and official branding strongly support legitimacy. Overall, the site is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency to strengthen trust and compliance.

M

Město Černovice

mestocernovice.cz

49

Město Černovice operates as the official municipal government website for the town of Černovice in the Czech Republic, providing residents and visitors with comprehensive information about local governance, services, events, and community organizations. The site serves as a central hub for public notices, contact information, and municipal development projects, positioning itself as a trusted source for local civic engagement. Technically, the website employs a moderately modern technology stack including jQuery, Bootstrap, and Swiper, with a CMS likely based on Lego CMS. The site is mobile-optimized and features a clear navigation structure, though performance is moderate and accessibility features are basic. Cookie consent mechanisms and a GDPR compliance page indicate attention to privacy regulations. From a security perspective, while HTTPS is presumably enabled, explicit security headers and advanced security policies are not evident. The absence of WHOIS data limits domain trust assessment, but the presence of official contact details and consistent branding supports legitimacy. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy municipal portal with room for improvement in security hardening and transparency around incident response and vulnerability disclosure.

M

Metropolitan University Prague

imup.cz

60

The website iMUP.cz is an academic and cultural portal affiliated with Metropolitan University Prague, providing news, events, and scholarly content primarily targeting students, researchers, and the academic community. The site reflects a medium-sized educational institution with a consistent brand presence and active engagement in academic discourse and cultural events. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and social media integrations, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response information suggests room for improvement. Privacy compliance is basic, with privacy information available in Czech but lacking comprehensive multilingual policies. Overall, the domain appears legitimate and trustworthy, supported by its university affiliation and professional content.

T

Today is Life

todayislife.de

41

The website 'Today is Life' currently displays a maintenance page with minimal content and no business description or contact information. The site is built on WordPress using a maintenance plugin and includes basic styling and fonts. The technical infrastructure includes HTTPS with no visible security headers, and no analytics or advertising scripts are present. The lack of privacy, cookie, and terms of service policies indicates low privacy compliance. The WHOIS data is limited, showing only domain status and nameservers consistent with a German hosting provider, but no registrant details or domain age information are available. Overall, the site is accessible but under construction, with low content and business credibility.

Z

Zigpoll

zigpoll.com

53

Zigpoll is a technology company offering a SaaS survey and feedback platform designed primarily for e-commerce, SaaS, and media businesses. The platform enables collection of zero-party data through post-purchase surveys, email capture campaigns, and interactive polls with no-code integration for Shopify, BigCommerce, and WordPress. The company positions itself as a trusted feedback partner for over 20,000 companies, supported by strong customer reviews and multiple integrations with popular marketing and e-commerce tools. Technically, the website employs a modern JavaScript stack including React, D3.js, and various analytics and tracking services such as Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile and SEO, with excellent design and user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms could be improved. Privacy and terms policies are present and GDPR compliant. However, WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the website is professional and trustworthy but would benefit from clearer domain registration transparency and enhanced privacy consent features.

S

StyleShout

styleshout.com

52

StyleShout is a niche online platform specializing in providing free and premium responsive website templates primarily targeting web designers, developers, and small businesses. Established in 2006, the site has a long-standing presence and offers a curated collection of modern, minimalistic templates to facilitate quick and easy website creation. The business model leverages free template distribution supplemented by premium offerings and affiliate marketing partnerships, positioning StyleShout as a trusted resource in the web design community. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as PHP, jQuery, and Google Fonts. It integrates multiple third-party services including Google Analytics, Google Tag Manager, Facebook SDK, and Adsense for analytics and monetization. Hosting is provided by Hostinger, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site benefits from HTTPS encryption and domain transfer protection but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or explicit GDPR compliance indicators. Incident response and vulnerability disclosure policies are not evident. Overall, StyleShout presents a professional and trustworthy online presence with solid business credibility and technical infrastructure. Strategic improvements in security headers, privacy compliance, and cookie consent would enhance its security posture and regulatory adherence.

U

Urp in Cloud | Software gestione Urp

urpincloud.it

67

Urp in Cloud is a specialized software solution designed to streamline the management of requests, complaints, and communications primarily for public administrations, private companies, and the healthcare sector in Italy. The platform offers a centralized communication channel with intelligent routing, real-time notifications, and an AI-powered virtual assistant to enhance operational efficiency and user experience. The company positions itself as a modern SaaS provider with a focus on compliance with Italian public sector regulations and PNRR investment requirements. Technically, the website is built on WordPress with a modern theme and integrates privacy-conscious analytics and security features such as HTTPS and Google reCAPTCHA Enterprise. While the site lacks explicit security and incident response policies, it demonstrates good security hygiene and privacy compliance. Overall, the business shows a credible market presence with consistent domain registration data and a professional online presence.

D

DigitalPA

concorsidiprogettazione.it

41

DigitalPA operates a specialized SaaS platform named Gara Spot, focused on managing online design competitions and telematic procurement procedures primarily for public administrations and companies in Italy. The platform supports the entire competition lifecycle with compliance to relevant regulations, emphasizing security, anonymity, and procedural correctness. The company positions itself as a leader in the Italian e-procurement and design competition market, offering both software and expert consultancy services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and privacy-conscious analytics via Matomo, complemented by a LiveChat support widget. The site is mobile-optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

D

DigitalPA

garaspot.it

41

DigitalPA operates the Gara SPOT platform, a certified eProcurement solution designed to manage single telematic procurement procedures and design competitions online. The company targets public administrations and enterprises requiring efficient, compliant digital procurement tools. With a solid market presence in Italy, evidenced by over 10,000 clients and numerous high-profile public sector customers, DigitalPA offers both software platforms and comprehensive consultancy services. The website reflects a professional, well-structured digital presence with clear service offerings and client testimonials. Technically, the website employs modern front-end technologies including Bootstrap, Font Awesome, and jQuery, complemented by Matomo analytics and LiveChat for user engagement. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms indicates room for improvement. Overall, the security and privacy compliance is moderate, with GDPR adherence suggested by the presence of a privacy policy but lacking explicit cookie consent. The WHOIS data aligns well with the business identity, reinforcing legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategically, DigitalPA should focus on enhancing security headers, implementing cookie consent, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance.

D

DigitalPA s.r.l

networkpa.it

68

NetworkPA, operated by DigitalPA s.r.l, is a specialized platform focused on enabling companies and professionals to engage effectively in the Italian public procurement market. The website offers tools and services to qualify as suppliers for public administrations, analyze public contracts, and discover sales opportunities. Positioned as a niche B2B SaaS and community platform, NetworkPA serves a targeted audience within the government sector in Italy. The company has established a credible market presence since its founding in 2017, supported by consistent branding and active social media channels. Technically, the website is built on WordPress with WooCommerce and several plugins, providing multilingual support and e-commerce capabilities. While the site demonstrates good SEO practices and mobile optimization, some underlying software components are outdated, posing potential security risks. Security posture is solid with HTTPS and security headers, but lacks explicit security and incident response policies. Overall, NetworkPA presents a professional and trustworthy digital presence with room for technical and security improvements.

S

SafeRisk

saferiskmanagement.com

67

SafeRisk is an Italian-based company offering a specialized risk and compliance management software platform designed to assist businesses in data collection and risk mitigation. The website presents a professional and well-structured digital presence built on WordPress, utilizing modern plugins and technologies such as Yoast SEO, Google reCAPTCHA Enterprise, and Matomo analytics. The platform targets businesses seeking comprehensive risk management solutions, positioning itself as a niche SaaS provider in the technology sector. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. Security measures such as HTTPS and bot protection are in place, but the lack of visible security headers and formal privacy and terms policies indicate areas for improvement. Overall, the website is functional and professional but requires enhanced transparency and security practices to strengthen trust and compliance.

D

DigitalPA

onlineprocurement.com

70

DigitalPA operates the Online Procurement software platform, a modular eProcurement suite designed to fully digitalize corporate purchasing processes and supplier management. The company targets innovative businesses, providing a next-level platform that manages suppliers, orders, contracts, and spend analysis. The website presents a professional image with clear navigation and multilingual support, primarily in Italian. The business model is SaaS-based, focusing on medium-sized enterprises and larger organizations across various sectors including construction, finance, energy, healthcare, and public administration. Technically, the website is built on WordPress with the Avada theme, integrating modern technologies such as Google reCAPTCHA Enterprise for bot protection and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is solid with HTTPS enforced and anti-bot measures, but lacks some security headers and explicit privacy and cookie policies. The WHOIS data is notably absent or inaccessible, which raises concerns about domain registration legitimacy despite the professional online presence. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the site is business-focused, safe, and trustworthy in content but requires improvements in transparency and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, clarifying domain registration status, and providing clear contact information for security and data protection inquiries.

W

Wavefront Systems Limited

wavefront.systems

58

Wavefront Systems Limited is a specialized technology company focused on advanced sonar systems for underwater detection and navigation. The company positions itself as a world leader in sonar specialist technology, targeting businesses and organizations requiring precise underwater detection solutions. Their website reflects a professional and consistent brand image, emphasizing engineering excellence and innovation in sonar technology. The business model is primarily B2B, offering specialized sonar technology services and products. Technically, the website is built on WordPress using the Divi theme, supplemented by plugins for SEO, GDPR compliance, and anti-spam protection. The site demonstrates moderate performance and good mobile optimization, with a modern tech stack including Google Tag Manager and FontAwesome. SEO practices are well implemented with proper metadata and structured data. From a security perspective, the site uses HTTPS with good SSL configuration and employs anti-spam and cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a moderate to good security posture and business credibility, with privacy compliance well addressed. The lack of publicly available WHOIS data due to privacy protection is typical for technology companies and does not raise immediate concerns. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen trust and compliance.

B

Bradford Museums and Galleries

bradfordmuseums.org

54

Bradford Museums and Galleries operates as a public cultural institution managing four key venues in the Bradford District, UK. The organization focuses on providing museum exhibitions, art galleries, educational programs, and community engagement activities targeted at families, students, and art/history enthusiasts. The website reflects a well-established entity with a domain age dating back to 2004, consistent with its institutional nature. Technically, the site is built on WordPress using Elementor and Rank Math SEO, with Cloudflare DNS and HTTPS enabled, indicating a modern and secure infrastructure. However, explicit privacy and cookie policies are not detected, which may impact compliance and user trust. The security posture is good with HTTPS and domain transfer protections, but lacks visible security headers and DNSSEC. Overall, the website is professional, accessible, and content-rich, serving its audience effectively while leaving room for improvements in privacy compliance and security best practices.

J

Jameel Arts Centre

jameelartscentre.org

60

Jameel Arts Centre is a prominent independent cultural institution based in Dubai, dedicated to contemporary art exhibitions, educational programs, and community engagement. Supported by Art Jameel, it holds a strong market position as a leading hub for contemporary art in the UAE, offering diverse services including exhibitions, commissions, venue hire, and a retail shop. The website reflects a professional and well-branded digital presence with rich content targeting art enthusiasts, educators, students, and the general public. Technically, the website is built on WordPress with modern frameworks like Uikit and integrates essential marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is basic with policies present but no explicit cookie consent mechanism. Overall, the security posture is adequate for a cultural institution but could be improved by enabling DNSSEC, enhancing cookie consent, and publishing explicit security and incident response policies. The domain registration is consistent and trustworthy, supporting the legitimacy of the organization. The website content is safe for general audiences with no adult or explicit material. Strategic recommendations include improving DNS security, enhancing privacy compliance, and formalizing security policies to strengthen trust and compliance in an increasingly regulated digital environment.

T

Techfood s.r.o.

automatizacevpotravinarstvi.cz

52

The website automatizacevpotravinarstvi.cz serves as the official platform for the 'Automatizace v potravinářství' conference, a specialized event focusing on automation in the food and beverage manufacturing sector in the Czech Republic. The organizing entity, Techfood s.r.o., is a small-sized company with a stable presence since 2013. The site provides detailed conference information, including program schedules, partner listings, registration forms, and contact details, targeting industry professionals interested in technological advancements in food production automation. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Slider Revolution, and Contact Form 7, with integration of Google reCAPTCHA for form security. The hosting and domain registration are managed by REG-WEDOS, a Czech provider, ensuring regional consistency. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. From a security perspective, the site employs HTTPS and basic spam protection but lacks advanced security headers and published security policies or incident response contacts. Privacy compliance is minimal, with no dedicated privacy policy or terms of service pages, though a cookie consent banner is present. No vulnerabilities or malicious content were detected. Overall, the website is professional and trustworthy for its niche audience but would benefit from enhanced privacy documentation, security policies, and accessibility improvements to strengthen compliance and user trust.

L

Lean Industry

leanindustry.cz

46

Lean Industry is a Czech-based consulting company specializing in lean manufacturing, Industry 4.0, and management consulting services. With over 15 years of experience, they target industrial and manufacturing firms to improve operational efficiency and reduce costs. Their website reflects a professional and consistent brand image, offering services such as management consulting, lean production methods, and tailored education programs. The company presents itself as a trusted partner with client testimonials and a broad portfolio of client logos. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies including jQuery, Google Tag Manager, and Mailchimp for marketing automation. The site is mobile-optimized and includes accessibility and SEO best practices. Security measures include HTTPS enforcement and CAPTCHA protection on contact forms, although some security headers are missing. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly impacts trustworthiness. Overall, Lean Industry's digital presence is professional and secure, supporting their business model effectively. Strategic improvements in security headers and domain transparency would enhance their security and credibility further.

F

FasterFish s.r.o.

fasterfish.cz

60

FasterFish s.r.o. is a Czech-based consulting and organizational development company founded in 2020. The company specializes in helping businesses and individuals improve efficiency, collaboration, and engagement through methodologies such as Vektoring and synergogika. Their services include workshops, coaching, leadership development, and conferences aimed at fostering healthy corporate culture and sustainable growth. The website is professionally designed, well-structured, and provides comprehensive information about their offerings and client testimonials, positioning them as a trusted partner in their niche market. Technically, the website is built on WordPress and leverages common web technologies including jQuery, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. Hosting and domain registration are managed by WEDOS, a Czech provider, ensuring regional consistency. The site implements HTTPS with a valid SSL certificate and includes a GDPR-compliant cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and uses cookie consent banners to comply with privacy regulations. However, no explicit security headers were detected in the HTML content, and there is no publicly available security policy or incident response information. The site does not expose sensitive data and uses secure forms for contact and newsletter subscriptions. Overall, the security posture is good but could be enhanced by adding security headers and incident response details. The domain WHOIS data aligns well with the website's business claims, showing consistent registration details and appropriate domain age. No suspicious patterns or privacy protection obfuscations were found, supporting the legitimacy of the business. The website content is safe for general audiences, with no adult or questionable material detected. Strategically, FasterFish should consider enhancing their security posture by implementing recommended HTTP security headers and publishing a formal security policy. Maintaining transparency in data protection and incident response will further build trust with clients and partners. Continued focus on content quality and user experience will support their market position as a specialized organizational development consultancy.

O

OLTIS Group

irfc.eu

66

The International Railway Forum & Conference (IRFC) website represents a well-established event organizer, OLTIS Group, focusing on the European railway and transport sector. The site provides comprehensive information about the conference, including speakers, sponsors, venue, and ticketing. The business is positioned as a key player in the international rail event market, supported by government patronage and European institutions, enhancing its credibility and reach. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Google Maps API. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA for forms, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No critical vulnerabilities or suspicious content were found. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in security and privacy compliance. Strategic enhancements in security policies, cookie consent, and security headers would strengthen trust and compliance.

D

DKSV

dksv.cz

48

DKSV.cz is a professional website dedicated to organizing and promoting transportation-related events, specifically the Dopravní konference (Transportation Conference) and Silniční veletrh (Road Trade Fair) held in Pardubice, Czech Republic. The site targets industry professionals, government officials, and companies involved in transportation infrastructure. It offers event information, registration options, and showcases partners and media collaborators. The business operates primarily as an event organizer with a regional focus and a small organizational size, founded in 2022. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO tools like Yoast and analytics platforms including Matomo and Google Analytics via Google Tag Manager. The site demonstrates good mobile optimization, structured data usage, and moderate performance. Hosting is provided by hosting90, a Czech hosting provider. From a security perspective, the site enforces HTTPS and employs a GDPR-compliant cookie consent mechanism with detailed user controls. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, DKSV.cz presents a trustworthy and professional online presence for its niche event business. Strategic improvements in security headers, incident response transparency, and visible contact information would enhance its security posture and user trust. The site is safe for general audiences and complies well with privacy regulations.

Z

Z-Group bus a.s.

karierazavolantem.cz

42

Z-Group bus a.s. is a well-established transportation company in the Czech Republic, operating since 1992. It provides a wide range of bus transportation services including regional, urban, and international routes, serving millions of passengers annually. The company also focuses on recruitment and career opportunities for bus drivers across multiple regions. The website reflects a professional and consistent brand image with clear business information and partner affiliations. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant cookie management and Google Analytics integration. Security posture is strong with HTTPS and reCAPTCHA, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, adding a terms of service page, and publishing a security.txt file for vulnerability disclosures.

J

JV Press

jvpress.cz

52

JV Press is a Czech media and press agency specializing in regional news, emergency services, transportation, and local events. The website serves a general audience interested in up-to-date regional information across multiple Czech regions. The business operates primarily as a news publisher and media partner, with a focus on delivering timely and relevant content. Technically, the site is built on WordPress, leveraging common plugins and libraries such as jQuery, Font Awesome, and Google Fonts, hosted by Wedos, a Czech hosting provider. The site demonstrates moderate performance and good mobile optimization, with a consistent and professional design. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is limited, with no privacy policy or terms of service found, though a cookie consent mechanism is implemented. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

M

Munck

munck.dk

56

Munck is a well-established Danish nationwide construction and infrastructure group specializing in road construction, district heating, sewer networks, electrical and fiber networks, unique construction projects, and harbor facilities. The company targets business and public sector clients within Denmark, leveraging over 25 years of domain presence and experience. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with Elementor, incorporating modern web technologies and cookie consent management via Cookiebot. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. Security posture is solid with HTTPS and consent management but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, Munck presents a credible and trustworthy digital presence aligned with its business operations.

S

SR-Gruppen – sinusrumleriller – kalkstabilisering – cementstabilisering – specialfræsning

sr-gruppen.dk

43

SR-Gruppen is a specialized Danish company focused on road construction and maintenance, offering niche services such as sinusrumleriller, cement and lime stabilization, BSM, Remix, and soil treatment. Their website presents a professional image with clear service offerings and a focus on industry-specific solutions. The company targets businesses and professionals in the transportation and infrastructure sectors. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern CMS with SEO considerations. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy page found. WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.

I

ITS Teknik

its-teknik.dk

53

ITS Teknik is a Danish company specializing in traffic safety, traffic planning, and traffic registration. They provide advanced traffic technology solutions including traffic signals, ITS systems, and various traffic monitoring and control equipment. The company targets municipalities and transportation authorities in Denmark, positioning itself as a trusted specialist in the traffic technology sector. Their website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on WordPress using modern themes and plugins, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and incident response information. Privacy and cookie policies are present, though cookie consent mechanisms could be improved. WHOIS data is unavailable, limiting domain trust analysis, but the overall site and business presentation suggest legitimacy.

Munck Asfalt is a Danish company specializing in asphalt production and paving services for various infrastructure projects including motorways, country roads, municipal roads, bridges, industrial areas, and parking lots. The company targets both private and business customers, positioning itself as a local/regional supplier with its own asphalt factories. The website is built on the SiteSuite CMS platform and integrates modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. The digital maturity is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS usage and cookie consent management, but lacks visible security headers and explicit security policies. Privacy compliance is supported by Cookiebot, though no dedicated privacy policy or terms of service pages were found. Overall, the website presents a professional and trustworthy image consistent with a small business in the energy and transportation sector.

G

GC Rieber Minerals

gcrieber-salt.com

58

GC Rieber Minerals is a Norwegian-based company specializing in the supply and development of mineral and salt products for diverse markets including road maintenance, fishery, aquaculture, industrial applications, food production, and agriculture. The company emphasizes sustainability and circular economy principles, positioning itself as a partner for businesses seeking innovative and environmentally responsible mineral solutions. Their portfolio includes well-known brands such as Norsal and Stradasalt, which cater to premium salt products and de-icing solutions respectively. The company operates across multiple Nordic countries with detailed contact points and a professional online presence. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, with integrations for GDPR compliance and map services. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. Despite this, the website content and branding are consistent and professional, mitigating some risk. Privacy and cookie policies are comprehensive and GDPR compliant, supporting the company’s commitment to data protection. Overall, GC Rieber Minerals presents a credible and professional business front with a strong focus on sustainability and customer engagement. Security and compliance practices are good but could benefit from enhanced transparency in domain registration and additional security headers.

W

WhistleSystem ApS

whistlesystem.com

69

WhistleSystem ApS is a Danish technology company founded in 2020, specializing in providing secure, simple, and compliant whistleblower systems primarily targeting businesses seeking to implement whistleblower compliance solutions. The website is professionally designed using WordPress with the Divi theme and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, and Cookiebot for GDPR compliance. The company positions itself as a trusted provider in the whistleblower compliance market with a focus on security and simplicity. Technically, the website is hosted with Amazon Registrar and uses AWS DNS servers, with HTTPS enabled and a moderate performance profile. Security posture is generally good, though improvements can be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is supported by a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.

N

N+N – Konstrukce a dopravní stavby Litoměřice, s.r.o.

nanlitomerice.cz

44

N+N – Konstrukce a dopravní stavby Litoměřice, s.r.o. is a Czech Republic-based medium-sized company specializing in construction and infrastructure projects, particularly railway construction, bridge and wall structures, and civil engineering works. Established in 2001, the company has a solid market presence and offers comprehensive project documentation and construction services. The website reflects a professional and consistent brand image, targeting construction industry clients and infrastructure developers. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Slider Revolution, and Complianz GDPR for compliance. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The hosting is provided by cesky-hosting.eu, and the site shows moderate performance with good mobile optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but it lacks explicit security headers and uses an outdated jQuery version, which could pose risks. No exposed sensitive data or vulnerabilities were detected in the HTML content. Privacy compliance is strong with a comprehensive GDPR policy and cookie management. Overall, the website is trustworthy and professionally maintained, with recommendations to update JavaScript libraries and enhance security headers to improve the security posture further.

J

JK Machinery s.r.o.

jk-machinery.cz

41

JK Machinery s.r.o. is a Czech-based manufacturing company specializing in the design and production of agricultural machinery and technology solutions. With over 30 years of experience, the company offers comprehensive services including equipment manufacturing, technology design, installation, and after-sales support. Their market presence spans 42 countries with a strong client base exceeding 2500 satisfied customers. The website reflects a professional and consistent brand image, targeting agricultural businesses and food industry enterprises globally. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and utilizes popular analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Hosting is provided by Active24, a reputable provider, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site employs Google reCAPTCHA on its contact forms to mitigate spam and abuse. However, it lacks explicit security headers and does not provide a public security policy or incident response information. Privacy and cookie policies are present and indicate GDPR compliance, though more detailed data retention policies are not disclosed. No vulnerabilities or suspicious content were detected during analysis. Overall, JK Machinery's website is a well-maintained digital asset that supports its business objectives effectively. The security posture is solid but could be enhanced by implementing additional security headers and publishing incident response and vulnerability disclosure policies. The company demonstrates strong business credibility and international reach, making it a trustworthy entity in its sector.

C

Chládek & Tintěra, a.s.

cht.cz

48

Chládek & Tintěra, a.s. is a well-established Czech construction company specializing in railway, bridge, civil engineering, and related construction services. With over 35 years of experience and a workforce of approximately 380 professionals, the company holds a leading position in the Czech construction market. Their website showcases a comprehensive portfolio of projects, career opportunities, and detailed company information, reflecting a mature and professional business model focused on transportation and infrastructure sectors. Technically, the website is built on WordPress using the Mioweb3 theme, enhanced with SEO and GDPR compliance plugins such as Yoast SEO and Complianz. The site integrates modern analytics tools including Google Analytics 4 and Facebook Pixel, and employs Google Consent Mode to manage user privacy preferences effectively. The site is mobile-optimized and demonstrates good performance and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent management, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable gap, reducing the overall trust score and suggesting a need for further domain registration verification. Overall, the website presents a secure, compliant, and professional digital presence for a large construction firm. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture further.

S

SBS Cargo

sbscargo.cz

36

SBS Cargo is a traditional forwarding company established in 2012, specializing in rail and maritime transport services. The company leverages generational knowledge in forwarding and transport sectors, serving clients primarily in energy, coal, steel, wood, paper, chemical oil, and industrial products. Their market position is that of a small but established player with a focus on traditional and reliable logistics solutions. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the website is built on WordPress with Bootstrap and jQuery, optimized for mobile devices and SEO-friendly through the Yoast SEO plugin. Hosting appears to be provided by Webglobe, consistent with the domain's nameserver information. Performance is moderate with good design quality and navigation clarity, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response details are present on the homepage, limiting transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and incident response information to improve trust and regulatory adherence.

A

Aseta Group s.r.o.

inexcz.cz

50

Aseta Group s.r.o. is a well-established facility management company operating in the Czech Republic with over 30 years of experience. The company offers a broad range of services including technical building management, cleaning, waste management, outdoor maintenance, substitute fulfillment, and security services. Their market position is strong, supported by a large workforce and numerous active contracts, indicating a significant presence in the facility management sector. The website reflects a professional and consistent brand image, targeting businesses and institutions requiring comprehensive facility services. Technically, the website uses modern technologies such as jQuery, Tailwind CSS, and Google Analytics, with a custom or Nette-based CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data is a notable gap, reducing trustworthiness and requiring further verification. Overall, the site is professional and trustworthy but could improve transparency in domain registration and security disclosures.

C

CS-BETON s.r.o.

csbeton.cz

63

CS-BETON s.r.o. is a Czech-based medium-sized manufacturing company specializing in the production of concrete paving stones and other concrete elements for garden and transport infrastructure. Established since 1992, the company targets construction firms, municipalities, and homeowners with a diversified product portfolio and technical support services. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site uses modern web technologies including Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is moderate, with cookie consent mechanisms in place but lacking explicit security headers and incident response information. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact details support legitimacy. Overall, the site is safe, business-focused, and well-structured, scoring 75 out of 100 in AI evaluation.

T

TRCZ s.r.o.

trcz.cz

56

TRCZ s.r.o. is a Czech manufacturing company specializing in automotive safety components such as multifunctional controllers and seat belts. Established in 2003 as a subsidiary of the Japanese Tokai Rika Co., Ltd., it serves major automotive manufacturers with a focus on quality and safety. The company operates a modern factory in Lovosice and holds recognized certifications including ISO 9001 and IATF 16949, underscoring its commitment to quality management. The website reflects a professional digital presence built on WordPress with Elementor, providing clear business information and compliance with GDPR through a dedicated privacy policy page. However, contact details are not prominently displayed on the homepage, and cookie consent mechanisms are absent.

Ú

Ústecká komunitní nadace

komunitninadace.cz

58

Ústecká komunitní nadace is a well-established non-profit community foundation based in Ústí nad Labem, Czech Republic, with roots dating back to 1993. The organization focuses on supporting local community projects through grants and donations, aiming to improve the quality of life in the Ústecký region. Their website reflects a professional and consistent brand image, providing clear information about their mission, donors, and supported projects. The foundation maintains active partnerships with reputable organizations and has a visible presence on major social media platforms. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as Google Analytics, Facebook Pixel, and lazy loading for images. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks several recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear GDPR and cookie policies, including consent mechanisms. However, the site does not publish explicit security policies, incident response contacts, or vulnerability disclosure information, which could be areas for future enhancement. Overall, the website presents a trustworthy and credible image for a non-profit organization, with a solid technical foundation and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen their digital maturity and risk posture.

Město Štětí operates an official municipal website serving as the primary information portal for the city and its residents. The site provides comprehensive details about city administration, local services, events, and contact information. It targets local citizens and visitors seeking official information. The website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Swiper.js, ensuring a responsive and user-friendly experience. The presence of GDPR-compliant cookie consent and clear contact details reflects a commitment to privacy and transparency. However, the absence of WHOIS data limits domain registration trust verification. Security posture is solid with HTTPS and cookie management, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and well-maintained, serving its public sector role effectively.

F

FW Africa

foodbusinessafrica.com

47

Food Business Middle East & Africa, operated by FW Africa, is a leading media publication and event organizer focused on the food and beverage industry across Africa and the Middle East. The website serves as a comprehensive platform providing industry news, insights, and advertising opportunities targeting business owners, CEOs, and professionals in the sector. It holds a strong market position as the No.1 food and beverage industry magazine and website in the region, supported by a consistent brand presence and professional content quality. Technically, the website is built on WordPress using the Pressbox theme and Divi Builder framework, integrating modern technologies such as Google Tag Manager, Google Analytics, Matomo Analytics, and advanced advertising plugins. The site demonstrates good performance, mobile optimization, and SEO practices, ensuring a positive user experience and accessibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with a mature digital presence, though the lack of WHOIS data and some security policy disclosures slightly reduce trustworthiness. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure information, and enhancing transparency around data protection officers to strengthen compliance and trust.

C

Chrysler Center

mintzedge.com

63

MintzEdge is a resource platform aimed at entrepreneurs, providing insights and tools to support the growth and development of startups and small businesses. The website is professionally designed using Squarespace, featuring relevant content targeted at entrepreneurial audiences. The business operates from New York, USA, and maintains a LinkedIn presence, enhancing its credibility. Technically, the site employs modern web technologies including Google Analytics for tracking and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and privacy policy pages suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the site presents a professional and business-focused front but would benefit from enhanced transparency and security practices.

Q

Questex

questex.com

60

Questex is a well-established information and events company founded in 2002, focusing on the experience economy across hospitality, healthcare, technology, and wellness sectors. The company operates multiple tradeshows, newsletters, and branding programs to connect professionals and businesses. Their market position is strong, supported by acquisitions such as Affordable Housing Finance and Multifamily Executive. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies and Cloudflare DNS, though DNSSEC is not enabled. Security posture is moderate with HTTPS enabled but lacks some security headers and published security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and business credible, though improvements in security practices are recommended.

The website 'Monastery Tourism' operated under the domain klasternituristika.cz is a niche platform focused on religious and pilgrimage tourism primarily in the Czech Republic. It offers information on pilgrimage sites, accommodation, places of interest, and pilgrimage routes, targeting pilgrims and tourists interested in Christian historical monuments and faith-based travel. The business model revolves around providing informational content and booking capabilities, supported by user registration and login features. The site has been active since 2015, indicating a mature presence in its niche market. Technically, the website employs a combination of legacy and modern web technologies including jQuery, Bootstrap 3, Leaflet.js for mapping, and the Nette PHP framework. It integrates Matomo analytics for user tracking and uses HTTPS for secure communication. The site is moderately optimized for mobile devices and SEO, with a good user experience and clear navigation. However, some technical improvements are recommended, such as updating libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers like CSP or HSTS, which are important for modern web security. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. The absence of incident response contacts and security policies reduces transparency. The domain WHOIS data is consistent and trustworthy, with no suspicious patterns detected. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer policy disclosures to strengthen trust and regulatory adherence.

R

Reed Exhibitions Limited

rxglobal.com

72

RX Global, operated by Reed Exhibitions Limited, is a leading global events organizer with over 350 events across 25 countries and 43 industry sectors. The company focuses on creating impactful business experiences and has a strong market position as a large enterprise in the event management industry. Their services include event organization, sales support, event technology, and sustainability initiatives. The website reflects a mature digital presence with a modern Drupal CMS infrastructure, responsive design, and integration of marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent management. Security posture is strong with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations.

D

Deutsches Maritime Zentrum e.V.

dmz-maritim.de

51

The Deutsches Maritime Zentrum e.V. operates as an important non-profit think tank dedicated to strengthening the maritime sector in Germany. The organization focuses on innovation and future-oriented topics to maintain the maritime industry's competitive edge internationally. Their services include providing tools such as an interactive maritime map, funding compass, and educational pathfinder, alongside organizing events and workshops. The website reflects a professional and consistent brand presence with clear targeting of maritime stakeholders and government entities. Technically, the website is built on a modern WordPress platform using the Divi theme and several plugins for SEO, job postings, and cookie management. Hosting is provided by planet-ocean-hosting, and the site employs HTTPS with good SSL configuration. The site is mobile optimized and includes structured data for SEO enhancement. Analytics and tracking are implemented via Google Tag Manager and Borlabs Cookie for consent management. From a security perspective, the site enforces HTTPS and uses reCAPTCHA v3 to protect forms. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a low-risk profile with good technical and business credibility. Strategic improvements include adding comprehensive privacy and security policies, enhancing security headers, and publishing contact information to improve transparency and compliance.

H

Hospic sv. Štěpána, z.s.

hospiclitomerice.cz

45

Hospic sv. Štěpána Litoměřice is a well-established non-profit healthcare organization providing comprehensive hospice and palliative care services in the Czech Republic since 2004. The website serves as an informative platform for patients, families, healthcare professionals, and donors, detailing services such as inpatient care, home hospice, counseling, and educational programs. The organization maintains a strong community presence and partnerships with governmental and charitable entities. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for user tracking. The site is mobile-optimized and professionally designed, offering a good user experience. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some advanced security headers and a published vulnerability disclosure policy. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages. Overall, the site is trustworthy and credible, reflecting the organization's mission and operational maturity.