Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,169001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
7,951–8,000 of 99,069
ASBasb-portal.cz
Real Estate · Czech Republic
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
ASB-portal.cz is a specialized Czech online portal dedicated to architecture, construction, and real estate business sectors. It provides expert articles, industry news, event calendars, newsletters, and magazine publications targeting professionals and stakeholders in these fields. The website demonstrates a consistent and professional brand presence with good content quality and clear navigation. Technically, it is built on WordPress with modern plugins such as Yoast SEO and uses Google Tag Manager and InMobi for analytics and consent management. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy policy documentation. The absence of WHOIS domain registration data is a concern for domain legitimacy but does not detract significantly from the website's professional appearance and content. Overall, the site is a credible and valuable resource for its target audience.
Other
68Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website www.jagamedia.cz is currently inaccessible, returning a 503 Service Unavailable error with no content available for analysis. The lack of accessible content prevents evaluation of business operations, services, or technical infrastructure. WHOIS data is missing, indicating potential domain registration issues or inactivity. Due to these factors, the website's security posture cannot be properly assessed, and no privacy or compliance policies are detectable. Overall, the site presents a high risk due to unavailability and lack of transparency.
Virtuelle PHvirtuelle-ph.at
Education · Austria
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Virtuelle PH is an Austrian educational service platform dedicated to supporting pedagogical universities with digital and innovative online training solutions. The website offers various services including online continuing education, digital teaching support, and eLearning consulting, targeting educators and educational institutions. The platform leverages WordPress with the Divi theme and integrates plugins for event management and cookie compliance, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security policy transparency and vulnerability disclosure. The absence of WHOIS data limits domain trust assessment, but the professional presentation and compliance with GDPR indicate a legitimate and trustworthy operation. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features.
LMS.atlms.at
Education · Austria
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
LMS.at is an Austrian educational platform focused on providing a comprehensive learning management system tailored to teachers, students, and parents. It supports individualized teaching, GDPR-compliant communication, course and document organization, and offers free learning aids for students. The platform integrates with Austria's Bildungsportal and Office365 for authentication, indicating a strong alignment with national education infrastructure. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, LMS.at uses OpenACS as its CMS framework, enhanced with jQuery and Foundation CSS for frontend responsiveness. The platform employs standard security practices such as CSRF tokens and double-click prevention on forms but lacks visible HTTP security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. Performance is moderate with room for improvement in SEO and accessibility. Security posture is adequate but could be enhanced by implementing security headers (CSP, HSTS), publishing explicit security policies, and establishing vulnerability disclosure processes. No blocking or WAF mechanisms were detected, and the WHOIS data aligns well with the website's Austrian educational focus, supporting legitimacy. Overall, LMS.at presents a trustworthy and functional educational platform with good business credibility and content quality. Strategic improvements in privacy compliance and security practices would further strengthen its position and user trust.
BM fuer Bildungklassejob.at
Education · Austria
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Klassejob.at is an official educational website affiliated with the Austrian Federal Ministry of Education, providing comprehensive information about careers in teaching and early childhood education. The platform targets students and individuals interested in pursuing these professions, positioning itself as a trusted government resource. The website offers clear navigation to specialized subdomains for teacher training and early childhood pedagogy, reinforcing its role as an informational hub. Technically, the website employs standard modern web technologies such as HTML5 and CSS3, with good mobile optimization and accessibility features. While explicit CMS or hosting details are not evident, the site demonstrates moderate performance and good SEO practices through well-structured metadata and Open Graph tags. No advanced frameworks or analytics tools are detected, indicating a straightforward, content-focused implementation. From a security perspective, the site uses HTTPS as indicated by URLs, but lacks explicit security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms or data collection mechanisms are present on the main page, reducing immediate data protection risks. The WHOIS data confirms the domain's legitimacy and alignment with the Austrian Ministry of Education, enhancing trustworthiness. However, the absence of vulnerability disclosure and incident response information suggests room for improvement in security transparency. Overall, Klassejob.at presents a professional, trustworthy, and safe educational resource with solid business credibility. Strategic enhancements in privacy compliance, security headers, and incident response disclosures would further strengthen its security posture and regulatory adherence.
- Vectron Systems AG
vectron-systems.com
Technology · Germany
67Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Vectron Systems AG operates as a provider of cash register hardware, software, and digital solutions primarily targeting sectors such as bakery, gastronomy, and hospitality. The company positions itself as a reliable partner offering comprehensive POS solutions with a focus on compliance and customer engagement. The website reflects a professional business presence with clear branding and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a robust cookie consent mechanism via Cookiebot. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and reduces overall trust. No direct contact information or privacy policy was found in the provided content, which impacts privacy compliance and business credibility scores. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.
- BBayerischer Handwerkstag e. V.
dasbayerischehandwerk.de
Government · Germany
66Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The Bayerischer Handwerkstag e. V. is a well-established non-profit umbrella organization representing the interests of the Bavarian handwork sector. The website serves as an information hub for members, press, and the general public, offering news, educational resources, and service information. It holds a strong regional market position as a key advocate for handwork in Bavaria. Technically, the site is built on the ODAV CMS platform, leveraging modern web technologies such as jQuery and Bootstrap, and integrates multiple analytics tools including Google Analytics and Matomo, with a clear focus on privacy compliance. Security posture is solid with HTTPS enforced and bot protection via Friendly Captcha, though some security headers could be improved. Overall, the site is professional, accessible, and trustworthy, with comprehensive cookie consent mechanisms and clear contact information. No critical vulnerabilities or suspicious content were detected.
- Golfshop4you
golfshop4you.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Golfshop4you.cz is a specialized retail business focused on golf equipment and accessories, operating both an e-commerce platform and a physical store in Prague, Czech Republic. The company offers a wide range of products including golf clubs, bags, balls, clothing, shoes, and related accessories, complemented by services such as fitting and equipment servicing. Their market position is that of a niche, trusted golf retailer serving golf enthusiasts in the Czech market. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and outdated libraries updated. Privacy compliance is strong, with clear GDPR policies and cookie consent banners. Overall, the site is professional, trustworthy, and well-structured, though domain WHOIS data is unavailable, which slightly limits trust verification. Strategic recommendations include enhancing security headers, updating JavaScript libraries, and publishing explicit security and incident response policies.
Consulting22 s.r.o.inefko.cz
Education · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.inefko.cz represents the Institut Efektivní Komunikace, a Czech-based educational institution specializing in online courses and professional development seminars with live instructors. The platform targets individuals and companies seeking practical skills in communication, law, coaching, nutrition, and other professional areas. The business model revolves around offering live online courses, certification programs, and VIP memberships, positioning itself as a modern and interactive learning environment. The site is operated by Consulting22 s.r.o., a Czech company with clear contact details and professional branding. Technically, the website employs a modern tech stack including PHP, Bootstrap, Font Awesome, and Google Fonts, with interactive elements powered by jQuery and Slick Slider. The site is mobile-optimized and features a clean, professional design with good SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. HTTPS is enforced, and login forms include usability features such as password visibility toggles. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and explicit incident response or vulnerability disclosure policies. GDPR compliance is indicated by a dedicated privacy policy page, but no cookie consent mechanism was detected. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear trustworthy and professional. Overall, the site presents a credible and well-structured educational platform with solid business credibility and user experience. However, the missing WHOIS data and limited security policy disclosures suggest areas for improvement in trust and compliance transparency.
- Organikk
organikk.cz
Retail · Czech Republic
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Organikk.cz is a Czech Republic based e-commerce platform specializing in sustainable lifestyle products including household items, personal care, kitchenware, dental care, and fashion accessories. The company emphasizes eco-friendly, chemical-free, and plastic-free products, supporting small producers and environmental causes. The website is professionally designed with clear navigation, comprehensive product information, and customer testimonials, positioning Organikk as a niche leader in sustainable retail within its market. Technically, the site runs on the Shoptet platform, uses modern analytics and marketing tools with GDPR-compliant cookie consent, and maintains a good security posture with HTTPS and CSRF protections. However, the WHOIS data is unavailable, limiting domain trust assessment. Overall, Organikk demonstrates a mature digital presence with room for security header enhancements and updated libraries.
- PRO.Laika
prolaika.sk
E-commerce · Slovakia
68Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
PRO.Laika is a well-established Slovakian e-commerce and retail business specializing in photographic and video equipment. Founded in 1993, it holds a strong market position as the largest specialized photo equipment store in Slovakia, offering authorized sales of major brands such as Nikon, Canon, Panasonic, Olympus, Fujifilm, and Leica. The company targets photography enthusiasts and professionals, providing a broad range of products and services including sales, servicing, and workshops. Technically, the website is built on a custom e-commerce platform powered by Unisite CMS, utilizing modern JavaScript libraries and tracking tools. The site is mobile-optimized and SEO-friendly, with a good user experience and clear navigation. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although formal security policies and incident response information are not publicly available. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, PRO.Laika demonstrates a mature digital presence with room for improvement in privacy policy transparency and security disclosures.
- CHASING
chasing.com
Technology · China
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
CHASING operates as a technology company specializing in the design and sale of innovative underwater drones targeting both consumer and light-industrial markets. Their website presents a professional and modern digital presence, leveraging advanced JavaScript frameworks and multiple analytics and marketing tools to engage users globally. Despite the lack of WHOIS registration data, the site demonstrates a credible e-commerce platform with clear product offerings and a consistent brand image. The technical infrastructure is robust with HTTPS and content security policies in place, though additional security headers could enhance protection. Privacy compliance is limited, with no explicit privacy or cookie policies detected, which may pose compliance risks. Overall, the business appears legitimate but would benefit from improved transparency and security practices.
Web25web25.io
Technology
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Web25 is a technology company offering affordable website design and integrated business tools on a subscription basis, targeting new businesses and entrepreneurs. Their market position emphasizes cost savings compared to established SaaS competitors by bundling multiple services such as review management, AI chatbots, email automation, and CRM into one platform. The website is built on modern web technologies including Webflow CMS and integrates Google Analytics and Tag Manager for tracking. The technical infrastructure is solid with good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and asynchronous loading of tracking scripts, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.
Education · Czech Republic
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
NEPZ-Nejbohatší ekosystémy planety Země is a Czech Republic based educational non-profit project focused on raising awareness and educating about the richest ecosystems on Earth, biodiversity, and environmental protection. The organization collaborates with Justice for Nature and offers lectures, events, and educational content primarily targeting schools and the general public interested in environmental conservation. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The site is well designed, mobile optimized, and provides clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy and cookie policies. No incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance trust and compliance. Overall, the domain registration data is consistent and supports the legitimacy of the project, which has been active since 2012.
- Časopisy pro volný čas s.r.o.
chatar-chalupar.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Chatař Chalupář is a well-established Czech media publication specializing in content for cottage and chalet owners, focusing on leisure, gardening, construction, and lifestyle topics. The website serves a niche audience interested in home improvement and rural living, offering a mix of articles, tips, and product information. The business operates primarily through magazine publishing and online content, monetized via advertising and subscriptions. Technically, the site runs on WordPress with a moderate to good performance profile, leveraging common advertising and analytics technologies such as Google Tag Manager and Seznam Sklik. Security posture is adequate with enforced HTTPS and sandboxed ad iframes, though it lacks some security headers and uses an outdated WordPress version, which could pose risks. Privacy compliance is strong, with a clear GDPR-compliant privacy policy and cookie consent mechanisms. The absence of WHOIS data is a concern but does not detract significantly from the site's legitimacy given the professional presentation and business information. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.
- Jaga Media, s.r.o.
floranazahrade.cz
Media · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Homebydleni.cz is a Czech online lifestyle magazine specializing in home, garden, and living topics. Owned by Jaga Media, s.r.o., it offers a variety of articles, tips, and inspirations targeting homeowners and garden enthusiasts. The website is well-established, with a domain age dating back to 2009, and maintains a consistent brand presence with professional content and advertising partnerships. Technically, the site is built on WordPress, leveraging popular plugins for SEO and ad management, and integrates consent management for GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Overall, the site provides a good user experience with mobile optimization and clear navigation.
Carletta Ltd.pinup777.mx
Other · Mexico
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Pin-Up Casino México is an established online gambling platform targeting the Mexican market, offering a wide range of casino games, live dealer options, and sports betting. The business operates under Carletta Ltd., licensed by Curazao eGaming, ensuring regulatory compliance and player protection. The website is professionally designed, mobile-optimized, and provides comprehensive information about registration, bonuses, and payment methods. Technically, it leverages WordPress with Bootstrap, Cloudflare DNS, and integrates analytics tools like Google Analytics and Microsoft Clarity. Security posture is solid with HTTPS and SSL encryption, RNG certification, and account verification, though it lacks some advanced security headers and published incident response policies. The domain WHOIS data shows some inconsistency with the domain creation date being in the future, which warrants monitoring but does not currently undermine legitimacy. Overall, the platform presents a trustworthy and user-friendly experience for adult players in Mexico.
Carletta Ltd.pinup7.mx
Other · Mexico
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Pin-Up Casino México is an established online gambling platform licensed in Curazao and operated by Carletta Ltd., targeting the Mexican market with a comprehensive offering of casino games, sports betting, and promotional bonuses. The website is professionally designed, mobile-optimized, and provides extensive content in Spanish to engage its adult audience. Technically, it leverages WordPress with Bootstrap, Cloudflare DNS, and integrates analytics tools like Google Analytics and Microsoft Clarity. Security practices include HTTPS with strong SSL encryption and account verification processes, though some security headers could be improved. The domain is relatively new compared to the business founding date, suggesting recent domain acquisition or rebranding, but the registration details align with industry norms. Overall, the platform demonstrates a solid security posture and business credibility with room for enhanced privacy compliance and security transparency.
Feedatyfeedaty.com
E-commerce · Italy
66Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Feedaty operates as a specialized platform offering review and user-generated content (UGC) management services tailored for businesses and e-commerce companies, primarily targeting the Italian market. The website presents a professional and consistent brand image, emphasizing business growth acceleration through consumer empowerment and professional review management. Technically, the site is built on WordPress with a modern tech stack including Bootstrap Icons, jQuery, and various marketing and analytics tools such as Google Tag Manager and OptiMonk. The site demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security-wise, the website enforces HTTPS, employs security headers, and integrates CAPTCHA and cookie consent mechanisms, reflecting a solid security posture. However, the absence of a published security policy and incident response information indicates room for improvement in transparency and preparedness. The lack of WHOIS data is a notable anomaly that slightly diminishes domain trust but does not detract significantly from the overall legitimacy given the professional site content and infrastructure. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.
Feel IQM d.o.o.iqmpass.com
Hospitality · Croatia
57Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
IQM Pass is a Croatian tourism-focused digital pass service operated by Feel IQM d.o.o., founded in 2020. The service offers tourists special discounts and benefits across multiple Croatian destinations by partnering with local businesses. The website is well-structured, professionally designed, and targets travelers seeking enhanced destination experiences. Technically, the site uses modern web technologies including React, Google Analytics, and Facebook Pixel, hosted on DigitalOcean. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and policies could be improved. The domain registration is consistent with the business timeline and shows no suspicious indicators. Overall, the website presents a trustworthy and professional digital tourism service.
Government · Croatia
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website represents the official online presence of the Croatian Ministry of Labour, Pension System, Family and Social Policy. It serves as a comprehensive information portal for Croatian citizens and stakeholders regarding labor laws, social welfare programs, pension regulations, and family policies. The site is well-positioned as a government resource, providing authoritative content and official communications. The target audience includes citizens, social service users, and public sector employees. Technically, the website employs a traditional web stack with jQuery, Modernizr, and various UI libraries such as Fancybox and Owl Carousel. It uses HTTPS with Google Analytics for visitor tracking, and includes cookie consent mechanisms compliant with GDPR. The site demonstrates good mobile optimization and accessibility features, though some libraries like jQuery are outdated, which could pose security risks. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable due to GDPR privacy restrictions, but the domain is a government .gov.hr domain, indicating high legitimacy. Overall, the website is a trustworthy and professional government portal with good content quality and privacy compliance. Strategic improvements include updating technical libraries, enhancing security headers, and publishing security policies to strengthen trust and resilience.
La Vielavie.hr
Media · Croatia
50Medium
NIS2 10 · GDPR 40
NIS2 10 · GDPR 40
La Vie is a Croatian lifestyle and culture media website founded in 2022, offering content across lifestyle, beauty, travel, culture, fashion, gastro, and podcast segments. The site targets a general audience seeking inspirational and cultural stories. Technically, the website is built on WordPress with Elementor and uses Cloudflare DNS services. It employs modern web technologies and has moderate performance with good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though it lacks explicit security policies and incident response contacts. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.
- MMagMe
magme.hr
Media · Croatia
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
MagMe is a Croatian media and lifestyle website established in 2021, targeting Croatian-speaking audiences with lifestyle content and e-commerce capabilities via WooCommerce. The website demonstrates a moderate level of digital maturity, leveraging WordPress CMS, modern JavaScript libraries like Swiper.js, and third-party services such as Cookiebot for cookie consent and Gemius for analytics. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure transport. However, explicit privacy and terms of service policies are not found in the provided content, which is a compliance gap. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and formal incident response contacts. Overall, the site is professionally designed with good user experience and moderate trustworthiness.
- ABX software s.r.o.
dotykove-pokladny.cz
Retail · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ABX software s.r.o. operates the website dotykove-pokladny.cz, providing point-of-sale systems, software, and hardware primarily targeting restaurants, retail shops, rental businesses, and hotels within the Czech Republic. The company emphasizes individualized customer service, technical support availability seven days a week, and nationwide presence with sales representatives. The website is built on the Shoptet e-commerce platform, integrating standard tracking and cookie consent mechanisms, and presents content professionally in Czech. However, the absence of WHOIS registration data raises concerns about domain legitimacy verification. Security posture is generally good with HTTPS and CSRF protections, but could be improved with additional security headers and updated libraries. Privacy compliance is well addressed with clear policies and consent management. Overall, the website is functional, trustworthy, and business-focused, but domain registration transparency should be verified to enhance trust.
WordPress Carewordpresscare.com
Technology
62Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
WordPress Care is a specialized service provider focused on WordPress website building and maintenance tailored for small and medium-sized businesses. The company offers a range of services including daily backups, WordPress core, theme and plugin updates, heat maps, and the use of professional plugins to enhance website functionality. The website presents a professional image with client testimonials and certifications that reinforce trust and expertise in the WordPress domain. Technically, the website is built on WordPress 6.8.3 using the Avada theme and several modern plugins such as Yoast SEO and SuperPWA, indicating a mature digital infrastructure. Analytics and tracking tools like Google Analytics, LinkedIn Insight Tag, and Hotjar are employed to monitor user behavior and marketing effectiveness. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business presentation are consistent with a legitimate small business. Privacy and cookie policies are present, but the lack of a cookie consent mechanism and incident response information suggests room for improvement in compliance and transparency.
OKsystem a.s.oksystem.com
Technology · Czech Republic
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
OKsystem a.s. is a well-established Czech IT company specializing in custom software development, IT services, and training with over 35 years of market presence. The company targets private firms and public administration, offering innovative, secure, and reliable software solutions. Their market position is strong, supported by a large customer base and official partnerships such as the Czech national pavilion at EXPO 2025. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and reCAPTCHA, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are not evident. The absence of WHOIS data for the .com domain is a concern but may be due to privacy or alternative domain usage. Overall, the website is professional, trustworthy, and compliant with GDPR.
TESCOMAtescoma.cz
Retail · Czech Republic
69Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
TESCOMA.cz is a professional e-commerce website specializing in kitchenware products, offering a wide range of items for cooking, baking, and dining. The site targets consumers interested in quality kitchen supplies and operates both online and through physical stores, positioning itself as a reputable brand in the Czech Republic retail market. The website employs modern web technologies including React (Next.js), personalization tools like Persoo, and tracking services such as Microsoft Clarity and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and privacy policy documentation suggests room for improvement. The lack of WHOIS data limits domain registration trust analysis, but the overall professional presentation and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and providing vulnerability disclosure information to strengthen trust and compliance.
- Sencor
sencor.cz
Retail · Czech Republic
75Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Sencor is a well-established retail company specializing in consumer electronics and household appliances, targeting general consumers primarily in the Czech Republic and surrounding Central European markets. The website offers a broad product range including televisions, audio-video equipment, kitchen appliances, and home electronics, positioning itself as a comprehensive provider in its sector. The brand maintains consistent and professional digital branding with clear navigation and relevant content for its audience. Technically, the website is built on a Joomla CMS platform, leveraging modern tracking and marketing technologies such as Google Tag Manager, Bing Ads, and Enzuzo for cookie consent. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Strategic recommendations include publishing a privacy policy and terms of service, enhancing security headers, and providing a vulnerability disclosure channel to improve compliance and trust.
Web Revolution s.r.o.wikyhracky.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Wikyhracky.cz is a Czech Republic-based retail and wholesale e-commerce platform specializing in toys, games, school, and office supplies. The company boasts over 30 years of tradition and operates more than 70 physical stores nationwide, positioning itself as a significant player in the Czech toy retail market. The website offers a broad product catalog with recommended and new products, supported by social media channels and a B2B e-shop. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.11.1, Select2, PrettyPhoto, and integrates marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Bing Ads. While the site is accessible and well-structured with good content quality and user experience, it lacks explicit privacy and cookie policies, and uses an outdated jQuery version that may pose security risks. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the business presence and content suggest a legitimate operation. Security headers and SSL configuration details are not available, limiting a full security posture assessment.
Heimstaden Bostad - Heimstaden Bostadheimstadenbostad.com
—
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Wolters Kluwer ČR, a. s.rodicevitani.cz
Education · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.rodicevitani.cz serves as the official platform for the 'Rodiče vítáni' certification, a recognized mark for schools in the Czech Republic that foster positive communication and trust with parents. The project is managed under Wolters Kluwer ČR, a reputable company, and targets educational institutions and parents seeking quality assurance in school-family relations. The site provides information on certification criteria, renewal processes, and contact support, positioning itself as a trusted resource in the Czech education sector. From a technical perspective, the website employs modern frontend technologies including Bootstrap 5 and integrates Google Tag Manager for analytics and consentmanager.net for cookie consent management. The site is mobile optimized with a clear navigation structure and professional design, although some accessibility and SEO enhancements could be made. The absence of detected CMS or hosting details limits deeper infrastructure insights. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common for corporate domains but limits domain age verification. Overall, the site demonstrates a moderate security posture with room for improvement in headers and transparency. The overall risk assessment is low, with the site appearing legitimate, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, improving accessibility, and publishing vulnerability disclosure or incident response policies to strengthen trust and security culture.
Databox s.r.o.proskoly.cz
Education · Czech Republic
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Proskoly.cz is an established Czech educational portal operated by Databox s.r.o., providing a comprehensive range of cognitive ability tests, questionnaires, and practice exercises for students from preschool through secondary school. The platform targets students, teachers, and parents, offering tools to support learning in subjects such as languages, mathematics, and informatics. With over 19 years of market presence, the site enjoys a stable position supported by collaborations with schools and adherence to national educational standards. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring responsive design and good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosure channels are not publicly documented. Overall, the site demonstrates high legitimacy and trustworthiness, supported by consistent WHOIS data and transparent contact information.
- Schools United s.r.o.
kraloveskoly.cz
Education · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Schools United s.r.o. operates a professional e-commerce platform specializing in custom clothing and supplies for schools, sports teams, and interest groups primarily in the Czech Republic. The company offers tailored apparel collections and school equipment through a user-friendly online shop, supported by strong customer testimonials and a clear brand identity. The website is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the site leverages the Shoptet e-commerce platform with integrations for analytics and marketing tools such as Google Analytics, Facebook SDK, and Poptin. Security posture is solid with HTTPS enforcement and CSRF protections, though explicit security headers could be improved. The absence of WHOIS data indicates privacy protection, common for such businesses, but reduces transparency. Overall, the site demonstrates a trustworthy and professional business with good compliance and technical standards.
- IInGenius Webdesign
ingenius.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
InGenius Webdesign is a Czech Republic-based small web development company specializing in custom internet presentations, web applications, e-commerce, and related digital services. With over 200 completed projects, they serve businesses seeking tailored online solutions. Their website demonstrates a professional design with clear navigation and good mobile optimization, leveraging technologies such as jQuery, LESS.js, Kooboo CMS, and integrating marketing tools like Google Analytics and Facebook Pixel. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data and security headers indicates areas for improvement in trust and security posture. Overall, the company presents a credible and professional digital presence with moderate technical maturity and a good security baseline.
Other · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The domain e-svatek.cz is newly registered in March 2024 and currently serves as a parked domain with no active business content or services. The website primarily displays a domain-for-sale message and embeds an iframe from an external source, likely for monetization purposes. There is no privacy policy, cookie policy, terms of service, or contact information available, which significantly limits the site's credibility and user trust. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript, and no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. Advertising scripts and tracking pixels from third-party ad networks are present, indicating monetization attempts but with poor transparency.
Kuhn Ladetechnikkuhn-mt.cz
Transportation · Czech Republic
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Kuhn Ladetechnik operates as a specialist provider of cranes and lifting technology, targeting businesses and professionals in the transportation and industrial sectors. The website presents a professional and well-structured digital presence, emphasizing their product range and services. The technical infrastructure leverages modern frameworks such as Bootstrap and integrates Cookiebot for cookie consent management, alongside Google Tag Manager for analytics. The site is served over HTTPS with a service worker registered, indicating a commitment to modern web standards and security. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and trust signals. Security posture is generally good with HTTPS and cookie consent, but lacks advanced security headers and incident response disclosures. Overall, the website is legitimate and functional but would benefit from enhanced transparency and security documentation.
- Ed. Züblin AG
zueblin.de
Other · Germany
72Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Ed. Züblin AG is a leading German construction and engineering company specializing in high and civil engineering projects. The website reflects a mature enterprise with a comprehensive service portfolio including sustainable building, tunnel construction, and specialized engineering sectors. The company positions itself as the market leader in Germany with a strong focus on quality and innovation. Technically, the website leverages a legacy IBM Domino CMS backend with modern frontend technologies such as Bootstrap and jQuery, supported by privacy-conscious analytics tools like Matomo and a robust cookie consent mechanism via OneTrust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit security policies are recommended. Overall, the site demonstrates good digital maturity and compliance with GDPR, supporting a trustworthy online presence.
oikos Internationaloikos-international.org
Education
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
oikos International is a well-established non-profit organization focused on transforming management and economics education towards sustainability. With a global student community presence since 1987, it offers leadership programs, events, and advocacy for sustainable education. The website is built on a modern WordPress infrastructure using Elementor and Bootstrap, supported by Cloudflare DNS and Google analytics tools. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC and security headers are absent. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.
- Werbebaugesellschaft mbH
werbebau.com
Manufacturing · Germany
52Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Werbebaugesellschaft mbH is a German company specializing in exhibition stand construction and brand presentation services with over 50 years of industry experience. The company offers comprehensive services including consulting, design, construction, production, assembly, transport, and storage of exhibition materials. Their market position is that of an established medium-sized business serving clients worldwide, with a focus on delivering turnkey solutions from concept to execution. Technically, the website employs modern JavaScript libraries such as jQuery, Flexslider, and fullpage.js, combined with CSS3 and HTML5 standards. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features could be improved, and no CMS or hosting provider information is evident. From a security perspective, the site uses SSL encryption and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, the absence of explicit security headers and the lack of publicly available security or incident response policies suggest room for improvement. The missing WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website is well-structured and informative, supporting the company's business credibility. Strategic recommendations include enhancing security headers, publishing security policies, updating libraries regularly, and improving accessibility to strengthen the security posture and compliance standing.
- Unifyr
ziftone.com
Technology · United States
73Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Unifyr is a technology company specializing in partner ecosystem management through an all-in-one, AI-enabled Partner Relationship Management (PRM) and channel growth platform. The company targets businesses seeking to activate and scale partner programs efficiently, offering solutions that include channel sales, marketing, enablement, and learning management. With a strong market presence evidenced by client logos such as Canon, AT&T, and Panasonic, and recognition on platforms like G2, Unifyr positions itself as a trusted partner in the channel management space. Technically, the website leverages modern frameworks such as SvelteKit and employs advanced client-side script management with Partytown, alongside Google reCAPTCHA Enterprise for bot protection. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. SEO and content strategies are well executed, supporting strong user engagement and discoverability. From a security perspective, the site enforces HTTPS, implements key security headers, and integrates consent management for privacy compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the overall business credibility remains high based on website content and trust signals. Overall, Unifyr presents a professional, secure, and privacy-conscious web presence suitable for its B2B audience. Strategic enhancements in transparency around security policies and domain registration details would further strengthen trust and compliance posture.
Ed. Züblin AGstrabag-teamconcept.com
Real Estate · Germany
67Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Ed. Züblin AG operates the TEAMCONCEPT® platform, a pioneering construction partnering model in Germany with over 25 years of experience. The company focuses on holistic project planning, digital innovation, transparency, trust, and sustainability to deliver efficient construction projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting construction industry stakeholders. Technically, the site uses modern JavaScript libraries, privacy-conscious analytics (Matomo), and a robust cookie consent mechanism (OneTrust), hosted on AWS infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the domain and website content are consistent with the business claims, indicating a trustworthy and professional online presence.
PŠV stavby s.r.o.psvstavby.cz
Real Estate · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
PŠV stavby s.r.o. is a small Czech construction company founded in 2018, providing comprehensive construction services including project management, engineering, and construction realization primarily in the South Bohemian region. The website presents a clear business description and branding consistent with the company's profile. Technically, the site uses standard open source libraries such as Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, the site lacks advanced security headers and does not implement HTTPS verification in the provided data, which limits its security posture. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR requirements. Overall, the website is functional and professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.
SILBA-Elstav s.r.o.silba.cz
Real Estate · Czech Republic
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
SILBA-Elstav s.r.o. is a well-established Czech construction company with over 25 years of experience, specializing in residential, commercial, industrial, and historical building projects primarily in the Plzeňský kraj and surrounding regions. The company offers comprehensive construction and reconstruction services, supported by ISO 9001, ISO 14001, and ISO 45001 certifications, reflecting a strong commitment to quality, environmental management, and occupational health and safety. Their website demonstrates a professional digital presence built on WordPress with modern frameworks and includes clear contact channels and compliance with GDPR and cookie regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the company presents a trustworthy and credible profile with a moderate to high technical maturity level.
- OOSK Praha s.r.o.
oskpraha.cz
Real Estate · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
OSK Praha s.r.o. is a Czech construction company specializing in earthworks, demolition, waste disposal, material transport, and land reclamation. The company has been operating since 2007 and collaborates with large construction and development firms, positioning itself as a reliable local service provider. The website reflects this business focus with clear service descriptions and references to industry-related external resources. Technically, the website is built on Joomla CMS using Bootstrap and SP Page Builder, providing a responsive and professional design. However, the site lacks advanced SEO and accessibility features and does not include privacy or cookie policies, which are critical for compliance. Security posture is basic with HTTPS and CSRF protection but lacks important HTTP security headers and incident response contact information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
- KDS Sedlčany
kds.cz
Manufacturing · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
KDS Sedlčany is a Czech manufacturing company specializing in the production of knives, scissors, and various cutting tools. With a long tradition and expertise in cutlery manufacturing, the company offers high-quality products and services including sharpening, repairs, custom production, and manufacturing cooperation. The website reflects a medium-sized enterprise with a clear business focus on manufacturing and retail, targeting both B2B and B2C customers. Technically, the site is built on ASP.NET Web Forms with legacy jQuery and integrates modern analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security headers and incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.
- Cortusa Group s.r.o.
cortusa.cz
Real Estate · Czech Republic
55Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Cortusa Group s.r.o. is a small regional real estate developer based in the Czech Republic, specializing in residential housing projects near Plzeň. The company emphasizes affordable, modern, and energy-efficient homes with a focus on customer satisfaction and proximity to nature. Their website reflects a professional approach with clear contact information, project showcases, and financing options. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and CookieScript for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for small businesses. Overall, the website is safe, compliant with GDPR, and presents a trustworthy business front.
Education · Austria
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
BIMM (Sprachliche Bildung im Kontext von Migration und Mehrsprachigkeit) is a specialized educational network in Austria focused on promoting quality development and professionalization of educators teaching German as a second language and language education in migration contexts. It operates as a collaborative network of Austrian pedagogical universities, offering seminars, webinars, publications, and advisory services. The website reflects a well-maintained digital presence with a focus on educational content and community engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Bootstrap for responsive design. It uses external libraries like jQuery and CanvasJS for interactive elements. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the website's Austrian educational identity, supporting legitimacy. Overall, BIMM's website is a trustworthy, professional platform serving educators and institutions in Austria. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining regular updates to plugins and themes to ensure ongoing security and compliance.
Heimstaden UKheimstaden.com
Real Estate · United Kingdom
60Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Heimstaden UK operates as a leading residential and commercial landlord offering long-term rental apartments and commercial properties across Europe. The company positions itself as a market leader with a strong focus on simplifying and enhancing tenants' lives through its Friendly Homes vision. The website reflects a mature business with a large portfolio, supported by a consistent brand presence and comprehensive content targeting renters and commercial clients in the UK and Europe. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on Azure infrastructure, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS and cookie management, though some security headers and policies could be improved. The domain WHOIS data confirms a long-established and legitimate business presence. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit contact and security policy details.
České prioritypank.cz
Government · Czech Republic
72Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
PANK is a specialized research and advisory project operated by the Czech non-profit organization České priority, focusing on enhancing knowledge work and informed decision-making within Czech public administration. The website serves as a resource hub offering guides, case studies, and recommendations tailored for teams in government organizations. The project is supported by the Technological Agency of the Czech Republic, indicating credible backing and alignment with national research priorities. Technically, the website is built using modern frameworks such as Quarto and Bootstrap, with privacy-conscious analytics via Matomo configured to respect DoNotTrack and disable cookies. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, though explicit security headers and formal policies like privacy and cookie policies are missing, representing areas for improvement. Overall, the domain registration data is consistent with the website's purpose and origin, supporting legitimacy and trustworthiness.
- Informované vládnutí | České priority
informovanevladnuti.cz
Government · Czech Republic
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website 'Informované vládnutí | České priority' presents a government-related initiative focused on evidence-based policymaking to address 21st-century challenges such as automation, demographic changes, and environmental protection. The site is built on the Wix platform, leveraging modern JavaScript technologies and polyfills to ensure compatibility and performance. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is solid with HTTPS enforcement and JavaScript hardening, though explicit security headers are missing. Privacy and cookie policies are not found, and no contact or business registration information is visible, which impacts trust and compliance assessments. The absence of WHOIS data limits domain legitimacy verification. Overall, the site appears professional and safe but would benefit from enhanced transparency and compliance documentation.