Security Directory

F

Fly United

flyunited.cz

49

Fly United is a professional travel service provider based in the Czech Republic, offering comprehensive travel management solutions for private and corporate clients. With over 30 years of experience and a strong client base exceeding 850 corporate customers, the company positions itself as a reliable partner in the transportation sector. Their services include flight bookings, accommodation, travel insurance, visas, transfers, car rentals, and airport parking, supported by online platforms such as Onesto, Symphony SME, and Fly Online. The website is bilingual (Czech and English) and targets both private travelers and businesses seeking travel management solutions. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Google Analytics integration, ensuring good SEO and user tracking capabilities. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on forms, alongside visible PCI DSS certification, indicating compliance with payment security standards. However, the absence of WHOIS data and lack of explicit security policies or incident response information on the site represent areas for improvement. Overall, the website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content. The security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing vulnerability disclosure information. Privacy compliance is good, with a clear privacy policy and terms of service, though a cookie consent mechanism is not evident. Strategic recommendations include improving security header implementation, adding incident response and vulnerability disclosure details, and enhancing accessibility features to meet broader compliance standards. These steps will strengthen trust and security culture, supporting Fly United's market position as a dependable travel service provider.

Legendary Cards is an e-commerce platform operated by eSports s.r.o., specializing in collectible sports cards and memorabilia primarily targeting Czech sports enthusiasts and collectors. The website offers a range of products including limited edition cards, sports figures, and related accessories, supported by promotional content and news updates. The business operates with a clear focus on the Czech market and maintains an active social media presence to engage its audience. Technically, the website employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and the Nette Framework. The site is mobile-optimized with a responsive design and uses cookie consent mechanisms to comply with GDPR. Performance is moderate with good navigation and content structure, though some improvements in accessibility and SEO could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent with granular user controls. However, it lacks explicit security headers and a published security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Overall, the website is trustworthy and professionally maintained, with legitimate domain registration consistent with the business identity. Strategic improvements in security headers and incident response transparency would enhance the security posture further.

E

EnVys, a.s.

envys.cz

66

EnVys, a.s. operates a community energy platform in the Czech Republic, offering long-term stable electricity prices sourced directly from local power plants. The company targets citizens, firms, and municipalities, emphasizing sustainability and compliance with ESG and Green Deal requirements. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Blazor, jQuery, Google Analytics, Microsoft Clarity, and a chatbot for enhanced user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. WHOIS data is unavailable due to CZ NIC privacy policies, but the presence of official documents and clear contact information supports legitimacy. Overall, the site reflects a mature digital presence suitable for a medium-sized energy company.

M

Ministerstvo vnitra České republiky

prevencekriminality.cz

52

The website prevencekriminality.cz is an official government portal operated by the Ministry of Interior of the Czech Republic, focused on crime prevention strategies and public safety. It serves as a comprehensive resource for citizens, public authorities, and professionals involved in crime prevention, offering news, projects, events, and educational materials. The site maintains a strong market position as the authoritative source for crime prevention information in the Czech Republic. Technically, the site is built on WordPress using modern plugins such as Oxygen Builder, Yoast SEO, and GDPR compliance tools like Complianz. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, though some improvements could be made. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and uses Cloudflare services, with cookie consent management in place. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a dedicated security policy page are absent, which could be enhanced. Incident response and vulnerability disclosure mechanisms are not publicly documented. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively balances user experience with security and privacy considerations, making it a reliable resource for its audience.

S

Středočeský krajský atletický svaz

skas.cz

42

Středočeský krajský atletický svaz is a regional athletics association serving the Central Bohemia region of the Czech Republic. The organization focuses on athletics event management, communication with clubs, and dissemination of athletics news and documentation. The website serves as an information hub for athletes, coaches, and sports clubs within the region, providing schedules, results, and official documents. The domain is well-established since 2013, reflecting a mature regional sports entity. Technically, the site is built on Joomla CMS with common JavaScript libraries like jQuery and MooTools, offering a moderate performance and basic mobile optimization. Security posture is moderate with HTTPS usage and CSRF tokens in forms but lacks advanced security headers and incident response information. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Běh města Příbrami is a local event website dedicated to the 32nd annual running race held in Příbram, Czech Republic. The site provides detailed information about the event schedule, registration links, fees, and sponsors. It targets runners and the local community interested in participating or supporting the event. The business model centers on event organization and promotion with partnerships from local sponsors and organizations. The website content is relevant and well-structured, focusing on event details and participant information. Technically, the website is built on WordPress using Bootstrap for responsive design and jQuery for interactivity. It employs plugins for image galleries and lightbox effects. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS, ensuring encrypted communication. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact email or security incident response information is available, limiting transparency. The domain registration is consistent with the website's purpose and location, supporting legitimacy. Overall, the website is functional and serves its purpose as an event information portal but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

Brdská 25 is a Czech-based small-scale event organization focused on endurance running and related outdoor sports competitions in the Central Brdy region. The website serves as an informational and registration portal for the annual running race and associated events such as Nordic walking and cruiser bike races. The target audience includes sports enthusiasts, families, and the local community. The business operates primarily as an event organizer with a niche regional market position. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Responsive Lightbox. The infrastructure is moderate in performance and basic in mobile optimization and accessibility. The site lacks HTTPS, which is a critical security shortfall. No advanced security headers or privacy policies are present, indicating gaps in compliance and security posture. Security evaluation reveals significant vulnerabilities due to the absence of HTTPS and security headers, exposing users to potential risks. No privacy or cookie policies are found, which may lead to GDPR non-compliance. The site does not appear to collect extensive user data or employ tracking technologies, reducing privacy risks but also limiting analytics capabilities. Overall, the website is functional and content-rich for its purpose but requires urgent improvements in security and privacy compliance to protect users and enhance trust. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving mobile and accessibility features.

O

Otech S.A.S.

otech.fr

58

Otech S.A.S. is a French company specializing in irrigation technology, offering products such as pivots, linears, control panels, and remote controls. The company positions itself as a leader in irrigation solutions with a focus on innovation, reliability, and customer needs. Their website reflects a professional and consistent brand image targeting agricultural businesses and irrigation professionals globally. Technically, the website is built using the Hugo static site generator, enhanced with modern libraries like jQuery, Bootstrap, and VideoJS for multimedia content. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks some security headers and formal privacy and terms of service documentation. The absence of WHOIS data limits domain trust verification, though the website's professional presentation and active social media presence support its legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in security and compliance documentation.

O

Ocmis Irrigazione S.p.A. a Socio Unico

ocmis-irrigazione.it

10

Ocmis Irrigazione S.p.A. is a medium-sized Italian manufacturing company specializing in irrigation systems and technology. The company offers a broad portfolio of irrigation products including machines, pivot systems, rain hoses, and tractor pumps, complemented by digital irrigation services such as the Irriverso platform. With a global presence spanning 90 countries and 5 continents, Ocmis maintains a strong market position supported by 350 active dealers and four distributed brands. The website is professionally designed, multilingual, and emphasizes sustainability and efficient water resource management. Technically, the website is built on Drupal 8 and leverages modern JavaScript libraries and frameworks such as jQuery, Slick Slider, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, indicating either recent domain registration or privacy protection, which slightly reduces trust but is mitigated by the professional presentation and legal disclosures on the site. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a mature digital presence aligned with the company's business objectives and market reach.

P

PACCAR

paccar.net

51

PACCAR's sso.paccar.net site is a secure enterprise Single Sign-On portal leveraging Microsoft Online Federation and EmpowerID identity management platform. It serves as an authentication gateway for PACCAR employees and partners, reflecting the company's position as a leading manufacturer in the transportation sector. The site is hosted on Microsoft Azure CDN and uses HTTPS, ensuring secure communications. However, the site lacks publicly accessible privacy, cookie, and terms of service policies, which are important for compliance and user trust. The absence of contact and incident response information limits transparency. Overall, the site demonstrates solid technical infrastructure but could improve in privacy compliance and user support visibility.

B

Busworld Europe

busworldeurope.org

11

Busworld Europe is a leading B2B exhibition organizer specializing in the bus and coach industry, hosting the largest dedicated event in Brussels. The website reflects a mature digital presence with comprehensive event information, strong branding, and active engagement channels including a dedicated app and social media. The technical infrastructure is modern, leveraging Drupal 11 and multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be enhanced. Privacy and cookie policies are well implemented, supporting GDPR compliance. Overall, the site demonstrates a trustworthy and professional business operation with clear contact points and industry relevance.

D

Data Projekt

data-projekt.fr

55

Data Projekt is a French digital agency based in Strasbourg, founded in 2006, specializing in UX expertise, custom website creation, and digital transformation services. The company targets businesses and organizations seeking tailored digital solutions, emphasizing user experience and innovative web platforms. Their market position is that of a well-established regional agency with a strong portfolio of clients and projects, supported by a consistent brand presence and professional content. Technically, the website is built on WordPress with a modern tech stack including jQuery, Gravity Forms, and various UI libraries. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Security measures include HTTPS enforcement, security headers, anti-spam protections, and cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of an explicit privacy policy and terms of service pages indicates room for improvement in compliance and transparency. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, Data Projekt presents a professional and trustworthy digital presence with solid technical and security foundations. Strategic recommendations include publishing comprehensive privacy and legal policies, implementing a security.txt file for vulnerability disclosure, and enhancing incident response transparency to further strengthen trust and compliance.

O

otris systems GmbH

bytemine.net

10

The otris systems GmbH is a German-based certified cloud service provider specializing in tailored IT infrastructure solutions including Platform as a Service (PaaS) for SaaS, hosting, virtualization, and Proxmox-related products and services. Established in 2008, the company targets software manufacturers and businesses requiring reliable cloud and on-premises IT infrastructure. Their market position is that of a trusted regional provider with over a decade of experience and recognized ISO 27001 certification. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital presence. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good security practices. Analytics are implemented via WP Statistics, though no cookie consent mechanism is present. Security posture is strong with HTTPS, no exposed sensitive data, and ISO 27001 certification displayed. However, the absence of a cookie consent banner and explicit terms of service page are areas for improvement. WHOIS data is privacy-protected, which is common and justified for this business type, but limits external verification. Overall, the website and business present a professional and trustworthy image with solid technical and security foundations. Strategic improvements in privacy compliance and transparency would further enhance trust and regulatory adherence.

T

Triklub Příbram

triklubpribram.cz

40

Triklub Příbram is a local sports club based in the Czech Republic, focused on organizing triathlon, running, and duathlon events. Established in 2008, the club serves sports enthusiasts and the local community by providing event organization, timing services, and media coverage. The website reflects a community-oriented non-profit model with partnerships across local sports and municipal organizations. Technically, the site is built on WordPress with Bootstrap and jQuery, incorporating SEO best practices via Yoast and security measures such as Google reCAPTCHA. The site is mobile-optimized and moderately performant, with clear navigation and good content relevance. Security posture is adequate with HTTPS and CAPTCHA, but lacks advanced security headers and explicit policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, though improvements in security and privacy transparency are recommended.

SK Sporting Příbram is a well-established sports club based in the Czech Republic, focusing primarily on youth athletics and ultimate frisbee training. Founded in 2003, the club serves over 200 athletes with a dedicated team of trainers and organizes regular training sessions and events. The website reflects a community-oriented organization with clear contact information and active social media presence. Technically, the site is built on WordPress using modern themes and plugins, providing a good user experience with mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy policies, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces domain trustworthiness, but the overall content and business information suggest a legitimate local sports entity. Strategic recommendations include enhancing security headers, implementing privacy and cookie policies, and verifying domain registration details to improve trust and compliance.

F

Fletstock s.r.o.

flet.cz

52

Fletstock s.r.o. is a Czech Republic based company specializing in real estate investment and professional property management services. The company offers a comprehensive suite of services including investment planning, property search, financing, renovation, rental, and ongoing management, targeting a broad audience from beginner investors to premium clients with larger portfolios. Their market position is strong within Prague, supported by client testimonials and case studies demonstrating consistent above-market returns. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various analytics and tracking tools, hosted on VAS Hosting infrastructure. Security posture is good with HTTPS enforced and GDPR compliance evident through cookie consent and privacy policy, though some security headers and incident response information are missing. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO. However, the WHOIS data shows an anomalous future domain creation date, which is likely a data error but slightly impacts trust assessment.

Bezpečná Příbram is a Czech Republic local government public safety portal focused on providing crime prevention information, police news, traffic updates, and community engagement for the city of Příbram. The website serves residents and visitors by offering crime maps, statistics, and alerts to enhance local safety awareness. The site is branded with official police and municipal logos, reinforcing its legitimacy as a government-affiliated resource. Technically, the website uses common JavaScript libraries such as jQuery, bxSlider, and Lightbox, with a moderate performance profile and good mobile optimization. The site implements HTTPS and a cookie consent mechanism, indicating attention to privacy compliance. However, no advanced security headers or explicit incident response policies are published, which could be improved to enhance security posture. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data limits trust assessment. The website does not show signs of WAF blocking or content restrictions, allowing full content access. Privacy and cookie policies are present and GDPR compliant, but terms of service and vulnerability disclosure mechanisms are missing. Overall, the website is a trustworthy and useful public safety resource with room for improvement in security best practices and transparency. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

L

Lama PB s.r.o.

obytnevozypribram.cz

37

Obytné vozy Příbram is a small Czech Republic-based business specializing in luxury camper van rentals, operated by Lama PB s.r.o. The website presents a professional and clear user experience focused on promoting their rental fleet and reservation services. The business targets individuals and families seeking comfortable and stylish travel options in the Příbram region and beyond. The domain age and WHOIS data align well with the business claims, supporting legitimacy. Technically, the website uses common web technologies such as jQuery, Font Awesome, Google Analytics, and Google Maps API. The site is moderately optimized for mobile and SEO, with a clean navigation structure. However, no CMS or advanced frameworks were detected, indicating a relatively simple technical infrastructure. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. HTTPS status is unknown from the data but should be verified. No incident response or vulnerability disclosure information is present. The site uses Google Analytics for user tracking without visible consent mechanisms, indicating privacy compliance gaps. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved security and privacy practices to enhance compliance and user trust.

L

Literární noviny

literarky.cz

43

Literární noviny is a well-established Czech monthly magazine focused on culture, literature, and politics, targeting Czech-speaking audiences interested in critical thinking and cultural discourse. The website serves as a digital platform for publishing articles, event announcements, and related content. Technically, the site is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, hosted by Active24, and includes advertising integrations primarily via Seznam's Sklik network. The site uses HTTPS and a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with no visible security headers and moderate tracking via Google Analytics. Overall, the website is professional, content-rich, and trustworthy, but could improve privacy transparency and security hardening.

H

Hodinářství a Zlatnictví Tomáš Vyskočil - TOVYS

tovys.cz

52

Tovys.cz is a Czech Republic-based retailer specializing in watches and jewelry, operating since 1996 with a physical store in Jihlava and an online e-commerce platform. The company offers a wide range of products from over 55 global brands, including luxury and smart watches, complemented by watchmaking and goldsmith services. The website demonstrates a mature digital presence with modern technologies such as jQuery, Swiper.js, and integration of Google Analytics and Facebook Pixel for marketing and analytics purposes. Privacy compliance is well addressed with detailed GDPR policies and cookie consent mechanisms. Security posture is generally good with HTTPS and consent management, though improvements in security headers and incident response documentation are recommended. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and comprehensive contact information support business credibility. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

G

GRUPPE MICHALEK-DORN-FUSSENEGGER

lipno.cc

49

The website represents GRUPPE MICHALEK-DORN-FUSSENEGGER, a small regional business specializing in real estate sales, investments, rentals, and lake cruises around Lipno Lake, Austria. The company operates multiple related domains for different service lines, indicating a diversified business model focused on property and tourism. The website is professionally designed with good content quality and clear navigation, targeting real estate buyers, investors, renters, and tourists. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA v3, and cookie consent mechanisms, ensuring a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and anti-bot measures, but lacks some security headers and formal security policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and explicit consent mechanisms. However, the absence of WHOIS data for the domain www.lipno.cc raises concerns about domain registration legitimacy, which impacts overall business credibility. Contact information is clearly provided, enhancing trust. Overall, the site is functional and professional but would benefit from improved security headers, published policies, and domain registration transparency.

C

CHARVÁT Pacovské strojírny, a.s.

pacovske.cz

54

CHARVÁT Pacovské strojírny, a.s. is a Czech engineering manufacturing company with a long tradition exceeding 140 years. The company specializes in customized design and production of complex technological units for pharmaceutical, food, chemical, energy, agricultural industries, and breweries. It holds a significant market position domestically and abroad, supported by ISO 9001 certification and a strong focus on quality. The website reflects a professional digital presence built on WordPress with multilingual support and GDPR compliance. Security posture is solid with HTTPS, CAPTCHA-protected contact forms, and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust verification, but the business content and contact information support legitimacy. Overall, the site is well-structured, mobile-optimized, and trustworthy for its industrial B2B audience.

M

Minuta CZ s.r.o.

tissot-hodinky.cz

61

The website www.tissot-hodinky.cz serves as the official online presence for Minuta CZ s.r.o., the authorized distributor of the prestigious Swiss watch brand TISSOT in the Czech Republic. It offers detailed product information, news, and authorized dealer locations, targeting watch enthusiasts and consumers in the Czech market. The site is professionally designed with good navigation and content relevance, supporting a retail business model focused on brand representation and sales. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Google Analytics for user tracking and interactive features. The site appears mobile-optimized with good SEO practices but lacks explicit CMS identification and some advanced accessibility features. Performance is moderate with room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, but no security headers were detected in the provided data. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. WHOIS data is unavailable, limiting domain legitimacy verification, though the presence of clear company contact details and social media links to official brand accounts supports trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices, explicit privacy and cookie policies, and verification of domain registration details to improve trust and compliance posture.

M

Mittelstand-Digital Zentrum Berlin

digitalzentrum-berlin.de

48

Mittelstand-Digital Zentrum Berlin is a regional digitalization support center focused on assisting small and medium-sized enterprises (SMEs) in Berlin with their digital transformation efforts. The website offers information about events, workshops, digitalization offers, and informational materials, targeting the Mittelstand segment. The business model is based on providing free, neutral, and accessible support to SMEs, positioning itself as a trusted regional resource. Technically, the website is built on WordPress using Elementor as the page builder, enhanced with plugins such as Yoast SEO for search engine optimization, Events Calendar Pro for event management, and Borlabs Cookie for cookie consent management. The site is served over HTTPS with a good SSL configuration and moderate performance. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site employs HTTPS and a security plugin but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Recommendations include publishing comprehensive privacy and terms of service policies, enhancing security headers, and formalizing incident response and security policies to improve compliance and security posture.

S

SELLERIA EQUIPE SPA

selleriaequipe.it

46

Gruppo Selleria Equipe is a medium-sized Italian company specializing in the manufacture and retail of high-quality equestrian saddles and accessories under the brands EQUIPE and AMERIGO. With over 25 years of experience, the company combines artisanal craftsmanship with technical innovation to serve equestrian professionals and enthusiasts globally. The website reflects a professional and consistent brand image, offering detailed product categories, rider endorsements, and comprehensive service information. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Facebook Pixel, integrated with a GDPR-compliant cookie consent mechanism via Iubenda. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear policies and consent management. Contact information is transparent, enhancing business credibility. Overall, the site is well-optimized for mobile and SEO, providing a good user experience.

P

Philadelphia Convention and Visitors Bureau

discoverphl.com

61

DiscoverPHL, operated by the Philadelphia Convention and Visitors Bureau, serves as the official tourism and convention sales agency for Philadelphia and the Pennsylvania Convention Center. The organization targets tourists, event planners, travel trade professionals, and partners, offering services such as tourism promotion, convention sales, event planning resources, and a partner directory. The website reflects a professional and consistent brand image aligned with its government-affiliated status. Technically, the website is built on WordPress and leverages modern technologies including jQuery, Google Tag Manager, Google reCAPTCHA Enterprise, Mapbox GL JS, and New Relic for performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Advertising and analytics tools are used responsibly with clear cookie consent mechanisms. From a security perspective, the site enforces HTTPS, implements security headers, and uses advanced bot protection via reCAPTCHA Enterprise. However, it lacks a publicly available security policy or incident response page, and no vulnerability disclosure or security.txt file is found. The WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional presentation and official nature of the site. Overall, DiscoverPHL presents a secure, compliant, and user-friendly digital presence appropriate for its role as a government tourism bureau. Strategic improvements include publishing security and incident response policies and enhancing WHOIS transparency to further strengthen trust and compliance.

C

Commonwealth of Pennsylvania

filminpa.com

51

Film In PA is the official website of the Pennsylvania Film Office, a government entity promoting film and television production within the state. The site provides comprehensive information on tax incentives, location resources, production guides, and showcases films shot in Pennsylvania. It serves as a key resource for filmmakers, production companies, and industry professionals interested in leveraging Pennsylvania's diverse locations and incentives. Technically, the website is built on WordPress with modern libraries such as jQuery and Video.js, and integrates Google Analytics and translation tools. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by enabling DNSSEC and adding security headers. The domain is long-established and registered with a reputable registrar, aligning well with the official government branding and content, indicating high legitimacy and trustworthiness.

N

Navingo BV

navaltoday.com

66

NavalToday.com is a specialized online news platform delivering expert coverage and press releases focused on the naval, maritime, and offshore energy sectors. The website targets industry professionals and businesses seeking timely and relevant information about naval technology, vessels, and related industry developments. The business operates under Navingo BV and appears to have been active since at least 2020, positioning itself as a niche media provider within the maritime and energy industries. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Analytics, Microsoft Clarity, and Google Tag Manager. It employs a comprehensive cookie consent mechanism powered by CookieYes, supporting GDPR compliance and user privacy preferences. The site is mobile-optimized, accessible, and features a professional design with clear navigation. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, no explicit security headers were detected in the provided data, and there is no visible security policy or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding appear professional and trustworthy. Overall, NavalToday.com demonstrates a solid digital presence with good content quality and privacy compliance but would benefit from enhanced transparency in domain registration and explicit security policies to strengthen trust and security posture.

O

Offshore Energy

oeec.biz

65

Offshore Energy operates a professional event website promoting the Offshore Energy Exhibition & Conference scheduled for November 2025 in Amsterdam. The business focuses on organizing and hosting a major industry event targeting energy sector professionals, exhibitors, and visitors interested in offshore energy solutions. The website provides comprehensive event information, exhibitor details, ticketing options, and networking opportunities, positioning itself as a key player in the offshore energy event market. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies including Google Analytics, Microsoft Clarity, and CookieYes for privacy compliance. The site demonstrates good SEO, accessibility, and mobile optimization, with a moderate performance profile. Security measures include HTTPS enforcement, Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers and policies are not explicitly published. The security posture is solid with no critical vulnerabilities detected in the HTML content. However, the absence of a published privacy policy, terms of service, security policy, and incident response contacts represents areas for improvement. The domain registration uses privacy protection, which is justified for this event business, and the domain age aligns with the event timeline. Overall, the website is trustworthy, professional, and compliant with cookie consent regulations but would benefit from enhanced transparency in privacy and security policies to strengthen user trust and regulatory compliance.

O

Offshore Wind North East 2025

offshorewindne.com

54

Offshore Wind North East 2025 is a professional event focused on the offshore wind energy sector in North East England. The website serves as a platform to promote the conference and exhibition, providing detailed information about the event, its organizers, sponsors, and partners. The event targets industry professionals and stakeholders in the renewable energy sector, emphasizing networking, knowledge sharing, and business opportunities. Technically, the website is built on Joomla CMS, uses modern JavaScript libraries and sliders, and integrates Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and includes CSRF tokens but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and should be investigated further. Overall, the website is functional and credible for its purpose but would benefit from enhanced security and privacy compliance measures.

Z

ZX Lidars

zxlidars.com

65

ZX Lidars is a specialized company providing advanced wind lidar technology for accurate remote wind measurement, primarily serving the energy sector globally. Their product portfolio includes onshore, offshore, and turbine-mounted wind lidars, positioning them as an industry leader in wind energy measurement solutions. The company is based in the UK and has been operational since 2007, targeting wind energy developers and meteorological organizations. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Slick Carousel, Font Awesome, and Google Tag Manager, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good content quality and professional design. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and contact information suggest a legitimate business. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced privacy compliance and security best practices.

F

Fitmin.cz

fitmin.cz

55

Fitmin.cz is a Czech-based e-commerce business specializing in manufacturing and retailing high-quality pet food and accessories for dogs, cats, horses, and rodents. The company emphasizes fresh ingredients sourced from the Orlické Mountains region and targets pet owners primarily in the Czech Republic. The website is professionally designed with clear navigation and a comprehensive product catalog, including loyalty programs and promotional offers. Technically, the site leverages modern e-commerce technologies, including the Shoptet platform, Google Analytics, Microsoft Clarity, and Facebook SDK, ensuring a robust digital presence. Security measures such as HTTPS and security headers are properly implemented, though the site lacks a dedicated security policy or incident response contact. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data limits domain legitimacy verification, posing a moderate risk. Overall, Fitmin.cz presents a trustworthy and professional online retail platform with room for improvement in transparency around security and incident response.

M

Martin Tour

martintour.cz

50

Martin Tour is a well-established Prague-based tourism company specializing in sightseeing tours across Prague and the Czech Republic. Their offerings include city tours, boat cruises, trips outside Prague, hop-on hop-off bus tours, and private group tours with multilingual commentary. The company targets tourists seeking guided travel experiences with convenient online booking and diverse language support. The website reflects a small but professional business with consistent branding and clear contact information. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework, leveraging modern libraries such as jQuery and Bootstrap 5.3.3. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced with CSRF tokens present, but lacks some recommended security headers and a cookie consent mechanism, which impacts privacy compliance. The security posture is solid but could be improved by adding explicit security policies, incident response contacts, and vulnerability disclosure information. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent with the business claims, indicating high legitimacy. Overall, the website is professional, trustworthy, and suitable for its tourism business purpose. Strategic recommendations include implementing a cookie consent banner, publishing a comprehensive privacy policy with GDPR compliance details, adding security headers, and establishing a vulnerability disclosure policy to enhance security and compliance posture.

L

LERAM s.r.o.

leram.cz

47

LERAM s.r.o. is a family-owned Czech company with nearly 30 years of experience primarily in the healthcare and pharmacy sectors. The company offers a comprehensive range of services including pharmaceutical manufacturing, distribution, storage, and retail pharmacy operations. Additionally, it has diversified interests in construction and gastronomy. The website reflects a professional and consistent brand image targeting business partners and customers in healthcare. Technically, the site uses modern web technologies such as Google Tag Manager, Google reCAPTCHA v3, and Three.js, with a YII PHP framework backend inferred from form validation patterns. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and reCAPTCHA protecting forms, though HTTP security headers are not explicitly detected. WHOIS data is not publicly available, likely due to privacy protection, which is common for businesses of this size and sector. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

C

CEMEC

cemecpesquisaclinica.com.br

45

CEMEC is a Brazilian clinical research center with a professional online presence focused on clinical studies across more than 15 medical areas. The website is built on WordPress using Elementor and includes modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-structured, mobile-optimized, and secured with HTTPS, reflecting a moderate to good level of digital maturity. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and publishing a security policy. Overall, the site is legitimate and consistent with its business claims, but could enhance compliance and security transparency.

D

Deutsches Studentenwerk

studentenwerke.de

64

The Deutsches Studentenwerk (DSW) website serves as the central portal for student services in Germany, offering comprehensive information on financing, housing, counseling, and cultural activities for students. The site targets students, educational institutions, and stakeholders within the German higher education system. The organization operates as a large non-profit entity with a strong market position in the education sector. Technically, the website is built on TYPO3 CMS with modern front-end technologies and is hosted behind Cloudflare for performance and security. Privacy compliance is demonstrated through the use of Cookiebot for cookie consent and Matomo for analytics, reflecting a privacy-conscious approach. However, explicit privacy policies and terms of service are not clearly found in the provided content, which could be improved. Security posture is good with HTTPS enforced, but additional security headers and a published security policy would enhance trust. Overall, the website is professional, accessible, and trustworthy, with moderate tracking and good user experience.

W

Westsächsische Hochschule Zwickau

fh-zwickau.de

68

Westsächsische Hochschule Zwickau is a regional German university of applied sciences offering a broad range of technical, economic, and life quality related academic programs. The institution targets students, prospective students, alumni, and international participants, providing comprehensive study options including bachelor, master, dual study programs, and extensive research activities. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern JavaScript libraries and analytics tools such as Matomo. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. WHOIS data aligns well with the institution's identity, reinforcing legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

S

SIHOT Hotel Management Software

sihot.com

66

SIHOT Hotel Management Software is an established provider of hotel management software solutions, founded in 2002 and targeting the hospitality industry. The company offers tailored software to cover all hotel processes, positioning itself as a specialized and experienced player in the hotel management software market. The website reflects a professional and consistent brand image with a focus on business clients in the hospitality sector. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern CMS infrastructure with good SEO practices. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data supports legitimacy and trustworthiness, with a domain age consistent with the business history. Strategic improvements in privacy compliance and security best practices would enhance the company's digital trust and regulatory adherence.

I

IT2GO s.r.o.

it2go.cz

60

IT2GO s.r.o. is a Czech Republic-based small technology company specializing in IT solutions for church communities, including parish management systems and websites. Founded in 2020, the company emphasizes user-friendly software that bridges traditional and modern approaches for church organizations. Their market position is niche but well-defined, focusing on accessible church IT services. Technically, the website employs modern JavaScript libraries and analytics tools like Matomo, hosted behind Cloudflare for performance and security. The site is well-designed with good navigation and mobile optimization but lacks some advanced accessibility features. Security posture is adequate with HTTPS and Cloudflare protection, though missing security headers and anti-bot measures on forms are notable gaps. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security hardening would enhance trust and compliance.

I

IT servitium Ecclesiae s.r.o.

itse.cz

58

IT servitium Ecclesiae s.r.o. is a newly established Czech Republic-based IT service provider, founded in 2024. The company presents itself with a basic but functional website offering contact details and a form for client communication. The business targets local clients seeking IT services, positioning itself as a small-scale technology service provider. The website uses modern frontend technologies such as Bootstrap and jQuery and is hosted behind Cloudflare, indicating a moderate level of technical infrastructure and digital maturity. However, the site lacks advanced SEO, accessibility, and privacy compliance features. Security posture is moderate with Cloudflare protection but lacks explicit security headers and policies. Overall, the website is professional but basic, with room for improvement in privacy, security, and content depth.

T

Teo via nadační fond

teovia.cz

58

Teo via nadační fond is a Czech non-profit foundation established in 2021, dedicated to supporting church congregations, parishes, and Christian organizations through sustainable financing and community support. The foundation aims to empower clergy by providing financial and organizational assistance, promoting active lay participation in church life. The website reflects a focused mission with clear content and a professional design tailored to its target audience of church communities and supporters. Technically, the site uses modern frontend technologies including jQuery, Bootstrap, and Matomo analytics, hosted under a Czech registrar consistent with its origin. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the domain registration and website content are consistent and trustworthy, supporting the foundation's legitimacy.

R

Realtime Shop

realtimeshop.cz

61

Realtime Shop is a Czech-based e-commerce platform specializing in industrial and manufacturing supplies, including ESD products, soldering materials, and inspection equipment. The company targets manufacturing companies and technical professionals in the Czech and Slovak markets, offering both product sales and consulting/training services. Established in 2016, the business maintains a medium-sized market presence with a consistent brand and professional website design. The site leverages WordPress and WooCommerce with modern plugins like Elementor and Slider Revolution, providing a good user experience and mobile optimization. Security measures include HTTPS, security headers, and Google reCAPTCHA, alongside a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, explicit security policies and incident response contacts are not prominently available, representing an area for improvement. Overall, the website is trustworthy, well-structured, and safe for general audiences, with a solid technical foundation and compliance posture.

C

ComArr, spol. s r. o.

taskpool.cz

60

ComArr, spol. s r. o. operates the TaskPool helpdesk system, a mature and established web-based software solution designed to streamline communication and task management between customers and service providers. With over 17 years in the market and more than 300 implementations, the company targets businesses and institutions of various sizes seeking efficient customer support and internal task management solutions. Their offerings include customer helpdesk, internal helpdesk, IT outsourcing, and support for ISO certification and ITIL standards. The website reflects a professional and consistent brand presence, with clear service descriptions and client references.

R

Regionální dobrovolnické centrum Pardubického kraje

dobrokraj.cz

46

The website dobrokraj.cz represents the Regionální dobrovolnické centrum Pardubického kraje, a regional volunteer center focused on coordinating and supporting volunteer activities within the Pardubický region of the Czech Republic. It provides news, advisory services, and a database of volunteer organizations, positioning itself as a key non-profit entity in the local social sector. The site is supported by governmental bodies including the Ministry of Interior and the Pardubický regional government, as well as corporate sponsors like Foxconn Česká republika. The business model is non-profit, targeting volunteers, volunteer organizations, and social service stakeholders in the region. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap and jQuery, and uses common plugins such as Revolution Slider and MonsterInsights for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies or incident response information. Analytics usage is moderate with anonymized IP tracking via Google Analytics. Security-wise, the site shows good practices but could improve by adding security headers, a security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The domain registration is consistent with the business history and shows no suspicious patterns, enhancing trustworthiness. Overall, dobrokraj.cz is a professionally maintained, regionally focused non-profit website with good content quality and compliance with privacy regulations. Strategic improvements in security transparency and accessibility could further strengthen its posture.

D

Dobrovolnické centrum Koalice nevládek Pardubicka

dobrokonep.cz

46

Dobrovolnické centrum Koalice nevládek Pardubicka operates as a regional non-profit organization focused on recruiting and coordinating volunteers for non-profit and contributory organizations within the Pardubický region of the Czech Republic. The website serves as a platform to connect volunteers with various social and community projects, providing detailed volunteer opportunities and supporting materials. The organization is supported by notable partners including the Ministry of Interior of the Czech Republic and Foxconn Česká republika, enhancing its credibility and regional influence. Technically, the website is built on WordPress CMS, utilizing modern web technologies such as Bootstrap, jQuery, and popular plugins like Revolution Slider and Owl Carousel. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. Google Analytics is implemented with anonymized IP tracking and user consent. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. No vulnerability disclosure or security policy pages are present, indicating room for improvement in security transparency and incident response readiness. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the site's security posture and compliance.

N

Nevládky

nevladky.cz

44

Nevládky.cz is a Czech regional support platform dedicated to assisting non-profit organizations in the Pardubice region. The website offers a variety of services including informational resources, financial guidance, legislative and accounting advice, and opportunities for collaboration and education. It positions itself as a trusted regional hub for non-profit entities, leveraging a WordPress-based infrastructure with modern web technologies and plugins to deliver content and services effectively. The site is well-branded, consistent, and targets a specific audience of non-profit stakeholders within the Czech Republic.

Ř

Římskokatolická farnost sv. Filipa a Jakuba Zlín

farnostzlin.cz

57

Římskokatolická farnost sv. Filipa a Jakuba Zlín is a well-established Roman Catholic parish serving the Zlín community in the Czech Republic. The website provides comprehensive information about religious services, sacraments, educational programs, community events, and pastoral care. It targets local parishioners and those interested in Catholic faith activities. The parish operates as a non-profit organization with a clear focus on community engagement and spiritual support. The domain has been active since 2006, reflecting a stable presence in the region. Technically, the website uses a modern tech stack including jQuery, Bootstrap, FontAwesome, and Google Fonts, supported by a custom CMS platform (IS OMNIA) tailored for church management. Hosting and DNS services are provided by Wedos and Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and offers multimedia content including live streams and social media integration. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS but lacks some advanced security headers and a cookie consent mechanism, which are important for GDPR compliance. No incident response or vulnerability disclosure information is published. Analytics are handled via Matomo, providing moderate user tracking with basic privacy compliance. Overall, the website is professional, trustworthy, and well-suited for its community role. However, improvements in privacy compliance and security policies are recommended to enhance user trust and regulatory adherence.

N

Nový šachový server

nss.cz

47

Nový šachový server (NSS.cz) is a Czech media platform dedicated to delivering chess news, tournament results, interviews, and reports primarily targeting the Czech chess community. The site integrates premium membership content and an e-shop, indicating a diversified business model focused on content and commerce. Technically, the site uses a custom CMS built on the Nette Framework, with frontend technologies including jQuery and Google services for fonts, analytics, and advertising. The website is mobile-optimized and provides a good user experience with clear navigation and regularly updated content. Security posture is moderate; HTTPS is used, but security headers and advanced protections are lacking. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting GDPR awareness. However, the absence of WHOIS data reduces domain transparency and trustworthiness. Overall, NSS.cz is a well-maintained niche media site with room for improvement in security and transparency.

I

International Chess Federation

fide.com

64

The International Chess Federation (FIDE) operates a comprehensive and professionally designed website serving as the official global hub for chess governance, ratings, tournaments, and news. The site leverages WordPress with Elementor and integrates multiple subdomains for specialized services such as ratings, calendar, and directory. The technical infrastructure is modern and supports good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. The WHOIS data for the main domain is unavailable, which is unusual for an international organization and may warrant further verification. Overall, the site is trustworthy and authoritative in its domain, with strong branding and social media presence.