Security Directory

V

VHS Herten

vhs-herten.de

51

VHS Herten is a regional adult education provider in Germany offering a wide range of courses in politics, culture, health, languages, and integration. The website is professionally designed using WordPress with modern plugins and frameworks such as Bootstrap and Smart Slider 3, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are not evident. The domain registration data aligns well with the website's claims, indicating legitimacy. Overall, the site is trustworthy and serves its educational mission effectively.

Q

QUADRIM Conseils

quadrim.com

53

QUADRIM Conseils is a French consulting firm specializing in technical management optimization for real estate assets, with a focus on energy, maintenance, and engineering services. The company has been operating since 1998 and serves a diverse clientele including major institutions and corporations. The website is built on WordPress using common plugins and frameworks, providing a professional and responsive user experience. However, the absence of WHOIS registration data for the domain raises questions about domain legitimacy or recent registration status, which should be further investigated. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Overall, the website presents a credible business front but would benefit from enhanced security and compliance measures.

S

SPEDIDAM

myspedidam.fr

36

My SPEDIDAM is a French media rights management platform focused on providing artists with tools to manage their accounts and royalty declarations. The website serves as a secure login portal for artists and associated members, reflecting a specialized business model in the media sector. The company appears established with a domain age of over six years and consistent WHOIS data, indicating legitimacy and operational stability. Technically, the website employs a modern technology stack including jQuery, Kendo UI, Bootstrap, and ASP.NET MVC framework. While the site is mobile optimized and uses Google Analytics for tracking, there is room for improvement in accessibility and SEO optimization. The performance is moderate, and the design quality is good, providing a professional user experience. From a security perspective, the site enforces password complexity and includes CSRF tokens in forms, but lacks visible HTTP security headers such as CSP or HSTS in the provided content. No cookie consent mechanism is present, which is a GDPR compliance gap. The absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and trust. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance improvements, and clearer terms of service documentation to strengthen its security posture and regulatory adherence.

P

ProVenkov, spol. s.r.o.

provenkov.cz

45

ProVenkov, spol. s.r.o. is a Czech Republic based small company specializing in consultancy and financing advisory services related to wastewater treatment and potable water supply for small municipalities. Their website presents a professional image with clear descriptions of their services, target audience, and business model focused on municipal water management. The company has been established since 2006, which aligns with the domain age and registration data. Technically, the website is built on WordPress with common plugins and frameworks such as Bootstrap and Yoast SEO, providing a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but the use of outdated WordPress and plugins, along with missing security headers, presents potential vulnerabilities. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from security and compliance improvements.

A

Archeopark Chotěbuz-Podobora

archeoparkchotebuz.cz

54

Archeopark Chotěbuz-Podobora is a cultural and archaeological site in the Czech Republic, offering educational and family-oriented experiences centered on prehistoric and early medieval history. The website serves as an official portal providing information about the park, events, exhibitions, and visitor information. Technically, the site is built on WordPress with modern front-end technologies like Bootstrap and jQuery, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, though lacking some security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust verification but the site’s content and partner affiliations support its legitimacy. Overall, the site is well-positioned as a regional cultural attraction with good digital maturity but could improve security and privacy compliance.

The website www.technisches-sicherheitsmanagement.de represents the Technisches Sicherheitsmanagement (TSM) program operated by DVGW e.V., a prominent organization in the German energy sector. The site offers comprehensive information and services related to voluntary self-assessment and verification of technical safety management for gas and water supply companies. It positions itself as a trusted partner providing independent expert reviews, guidelines, and service coordination through its subsidiary DVGW Service & Consult GmbH. The business model focuses on compliance, efficiency, and transparency in technical process management, targeting medium to large energy sector enterprises in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and frameworks such as jQuery and Bootstrap. It integrates Matomo analytics for user tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage privacy. However, explicit security headers are not detected, and no public incident response or vulnerability disclosure policies are published. No vulnerabilities or exposed sensitive data were found in the content. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and compliant digital presence for a specialized service in the energy sector. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture.

The website verifHy.de is a professional platform operated by DVGW Service & Consult GmbH, focused on providing a smart database solution for verifying the hydrogen readiness of gas network components. It serves as a critical technical tool supporting the transition of gas networks to climate-friendly hydrogen, targeting gas network operators, manufacturers, and international partners. The site is well-branded, consistent, and provides clear navigation and relevant content aligned with its energy sector focus. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Bootstrap, hosted via INWX. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is adequate with linked comprehensive privacy and cookie policies on the parent DVGW site, though no active cookie consent mechanism is present. Contact information is clearly provided via phone and a login portal for database access. No social media or analytics tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a trustworthy and professional digital presence with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

G

Gentlemen Brothers Brno

rezerver.cz

48

Gentlemen Brothers Brno operates an online reservation system for a local barbershop in Brno, Czech Republic, offering a variety of grooming and haircut services. The website is designed to facilitate easy booking of services such as classic cuts, beard styling, and traditional shaving. The business targets male customers seeking professional barber services in the region. The platform is functional and integrates modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook Pixel for tracking and marketing purposes. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enforced but lacking important security headers and cookie consent mechanisms. Privacy policy is present and appears GDPR compliant, but no explicit cookie or terms of service policies were found. Overall, the website provides a good user experience with clear navigation and relevant content but could improve in security and privacy compliance areas.

A

ANIMAL EYE, z.s.

animaleye.cz

54

ANIMAL EYE, z.s. is a Czech nationwide non-profit organization dedicated to the enforcement and advocacy of animal rights, primarily focusing on domestic animals. The organization provides legal advisory services, monitors advertisements related to animal breeding, conducts public affairs, and runs awareness campaigns. It positions itself as a credible expert partner for governmental and non-governmental entities in the Czech Republic. The website reflects a professional and consistent brand image with clear messaging and active social media presence. Technically, the site is built on WordPress with modern frameworks and libraries, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the website is trustworthy and well-maintained, supporting the organization's mission effectively.

The website nastavsitlak.cz is a Czech-language application designed to assist professionals in correctly setting the pressure of driving gas (Biogon®) used in beverage dispensing systems. It is branded under Linde Gas a.s., a well-known industrial gases supplier, indicating a strong business presence in the energy sector. The site provides interactive sliders for input parameters and displays calculated pressure values, targeting business users involved in beverage dispensing operations. Technically, the site uses a modern but basic tech stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile optimized and has basic SEO and accessibility features. Privacy and cookie policies are present and implemented with OneTrust consent mechanisms, reflecting compliance with GDPR requirements. However, no contact information or terms of service pages are provided, limiting direct user engagement and transparency. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and branding strongly suggest legitimate business use. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional for its niche purpose but would benefit from enhanced security headers, clearer contact information, and domain registration transparency to improve trust and compliance posture.

Č

ČSAD Ostrava a.s.

cova.cz

40

ČSAD Ostrava a.s. is a well-established transportation and logistics company in the Czech Republic with a history dating back to 1992 and roots from 1949. The company offers a broad range of services including international truck transport, spedition, logistics, vehicle servicing, and management of bus stations and real estate. The website reflects a professional and consistent brand presence targeting business clients and job seekers in the transport sector. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Maps API, and includes privacy and cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be improved. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, secure, and compliant with GDPR, providing a trustworthy digital presence for the company.

V

Vimec France Accessibilite sarl

vimecfrance.fr

50

Vimec France Accessibilite sarl is a well-established French company specializing in custom private home elevators and accessibility solutions. With over 40 years in the industry and more than 15,000 installations across France, Vimec holds a leading market position. Their product range includes private elevators, platform lifts, stairlifts, and mobility aids tailored for residential use. The website reflects a professional and consistent brand image targeting individuals and professionals seeking home mobility solutions. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics tools like Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is well addressed with clear cookie and privacy policies aligned with GDPR. Overall, the site is trustworthy, user-friendly, and provides comprehensive business information.

S

Stadt Herten

herten.de

64

Stadt Herten operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including citizen services, city administration, cultural events, and urban development. It targets residents and stakeholders of the city, offering online tools such as appointment scheduling and event calendars. The website is built on TYPO3 CMS and employs modern web technologies ensuring good accessibility and user experience. Security posture is adequate with HTTPS enforced and obfuscated email addresses, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and professionally maintained, reflecting the city's commitment to digital public service.

S

Stadt Herne

herne.de

56

Stadt Herne operates an official municipal government website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including city life, culture, education, integration, environment, and digitalization initiatives. It maintains a strong presence with official branding, social media integration, and a citizen service portal. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and specialized tools like eTracker for analytics and ReadSpeaker for accessibility. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and updating legacy libraries. Overall, the domain and content appear legitimate and trustworthy, consistent with a large government entity. Strategic recommendations include enhancing security headers, publishing a security policy, and modernizing JavaScript libraries to maintain security and compliance.

A

A-WebSys, spol. s r.o.

awebsys.cz

62

A-WebSys, spol. s r.o. is a Czech-based technology company specializing in custom internet and mobile application development since 2003. With over 40 employees, the company offers a broad range of services including web applications, web presentations, mobile apps, and fintech solutions. Their market position is that of an established medium-sized player with a strong local presence and reputable clients. The website reflects a professional and modern digital infrastructure utilizing popular JavaScript libraries and frameworks such as jQuery, Bootstrap, and TinyMCE, alongside marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on contact forms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trust but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in Czech language.

DVGW e.V. is a well-established German association specializing in the gas and water sectors, focusing on technical standards, safety, hygiene, and environmental protection. The website serves as a portal for vocational education and training, offering events, inhouse training, and certification services to professionals in the energy industry. The organization enjoys a strong market position with approximately 14,000 members and a history dating back to 1859. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is hosted on INWX infrastructure. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and provides comprehensive educational content for its target audience.

DVGW Service & Consult GmbH is a specialized service provider in the German energy and water sectors, offering consulting, IT services, management, and occupational safety solutions. The company operates as a subsidiary or closely affiliated entity of the DVGW association, which has a long-standing history since 1859. Their market position is that of a trusted expert providing technical and organizational support to energy and water industry stakeholders. The website reflects a professional and consistent brand image with clear service offerings and a focus on industry-specific solutions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Bootstrap. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and cookie consent mechanisms, indicating compliance with GDPR and privacy best practices. However, no explicit security policies or incident response contacts are published, which could be improved. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The use of HTTPS and cookie consent scripts are positive indicators. The absence of security headers and formal security documentation suggests room for enhancement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and providing direct contact information for security incidents to strengthen trust and compliance.

S

SEVEN SPORT s.r.o.

insportline.eu

55

inSPORTline, operated by SEVEN SPORT s.r.o., is a large European e-commerce business specializing in the manufacturing and retail of fitness equipment and related sporting goods. The website presents a professional and comprehensive product catalog including fitness machines, e-bikes, moto gear, outdoor equipment, and health and beauty products. The company targets fitness enthusiasts and general retail customers across multiple European countries, positioning itself as a leading brand in its sector. The digital infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and marketing tools like Targito and SmartSupp Chat, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance, supporting trust and regulatory adherence. Overall, the website is well-designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

S

SEVEN SPORT s.r.o.

e-insportline.pl

59

The website www.e-insportline.pl represents a large-scale e-commerce platform specializing in fitness and sports equipment retail and wholesale in Poland. The company behind the site is SEVEN SPORT s.r.o., positioning itself as the largest producer and seller of fitness equipment in Poland. The site offers a broad catalog of products, promotions, and customer support, targeting consumers interested in fitness and sports gear. The business model is primarily online retail with wholesale capabilities, serving a Polish-speaking audience with consistent branding and professional presentation. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Google Analytics, Microsoft Clarity, and several marketing and retargeting tools such as Persoo and Targito. The site is mobile-optimized, accessible, and SEO-friendly with structured data markup enhancing search engine visibility. Performance is moderate, with lazy loading and deferred script loading implemented to improve user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. Forms use POST methods and no sensitive data is exposed in the HTML. However, the site lacks a publicly visible security policy or incident response information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is basic, with a privacy policy and cookie consent mechanism in place, but could be enhanced with explicit GDPR statements. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data reduces transparency but is common for commercial sites using privacy protection. No adult or questionable content is present. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to improve trust and compliance.

S

SEVEN SPORT s.r.o.

insportline.si

51

The website www.insportline.si is an established e-commerce platform specializing in fitness and sports equipment retail, targeting primarily the Slovenian market. Operated by SEVEN SPORT s.r.o., the domain has been active since 2010, reflecting a mature business presence. The site offers a broad range of products including fitness machines, sports gear, outdoor equipment, and health and beauty items, supported by promotional campaigns and a structured product catalog. The business model is retail-focused with a clear online sales channel and regional sister sites across Europe. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility.

S

SEVEN SPORT s.r.o.

insportline.bg

48

SEVEN SPORT s.r.o. operates the Bulgarian e-commerce website insportline.bg, specializing in retailing fitness and sports equipment. The website targets Bulgarian consumers with a broad product range including fitness machines, sports accessories, and outdoor equipment. The company maintains a consistent brand presence across multiple regional domains, indicating a strong market position in Central and Eastern Europe. The site features a modern technical infrastructure leveraging jQuery, Bootstrap, and Swiper.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and standard security headers, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, suitable for its retail business model.

S

SEVEN SPORT s.r.o.

insportline.hu

53

inSPORTline.hu is a well-established e-commerce and retail platform specializing in premium sports equipment and fitness products. Operated by SEVEN SPORT s.r.o., the website targets general consumers interested in sports, fitness, and outdoor activities primarily in Hungary and surrounding Central European markets. The company maintains a strong regional presence with sister sites in multiple countries, offering a broad product range and customer support services. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience.

S

SEVEN SPORT s.r.o.

insportline.de

58

SEVEN SPORT s.r.o. operates the inSPORTline.de website, positioning itself as the largest manufacturer and seller of fitness equipment in Germany. The company offers a broad range of fitness, sports, moto, outdoor, health, beauty, and children's products through an e-commerce platform targeting German-speaking customers. The website features extensive product listings, promotional banners, and news articles relevant to fitness and sports enthusiasts. Technically, the site employs modern web technologies including jQuery, Bootstrap, Swiper.js, and Google Tag Manager, with performance optimizations such as lazy loading and deferred script loading. Hosting is provided by forpsi.cz, consistent with the company's Czech origins, while the site targets the German market. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and well-structured, serving a large retail audience in the fitness sector.

S

SEVEN SPORT s.r.o.

insportline.sk

54

SEVEN SPORT s.r.o. operates the inSPORTline brand, the largest manufacturer and retailer of fitness equipment in Slovakia. The company offers a broad range of fitness, sports, outdoor, and health-related products through a professional e-commerce platform supported by physical stores. Their market position is strong within Slovakia and supported by sister sites in multiple European countries. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Google Analytics, and personalization tools like Persoo. Security is well implemented with HTTPS, security headers, and secure forms. Privacy and cookie policies are present and GDPR compliant, reflecting good regulatory adherence. Overall, the business is credible, well-branded, and trustworthy.

A

Advantage Consulting, s.r.o.

acjobs.cz

59

Advantage Consulting, s.r.o., operating the website www.acjobs.cz, is a leading Czech personnel agency established in 2002. The company specializes in helping job seekers find employment and offers recruitment services to employers. The website reflects a professional business model targeting both job seekers and companies within the Czech Republic, positioning itself as the largest personnel agency in the country. The site provides a broad range of job offers and related content, including blogs and partner employer listings. Technically, the website employs a modern technology stack including Vue.js, Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. It is mobile-optimized with good SEO practices and uses HTTPS to secure communications. The presence of cookie consent mechanisms and privacy policies indicates a commitment to GDPR compliance and user privacy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF token usage, and cookie management. However, explicit security policies and incident response information are not publicly available, which could be improved. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website is trustworthy and professional, though the absence of WHOIS data limits domain registration transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and improving WHOIS data visibility to strengthen trust and compliance further.

M

Momentum Children's Charity

momentumcharity.org

55

Momentum Children's Charity is a UK-based non-profit organization dedicated to supporting families of seriously ill children, particularly those affected by cancer and other life-challenging conditions. The charity operates through partnerships with NHS hospitals across London, Surrey, and Sussex, providing services such as family support workers, therapies, respite breaks, and bereavement support. Their website reflects a professional and compassionate approach, targeting families in need as well as donors and volunteers. The charity maintains a strong market position within its regional healthcare support sector, leveraging fundraising and community engagement as key business models. Technically, the website is built on WordPress with modern plugins including Yoast SEO, Bootstrap framework, and integrates Google Tag Manager and Fundraise Up for donations. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be via a CDN provider, ensuring reasonable delivery speeds. From a security perspective, the site uses HTTPS with no visible exposed sensitive data and employs email obfuscation to protect contact information. However, security headers are not detected, and there is no public incident response or vulnerability disclosure policy, which are areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website presents a trustworthy and professional front for the charity, with strong content quality and business credibility. The lack of WHOIS data is mitigated by the charity's transparency in other trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and formalizing vulnerability disclosure to further strengthen the security posture and trustworthiness.

O

OSTRA GROUP a.s.

ostragroup.cz

47

OSTRA GROUP a.s. is a large multi-sector strategic group based in the Czech Republic, primarily focused on transportation services including sales and servicing of transport technology, logistics, modular construction, real estate rental, and R&D of vehicle chassis components. The group also supports a professional motorsport racing team and offers diverse career opportunities. The website is professionally designed, mobile optimized, and provides clear navigation and comprehensive business information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and retargeting services. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers and incident response policies could be improved. The domain registration data is consistent with the business claims and founding year, indicating legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses and professionals in transportation and related sectors.

A

ALTECH, spol. s r.o.

altech.cz

48

ALTECH, spol. s r.o. is a Czech company specializing in manufacturing and providing tailored barrier-free accessibility solutions such as stair lifts, vertical and inclined platforms, and lifting systems for immobile persons. Established in 1992, the company holds a strong market position in the Czech Republic and exports globally. Their website reflects a mature digital presence with comprehensive product information, customer testimonials, and clear contact channels. Technically, the site is built on WordPress with modern frameworks and includes robust SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance, although no explicit security policy or incident response information is published. WHOIS data is missing, which slightly impacts domain trust but does not detract from the professional business presentation. Overall, ALTECH demonstrates a credible and trustworthy online presence aligned with its business operations.

B

Benes Consulting Group

spolecnebezpecne.cz

43

The website 'Společně bezpečně' is a safety awareness and educational project primarily focused on increasing road safety and general safety awareness in the Czech Republic. It is a collaborative initiative involving ESSOX and the Hasičský záchranný sbor Jihočeského kraje, targeting children and the general public through educational campaigns and activities. The site presents a professional and consistent brand image with clear navigation and relevant content. Technically, it employs a modern front-end stack including jQuery, Bootstrap, and various plugins, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces transparency and trust somewhat, but partnerships and content quality support legitimacy. Overall, the site is a trustworthy educational resource with room for improvement in privacy compliance and security best practices.

S

SEVEN SPORT s.r.o.

insportline.cz

58

SEVEN SPORT s.r.o., operating the inSPORTline brand, is a leading Czech retailer and manufacturer specializing in fitness and sports equipment. The company offers a broad range of products including fitness machines, sport accessories, moto gear, outdoor equipment, and health and beauty items. Their market position as the largest fitness equipment manufacturer and seller in the Czech Republic is supported by a comprehensive e-commerce platform and physical stores. The website demonstrates a mature digital presence with extensive product listings, promotional campaigns, and customer engagement features such as loyalty programs and rental services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js for responsive and interactive user experience. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Persoo personalization scripts, indicating a sophisticated approach to user tracking and marketing. The site is well optimized for SEO, accessibility, and mobile devices, with proper meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of publicly available WHOIS data reduces transparency and slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website presents a professional, secure, and user-friendly platform for fitness and sports retail. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve trust. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure guidelines to further enhance security posture and customer confidence.

Š

Škoda Auto a.s.

skoda-handy.cz

73

Škoda Auto a.s. is a leading automotive manufacturer in the Czech Republic, offering a specialized program called Škoda Handy aimed at enhancing mobility for persons with reduced mobility. The program provides expert consultancy, vehicle purchase assistance with discounts, financing options, insurance, and tailored vehicle modifications. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site employs modern web technologies including React and Bootstrap, hosted on a CDN infrastructure ensuring moderate to fast performance and excellent mobile optimization. Security posture is strong, with HTTPS enforced, modern security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. The absence of WHOIS data slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site is trustworthy, secure, and well-aligned with the business objectives of Škoda Auto.

O

Orchestre à l'École

orchestre-ecole.com

66

Orchestre à l'École is a French non-profit association dedicated to enriching young people's lives through collective instrumental music education in schools. It has a significant presence across France with over 184,000 beneficiaries and partnerships with notable foundations and cultural institutions. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content supporting its mission. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Consent Framework for analytics and privacy compliance, and is hosted on a reliable CDN. Security posture is strong with HTTPS and security headers, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data for the domain is a concern for domain legitimacy but is mitigated by the professional and transparent nature of the website content and contact information. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

O

Orchestre Lamoureux

orchestrelamoureux.com

44

Orchestre Lamoureux is a well-established French orchestra with a domain registered since 2000, offering a variety of classical music concerts, including family-oriented Bébé Concerts and collaborations with notable artists. The organization focuses on cultural enrichment, professional training, and artistic transmission, targeting classical music enthusiasts and families. The website is built on WordPress, leveraging common plugins and frameworks such as Bootstrap and jQuery, hosted by OVH sas. It features a professional design with good navigation and mobile optimization. Security posture is moderate with HTTPS enforced but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is good with visible cookie consent and privacy policy. Contact information and social media presence enhance business credibility. Overall, the website is trustworthy and professionally maintained.

D

Datu valsts inspekcija

gov.lv

59

Datu valsts inspekcija is the official Latvian government authority responsible for overseeing personal data protection and GDPR compliance. The website serves as an authoritative source for data protection guidance, regulatory information, and public awareness. It targets Latvian residents, data controllers, and data protection officers with comprehensive resources and services. The site is well-structured, professionally designed, and provides clear contact information, reinforcing its role as a trusted government entity. Technically, the website is built on Drupal CMS, employs modern web technologies, and is optimized for accessibility and mobile use. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

T

touring artists

touring-artists.info

51

Touring Artists is a specialized non-profit platform providing comprehensive information and free consultation services for internationally mobile artists and creatives working in or moving to Germany. The website is supported by reputable cultural institutions such as the International Theatre Institute Germany, the International Society of Fine Arts, and the German Dance Association, and is funded by German cultural government bodies. It offers detailed resources on visas, contracts, social security, taxes, insurance, copyright, and transport, alongside a funding database and guides to support cross-border cultural work. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and includes a cookie consent mechanism compliant with GDPR. Google Tag Manager is used for analytics, with minimal user tracking. However, some security best practices such as explicit security headers are not evident. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS transparency and missing registrar data slightly reduce trust. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie consent are clearly presented, supporting compliance. Overall, the website is a trustworthy, well-maintained resource for its niche audience, with strong cultural partnerships and government backing. Strategic improvements in security headers and WHOIS transparency could further enhance trust and security posture.

dotFOX s.r.o. is a Czech digital marketing company specializing in affiliate marketing, lead generation, and performance marketing, with additional proprietary projects in financial comparison and affiliate networks. Established in 2014, the company positions itself as a professional and experienced player in the Czech online marketing sector, targeting businesses seeking effective marketing partnerships. The website is well-structured, professionally designed using modern frontend technologies such as Bootstrap and jQuery, and includes Google Analytics for user tracking. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with no visible security headers and no publicly disclosed security policies or incident response mechanisms. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website presents a credible business but requires improvements in privacy compliance and security best practices.

R

RSI Testsysteme GmbH & Co. KG

korrosion24.de

64

Korrosion24 is an e-commerce platform operated by RSI Testsysteme GmbH & Co. KG, specializing in corrosion testing supplies such as salts, test plates, measuring devices, and consumables. The website targets professionals and companies involved in corrosion testing, offering a niche product range with clear business positioning in the manufacturing and testing sector in Germany. The site is well-branded, consistent, and provides comprehensive product information and customer support channels. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and market presence.

P

Plaine Commune Grand Paris

plainecommune.fr

56

Plaine Commune Grand Paris is a public territorial establishment serving a large population in the northern Paris region. The website provides comprehensive information about the institution's services, projects, and community engagement. It targets residents, local businesses, and public stakeholders with a focus on urban development, culture, mobility, and environmental initiatives. The digital infrastructure is built on TYPO3 CMS with modern JavaScript libraries, ensuring a responsive and user-friendly experience. Security measures include HTTPS, RSA encryption for login forms, and a GDPR-compliant cookie consent mechanism. However, formal security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a strong commitment to transparency, accessibility, and user engagement, positioning it as a trustworthy government portal.

R

Ruhrverband

ruhrverband.de

58

The Ruhrverband website represents a large, established non-profit organization focused on sustainable water management and wastewater treatment in the Ruhrgebiet region of Germany. Serving 4.6 million people and 60 cities, the organization emphasizes environmental stewardship and public service without profit motives. The website is built on TYPO3 CMS and integrates modern technologies such as ArcGIS for mapping and Cloudflare for DNS and security. The site is professionally designed with good content quality and clear navigation, targeting residents, municipalities, and environmental stakeholders. However, explicit privacy and cookie policies are missing, and no incident response or vulnerability disclosure information is provided, which are areas for improvement. Analytics is conducted via Piwik (Matomo), reflecting moderate user tracking with some privacy considerations. Overall, the website is trustworthy and credible but could enhance compliance and security transparency.

I

Ing. Radek Balon

it-balon.cz

52

Ing. Radek Balon operates a small-scale IT and multimedia service business based in Velká Bystřice, Czech Republic, with a domain registered since 2015. The company offers a range of services including web design, e-shop creation, IT infrastructure setup, graphic design, and video production such as wedding filming. The website is professionally designed using WordPress with modern plugins and technologies, providing a good user experience and clear navigation. Contact information and social media links are prominently displayed, enhancing business credibility. The site includes GDPR-compliant cookie consent mechanisms but lacks a dedicated privacy policy and terms of service pages. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some improvements are recommended such as adding security headers and fixing minor PHP warnings. Overall, the website reflects a trustworthy and professional small business with a solid technical foundation and moderate privacy compliance.

The website ds-slave.cz currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction or not yet deployed with actual business content. There is no evidence of an active business presence, contact information, or compliance policies. The domain is registered since 2019 with a reputable registrar and uses Cloudflare name servers, suggesting legitimate domain ownership but minimal operational maturity. Technically, the site uses Apache on CentOS with Bootstrap for styling, but lacks modern web features, SEO optimization, and accessibility enhancements. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance. Overall, the site is not currently suitable for business or customer engagement.

HIT OFFICE, s.r.o. is a Czech-based company specializing in office supplies and food packaging products, offering both standard and custom manufacturing solutions. The company operates a multilingual website with an integrated e-shop, targeting business customers in need of office and food packaging materials. The website demonstrates a solid market position supported by multiple certifications such as FSC, ISO, and BRC, and showcases awards that emphasize quality and sustainability. The company was founded in 1994, indicating a mature presence in its sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Select2, Swiper, and Google services such as reCAPTCHA and Analytics. The site is mobile-optimized with good navigation and content quality, although some accessibility and SEO aspects could be improved. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data is a notable gap, reducing transparency and trustworthiness from a domain registration perspective. However, the website content, certifications, and business information support the legitimacy of the company. No critical security vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, HIT OFFICE's website is professional and functional, with room for improvement in privacy compliance and security best practices. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response policies, and providing clearer contact information for data protection officers.

A

ASPEKTA Trading s.r.o.

aspekta.cz

49

ASPEKTA Trading s.r.o. is a well-established family-owned automotive dealership and service company based in Plzeň, Czech Republic, operating since 1990. The company specializes in authorized sales and servicing of Hyundai, Mazda, Fiat, Fiat Professional, and Jeep vehicles, targeting both personal and corporate customers. Their business model includes new and used car sales, vehicle servicing, financing, insurance, and additional services such as vehicle wrapping and extended warranties. The company maintains a strong local market position with multiple showrooms and a reputation for personalized customer care. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. The site features a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The website content is professional, safe, and free from adult or questionable material. Overall, the website presents a credible and professional business presence with room for improvement in security posture and transparency regarding domain registration details. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

Malfini.com is a website associated with Pro-idea s.r.o., likely operating in the fashion or apparel sector given the brand name and styling cues. The domain is well-established, created in 2010, and shows consistent registration data. The website employs modern front-end technologies including Bootstrap, Swiper, and AOS, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, and Sales Manago. A comprehensive cookie consent mechanism is implemented, reflecting good privacy compliance practices. However, explicit privacy policy and terms of service pages are not found in the provided content, and no direct contact information is visible, which may impact user trust and compliance completeness. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies.

Bedope.cz is a Czech retail website specializing in the sale of nicotine pouches branded as Dope. The company, DanCzek a.s., positions itself as a local manufacturer offering competitively priced nicotine products with a focus on adult consumers. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates modern frontend technologies such as jQuery, Bootstrap, and Swiper.js, and uses the Nette framework on the backend. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data and security headers slightly reduces trustworthiness. No critical security vulnerabilities were detected, but improvements in security headers and incident response information are recommended.

S

SAXOPRINT GmbH

saxoprint.de

62

SAXOPRINT GmbH is a well-established German online printing company founded in 1999 and operating under the parent company CEWE Stiftung & Co. KGaA. The company offers a broad range of printing services including flyers, brochures, business stationery, packaging, and advertising materials, targeting businesses and organizations primarily in Germany and Europe. The website reflects a mature digital presence with comprehensive service offerings, strong trust signals such as Trusted Shops certification, and clear customer support channels.

P

Pro-idea s.r.o.

koloshop.cz

64

Koloshop.cz is a professional e-commerce retailer specializing in bicycles, bicycle components, and related services such as servicing and rentals. The website targets cycling enthusiasts and general consumers primarily in the Czech Republic and neighboring countries, offering a wide range of products including mountain, road, trekking, and children's bikes. The company behind the site is Pro-idea s.r.o., a medium-sized retail entity with a consistent brand presence and a well-structured online platform. Technically, the website employs modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and uses several third-party services for recommendations, chat support, and user verification. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

C

CTS GmbH

cts-umweltsimulation.de

50

CTS GmbH is a medium-sized German manufacturing company specializing in environmental simulation devices that simulate various environmental conditions such as temperature, humidity, and pressure. The company also offers calibration services for these devices, including those from other manufacturers. Positioned as a leading expert in their niche, CTS targets industrial clients requiring high-quality testing and simulation equipment. Their website reflects a professional and consistent brand image with clear product and service information. Technically, the website is built on Joomla CMS with Bootstrap and Splide.js for UI components. It is mobile-optimized and uses HTTPS with a valid SSL configuration. However, some security best practices such as security headers and cookie consent mechanisms are missing. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of advanced marketing tools. From a security perspective, the site has a solid foundation with HTTPS and CSRF tokens but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is minimal but consistent with the hosting and author information on the site, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security posture. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to enhance trust and security culture.

P

PIXMAN s.r.o.

ms-museum.org

63

The Czech Museum of Mass Spectrometry is a small, non-profit educational institution focused on the history and technology of mass spectrometry. The website provides detailed information about exhibits, educational quizzes, and virtual tours aimed at scientists, students, and enthusiasts. The museum is affiliated with reputable scientific partners, enhancing its credibility. Technically, the website uses a traditional tech stack including jQuery, Bootstrap, and Google Analytics, but some libraries are outdated, which may pose security risks. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is moderate; while HTTPS is implied and cookie consent is implemented, the absence of security headers and use of outdated libraries are concerns. WHOIS data is unavailable, likely due to privacy protection, but the website content and partner affiliations support legitimacy. Overall, the site is safe, trustworthy, and serves its educational purpose effectively.