Security Directory

E

Escapegame

escapegame.cz

53

Escapegame.cz is a Czech Republic-based small hospitality business specializing in modern escape room games across multiple cities including Ostrava, Olomouc, Bruntál, Frenštát pod Radhoštěm, and Opava. The company offers a variety of themed escape rooms targeting families, friends, and corporate clients, with online booking and gift voucher options enhancing customer engagement. The website is professionally designed with rich multimedia content, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site leverages modern JavaScript libraries, Google services for analytics and maps, and standard frameworks like Bootstrap, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS registration data is a notable concern but does not currently undermine the business credibility given the professional site and clear contact information. Overall, the site presents a trustworthy and user-friendly platform for escape room entertainment in the Czech market.

T

Tatry Super Ski

tatrysuperski.pl

54

Tatry Super Ski is a prominent Polish platform specializing in the sale of ski and snowboard skipasses, integrating major ski resorts across the Podhale, Spisz, Beskid, and Pieniny regions. Positioned as the largest project in Poland's ski industry, it targets winter sports enthusiasts seeking convenient access to multiple ski areas. The website demonstrates a solid digital infrastructure, leveraging modern analytics and tracking technologies such as Google Analytics, Google Tag Manager, and Facebook Pixel, all integrated with a GDPR-compliant cookie consent mechanism. The technical implementation is robust with good SSL configuration and security headers, ensuring secure user interactions. However, the absence of a dedicated security policy and incident response information indicates room for improvement in transparency and security governance. Overall, the site maintains a professional and trustworthy online presence with clear contact information and comprehensive privacy practices.

C

COOP MORAVA, s.r.o.

coopmorava.cz

46

COOP MORAVA, s.r.o. operates the largest retail cooperative network in the Moravia region of the Czech Republic, with over 800 stores under the COOP brand. The company focuses on providing grocery and household products to general consumers, supported by promotional campaigns, a mobile application, and recipe content to engage customers. The website reflects a mature digital presence with a professional design and consistent branding, targeting a broad consumer base in the region. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent mechanisms. The absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were found in the content. The tracking and analytics usage is extensive, which may raise privacy considerations. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced transparency in privacy and security policies, improved security headers, and WHOIS data availability to strengthen its compliance and trust posture.

Softsolutions, s.r.o. is a Slovakian small technology company specializing in custom software applications, responsive web design, and mobile app development. The company positions itself as a professional, flexible, and reliable partner for clients seeking tailored software solutions. Their website reflects a modern design using Bootstrap and jQuery, optimized for mobile devices and integrating Google Analytics for visitor tracking. However, the site lacks critical privacy and cookie policies, and no terms of service or security policies are published, which may impact user trust and compliance with GDPR regulations. The contact information is clearly provided, including phone, email, and social media links, supporting business credibility. The domain is well-established since 2014 with DNSSEC enabled, indicating a legitimate and consistent registration.

JAW.cz s.r.o. is a regional telecommunications provider based in the Czech Republic, offering high-speed internet, television, telephony, and security services primarily to households and businesses in the Děčín region. The company positions itself as a reliable and flexible ISP with no long-term contracts and competitive pricing. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses a CMS platform (MultiCMS.net) and integrates common analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is mobile optimized and provides a cookie consent mechanism, though it lacks a visible privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and no published incident response or vulnerability disclosure information. WHOIS data is unavailable, which reduces trustworthiness but the presence of company registration details on the site supports legitimacy. Overall, the website is functional, professional, and safe for general audiences.

FBJ Corporation is a manufacturing company specializing in ball and roller bearings for automotive, industrial, and agricultural sectors. With over 50 years of industry experience, the company positions itself as a reliable OEM supplier with a global distribution network spanning Asia Pacific, Africa, and the Americas. The website reflects a professional business presence with clear product offerings and certifications such as ISO 9001 and TÜV SÜD PSB ISO Quality Certificate 2016, reinforcing its commitment to quality. Technically, the website employs modern frameworks like Bootstrap and jQuery, providing a responsive and user-friendly experience, though performance is moderate and accessibility is basic. Security posture is average, with HTTPS assumed but lacking important security headers and advanced protections. Privacy compliance is minimal, with no cookie consent mechanisms detected and only a basic privacy policy present. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy features to align with modern standards.

W

Webstack

webstack.sk

53

Webstack is a technology-focused conference primarily targeting web developers, including Laravel artisans and software developers, with a focus on full-stack development and AI. Founded in 2023 and based in Slovakia, it organizes annual events in Bratislava, offering sponsorship and ticket sales as key business activities. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it employs modern JavaScript libraries and frameworks such as Alpine.js, Flickity, FancyBox, and Google reCAPTCHA v3, hosted on Websupport infrastructure with DNSSEC enabled and HTTPS enforced, indicating a mature digital presence. Security posture is strong with best practices observed, though the absence of a cookie consent mechanism and published security policies are areas for improvement. Overall, the domain registration details are consistent and legitimate, supporting the trustworthiness of the business. The site integrates social media and marketing tools like Facebook Pixel and Plausible Analytics, with moderate user tracking and basic privacy compliance. The website is safe for general audiences and does not contain any adult or questionable content.

I

Rezervační systém pro sporty, cvičení a aktivity

isportsystem.cz

44

The website www.isportsystem.cz represents a Czech-based reservation system focused on sports, fitness, wellness, and leisure activities. It targets operators of sports centers, fitness zones, wellness facilities, and organizers of group and individual sports lessons. The business model is SaaS, providing a customizable and continuously updated booking platform with a strong local market presence evidenced by over 20 years of operation and more than 1000 customers. The site content is professionally presented in Czech, with clear navigation and relevant business information, although explicit contact details are not prominently displayed. Technically, the website employs a traditional web stack with jQuery and jQuery UI libraries, along with popular UI components like Fancybox and Unite Gallery. Google Analytics and Google Tag Manager are used for user tracking and analytics. The site is mobile optimized and SEO friendly but uses somewhat outdated JavaScript libraries which may pose security risks. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no advanced security headers were detected, and no explicit incident response or security policy information is provided. The absence of a cookie consent mechanism is a compliance gap under GDPR. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trustworthiness. No vulnerabilities or malware indicators were found in the content. Overall, the website is a credible and professional platform for sports reservation services with room for improvement in security practices and privacy compliance. Strategic recommendations include implementing security headers, adding cookie consent, updating JavaScript libraries, and publishing clear security and incident response policies.

V

Vladimír Večeřa

ardumet.cz

42

Ardumet.cz is a small Czech technology company specializing in the manufacture of wifi-enabled meteorological stations based on a powerful 32-bit microprocessor. Their product supports multiple sensor modules and offers a responsive web administration interface for device management, firmware updates, and data monitoring. The company targets technical users and businesses requiring precise weather data collection solutions. The website is professionally designed with clear navigation and detailed product descriptions, reflecting a focused niche market position. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, and various UI libraries. Hosting is provided by WEDOS, consistent with WHOIS data. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or advanced analytics tools are detected, indicating a lightweight infrastructure. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are compliance gaps. No forms or user input fields reduce attack surface, but SSL configuration details are unknown and should be verified. WHOIS data is consistent and supports legitimacy, with no privacy protection or suspicious patterns. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the nature of the business and content, but strategic improvements in privacy compliance, security headers, and SSL configuration are recommended to enhance trust and regulatory adherence.

P

Papilonia s.r.o.

papilonia.cz

53

Papilonia s.r.o. operates a network of butterfly houses across multiple cities in the Czech Republic, offering visitors immersive experiences with exotic butterflies and educational content about their life cycle. The company targets families, tourists, and nature enthusiasts, positioning itself as a regional attraction with a medium-sized business footprint. The website is built on Drupal 10 and uses modern web technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating legitimacy.

Ú

ÚHŠ Jánské koupele

uhs.cz

52

ÚHŠ Jánské koupele is an educational institution specializing in professional training for members of voluntary fire brigades (JSDH) in the Czech Republic. The organization offers a variety of courses, adaptation programs for schools, recreational stays, and international cooperation projects. Their website reflects a focused business model targeting fire safety education and community engagement, with clear contact information and a professional presentation. The institution appears to hold a medium-sized regional position within the education sector, serving primarily fire brigade members, schools, and youth groups. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various UI libraries to deliver a responsive and user-friendly experience. The site is mobile optimized and structured with SEO best practices, although accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal privacy or terms of service documentation, which are important for compliance and trust. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact details suggest legitimacy. No signs of malware, phishing, or adult content were found, indicating a safe environment for users. Overall, the website is professionally designed and functional, but improvements in privacy compliance, security headers, and domain transparency would enhance trust and security posture. Strategic recommendations include publishing privacy and terms policies, implementing security headers, and clarifying incident response procedures.

J

Kavárna

jtcafe.cz

61

J&T café is a stylish local café located in Brno, Czech Republic, offering breakfast, brunch, coffee, and event hosting services. The website presents a professional and elegant atmosphere targeting general audiences seeking a quality café experience. The business model focuses on hospitality with additional services such as meeting room rental and event hosting. The website is well-structured with clear navigation, a reservation form, and contact information, supporting good user experience and business credibility. Technically, the site uses a modern CMS (Solidpixels) and integrates multiple marketing and analytics tools including Microsoft Clarity, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and performs moderately well. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages were found, which could impact compliance and user trust. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data limits domain legitimacy verification. No signs of malware or phishing were detected. The site employs cookie consent mechanisms aligned with GDPR principles but lacks explicit privacy documentation. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security measures. Strategic improvements in privacy policy publication, security headers implementation, and WHOIS data availability would strengthen its security and compliance posture.

K

Katalog.cz

katalog.cz

55

Katalog.cz is a Czech online product catalog and e-shop comparison platform that aggregates a wide range of product categories including furniture, electronics, clothing, toys, and cosmetics. The site provides users with price comparisons, promotional offers, and a magazine/blog section with lifestyle and business articles. It targets Czech consumers interested in online shopping and product discovery. The platform demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site uses modern web technologies such as Bootstrap, Font Awesome, FancyBox, and Google Tag Manager for analytics. HTTPS is properly implemented, ensuring secure data transmission. However, the site lacks explicit privacy and cookie policies, which impacts its privacy compliance score. No WHOIS data is available, likely due to privacy protection, but the website's professional appearance and active content suggest legitimacy. Security best practices could be improved by adding security headers and publishing incident response information.

S

Shopea.cz, s.r.o.

ppc-sprava.cz

59

The website www.ppc-sprava.cz represents a Czech PPC agency specializing in managing PPC campaigns across Google Ads, Sklik, Facebook, and shopping comparison platforms. With over 13 years of experience, the company offers professional campaign setup, optimization, and online marketing services targeted at businesses seeking to improve their online advertising effectiveness. The site demonstrates a solid market position supported by certifications such as Google Partner and verified Sklik agency status. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and integrates Google Analytics and Google Tag Manager with a robust cookie consent mechanism. Security posture is good with HTTPS enforced and reCAPTCHA protection on forms, though explicit security headers and policies are absent. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and client references support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR cookie consent requirements.

C

cyber_Folks S.A.

katoflix.pl

40

KATOFLIX is a Polish niche Christian Video on Demand platform offering a curated selection of faith-based films, documentaries, and series primarily targeting Christian families and individuals seeking spiritually uplifting content. The platform operates on a transactional rental model, providing access to films for limited periods. The website is professionally designed with clear navigation and categorization, supporting a positive user experience. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and responsive design frameworks, hosted by cyber_Folks S.A., a reputable Polish hosting provider. Security posture is adequate with HTTPS enabled and basic cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and terms of service are present but basic, with no explicit GDPR compliance statements or dedicated security policies. Overall, the domain registration and hosting align well with the business profile, indicating legitimacy and operational consistency.

Q

QUARTEX Praha, s.r.o.

quartex.cz

46

QUARTEX Praha, s.r.o. is a Czech-based IT company specializing in enterprise resource planning (ERP) solutions, primarily on Microsoft platforms including Dynamics NAV and Dynamics 365 Business Central, as well as their proprietary Q.MAN platform. With over 25 years of experience, they position themselves as a trusted Microsoft partner delivering digital transformation and business process optimization services. Their offerings include ERP implementation, audits, consulting, outsourcing, and web application development. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a B2B audience seeking advanced IT solutions. Technically, the site is built on WordPress 6.8.3 and integrates modern libraries such as Google Tag Manager and Google reCAPTCHA v3 for security and analytics. The site uses Bootstrap and other UI frameworks for responsive design. Security headers are partially implemented, and HTTPS is enforced, indicating a good security posture, though some headers like Content-Security-Policy are missing. Cookie consent mechanisms are present, supporting privacy compliance, but no explicit privacy policy or terms of service pages were detected on the homepage. The security posture is solid with HTTPS and anti-bot protections, but the absence of WHOIS data reduces trustworthiness and raises questions about domain registration transparency. No incident response or vulnerability disclosure information is publicly available, which could be improved. Overall, the site is safe, professional, and business-focused with moderate tracking via Google Tag Manager. Strategically, QUARTEX Praha should enhance transparency by publishing privacy and security policies, improve security headers, and verify domain registration details to strengthen trust. These steps will support compliance and reinforce their market position as a reliable IT partner.

S

SHOPEA.cz, [email protected]

marketing-seo.cz

59

Marketing-SEO.cz is a Czech Republic based small digital marketing agency specializing in SEO, PPC campaign management, and web optimization services. With over 13 years of experience since 2013, the company positions itself as a certified Google Partner and verified agency for Sklik, Shoptet, and Heureka platforms, indicating a strong local market presence and trustworthiness. Their service offerings include SEO audits, optimization of websites and e-shops, PPC management, and web development, targeting businesses seeking to improve their online marketing performance. The website content is professionally presented with clear navigation and multiple client testimonials, reinforcing credibility. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, Google Fonts, Font Awesome, and integrates Google reCAPTCHA v3 for form security. Google Tag Manager and Google Analytics are used for tracking and analytics, with a comprehensive cookie consent mechanism implemented to comply with GDPR requirements. The site is mobile responsive and optimized for SEO, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and published privacy or terms of service documents. The absence of WHOIS registration data reduces domain trustworthiness and raises questions about domain registration transparency. However, the website's certifications, business information, and operational maturity mitigate some concerns. No signs of malicious content or adult material were found, and the site is fully accessible without WAF or security challenges. Overall, Marketing-SEO.cz demonstrates a solid business and technical foundation with room for improvement in privacy documentation, security headers, and WHOIS transparency. Strategic recommendations include publishing privacy and terms policies, implementing security headers, and verifying domain registration details to enhance trust and compliance.

The website akceahr.cz represents the Asociace hotelů a restaurací (AHR), a Czech hospitality association organizing industry events such as conferences and roadshows. The site is well-structured, targeting hospitality professionals and partners, with clear event information and testimonials that reinforce its market position. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and a cookie consent manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

S

STŘED, z.ú.

stred.info

49

STŘED, z.ú. is a Czech non-profit organization providing social, preventive, and therapeutic services primarily targeting children, families, and educational professionals in the Vysočina region. The organization operates a community center and offers a range of supportive services with a focus on human values such as openness, professionalism, and trustworthiness. The website reflects a well-established regional presence with over 20 years of operation and partnerships with reputable organizations. Technically, the website uses a mix of legacy and modern JavaScript libraries including jQuery 1.10.2, Google Analytics, and Swiper.js, indicating moderate digital maturity. The site is mobile-optimized and SEO-friendly but could improve accessibility and update outdated libraries. Security posture is moderate; while HTTPS is presumably enabled, no security headers were detected and the use of an outdated jQuery version poses potential risks. Privacy compliance is basic with a cookie consent banner but no explicit privacy policy page found. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

The website www.raketa-casopis.cz represents a Czech children's magazine called RAKETA, targeting children aged 6 to 12 and their parents. The magazine is published quarterly without advertising and is sold primarily through an associated e-shop platform. The business is operated under the Labyrint brand, which is evident from the copyright and linked partner domains. The site content is well-structured, visually consistent, and provides clear navigation to magazine issues and social media channels. However, the absence of privacy and cookie policies and lack of explicit contact information limit its compliance and trustworthiness from a security and privacy perspective. Technically, the website uses standard and mature web technologies such as Bootstrap, jQuery, and Fancybox, with Google Analytics for visitor tracking. The site appears mobile-optimized and moderately performant but lacks advanced SEO and accessibility features. No CMS or hosting provider information is discernible. Security posture is moderate due to missing security headers and unknown SSL configuration, with no forms present to increase attack surface. From a security standpoint, the site does not exhibit blocking or WAF mechanisms, allowing full content access. However, the WHOIS lookup failed to return any domain registration data, which is unusual and reduces domain trust. No security policies, incident response contacts, or certifications are published. The site does not collect personal data via forms, reducing immediate risk but also limiting user engagement options. Overall, the website is a legitimate, small-scale media business with good content quality and user experience but requires improvements in privacy compliance, security hardening, and transparency to enhance trust and regulatory adherence.

A

Aquapalace Hotel Prague

aquapalacehotel.cz

45

Aquapalace Hotel Prague operates as a family and wellness hotel integrated with the largest water park in the Czech Republic, offering a broad range of leisure, accommodation, and conference services. The website presents a professional and content-rich platform targeting families, couples, and business travelers seeking entertainment, wellness, and event hosting in Prague. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools, with a CMS identified as Topinfo CMS. The site is mobile-optimized and well-structured, providing a positive user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS data reduces transparency and trust slightly but is offset by visible certifications and clear contact information. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy disclosures.

F

Fast-Web

fast-web.cz

45

Fast-Web is a Czech-based small technology company specializing in affordable, modern, and responsive web design services. Founded in 2014, it offers a SaaS model providing website templates combined with a proprietary content management system. The company targets small businesses and individuals seeking cost-effective web solutions with SEO and analytics integration. The website demonstrates a consistent brand presence with clear pricing, demo options, and a focus on ease of use. Technically, the website employs a mature but somewhat dated technology stack centered around jQuery and various UI and animation libraries. The site is mobile-optimized and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, some JavaScript libraries are outdated, which could pose security risks. Performance is moderate, with room for modernization. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, the absence of explicit security policies, incident response contacts, and modern security headers limits the overall security maturity. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, supported by a privacy policy and cookie consent. Overall, the website is trustworthy and professional, with a solid business model and technical foundation. Strategic improvements in security policies, library updates, and incident response readiness would enhance the security posture and compliance further.

S

SHOPEA.cz, s.r.o.

shopea.cz

50

SHOPEA.cz, s.r.o. is a Czech-based digital agency specializing in professional web development, e-commerce solutions, and online marketing services. With over 10 years of experience and a client base exceeding 680 satisfied customers, the company holds a strong position in the local market. Their service portfolio includes website creation, web applications, SEO, PPC campaigns, email marketing, and web hosting, supported by certifications such as Google Partner and verified Sklik agency status. The website reflects a mature business with consistent branding, comprehensive service offerings, and strong trust indicators including client testimonials and high Google review ratings. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Google Fonts, and integrates advanced tools like Google Tag Manager and reCAPTCHA v3 for security. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Cookie consent management is implemented with an opt-in mechanism, reflecting good privacy compliance practices. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security headers and published security policies suggests room for improvement. The lack of WHOIS data limits domain trust assessment, but the website's content and certifications support legitimacy. No vulnerabilities or suspicious content were detected. Overall, SHOPEA.cz demonstrates a professional and trustworthy online presence with a strong business model and technical foundation. Strategic enhancements in privacy policy publication, security header implementation, and incident response transparency would further strengthen their security and compliance posture.

I

Interiéry Beneš

natremvamto.cz

50

Interiéry Beneš is a small Czech Republic-based business specializing in luxury interior finishing services including Venetian and Viennese stuccos, concrete imitation, wallpapering, painting, coatings, moldings, and decorative trims. The company targets residential and commercial customers across the Czech Republic, emphasizing quality materials and craftsmanship with over 15 years of experience. Their market position is that of a trusted local service provider with a focus on transforming interiors with unique wall finishes. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and popular libraries such as jQuery and Owl Carousel. The site is hosted on a Czech hosting provider and is mobile optimized with good navigation and SEO practices. However, some modern security headers and privacy compliance features are missing, and Google Analytics is present but currently disabled. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are important for GDPR compliance. No forms are present, reducing attack surface, but the absence of a vulnerability disclosure policy and incident response contacts indicates room for improvement in security posture. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced privacy and security measures to improve compliance and user trust.

Cafe Mozart is a hospitality business based in Prague, Czech Republic, operating a restaurant and an online e-shop for vouchers and cakes. The website presents a professional and consistent brand image with clear contact information and multilingual support. The business targets general consumers interested in dining and gift vouchers. Technically, the site uses a combination of jQuery, Bootstrap, and third-party marketing and analytics tools, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks some security headers and published security policies. WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract from the overall professional presentation. Strategic improvements in security and transparency are recommended.

Café Mozart is a hospitality business located in Prague's Old Town, offering café and patisserie services with a unique view of the Astronomical Clock. The website presents a professional and content-rich experience targeting tourists and visitors seeking cultural and gastronomic experiences. The technical infrastructure uses common web technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly reduces trust but the website's contact information and social media presence support legitimacy. Overall, the site is well-designed and trustworthy for its business domain.

S

Studio dkLAB

dklab.cz

54

Studio dkLAB is a Czech-based digital agency specializing in custom web design, e-commerce solutions, and Shoptet platform customizations. With over 15 years of experience, the company serves businesses and municipalities, offering services ranging from UX/UI design to process automation and system maintenance. Their market position is strengthened by recognized Shoptet partner status and a robust client portfolio. Technically, the website employs a mix of legacy and modern web technologies, including jQuery, Swiper.js, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and library updates are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data slightly impacts domain trustworthiness.

STUDIO AXIS, spol. s r.o. is a specialized education provider in the construction and architecture sector based in the Czech Republic. Operating since 1994, the company offers a wide range of professional training services including seminars, courses, conferences, and consulting, with accreditations from professional chambers and government bodies. The website reflects a focused business model targeting professionals and officials in the construction industry, emphasizing lifelong learning and regulatory compliance. Technically, the website uses a custom CMS with standard web technologies including jQuery and Fancybox, but relies on somewhat outdated libraries and lacks visible advanced security headers. Privacy compliance is well addressed with a cookie consent mechanism and a clear privacy policy. However, the absence of WHOIS data reduces domain trustworthiness, though the business legitimacy is supported by accreditations and professional content. Overall, the site is functional and professional but could benefit from technical and security modernization.

C

CMM - Associação Portuguesa de Construção Metálica e Mista

cmm.pt

50

CMM - Associação Portuguesa de Construção Metálica e Mista is a Portuguese non-profit association dedicated to the promotion and technical dissemination in the steel construction sector. It serves a membership base of over 430 members including metalworking companies, design offices, distributors, and educational and research institutions. The association offers training courses, organizes industry events, publishes technical guides, and supports collaborative projects and clusters within the sector. It holds a recognized position in the Portuguese steel construction industry as a key facilitator and knowledge hub. Technically, the website is built on a custom CMS platform utilizing legacy JavaScript libraries such as jQuery 1.5.1 and jQuery UI 1.8.x, along with TinyMCE for content editing and Fancybox for UI elements. The site employs AJAX for dynamic content loading and includes basic SEO and accessibility features. Performance is moderate, with basic mobile optimization and a consistent branding approach. Analytics are implemented via Google Analytics (gtag.js), with a cookie consent mechanism in place. From a security perspective, the site lacks visible modern security headers and uses outdated JavaScript libraries with known vulnerabilities, which could expose it to risks. There is no explicit security policy or incident response information available. HTTPS usage is assumed but not explicitly enforced or detailed in the content. Privacy compliance is addressed with a privacy policy and cookie consent banner, indicating GDPR awareness. Contact information is limited but includes a verified company email and phone number. Overall, the security posture is moderate but could be improved with updates and enhanced policies. The overall risk assessment suggests the site is trustworthy and professional but would benefit from technical modernization and enhanced security practices. Strategic recommendations include upgrading JavaScript libraries, implementing security headers, enforcing HTTPS, and publishing clear security and incident response policies to strengthen trust and compliance.

T

Tlačová agentúra Slovenskej republiky

webreport.sk

37

WebReport.sk is a Slovak online media monitoring service operated by the Tlačová agentúra Slovenskej republiky (TASR). It offers real-time monitoring of internet portals, news, publicist content, blogs, and public procurement notices. The service targets Slovak businesses and institutions requiring comprehensive media monitoring. The website is professionally designed with a consistent brand presence and provides client login and ordering functionalities. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, Google Analytics, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. However, there is room for improvement in security posture, particularly in implementing security headers and publishing privacy and cookie policies. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website stolari-truhlari.cz serves as a comprehensive online portal dedicated to professionals in the woodworking and furniture manufacturing industry in the Czech Republic. It offers a rich array of services including supplier and manufacturer directories, industry news, classified ads, and an extensive calendar of trade events. The portal targets carpenters, cabinetmakers, furniture producers, and related professionals, positioning itself as a key niche resource within this sector. The presence of partner logos and media affiliations further supports its market credibility. Technically, the site employs a traditional web stack with jQuery 1.8.3, jQuery UI, Fancybox, Google reCAPTCHA, and Google Analytics. While functional, the use of an outdated jQuery version presents potential security risks. The site is moderately optimized for performance and mobile use, with basic accessibility and good SEO practices. Security measures include HTTPS enforcement and CAPTCHA on forms, but lack advanced HTTP security headers. From a security perspective, the site demonstrates a basic but acceptable posture. The absence of WHOIS data for the domain is a concern, limiting the ability to verify domain legitimacy and ownership. Privacy and cookie policies are present and indicate GDPR compliance, enhancing trust. No signs of malware, phishing, or adult content were detected, and no WAF or blocking mechanisms interfere with access. Overall, the site is a credible and useful resource for its target audience but would benefit from technical updates and enhanced security practices. The missing WHOIS data warrants further investigation to confirm domain registration details. Strategic improvements in security headers, library updates, and domain verification would strengthen the portal's trustworthiness and resilience.

Ř

Řeznictví H+H, s.r.o.

reznictvihh.cz

50

Řeznictví H+H, s.r.o. is a Czech Republic-based butcher company specializing in the production and sale of fresh meat and meat products, including traditional and handmade specialties. The company positions itself as a quality-focused supplier rather than the largest producer in the market. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeted at consumers seeking quality meat products. Technically, the site uses a mature technology stack including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Seznam Sklik. The site is mobile optimized and includes comprehensive cookie consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data limits domain legitimacy verification, and no explicit contact emails or phone numbers are visible on the main pages, which slightly impacts business credibility. Security posture is moderate with room for improvement in HTTP security headers and incident response transparency.

A

Alimpex

alimpex.cz

55

Alimpex is a well-established Czech company specializing in the wholesale and retail distribution of food products, including their own production and brand portfolio. The company serves a diverse customer base including retail clients, budget organizations, gastronomy, and ice cream sectors, offering over 4500 products with a strong logistics network ensuring delivery within 24 hours across the Czech Republic. The website reflects a mature business with a professional digital presence, leveraging modern web technologies and providing detailed product and contact information. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details. Security posture is generally good with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and explicit incident response contacts. Privacy compliance is addressed with a comprehensive GDPR policy, though cookie consent mechanisms are lacking. Overall, the site demonstrates a solid business and technical foundation with room for enhancements in security and privacy transparency.

Pivovarská restaurace, rodinný pivovar Berounský medvěd is a small family-owned brewery and restaurant located in Beroun, Czech Republic. The business revives a historical brewing tradition dating back to 1295 and offers a range of services including traditional beer brewing, a restaurant, cultural events, and bike rentals. The website is professionally designed using WordPress and includes rich content in Czech, targeting local visitors and tourists interested in authentic Czech beer and cultural experiences. Technical infrastructure includes common JavaScript libraries such as jQuery and Owl Carousel, with a cookie consent mechanism ensuring GDPR compliance. However, WHOIS data for the domain is missing, raising concerns about domain registration legitimacy. The website lacks explicit security headers and terms of service pages, which could be improved to enhance security posture and compliance. Overall, the site is accessible, well-structured, and trustworthy from a content perspective but requires attention to domain legitimacy and security best practices.

Vinařství Sadílek is a small family-owned winery based in Hustopeče, Czech Republic, with a history dating back to 1983. The business focuses on producing and selling a variety of white and red wines, operating a historic cellar that also serves as a venue for tastings and events. The website reflects a local hospitality business with clear contact details and a modest digital presence. Technically, the site runs on concrete5 CMS with common JavaScript libraries and offers a moderate user experience with good mobile optimization. Security posture is basic, with HTTPS enabled but lacking important security headers and privacy policies, indicating room for improvement in compliance and security best practices. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security measures.

Café Mozart is a hospitality business located in Prague's Old Town, offering a unique cafe experience with home-made cakes, coffee, piano concerts, and event hosting. The business leverages its prime location opposite the Prague Astronomical Clock to attract tourists and locals seeking cultural and culinary experiences. The website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Maps API, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS and cookie consent mechanisms, though some improvements are recommended in security headers and error handling. The absence of WHOIS data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, fixing minor code errors, and maintaining GDPR compliance.

Grand Hotel Praha is a historic 4-star hotel located in the heart of Prague's Old Town Square, offering a blend of history and modern comfort. The website presents a comprehensive overview of their accommodation options, including rooms, residences, dining at Café Mozart, special offers, concierge services, and event hosting. The business targets tourists and business travelers seeking premium lodging in Prague's city center. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and featuring integrated Google Maps and social media links. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Maps API. It features cookie consent mechanisms compliant with GDPR and uses various marketing and retargeting tools. Performance is moderate with good mobile optimization. However, minor PHP notice errors and lack of explicit security headers indicate areas for improvement in security hardening. Security posture is adequate with HTTPS implied and no exposed sensitive data, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Cookie and privacy policies are present and comprehensive, supporting GDPR compliance. Overall, the site is trustworthy and professional but would benefit from enhanced security headers and domain registration clarity. Recommendations include fixing PHP errors, implementing security headers, verifying domain registration details, and continuous monitoring of third-party scripts to maintain security and compliance.

Oliva Verde is a small hospitality business operating an Italian restaurant located in the historic center of Prague. The website presents the restaurant's offerings including Italian cuisine specialties such as pizza, pasta, fresh fish, and a curated wine list. The business targets tourists and locals seeking authentic Italian dining experiences near the Old Town Square. The website is professionally designed with consistent branding and clear navigation, supporting the business's market position as a reputable local restaurant. Technically, the website uses legacy JavaScript libraries including jQuery 1.7.1 and jQuery UI 1.8.13, along with common plugins like Fancybox and Superfish menus. Google Analytics and Google Ads remarketing scripts are implemented for tracking and advertising. The site shows moderate performance and basic mobile optimization but lacks modern security headers and updated libraries, which poses potential security risks. From a security perspective, the site lacks visible security headers and uses outdated JavaScript libraries with known vulnerabilities. The WHOIS data is unavailable, which reduces transparency and trustworthiness. Cookie consent is implemented, but GDPR compliance is only basic. Contact information is clearly provided, but no incident response or security policies are publicly available. Overall, the security posture is moderate but requires improvements to reduce risk. The overall risk assessment suggests the website is functional and professional but has moderate security and compliance gaps. Strategic recommendations include updating libraries, implementing security headers, enhancing GDPR compliance, and improving transparency around domain registration and security policies.

U

U Zlaté Konvice

ukonvice.cz

48

U Zlaté Konvice is a small hospitality business operating a restaurant located in the historic center of Prague, specializing in traditional Czech cuisine served in a unique 14th-century cellar setting. The website presents the restaurant's offerings, including live music and special events, targeting tourists and locals interested in cultural dining experiences. The business maintains a moderate market position with clear contact information and partner affiliations. Technically, the website uses legacy JavaScript libraries and common web technologies such as jQuery, Google Analytics, and Fancybox, but lacks modern security headers and updated libraries, which could expose it to vulnerabilities. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear authentic. Privacy and cookie policies are present but basic, with no visible terms of service or security policies. Overall, the website is functional and professionally presented but would benefit from technical and security improvements.

O

Obec Sudoměřice u Bechyně

sudomerice.cz

38

The website www.sudomerice.cz serves as the official online presence for the municipality of Sudoměřice u Bechyně in the Czech Republic. It provides comprehensive information about the local government, community life, news updates, event calendars, and contact details. The site targets residents and visitors seeking municipal services and information. The business model is that of a public sector entity focused on information dissemination and community engagement. The site is well-branded with consistent government logos and trust indicators such as official contact details and links to government portals. Technically, the site employs a mix of older and modern web technologies including jQuery 1.11.3, Bootstrap 4 alpha, and various JavaScript libraries for UI components like sliders and date pickers. It uses the WRS content management system tailored for municipal websites. The site is moderately performant and mobile-optimized, though some technical debt is evident from outdated libraries. Accessibility and SEO optimizations are basic but functional. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. The presence of CSRF tokens in forms is a positive sign. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present but lack active consent mechanisms. No incident response or security policy information is provided. Overall, the site is trustworthy and professional in content and presentation but could improve its security posture and privacy compliance. The absence of WHOIS data is a concern for domain legitimacy verification and should be investigated further. Strategic recommendations include updating libraries, implementing security headers, and enhancing privacy consent mechanisms.

C

CampingPlatze.cz

campingplatze.cz

42

CampingPlatze.cz operates as a specialized online directory and booking platform for camping sites primarily in Czechia and Slovakia, targeting German-speaking tourists. The website offers detailed listings, photos, local weather, and user reviews, positioning itself as a trusted resource for camping enthusiasts in the region. The business has been established since 2009, supported by consistent domain registration data and a focused hospitality sector presence. Technically, the site uses common JavaScript libraries and CSS frameworks to deliver a responsive and user-friendly experience, though it lacks a known CMS. Security posture is adequate with HTTPS enabled and cookie consent implemented, but could be improved by adding security headers and formal policies. Privacy compliance is basic, with no explicit privacy or terms of service pages found. Overall, the site is functional, professional, and trustworthy for its niche audience.

C

CzechCamping.com

czechcamping.com

44

CzechCamping.com is a specialized online platform providing a comprehensive guide and booking service for campsites, caravans, bungalows, and mobile homes primarily in Czechia and Slovakia. Established in 2009, it serves a niche market of campers and tourists seeking detailed camping information, reviews, and direct booking options. The website offers rich content including maps, weather updates, user reviews, and multimedia to enhance user experience. Technically, the site uses a custom-built platform with common JavaScript libraries like jQuery, Owl Carousel, and Fancybox, hosted on Vas-hosting infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced headers like Content-Security-Policy and DNSSEC. Privacy compliance is weak due to missing privacy and terms of service pages and no explicit cookie consent mechanism. Overall, the site is trustworthy and well-established but would benefit from improved compliance and security practices.

H

HRkempy.cz

hrkempy.cz

43

HRkempy.cz is a Czech-language online catalog specializing in campsites and auto camps in Croatia, offering detailed listings, photos, videos, and online reservation capabilities. The website targets tourists primarily from the Czech Republic and neighboring countries seeking camping accommodations in Croatia. The business model appears to be a specialized directory with possible affiliate or commission-based revenue streams. Technically, the site uses a custom-built platform with common JavaScript libraries such as jQuery, Owl Carousel, and Fancybox to enhance user experience. The site is mobile-optimized and uses HTTPS, but lacks some modern security headers and comprehensive privacy compliance features. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in privacy policy transparency and incident response readiness. The domain registration is transparent but recently created, which contrasts with the website's stated operational history, suggesting a domain transfer or re-registration. Overall, the site is functional, content-rich, and trustworthy for its niche, but would benefit from enhanced privacy and security practices.

J

JEŽ – kamenické práce, spol. s r.o.

janjez.cz

59

JEŽ – kamenické práce, spol. s r.o. is a Czech-based company specializing in high-end stone masonry services including project design, production, installation, and restoration. The company targets clients seeking luxury stonework solutions both domestically and internationally. Their market position is that of a premium service provider emphasizing quality and customer satisfaction. The website reflects a professional and well-branded digital presence with clear service offerings and client engagement features such as a client center and gallery. Technically, the site uses modern JavaScript libraries like jQuery, Swiper, and Fancybox, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are missing and no privacy policy or terms of service pages are published. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy but would benefit from improved compliance documentation and security headers.

T

Topinfo s.r.o.

confea.net

8

Confea is an online event management service operated by Topinfo s.r.o., offering a comprehensive platform for organizing conferences, summits, and congresses. The service provides modules for participant registration, abstract submission and review, program creation, certificate generation, and participant satisfaction surveys. Established since 2006, Confea targets institutions and companies organizing events primarily in the Czech Republic but also internationally. The business model is SaaS-based with tiered pricing depending on event size and feature usage. Technically, the website is built on Topinfo CMS and uses legacy technologies such as jQuery 1.12.4 and Bootstrap for frontend components. The site is mobile responsive and provides a good user experience with clear navigation and professional design. However, the technology stack shows signs of aging, and there is room for modernization and improved security practices. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The WHOIS data for the domain is missing, raising concerns about domain legitimacy and registration status. Contact information is clearly presented, but no incident response or security policies are published. Overall, the security posture is moderate but requires significant improvements to meet modern standards. The overall risk assessment suggests that while the business and website appear professional and functional, the lack of domain registration transparency and missing privacy compliance elements pose risks. Strategic recommendations include verifying domain registration, implementing comprehensive privacy and cookie policies, updating technology stack components, and enhancing security headers and practices.

M

MACHIN.CZ s.r.o.

machin.cz

57

MACHIN.CZ s.r.o. is a Czech Republic-based technology service provider specializing in web development, e-commerce solutions, graphic design, and digital marketing. With over 20 years of market presence and more than 650 clients served, the company offers a comprehensive suite of services including website creation, e-shop development, hosting, and marketing consultancy. The website reflects a professional and consistent brand image targeting businesses seeking digital transformation and online presence enhancement. Technically, the site employs modern frameworks such as Bootstrap, jQuery, and the Nette PHP framework, ensuring a responsive and user-friendly experience. The hosting and domain registration are consistent with the company's Czech origin and long-standing operation. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and uses reputable analytics and advertising tools like Google Analytics and Facebook Pixel. No critical vulnerabilities or exposed sensitive data were detected, though security headers could be improved. Overall, the site demonstrates a mature digital infrastructure and a strong commitment to privacy and user experience.

P

Polstrin

hotelmezisvy.cz

48

Polstrin boutique hotel Mezi švy is a small boutique hotel located in Hradec Králové, Czech Republic, offering uniquely designed rooms with custom-made furniture by the parent company Polstrin, a traditional Czech upholstery manufacturer. The hotel emphasizes a modern, artistic interior design and provides a contactless check-in experience. The website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various UI libraries, reflecting a moderate level of digital maturity. While the site is well-designed and user-friendly, it lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website presents a trustworthy and professional image with clear contact details and social media presence.

Č

ČEPOS - Česká potravinářská obchodní a.s.

cepos.cz

50

ČEPOS - Česká potravinářská obchodní a.s. is a well-established Czech food wholesale alliance and company founded in 1996, providing nationwide supply services to retail and gastronomy sectors. The company operates private label products under the brand Česká cena, franchise retail networks such as BALA and RAPO, and offers IT solutions for wholesalers and retailers. The website is professionally designed, mobile-optimized, and provides clear business and contact information. Technically, it uses modern frameworks including Bootstrap and jQuery, with a moderate performance profile. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks advanced security headers and published security policies. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

Josef-Seibel.cz is a well-established Czech e-commerce retailer specializing in premium leather footwear for men and women, operating since 2005 under the company Geneze, spol. s r.o. The website offers a broad range of products including specialized categories such as wide and oversized shoes, emphasizing comfort and quality. The platform integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets, ensuring effective customer engagement and performance tracking. GDPR compliance is robust, with a detailed cookie consent mechanism and accessible privacy policies. Security posture is solid with HTTPS enforced and secure form handling, though there is room for improvement in security headers and incident response transparency. Overall, the site presents a professional, trustworthy, and user-friendly shopping experience with a strong market position in the Czech footwear retail sector.